last executing test programs: 3m37.050835609s ago: executing program 32 (id=297): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x183802, 0x0) close_range$auto(r0, 0x8, 0x0) r2 = prctl$auto_PR_SYS_DISPATCH_ON(0x3, 0x1, 0x0, 0xbd2, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='f<4/dev/audi', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) mmap$auto(0xffff, 0x100400008, 0xdc, 0x9b72, 0x2, 0xfffffffffffffff4) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x0, 0x0) close_range$auto(r2, r3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/quirks\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) r5 = socketcall$auto(0xa, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa21c0, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(r7, 0x3, r6) ioctl$auto(r6, 0x30000, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0xe503, 0x0) r8 = epoll_create$auto(0x3e) epoll_ctl$auto(r8, 0xfffffffe, 0x8000000000000000, 0x0) mq_notify$auto(r3, &(0x7f0000000340)={@sival_int=0x400, @raw=0xff, 0x5}) 3m13.195996345s ago: executing program 0 (id=408): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x80000000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x3) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) mprotect$auto(0x200000000000, 0x806124, 0x8) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x2}, 0x0) pwrite64$auto(0xc8, 0x0, 0xffff, 0x20000000000003) 3m12.972338641s ago: executing program 0 (id=409): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11s\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x0, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7e) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) setresuid$auto(0x8, 0x8, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x800) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/pfkey\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) read$auto_proc_pid_set_comm_operations_base(0xffffffffffffffff, &(0x7f0000000300)=""/154, 0x9a) 3m12.016382472s ago: executing program 0 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m56.880005305s ago: executing program 33 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m26.471150787s ago: executing program 34 (id=523): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mprotect$auto(0x1000, 0x401000, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) ioctl$auto(r1, 0x8004510b, 0xffffffffffffffff) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r4, 0x541b, 0x7fffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) (async) mprotect$auto(0x1000, 0x401000, 0x7) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) (async) ioctl$auto(r1, 0x8004510b, 0xffffffffffffffff) (async) unshare$auto(0x40000080) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) (async) ioctl$auto_FIONREAD(r4, 0x541b, 0x7fffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) (async) 1m55.434283161s ago: executing program 5 (id=689): mmap$auto(0x8001, 0x2002800000, 0xdf, 0x16, 0xffffffffffffffff, 0x8000) (async, rerun: 64) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) (async) mmap$auto(0x9, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x5, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) open(0x0, 0x163340, 0x16e) (async, rerun: 32) getsockname$auto(0xffffffffffffffff, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0x8000}, &(0x7f0000000080)=0x8) (async, rerun: 32) socket(0x23, 0x0, 0xaea) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async, rerun: 64) fcntl$auto(r4, 0x80000001, 0xa553) (async, rerun: 64) quotactl_fd$auto(r1, 0x200, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x1, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0xffffffffffeffffd, 0x2000b, 0xa16b, 0x16, r4, 0x3) mq_open$auto(&(0x7f0000000280)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xf2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50x0, &(0x7f0000000100), {0x11}, &(0x7f0000000280)=""/243, 0xf3, &(0x7f0000000380)=""/179, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x7b, 0x2, 0x0, 0x1, [@generic="7933a31a9ffc019ea3aeff68910dbb44c4e9e90d1630fbe634f2685b9f9f57e5cd0248fe919a6abdc7810515b71a8d032505ea6bbcedf04c6cdfaede1ca32d9a4a232657e5ee273b74af5e55926a8fb4f4161ec562b000a3974efbd0d8e5171f05d1d5998300000000000000016ccc", @typed={0x8, 0x138, 0x0, 0x0, @pid=r2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x51) 1m37.520228652s ago: executing program 1 (id=738): mmap$auto(0x0, 0x5, 0x6, 0x9000000eb0, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0xfff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000040)='}[,&*}\x00', 0x407000, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) madvise$auto(0x9, 0x3, 0x4) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x5}, 0x6, 0x3, 0x7fff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) madvise$auto(0x10000, 0x200, 0x1) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 1m36.181773617s ago: executing program 1 (id=744): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x4, 0x40000a, 0xdf, 0x12, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x7ffe) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x120000000) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x41) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) r3 = open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) read$auto_rfcomm_sock_debugfs_fops_(r3, &(0x7f00000001c0)=""/170, 0xfdef) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r4 = set_tid_address$auto(&(0x7f0000000080)=0x6) waitid$auto_P_PGID(0x2, r4, &(0x7f00000000c0)={@_si_pad}, 0xff, &(0x7f0000000340)={{0x6, 0x101}, {0xfffffffffffffff0, 0x1}, 0xfff, 0x7f, 0x7, 0x8, 0x2, 0x101, 0x0, 0x1, 0x4, 0x861, 0x8, 0x40100000, 0x5, 0x8000000000000000}) 1m26.096036257s ago: executing program 8 (id=773): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) r1 = getsockopt$auto(r0, 0x0, 0xce, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r1, 0x10001, 0xffffffffffffff00, 0x2}) sysfs$auto(0x2, 0x10, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+$', 0x0) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101041, 0x0) write$auto(r3, 0x0, 0x5) write$auto(0x3, 0x0, 0x7fffffff) 1m25.655672871s ago: executing program 8 (id=774): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x2, 0x80, 0x4, @inferred, @integer64={0x5, 0x0, 0xd}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) capset$auto(0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) r0 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_RNDADDENTROPY(r0, 0x40085203, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x22}, 0x5, &(0x7f00000003c0), 0x5, 0xe}, 0x400005}, 0x2, 0x100) sysfs$auto(0x3ff, 0x2005, 0x20000) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r2, 0x50009404, &(0x7f0000000140)={@inferred, "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"}) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r4, 0x0, 0x40002) epoll_create1$auto(0x3) 1m20.895656979s ago: executing program 37 (id=744): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x4, 0x40000a, 0xdf, 0x12, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x7ffe) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x120000000) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x41) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) r3 = open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) read$auto_rfcomm_sock_debugfs_fops_(r3, &(0x7f00000001c0)=""/170, 0xfdef) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r4 = set_tid_address$auto(&(0x7f0000000080)=0x6) waitid$auto_P_PGID(0x2, r4, &(0x7f00000000c0)={@_si_pad}, 0xff, &(0x7f0000000340)={{0x6, 0x101}, {0xfffffffffffffff0, 0x1}, 0xfff, 0x7f, 0x7, 0x8, 0x2, 0x101, 0x0, 0x1, 0x4, 0x861, 0x8, 0x40100000, 0x5, 0x8000000000000000}) 1m19.866816847s ago: executing program 8 (id=784): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0x8ffff, 0x5, &(0x7f0000000040)="8006", 0xc694, 0x3, 0x80005, @stream_id=0x2, 0x20047, 0xc, 0x0}) mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x0) 1m19.552808746s ago: executing program 8 (id=786): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xffff}, 0x4, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x894, 0x0, 0x200002, 0xfbfffffb}, 0x803}, 0x4, 0x10, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r3, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mmap$auto(0x2, 0x20009, 0xdf, 0x18, r2, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14048005}, 0x8081) io_uring_setup$auto(0x6, 0x0) 1m17.755112991s ago: executing program 8 (id=791): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x81484d11, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) (async) inotify_init1$auto(0x3000000000000) r1 = socket(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff070080", @ANYRES16=r2, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) mmap$auto(0x0, 0x42000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7ffc) (async) mmap$auto(0x0, 0x42000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7ffc) mmap$auto(0x2, 0x4, 0xc00000072, 0x88f0, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async) write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) (async) io_uring_setup$auto(0x2, 0x0) socket(0xa, 0x1, 0x84) 1m16.621807663s ago: executing program 8 (id=796): mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x5, 0x2, 0x3, 0x14, 0xffffffffffffffff, 0x8003) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) (async) mmap$auto(0x0, 0xb, 0xdf, 0x10209b72, 0x4e477f5a, 0x8000) (async) close_range$auto(0xffffffffffffffff, r0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) (async) mmap$auto(0x0, 0x400008, 0xdd, 0x9b73, r1, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x5, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x2) (async, rerun: 32) open(0x0, 0x163340, 0x195) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x14f503, 0x0) (async, rerun: 32) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x40000000000, 0x100, 0x3, 0x9b70, r2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5a9802, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x6) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x404b03, 0x0) writev$auto(r5, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x43, 0x6, 0x16, r3, 0x8000) (async) socket(0x5, 0x80003, 0x300) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) 1m16.030086097s ago: executing program 2 (id=797): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000105ff1da10ebce3fb4330883c0918e05be17f9e763164a9131a5280f3eb4f0b63be01406bd548ac277dfdc0795c6a5db400202a7ed709f6517bc23ee6a9d6e29d5a9bd84502f39bc58d63c502c6e2d811ab62d06c107d96541b1b9ce5946bdfe4fb6b1cc79aee5d285ccfff14152b5f7789f0d031234a433b7297f8ef5012a81f4ccf3bbd06c5a67a0b0ba1819b7435a37cdba8d5a8a8ae6cfa84bd0bb6374665bfd31d0f41d151051d8f683e84ac413a6a7b6a5ba4e6ce46b42", @ANYRES16=r1, @ANYBLOB="010b27bd7000fcdbdf25050000000800318004000e00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) r2 = socket(0x1d, 0x3, 0x1) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x40f00, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000000)={0x2, 0x8, 0x3, 0x6, 0x7, "68e6fe89d77459ae94debcc36b2972d2"}) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r4, &(0x7f0000001540)=""/209, 0xd1) setsockopt$auto(r2, 0x65, 0x5, 0x0, 0x800) (async) r5 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), r0) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000005980)={0x31bc, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x33}, @NLBL_CIPSOV4_A_TAGLST={0x2163, 0x4, 0x0, 0x1, [@generic="f95d4588213ae942f4280f33eaed0f1d3295eca304358f87c8dfa88ca8c7f71519dda494e4425bf864c4e5e17f3183ed94662588f99145cdfa041047719702c6d77fa3b59db0d23dc778eb17cb2db73fc8f7b8", @nested={0x103, 0x88, 0x0, 0x1, [@generic="40ec09e5137bffcd673c52cb974cbdcd20777e1a5589fd1e280eebcfcbae00b1d9bdeb20ab41d87ebca9f25d63088184dcfdf5c65a22dd9f9d23a83ec7c6a66139538e2e609be65b590f860be8f502ab0863959eee0010ae1bb3925f259a60fd6b", @nested={0x4, 0xfa}, @generic="a1f293de90ad0be3232b0c5e1155f2d12fb2ba60e80804c6746fde9d382afd9944a374b14a10a56df17d60c1974afd9b38c44daa03ad780923c21bc3a2e676097b8579e757bc1d1d035055f56cf33ce41ac6b8bf29b26559d5404fe293930093aa8129873bf6c2d0543dcf3ba39a880f45ff47bdc638862a8d38e5688b575cf3812b315604a58ae477be7dfa380198cb570b1e0646211f44e47b"]}, @generic="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", @generic="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", @typed={0x8, 0x162, 0x0, 0x0, @u32=0x80000000}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x102c, 0xc, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @ipv4=@local}, @nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4}]}, @typed={0x6, 0x51, 0x0, 0x0, @str='-\x00'}, @nested={0x10, 0x155, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @pid}, @typed={0x4, 0x110}]}, @generic="cba493447e72bd0818be6e9c9e007ca9f03572abf29c5b0144f533b730b137ab4206a367cfc34bc41978e5f75f17add6a38fb79780203106af95fdbe007a30003f377977039630f897b54e16b7149192b8515581b33a21e3482f4ecc3a9711fb8c0a2bf304bb255eb6d3f820ff503acf249ce4f048c0daff9b325676f1528db66dc5753b2a65b46a7485135aef5232f8cc327a3e901ceed9fc416d3e1451df7da1b441f5c4fd435622b2ca06703d3b8969921686f2ffe1d1132cfeba2fb1b82c62e68e4329428f548f7f06a2df79e9ceaf2d720157ed1ee203612f90cd5db53ac70808c008673c9a0810a835d254ac043a9e28b9a784a99b1524840b2e25fe57e4f6ae7bbcd20b265eaef71a47832c7d4b6a99caebe10991d262149fd89a36c850223ff02ccc74e6924a71d31ec3cf0e12bb237eeadce53cd8058ce3aa7286bc20700cba0c7f3109ed72368d76b978cc6c22e7ff29f40038ba4655d443cbc0d001aadf9720dadf234cffb221bfea05c343a4ad080f9070e61be47ddfa6df9ed8cc4d7080bc8ec92467c8b4049dda6ccf9af8a5d71323cd2270b5b64c98ad549f39ae0ec66c56ef3a864f58661525802fa89d5d32cc119f30ea347b8789d4a932e8a3129431148685fe42e0d502a672e2ec37c51d8fe658664deef07b46c5d60a84a8b4540879dd861ae17091cf7d84d2023c850136affbb0566f68aa872e17e4eee133570bac8fe3cdb7f6997d90857f2f0bd460971fc8d298f3d0d0cb619f362474e76b41d6b68719a931209bf948b3f08ba6abb1b795b548e1d4b46f823b093ae39dfdfad13c5b839e446dcabab838cf65e3f0a187d1f7608050c8f27b51437100676571e7fd19f628e2f3d4c075b0057455d1347bdc24197fb7e3d2f69648c9e70c7dcb5a548a5e00dbddf654b5416784e4f0a1ed9578ba6586b47fcddaac06146fa86d441b65d7becc6d612a3f0cf08f30c1018e39376ad51b93fd27210c39d49061eef26f5604e2547ad7c3a4cdcecc935a540b1421b854b9d2288f5de0a86272f0824351cdeb6049dfce78bea23cffe64470f653d9c8871f84e3aefb2586433149fe79061d632076d8e7c3b7817604672656ec7ea30fcb72264b35bde865be4efda3277457519f96af4ab5304f6396753f585fb9b9e84839ff7d50340fbbf84cae12ed529ec6f117a6081b8775a7629c4582a46c518008aa7393c9129c2f7de19fc2acad2fa6579b984c1ef89dae0bca53477b78cf7b0ac7ba8d0b88c5d24464819da8616e6f8b52d5a6a205a904ed65f759b1972d8febe4854f7d11d6b2733ef170d3f683ebf0f3fc6ef79a47cfee13989d6e7cd5ab2d930f3921fb41b6cf26519ce1b286371cf6da7e03ea64b1e7dca0f15ed88a3a81c1fb59769c701a3f4d4fe91e307cea6c5956ac955ff8d84d3986134f66c182a2ade18d2217f7514ac5539a6031d92921ed35aa63dea4c2e376fe5a9eaaf052dfa7ffad91f5a0248999993add717ce6f0a174ccbd18aa1f2bdbdee4fc8dc145421adc7520bfb4f718eb7eb836e6d39a59da087d0122364b41f9825e0e9ea80d2e9b9ed420007557dabaa8f11287390976a22703194842a804de79bf8b7f4623762866f9ec551d1295760b29fe029179ad2a63b4d6be785178f01539325eaa50433fc258e2ab3f8ca2eb60c8960c1bccd359af4007b5e03c9563e07841ca56043bb9e578bf3b0b47365485809a8772fe8d2068cfafd201b50ca05acc7805cb05eeffc9d1154cb44cbd64a7fa46e8378b165fb84f0fb803f5ff30ef3d7f97eae17021d8238742650c47f5a7ca2fb43e804f100e0ccd2f0886820cc6e2d4989bae45b5eb5ccc701778534564f0caf5aed2a7597fc3515ec36db8e3eea54fff2ad19fc2ca042a9dc00c921b5d2235c979218f22e85533c3fbb3de5c5b740b10af5bbadebdb77827a97a7d8af8fb652b02c9830783628ca2777abe00109470b597057b9ced5dc101ae00f70182a033e2d1e5b925721b293bb8b488d4ce6be3b8ebdab2ada8b4e8e57a719d2703038cd0249c67e948dedf5752a229e76e0435e78c237646ed7853a4e55e1d35268c267170ae9fd30504715de91612899b00f869037dc648ae735874a545198e3e032ee7745758c3a56bd6be50a2b2b4be5992747823709bae3560e56a7733f0a1c2340282dad46d8fcfbecf115420e092154705606b135e4930070ee5d8add3a8a7945acfb7a52033ef473121fe54f437c3c9552f3094a2b3f55fc27903bb07cd0cd5cbe9972bf56f5f6322760d46192ead89f74c1bce71af0b6d2b15467931f7bca5e539d049ef8821951cea8cf17be596a6557ee17183b414572dc70113583bed06ed9b87a7f069ab756c21d9dbd5e67e2ef42813ff969a93dbde33d0a0068d0551b65344b5bb2aaad71f31bb6b1f8611a235de533806be68df55ae2d5cd1d9808c6ff003c59e4a06c0954ce93d97f4b10c6c95e6d706cdf1598f6f7f8c1db399038ae2b1a829fd8532d1c61e362fc87161d937b7961a1b8717164bf28d127c5465ad404b7c1fdcb5ea4122ffda1369e38d8b06be93bae64f0ac91747a8a6602d9db903ee8c7b2ef80208c4f27908a020ad6060bdb66ef1493bfb7ddf63fcef7dac01e1468f4cf1c3ad63b77834aa454ca4bfad5ab80319f7a2c92ebd03ede45d62c7779b2bdd7d7d3a75b297524013cc5440947e86344c5491ad943ed2556cb08b5428253af14706731b9a7fe401fe8bed30be3a4a71f593483578b4f439f71c47a716b735e8ebcd56d692112dfc7b991501120d227372a2d18099ae46631bec3da4fe615abb684b0b56cf6d2e6d65493523746c9fb3fb0c076e9643ebbf372894dd514e0c4a21f72d1144f8545b889751ee65955e51dde56aac4363463932544286759fa1def9fbdf6ab974dafc16b13bf2d1b7926a972f59d09f403501a09054fd3aa59299be58adf4df29d144a75997a037ca363bef876da84edd81b70bce0722b7b8815cd9c8078c9d2f94215581f2242451e23d8152a818daeb69d56c7a4e269a82c848d3d7c6b31e4f9d96032b63c2338bfa750d848c204d5f6bfae7a82723f8399fba249385b3ace93209193605bb85bdc7eee7a7c9ec1e5587b20ed357d6c7e92fbad159b6bf43bfcd23e6801394c3e528e5f358f96c1c0b4325b8207f4fd25bfdab9408bfbc0d8a2a2bfac141bb8570e50fd0bf78d257e3c6695b6b36d0ab1c5c095e717829487218d13d661dbdf051e4a7ddfcd660e2e4fee160da4ea4331a5088fbb4059c67ae83cd4bd48a20d9ada65f47d8508e971546b37ca3202cf59656dd7058c5a6b9ddd729b3acfceae412ab5f8b17e71c746c4685deaae37952dff434c1215833c6840c49286da73fda4dd39de4f1df537f2b411076bb2f3270a170bef36c93cb18b5ffd2b8f90655e52e3cae97dea0defbc6f5fdc3a0e566b0c007296e108d5012c6680b1b950887e1afa79003608e03930fe52186c637e7011409b9b1950a81655200ccfeb293043080ed49b17322e57c47adb18149488b2fefc2a6632dcdab046e4b57f10c6113ce5890490026b553fadfe097db85166ae0c0612c1544da12513ce5c4f5489cf40bf58d519da7a7f1dd3cab10ed850d3375263acf7534d3687210e0797b76db60b2568ec32bcd359e4aae129eb98879888233690eaa522f20fbc583acfcb1c69598954951e977c65ce9a49c0f52488a4e38f15ccd57b8292b14c8c7cf1c3099490fb031d21a2cce9c970dbe3f9e6bf31cdf7b2ccc98c45b98c7592758c2b1ad00ea030b08ee4d3c320b4db69f620df740fa77c7fb0645d28007cd0b9c575a411c30e7fcf6b0dcb9db2e937e73da23b7c03f620b81590bec2c3227313ba379eb5c38e3528b0b5aade56cce286c474dd92e87f8c8c020782740341adeb0dde40b7c172a64d02bef4d1b0b6f6933ff182f594c6d12b4dd86da613d2ce8facde1409c27a8af48d3df30f968d8eef3984c1e64de3bb05fab5366eab0aa6092910119d1189e0c2d286ea0f074b635989afac5adbbaf0222cbea89422975d90c60fb44fff8674339ce22248703c22fde18328272b1f59ea7c261a10ece0176da756f057ba01d983aca2d190c1013aa28aa6bd5cd645f392c861fc8364b1ada0a14288bccca85da73a4e852f2ad0e0da3fce3dea29640e07b60b4f3f60fe2776a4c5ff7dc53a6d75212ed6147ec4e53e9473bd493fc251bbd18090f7f603bdda6e08262910d12fff072385e6c587437a7f6d2ac5cfda9a246f89e25c59a6ba1e0664da2bf5cc4a7609fc15622072a17a151c24abc3c1e53d2e1b84060e1737b84c908a01108f4fd16146b896d71234e6fc005c842b1316160ddde60964c68a5eda62b514fe4cc8462d3ce39e2325d5ce1dbd98d49c0db446f5bf519a45fc00d26a5fc0d93064bf90249803e83210a0cb592776524c05993597da93575c3e8862427b4278e683f473c4e69527e4b7a12645f83a27aa1daed0d6e9e968c1cf08d259f86cb8723f22364fabcbe13e45eb993928db00d00339485c5d3084eb831ba0955c2797738e092c9f32710dc9aacf1c9b2d6ad30cdaf742e0b3c19760fb41d7019e184e4432df735e9e6a6a78d1f7a7b12d39f420c39de97b5cdd026c680ccfa59a3d3965f09b2919335d13013510b04ee5e8e9d3623bfada572415eef12c76ffc93de7ba3381504ae9a946ef45fe655a780c8df73147657220198bc94a25ef1e8ab61012503bd6cbb8ac3cd6474d5ec3a8059d848ad8da5dbfa0f6dfc100e39c5e756a47324ac6f5fa8112414c8f30d3fd5565a001900d68923e27bb00a04da97d2148dcc6fa26738aea39e4db2dc1e70461806c9189ff290b4540328ab0da3657954bb18ae07157b0f8e0a4351892720643486372615ee4e83fee788be6a1a8ed68ca975436d63a8e95a0c10e710d23cd7352b6cd788552b9436dede11866638b8514e4d66e93e5c2548298abaddc7dbefaee8447d5a7e55b11cf1c267298fa39da069c7e7ad838007c07e34d323c8de37466ad73f841245872be0128abb5863e53be1430e76d29b07b92eac43fc0eaad126dba1bff62e0ebe1af5aad106c7d70a12d6f27205e98f806ef030cc4a55c494075fabc84ab60ae0505d3906553c39dd3fb69def0e2c66321d169814b260fc10a392c3c7f78d279f09f3978f4cbd16dfe65e4ffe2f15421291549efe7ac4df6014c5bf2dd07f469945ef06f39f834ac195fdd24e7b72c0c9978760858de97df3c215975c1d630b95b4edca50782e232df73ad231285e6f8d0720f19473fd92f4fb4c03099deb0cde5f1ef5970c378763669d6ab413d7be7d138259f175e6e9db32f3283b7358ddf2b2641a17df7c4ea677d2db67e1543a13c4014f7bfbbc1c54aba09c5c6c7257885678afefdc798b57af7f4a6909783a5564c68d04546e2f11150990b73c820fb57ec9e2c9b316f02eb56a0998f5df14b466a715254c189b764c1e10d00abab760a73471fdc7a3f9982b67685d59ddecdb1163af450a449ac87a76da5d9db49fa8900d295f83aff3db8c47cbd8cba627bc0efd537ee5f43ddfbf5973c5555117dbce25f7fdf0637040623ac87d9a8b090966aa64dcdfda03a49adeab60f4566dcf3794986fbf52d0d398363943cc7d0b1cb9c9b5be5eb8037988f853d308b1825208b72bf66e0bcfa682c8bca570d599b07cacd1d2b67d7d9f6a2fb60aa7a38b13803b2e6695db5f3e974ba23050ef686bfdf5b6a33e00e0822daef8f05530d738fb4cbfba968a93a8fe21e409bf155cb2956760"]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x4}]}, 0x31bc}, 0x1, 0x0, 0x0, 0x4008080}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r6 = socket(0xa, 0x2, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) (async) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000040)={0x1, "e3d3d38b", 0x1, 0x9, 0x100000000, 0x8, "fbd04562dc7c707330ab1318f08fcbe4"}) ioctl$auto_PPPIOCATTCHAN(r7, 0x40047438, &(0x7f00000001c0)=0x5) close_range$auto(0x2, 0x8, 0x0) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) (async) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0x5}, 0x800}, 0x7, 0x4008) 1m15.763752044s ago: executing program 2 (id=798): mmap$auto(0x10000000001, 0xa3, 0x2, 0xebd, 0xffffffffffffffff, 0x8000) (async) pidfd_open$auto(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cb603, 0x0) (async, rerun: 32) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) (rerun: 32) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x284003, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) unshare$auto(0x40000080) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise$auto(0x1, 0xff7fffffffff0001, 0x15) (async) close_range$auto(r1, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop8\x00', 0x3231c3, 0x0) ioctl$auto_BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000001240)={0xfffffffffffffff8, 0x3, 0x1}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8aa182, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) (async) unshare$auto(0x4000007e) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async) mmap$auto(0x8b, 0x810004, 0x100000002, 0x8002000008011, 0x3, 0xffff) (async) close_range$auto(r0, 0xffffffffffffffff, 0xec6e) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) open(0x0, 0x161342, 0x130) (async) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/0/msr\x00', 0x2201, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(r6, 0xc02063a0, 0x0) 1m15.157057813s ago: executing program 2 (id=799): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f0000000100)={0xfffffff5, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x5, 0xc5000000, 0x0, 0x9, 0x94b, 0xc3, {0x6, 0x1ff}, 0xb, 0x64d1, 0x7, 0x6, 0x0, 0x2, 0x7f, 0x7f, 0x4, 0xc5, 0x8}) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/cpu0/topology/core_siblings_list\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0305615, r3) adjtimex$auto(&(0x7f0000000200)={0x3, 0x0, 0xfffffffffffffff8, 0x7, 0x0, 0x4, 0x4, 0x0, 0x1, 0x8, 0x5, {0x6, 0x9}, 0x101, 0x2, 0x144a, 0xfffffffe, 0x0, 0xd, 0x1000, 0xe, 0x400, 0x7, 0x200}) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/98, 0x62) write$auto_ecryptfs_miscdev_fops_miscdev(r1, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_SNDLOWAT(r4, 0x0, 0x13, 0x0, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x1, 0x5, 0xfffffffffffffffc, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) 1m14.912537097s ago: executing program 2 (id=800): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x101000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r1, 0x80044100, &(0x7f0000000040)=0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m14.411863433s ago: executing program 2 (id=802): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r0, 0x0, 0x840003, 0xce21) madvise$auto(0x3, 0xefffffffffff0005, 0x18) (async) madvise$auto(0x3, 0xefffffffffff0005, 0x18) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) (async) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/234, 0xea) (async) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000180), 0x103440, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) ioctl$auto(r3, 0x560a, r3) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) 1m13.295520228s ago: executing program 2 (id=805): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSFailureCount\x00', 0x2240, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) init_module$auto(0x0, 0x7f, 0x0) (async) init_module$auto(0x0, 0x7f, 0x0) 1m1.522294771s ago: executing program 38 (id=796): mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x5, 0x2, 0x3, 0x14, 0xffffffffffffffff, 0x8003) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) (async) mmap$auto(0x0, 0xb, 0xdf, 0x10209b72, 0x4e477f5a, 0x8000) (async) close_range$auto(0xffffffffffffffff, r0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) (async) mmap$auto(0x0, 0x400008, 0xdd, 0x9b73, r1, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x5, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x2) (async, rerun: 32) open(0x0, 0x163340, 0x195) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x14f503, 0x0) (async, rerun: 32) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x40000000000, 0x100, 0x3, 0x9b70, r2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5a9802, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x6) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x404b03, 0x0) writev$auto(r5, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x43, 0x6, 0x16, r3, 0x8000) (async) socket(0x5, 0x80003, 0x300) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) 57.326766409s ago: executing program 39 (id=805): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSFailureCount\x00', 0x2240, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) init_module$auto(0x0, 0x7f, 0x0) (async) init_module$auto(0x0, 0x7f, 0x0) 55.66604315s ago: executing program 9 (id=859): mmap$auto(0x0, 0xe, 0xdf, 0x40000eb1, 0x401, 0x8000) pidfd_open$auto(0x1, 0x20008000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) timer_create$auto(0x9, 0x0, 0x0) mbind$auto(0x2000, 0x100000001, 0x100000000, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) io_uring_register$auto(0x2, 0x16, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0xb03f42, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'nicvf0\x00'}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0x27, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) socket(0x18, 0x2, 0x0) socket(0xa, 0x2, 0x3a) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 55.371348441s ago: executing program 9 (id=861): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) flistxattr$auto(r0, 0x0, 0x6) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)=[{0x2, 0x6, 0x4}, {0x9, 0x7, 0x1}, {0xe1, 0x4dbd3d1e, 0x7}]) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008000a000400"/26], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket(0x2, 0x801, 0x106) pipe$auto(0x0) (async) pipe$auto(0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 54.41959262s ago: executing program 9 (id=862): close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x80000, 0xfffffffe) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) r4 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x8000, 0x0) mmap$auto(0x4, 0x81, 0x100000001, 0x3f5a, r4, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d86b0c17", @ANYBLOB="97e62614ffe5553361c65425cc9dba711f14ddb107604747f73ae0e66fe2cd57e98725ace90153885b9f97d47a33be8a9b79bc1bd45a0cac4caad439d436f2d8ad6bfa7d81124d107e3d0ecdf670d48fe3234f481f515f3ab452aa908978da09c995a4b4a28cb63bec9e4cff625dc78c36633f218ae949d6d91b26dfd49278704fc9ffffe7ab42f660d0d88d7d0d9c8f75", @ANYRESDEC=r1], 0x14}, 0x1, 0x1000060}, 0x400c080) 52.549592372s ago: executing program 9 (id=864): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, 0x0, 0x3c, 0x200001000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x8) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, &(0x7f0000000000)={0x2, 0x2, 0x9, 0x67, 0xd, 0x61, 0x8, 0x28}) 50.852950604s ago: executing program 9 (id=865): openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) read$auto_sco_debugfs_fops_(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='}[,&*}/file0\x00', &(0x7f0000000180)={0x189442, 0x30, 0x7}, 0x18) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xd80, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xd69, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0xc2c, 0x49, 0x0, 0x1, [@typed={0x6, 0xe8, 0x0, 0x0, @str='\xff\xff'}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xc0c, 0x33, 0x0, 0x1, [@nested={0xe5, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x51, 0x6e, 0x0, 0x1, [@generic="97c1adf8155e9688b4ca6ac9e137e5376f78505fe3b6a3d8ce0a3d7d9a29b3ac74273ac069a86cf427d67539ee0f1256eb7474a5f75c34c62e6d420b9c4324a452c456709150609e4d8fb6feb5"]}, @nested={0x4, 0x85}, @generic="c3b86e9f07b4587d50822f680957d52b180fb7811d339272b6c252371124a40b40e80b9888e86f8c76e43eed1ca8810ff9f142188a9f0dc0fb73d59caeaa99a117825e73afa8d57c0dba2f1c9961e96a8b87d0a2bf4e06c01e6a8f5cfeb15757560914ff2ef35b6401c29c544a8f04c4a1502aa69a"]}, @nested={0xb1d, 0x29, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x80053d}, @generic="06f3f15ee773298aba24165625e11f138abc9f82afde899851e0f38768071d8c70fb55747dd23c0044d767b025f03fa7efb81e270596a889ef20a952116c6a288b39dc86cdce373e27cbe34668a7ec551767f128a4a08b79b2edd73ff7112275f818a6e839ca8abb902a978a960849eb91d65f01dc9eb56f73f4fcc190e5556cbf94bb76c4997ba9fdd3ff0ac0cb2598a39627b16c7a00dbc1470ad585305042318e4362f4abcf7ced27f83d4eebb1b824a226cdab6cc4ff12b790bf79988c396b02a36d42407f8338febac27ee72ebcc54ab681b05404703043335f760f79eb5da4bfd5c77ba7e3b14845d8e600fa8fffd0ff53cae39ddc5b8ed7c86a72332219a48e4f360162894127ccf5925e4849a22ee4770801aa35773d7443b17d619f8d6c52e64bcf98cfbacc1c479b941f3c77f482cb84212d9def88b66ae088a3766bd880f82fb65e142b925691d232c2d8082969bafd470e191097098388a457c48f562ab49e134863cf1fbeb220dc3e2b0c3b8252cba1b6733df7e6832e1b84bfaf911add5a8f5cc322193ab9d57f574b6974031dbda51e05258eb1ce980af4ef7abdc71377b39b4c11e0648ba3f81b22ca8b71ac995e7897fa5d300fda3a3639a6288fa203f028b2c4237fa0e049f1b4cd0de2015845f5d68782bc66abffc951d14bf2acf15c641e5ee4e664e8e026dc0fbdc9461c2458e3f1bb8845e0712de7c38dfdc6cab65ff9ca10afc064c78426fdb3ef6735bc04d6bdf77355d4adbdb628c5216e908b829fccfd138acda02bf9545161e1650cb74972e72347ebf1a1fb8898d6f7537b2326f4cb5e3ba782a16ef4604c0a0ca2cafcff262e86c79f2ac8ccfa88502d26d2c83e27ed2f65a7b8e2812fd8da9228ab9944c3a627ba3e69af2661b0002408a1fa4ba4a80b746dc27377ceb8207402184ce3cc6b4b253fa7e38546fad0ecf4e346d109d41a7685600c566ce66bb3032d4e3ae81f5b9cc66e143b7073ab77231a08c291e8c6182426c71006296b40b85f9ca6c0e40f8535b6b0498983a79bd4eff2a9868d7c32d0986ce7f8fc5f26f238266668ba6c943923586b531fbef2eba0450ae9f8d731912a528ae95ba8328fb672b15bcf2859f001ef28a12031a8b43f3cd578baf23d03698200df46d1c395fcb2e2ff5c899a468c899e1427285d0df06991b8c00a48e680a1cb87eba1dbf1577eb5cb94c9aedaa5ba1383b0830c6e2b0b23cb1bc0e50fe8cdf6b1719052d75c4a06b36a9facc647454ed31623aa2af76665600a42bcd97ae0a3a92d342151a59083010e889417e42d4bf8c6e8d7d21643de3a5d3e7ee718b00dee00f718fa0ef3ddda8d5dbfce49ef628120857efb66fd6df89b4038dbf17b50bec33f4c2e965700a91516e29de4d6592be383fb9d7c82b6e179b98edd8120254da7414cb9d914815b55258726c0132aaf0c7413c13e4a06caf45e65af5beee3dcffb81c6a839ba23bf9d31167cbd07a198b5e985b417a9530fbaf724ba5cffc0ba279779e8ac7bf91df65f106543acdf38b382e27b35a97c964446ac0239c46675a434db5f0e12419fda17c75cd432ec84db5573beb218f658cf8903200a26e02eae53f1045e9039721f06da2c61192171f011cd4762847193e383fd8c09c96b0b57b3061746a4e89a7f6335dd402787aa180b044789a5ce13cb50b3586d88e9802d28aa1ce15690dc024dea8b0e4aa953f2e1eebc34d1bcb0af20477b0ca1e3b5cb2ad2a94aac01420567ea18a18dc00bee747ed29e1fca8b48984a5105ba4124b578613e95f4e222d9ff936c00667201e93363000ab1e5676ccaae733177f111abf774010783326269124d3c4965e578777db3773452c8b0211f7382fdcd7a484cc17f7f7e83b793f80e428fcef5880b23d4e6690344d4c0e113689733c33ca53b22a664e19c35136f87d8d198eef66254c2eeefafaca1df12f32a7c7572d89707f450dad9c7c5e8de6e9912129438e34929a7f4d1a61bd895ef3d725c7f0d9e9e39618875928a3a3d87fcc625eb0bed9128820cb05220f94efdcb3fea08a631b7c7208c32e66f0aaea90b0f0995b3f1c0f41b5acf2e185cda534c676a6951b2591057b35ca00856ab6b94cbcff9d355f06dda491fa0aca56dc2ff8812ec10a35df39ed7eace30b3148a168d25c546bfa222a9d57c799ab60ab8712e6cef46718368d4524dd86abb3359af3d79599a09699bade3d7d71cf665e6c164e14542296d3a5728e74ef41a1e4aedb0e8907ba287f699379adcab533ce5d6549213cffc2fef7287b1290a3719638f69c9eeb3f3f667468b154e4b7af9ba8d87bfc6aef1f42b7b2899d35c3f00397fe784271b9e808db878842cc780eff318f601e34e608ab3124470cac40227b654812f3bb7c11180a4a731e238ce70d99a268a9c60b0126c87801f01f20b01164aaf72d68d71973b85d2a5294f2e83b1c91525e9c46245c1f869fb08a02753b48fad808beb51d42657ca37de33ebeaa8f7ae853af52b08f68520fe083b2c0893a04fbf9a9628be524b287da8e20c13c7e284061f5563e85c3f9b3c0d45acf3f5437f691633396362151923fa8909eb8ac4abef6d1f55343c44f89fd929125e5fff72e2b141209dec1ce548b1ca3cb2689bf37b39b5212af9353f2c8cff7542c051e6cb0415a92f82ef7d39968066f1b7d6b0e1caf06ffb7a684e1e47b0b48d46f6c6fda54f266fb792bf8b52837d5e83bc6da4fe6f685ff00d36fc3bc0bf8f3282d7eb99fe6245712c1599458ba525804d98446be0e2e3c7f596436705985659ab230580fec583015c273cc0d1050e3b82c0124b7d9575f8165f9a7b121d9d1cd3eba96edd0d9bfdb6da1006d146169136ec1c8e2a898b45aedd5cb2087173d76f1d89911896539b0345731ef18a29d3d39a4855dc5dffdeee7e1eeca390a51ec6ec19ca011667f3a70ec9446a2ff0406cadd8cac89c59bb1571b93c513475804694a5c2b30fc31e8554a94c8e86d55de8126f03649f243cc3f7a37964eec6d8e5c1c8b1e95743c4cea1a8c7330a3db3febec60185991203d53d559451b3b090f5401a7bc469fb995e40252b3e269b5eabe80c3fceac60b6e079fe7f7ca1b84c4494fe1090f76ef927a803978efda5559714fbab861e51b7f8dd3e938ca508a4fa1776f86fd74a3a530ad49ed1ff52d3d16af9b472f2e0fe29e60a98ffe13e7e1306e72dd9fe232e609a8c51fc0210a602d5def7cf57c0ae422794d41908fc6b125617d44f4c0a3ffce0bf8580894b0dfdf9a9fa412b02db2b12476529f29074734660d5d7738975b183a75e1b37427e33fcc5de2c56e8506da207697bcde48ffded39c42cacc2b1755d4ffd183bdd6d2edbcfaafdcc06583f736ce468972a759d97bcf52c12f16f6541a0857578a6a95cfbd12e25c1a3835ffabefe74370f812367d5094ae90b371d0927ee9e4d4e854ce4ad29d108963091ee294e3d8c769ad19ea95d606c987dac292bc8bc3f0a543fbfdeb341cbe094285425031cd1cdf73c52190144a59141352263cf0a7e6cef65dbd277585b51b278614295436f4659aadf0038dad2aa73ada5489e065e74faebc805568639ee30556cd64d117b34938dfe6fcd5a14c8ecc3db7d20793e993a0356b208b73303ffc63047c52dd6e2f621037aa8bfc43c5f0257d3287a282e23349581ee6b5d6b9fd54bfec97ba8541669dd6b92ebb844af2a7da8e8af825f1b6c1a6b544db7e2718ed21f586e8c034c8ab87ce831415709ada2925e6e826afe0fe5fd89432be1dfed742e54162a977d9576b5e2448dc55a92294f192e74776c3f0c22ada5949420a8c635791303cd9519e2a76039a4172b953b2aa7c512da6ebd30920dfc94995c755fa290a77307f0160871b80a8580bf45d12b681d4a95bcb602639eaa66b9767e8ab6c582cb1f523f705796d153e4aff29d9c70bbeebdf231b71edee53b999afdac24c53fce9ab99fd9d8965df52315d868f4654"]}]}]}]}]}, 0xd80}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) write$auto(r1, &(0x7f0000000000)='P^\x00', 0x8) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0x660f, 0x5], {0x7ffd, 0x7, 0xc, 0x4, 0x4, 0x3, 0x100003ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0xfffffff7, 0x449e}}) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x205ac, &(0x7f0000000100)={&(0x7f0000000200), 0x1f}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe70) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8ecc0, 0x0) close_range$auto(r2, 0x8, 0x0) 48.749887011s ago: executing program 9 (id=869): close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r0, 0x3, 0x7f, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) mmap$auto(0x0, 0x3, 0x8000000000000000, 0xeb1, 0x1, 0x808000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/radio19/dev_debug\x00', 0x20800, 0x0) get_mempolicy$auto(&(0x7f0000000040)=0x3bc5, &(0x7f0000000080)=0x7, 0xc, 0xff, 0xa9) 43.243316061s ago: executing program 0 (id=856): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0x27, 0x0) quotactl$auto(0x2, &(0x7f0000000040)='/dev/..\x00\x00\x00', 0x62a0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) socket(0x18, 0x2, 0x0) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0xb) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 43.035620472s ago: executing program 0 (id=878): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000012c0), 0x442440, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'bridge_slave_0\x00', 0x0}) bpf$auto(0x10000, &(0x7f00000001c0)=@bpf_attr_3={0x3, 0x5, 0x0, 0xa8f, 0x1, 0x2, 0x10, 0x21d5, 0x0, "dd1dc27b5455d94f77b1735af8a7b50d", r1, 0xd89758, r0, 0xff, 0x7cd, 0x48, 0x1, 0x3, 0xf06, 0x40, @attach_prog_fd=r0, 0x800060da, 0xd451, 0x7, 0x0, 0x7ff, r0, r0}, 0x7f3) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) r3 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x5, 0x4001, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x1c, 0xf, 0x29f, 0x100, 0x59, 0x101, 0x1, 0x1}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r4, 0x40095505, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r5 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000001340), 0x22000, 0x0) read$auto_safesetid_uid_file_fops_securityfs(r5, &(0x7f0000001380)=""/98, 0x62) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000001400)=@prog_bind_map={r5, r2, 0xf}, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000100)={0x110c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xf3, 0x3, 0x0, 0x1, [@generic="231bf19f4cfdda2233327e46f6d5706c7f804eac244fb61f72489c1d12d8b909f966825bd4a0ff8afe0d917c0a68a7f00f15901e7a8b7f5b", @generic="4c066cd1f1ff135852224f26dec0808742e18a390516cb3de46360b22987cece7abaeb064ee0fa53c9bd5893ba35d11575bea77fcd20a0332a630829b18c2346553b83ea8317e1436d5b992e08478090a723ab8cf1c5f25bd8a7b2437dc84bc60a4796e96e7092809e12c870f2f4a43593124b8ec03916cc5770c41208ad4150370b8d8b3c4b4d3a5e13415266ac0c0fe9fb7e3a905f6064a3615c93f4e4f4f156627af532ae4dce22693b07452e79264724f028b4f3b0"]}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "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"}]}, 0x110c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044845) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) 42.091212292s ago: executing program 0 (id=880): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = io_uring_setup$auto(0x82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cfd7000fbdbdf25020000000800010000020000170004002f6465762f736e642f636f6e74726f6c43300000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, 0x0, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x982, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r1, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x355, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x45, 0x4, 0x0, 0x4, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x6, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, r0, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) 36.527653313s ago: executing program 7 (id=895): r0 = socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) symlinkat$auto(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x3ff, 0x4000000000df, 0xeb1, 0x401, 0x6) fcntl$auto_F_OFD_SETLKW(r1, 0x26, 0x8000000000000000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0285629, r3) (async) rt_tgsigqueueinfo$auto(0x0, 0xffffffffffffffff, 0x4, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0) write$auto(r4, &(0x7f0000000000)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) setreuid$auto(0x3, 0x7) (async) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000007c0), r1) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000228bd7000fcdbdfa0520000000800020000100000080002000900000008000100ff0300000800020007000000080002000200000008000100010000000800020079010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8015}, 0x240080d4) (async) msgctl$auto_MSG_STAT(0x2, 0xb, 0x0) (async) listen$auto(0x3, 0x81) (async) setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\xda^+,=/:[$/\x00', 0x7) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) (async) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x141000, 0x0) ioctl$auto_BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000500)={0x101, 0x8, 0xfff, [{0x4, 0x7, 0x8, 0x0, 0x6, 0x4, 0x40, "e42bc029", 0x4, "51ff24f2390f9a5e70fbfc4678e8b57da1b3d85b79f17a1d"}, {0xdbb8, 0x7, 0x7, 0x4, 0xff, 0x8, 0x37, "8e455b65", 0x3, "66409c5e504b2cc8ad3fc3d1b64d7798e1559260a2a003eb"}, {0x8, 0xc, 0x5, 0x81, 0x4, 0x7, 0x5, "4a389bee", 0xb, "4ccf11004dbfc9ec93cd1f5454b6910b5ef98b62a46d4bff"}, {0x1, 0x2, 0xd6, 0xfd, 0x2, 0x0, 0x3, "ca3bb15c", 0x8, "318a9ccf904cccfeea92edabd3873a6dcf1ed604cfcef278"}, {0x0, 0x6, 0x40, 0x4, 0x1, 0x5, 0xff, "ad1e9364", 0x8000, "84e06ebe76d00c6b12d9916a793bd6bce90f3260231858b4"}, {0x5, 0x9, 0x6, 0x7, 0x2, 0xa, 0x4, "2ab93611", 0x574c7963, "d53578c0baff37083d6c0c26a839a9460ca91a48af2e6593"}, {0x4, 0x3, 0xffffffffffffff38, 0x0, 0x8, 0xd, 0xb, "d07d9784", 0x7, "793f0aeeb6e879ff5afba9f33a4b5050620a968bd80b02dc"}]}) (async) sendfile$auto(r5, 0x3, 0x0, 0x7ffff006) r6 = socket(0x10, 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) (async) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r7, 0x0, 0x64810) (async) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r6, 0x0, 0x4008804) 36.315369116s ago: executing program 7 (id=896): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000012c0)={{@inferred, 0x1, 0x2, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b620200f764f9", @raw=0x1000}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacf03000000000000008bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6cac1ba3023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8133ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000) set_tid_address$auto(&(0x7f0000000040)=0x7f) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) r3 = socket(0x29, 0x2, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) (rerun: 32) semctl$auto_GETPID(0x0, 0x6, 0xb, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) (async, rerun: 64) getsockopt$auto_SO_TXREHASH(r0, 0x7ff, 0x4a, &(0x7f00000000c0)='\x9d-(.}*&&{\\!\x00', &(0x7f0000000100)=0xfffffcc1) (async, rerun: 64) semctl$auto_SETALL(0x0, 0xc, 0x11, 0x80) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (rerun: 64) 36.214027873s ago: executing program 7 (id=897): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffff7, 0x6a0000000000000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) socket(0x2b, 0x1, 0x1) r3 = socket(0x10, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r4, 0x8000) 35.943896579s ago: executing program 7 (id=899): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty19\x00', 0x201, 0x0) r2 = eventfd$auto(0x9) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000280)=""/40, 0x28) (async, rerun: 32) r3 = fsopen$auto(0x0, 0x1) (rerun: 32) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (rerun: 64) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r1, 0xffffffff, &(0x7f0000000000)='&/.^\x00', &(0x7f00000000c0)="14aababc9934d4a85bd32a26b9094b94a63c5619f140545c64a989e65f1ff4aa36694a9a260946999adc95130ab22afaaf7d20a440aab8307c86e952c9f4935b11c47e1ac3ed62fb71f088a5bc96f2c0524c7bd130a9a7e6a4f115645406e4f488647c801cebd7c8702978713210e62cc650bde64f447383489479f46aec32fed08530536507215e553000903bbd99ba2a720650998ff08898cccf5202c5a2a609cf94a94055c6815301790fe077740403162e893ed6fdeb7379161eed51c92522082815348f8acc5b1f9469080f06f66a288a0ffc734d06a1c1bb19c8aa1af3c31c10f9217672a3a35c26ce64dca19b79", 0x0) (async) ioctl$auto(r1, 0x5412, r0) 34.955292988s ago: executing program 7 (id=903): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0x29, 0x5, 0x0) fsconfig$auto(0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x8}}, 0x20) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x10000100200000) setrlimit$auto(0xb, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x100, 0x80000000010, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x2000000003, 0x400009, 0x8, 0x50, 0x2, 0x8000) 33.911839707s ago: executing program 7 (id=904): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pim6reg\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2021a088}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x9}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'bridge0\x00'}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x4000045) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(0x0, r4) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) sendmsg$auto_GTP_CMD_ECHOREQ(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) listen$auto(r1, 0x8) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(&(0x7f0000000000)={r1}, 0x200, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r6) sendmsg$auto_TIPC_NL_MEDIA_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x18, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) close_range$auto(0x2, 0x8, 0x0) 32.882307199s ago: executing program 40 (id=869): close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r0, 0x3, 0x7f, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) mmap$auto(0x0, 0x3, 0x8000000000000000, 0xeb1, 0x1, 0x808000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/radio19/dev_debug\x00', 0x20800, 0x0) get_mempolicy$auto(&(0x7f0000000040)=0x3bc5, &(0x7f0000000080)=0x7, 0xc, 0xff, 0xa9) 26.932336284s ago: executing program 41 (id=880): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = io_uring_setup$auto(0x82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cfd7000fbdbdf25020000000800010000020000170004002f6465762f736e642f636f6e74726f6c43300000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, 0x0, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x982, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r1, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x355, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x45, 0x4, 0x0, 0x4, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x6, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, r0, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) 18.836927893s ago: executing program 42 (id=904): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pim6reg\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2021a088}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x9}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'bridge0\x00'}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x4000045) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(0x0, r4) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) sendmsg$auto_GTP_CMD_ECHOREQ(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) listen$auto(r1, 0x8) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(&(0x7f0000000000)={r1}, 0x200, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r6) sendmsg$auto_TIPC_NL_MEDIA_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x18, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) close_range$auto(0x2, 0x8, 0x0) 7.87507566s ago: executing program 3 (id=972): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="040027bd7000fcdbdf662950c000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x60000807) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r2, 0x0, 0x2, 0x7ff) sysfs$auto(0x2, 0x40, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x1f40) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyu9\x00', 0x2a0000, 0x0) ioctl$auto(r3, 0x4b49, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x7ff) ptrace$auto(0xf, r4, 0x1, 0x4053) timer_create$auto(0x0, &(0x7f0000000080)={@sival_int=0xed0000, @raw=0x7, 0x68, @_tid=r4}, &(0x7f00000000c0)=0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto_tracing_buffers_fops_trace(r0, &(0x7f0000000280)=""/203, 0xcb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setns(0xffffffffffffffff, 0x60020000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x2, &(0x7f00000001c0)="ff616ee949c9533580c077fe4302fcb386ddbc7d0645c70aaf3d04ee60329c3fce357ff6fe3709a4d9f4621b592d840af1361a5918fe6a9905cfcab3eeb570459229ec2f3b52202fdf2c433a994970712bd69fd8d9b6b5b26d1dd6f6f7fa9bdfbfc0523ef0708940be93122165c455c5cfb46a232108014e5cbbda036f7bf80aedfdc167bea519d5977f6f0e92978d38b8552b057f67508ae7cf9f6e5db8") 6.641448656s ago: executing program 4 (id=975): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = socket(0xa, 0x3, 0x6) getsockopt$auto(r4, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd, @target_fd=r0, 0x2, 0x4, @bpf_attr_link_create_4_1={0x200, 0x9}}, 0x100000c8) sendmmsg$auto(r5, 0x0, 0x4, 0x4008) socket(0x29, 0x2, 0x0) 6.545183553s ago: executing program 3 (id=976): r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r1, 0x0, 0x0) ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000300)={0xb1, &(0x7f00000002c0)={0x219a, 0x2, 0x3, @inferred=r0}}) ioctl$auto_BCH_IOCTL_DEV_USAGE_V2(r1, 0xc020bc12, &(0x7f0000000040)={0x3, 0xe, 0x2, 0x7, '\x00', 0xf, 0x3, [{0x8e, 0x8ef2, 0x9}, {0x3, 0x7f, 0x9}, {0x6, 0x6, 0x78}]}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x2, 0x0, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f0000000000)={{0x5, 0x2}, {0xd7}}, 0x0) io_uring_setup$auto(0x54fa, 0x0) timer_gettime$auto(0x0, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0x3) 6.179812847s ago: executing program 3 (id=977): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) unlink$auto(0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) 5.240700377s ago: executing program 4 (id=979): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x5, 0x0) bpf$auto(0x400, &(0x7f00000002c0)=@info={r0, 0x7, 0x3}, 0x4) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x8, 0x0, 0x816) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffff5fdffe00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000180)=@bpf_attr_5={@target_ifindex=r5, r0, 0x6, 0x0, r0, @relative_fd=r0, 0x5}, 0x35) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x6, @remote}, 0x6a) times$auto(&(0x7f0000000080)={0x6, 0x80, 0x8000000000000000, 0x10000}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r6 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r6, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r7, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x8001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 4.902065864s ago: executing program 4 (id=980): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/ipsec\x00', 0x541200, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0x3e}, 0x100003, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi27\x00', 0x20200, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x100) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000100)={0x0, 0xfff}, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)="0ab900f4eddc8fd31d6e3e369c8b29cd15681eabbc89a1ef5502c7a6d801de0300000000000000b51f39e4af1f7b7aef94a391ade6f700000000e7ffc67697cd51683cbd6488b3aa2a0ba900000000", 0x80000000000000}, 0xfffffffffffffffb, 0xfffffffffffe) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) 4.763877659s ago: executing program 6 (id=981): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d1}, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r1 = fcntl$auto(0x8000000000000001, 0x26, 0x8) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') r2 = creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) utime$auto(&(0x7f0000000300)='./file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0x10000000000e3, 0xeb2, 0x401, 0x8000) mkdirat$auto(r1, &(0x7f0000000100)='./file0\x00', 0x400) times$auto(0xfffffffffffffffc) ioctl$auto_PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)=0x1) r3 = fcntl$auto(r2, 0x25, r0) statx$auto(r3, &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f0000000340)={0x6, 0x5, 0x5, 0x3ff, 0xee00, 0x0, 0x0, 0x4, 0x800, 0xb, 0x1, 0x5, {0x9, 0x48a}, {0x11d}, {0x8d19, 0x2000008}, {0x81, 0x3}, 0x1000, 0xe72, 0x910, 0x10000, 0xfffffffffffffff7, 0x9, 0x1000, 0x53, 0x1, 0x1, 0x6, 0xc0000000, [0x924, 0x5, 0x401, 0x9, 0xa, 0x6, 0x7, 0x3, 0x6]}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) socket(0x200000000000011, 0x2, 0x0) quotactl_fd$auto(r2, 0x4, r4, &(0x7f0000000440)="bcd0f134538e4d5e02f4e72a1d7b9312099874485c75929b537c636c7ce6a28cec9be0cffd88858fe4b874c30fa9f09a23084b1ba5480db44c37bceff7790ef3e5d2f048bfbaf6e01258b1d8244dcd0ecf11623a13c3acfc93e21f591fcd53a33703c2ab81396e611837ea891aae728765fbcb6fdc7175b3da947dc6cc005ab5e8f77ac3b1df5c54541e70ea350982169ef396a5737ccbbd375842266bb6d8fe6aa4c4f52349f50434d24053016de1bed6cd65144918c8bda0b903e94acca42a3bb37208c0525b9acbc62d466c2fb5ce5c917a5e3cdd1730f84ddb8e") 4.327482234s ago: executing program 6 (id=982): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0) (async) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x1812c4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000140)={0x101, 0x7ff, [0x9]}) (async) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x410440c}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400007a1c00", @ANYRES16=r3, @ANYBLOB="04002bbd7000fbdbdf250600000014001f00fe800000000000000000000000000013140008007369743000000000000000000000000006001b004e24000006000100070000000500150004000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000094) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x20c000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r6, 0x0, 0x20) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) r7 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={r5, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto(r2, 0xc1205531, r1) 4.078581489s ago: executing program 4 (id=983): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c09000006de93800e06c2a7c70fb9a3e167048f80fc8ba0cd8244574ec6258638ed28643944397c062900f53751c87259e1d743ec629496338c5327368a37c309da803b2088c7f2f6ee3b0e", @ANYRES16=0x0, @ANYBLOB="010026bd702078dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) 3.960703217s ago: executing program 3 (id=984): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/interval\x00', 0xa2500, 0x0) mmap$auto(0x10001, 0x810005, 0x1, 0xfffffffffffff2f0, r0, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x88040, 0x0) pread64$auto(r1, 0x0, 0x7, 0x9fffffffd) write$auto(r0, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x4, 0x0, 0x1, 0x4) mmap$auto(0xa, 0xffffffffffffffff, 0x1, 0x100004000040eb4, 0xffffffffffffffff, 0x200000007) r3 = prctl$auto_SECCOMP_MODE_FILTER(0x401, 0x2, 0x0, 0xf307, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, r3, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0) unshare$auto(0x8100000) getdents$auto(r2, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001ac0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) io_uring_setup$auto(0x3ff, 0x0) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) 3.275424446s ago: executing program 6 (id=985): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/9p/caches\x00', 0x103280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) r3 = bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) socket(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=0x0, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r7 = socket(0xa, 0x3, 0x0) setuid$auto(0xe) mmap$auto(0x20000000000, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x1ac}}, 0x40000) recvmmsg$auto(r8, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x5, 0x0, 0x1fffff, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r7, 0x89f1, 0x24) read$auto(r4, &(0x7f00000004c0)=':)%-\x00', 0x1) 2.749182586s ago: executing program 4 (id=986): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'nr0\x00'}) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x10000, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)="e00a0c31edbf4b76237e159ace64df408d9831a0f81e6c4b6d85cf878c4bd27125d2bf115fba67c09afa9c4e5748ef5daa59a185709d2f283e43233d63e26932fab49f423578dda4c3d1b08f78890801464d787347b2c36c57b88e29c316c1cfbfa77d5716af3a751086fbfffbb9d5820da8225ce633fd86396cee032ea4377be7914bd58f41f1330b86451c3974fe61c5bcb6a5e09ca052a9de3a82a160cf68b89ef5e205dce2affb15f7a49368ce3aa1ec59b5d24e62a5266a567362a5be0d6c21af5f307c3f6c6b33bbfc330ef71ec6b358eb5f4cdf307f8966a610dbc3064ef12fbfe3339202978e34ba3b39faf9139b183fcc27a5", 0xcc, &(0x7f0000000380)={&(0x7f00000002c0)="506c21dace847019cc3c99b89b3a27d9c23a40a6055f6218fbe5f3a02cfa71813a149ee722e3a393ae9d7cb1f485d3ae995a91a780d02ca5a77fe92174014fcfb79a38861e7b5ddaf0c1080f1ed9af3704c675ab40884643ed6bfa93c9d9586a4385a844b5cb76e82ef427852167175a32fc013255b23ffaeb353dd62ada65ad5aecc567c92d00b0eeea3664e3fd74e9236ff377701a4a13491d727293a4c6c5bd7e662f7ae292f1"}, 0x6, &(0x7f00000003c0)="765bfc7f7f0ffbdd0e30568b6634950083ecb5ee0ed745a6", 0xc86, 0x80000001}, 0x2) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010927bd7000fbdbdf250200000014000c00ff01000000000000000021000000000108000100ac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd=r3, @target_ifindex, 0xd, 0x341d, @tcx={@relative_id=0x5, 0x4}}, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x400000000000, 0x9, 0x8, 0x800000000c812, 0x3, 0x0) ftruncate$auto(0x3, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2.284534109s ago: executing program 6 (id=987): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/pcrypt/pdecrypt/parallel_cpumask\x00', 0x200941, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001080)=""/4143, 0x102f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, 0x0, 0x2004c000) sendmsg$auto_OVS_DP_CMD_GET(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) writev$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x181840, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x210080, 0x0) read$auto(r3, 0x0, 0x200) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x26a140, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) 2.159825932s ago: executing program 5 (id=943): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0x27, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/block/sr0/power/control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) socket(0x18, 0x2, 0x0) socket(0xa, 0x2, 0x3a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) unshare$auto(0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r1 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) fcntl$auto_F_RDLCK(r1, 0x1cb0, 0x0) 1.966984919s ago: executing program 3 (id=988): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/split_deferred\x00', 0x80404, 0x0) read$auto(r0, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) r1 = socket(0x11, 0x3, 0x9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000003) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03000000000000002f", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0xfffffffffffffff4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010007000057be5c890d2d"], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x10040) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/split_deferred\x00', 0x80404, 0x0) (async) read$auto(r0, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) (async) socket(0x11, 0x3, 0x9) (async) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000003) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03000000000000002f", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) socket(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) (async) unshare$auto(0xfffffffffffffff4) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010007000057be5c890d2d"], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x10040) (async) 1.63575438s ago: executing program 5 (id=989): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x3ba, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x8], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0xfff, 0x1a7b870a, 0x76c5, 0x444e, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f000000d680)='/dev/ram5\x00', 0x40000, 0x0) ioctl$auto(r3, 0x3, r0) sendmsg$auto_L2TP_CMD_NOOP(r2, &(0x7f000000db00)={&(0x7f000000d9c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000dac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00578f5a", @ANYRES8, @ANYBLOB="000325bd7000fcdbdf2500000000050013000d000000080018000400000005000600fe000000050006000800000008000b000d00000006001d006c0900000500060004000000", @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="feffffff", @ANYRES16=r1, @ANYBLOB="120128bd7000fddbdf250200000008000900070000001e0005002d6dcdb377d5e9762133fb84c0b06bbfe3790c7242"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) setresuid$auto(0xd, 0x0, 0x221) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) 1.563414851s ago: executing program 3 (id=990): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x21) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, &(0x7f00000000c0)) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x80002, 0x73) request_key$auto_KEY_SPEC_PROCESS_KEYRING(&(0x7f00000006c0)='[{%\xbc::(\x00', 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6a) 1.172921485s ago: executing program 6 (id=991): r0 = socket(0x1e, 0x1, 0x0) mmap$auto(0x400000, 0xac1, 0xdf, 0x100000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x8, 0x8, 0xfffffff8) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r2, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(r3, 0x8910, r0) 830.177154ms ago: executing program 5 (id=992): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) setsockopt$auto(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) mprotect$auto(0x200000000000, 0x5, 0x4) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0xe02b, 0x7, 0x8, 0x860, 0x0, 0x4, 0x45079941, 0x8, {0x47a8, 0x8}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0xffffffffffffffff, 0xb4, 0x800, 0xf9}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(&(0x7f0000000180)={0x9, [0x8, 0x3, 0xfffffffffffffff9], 0xffffffffffffffff, 0x200, 0x6, 0x7, 0x3622, 0x14c0, 0x296, 0x0, 0x6, 0x5511, 0x6}) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x8a241, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x2, 0x800) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x200000000000, 0x806124, 0x8) 801.123433ms ago: executing program 6 (id=993): msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x81) io_uring_setup$auto(0x9, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x3}, 0x3) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xffffffff, 0x0, 0x8, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) listen$auto(r1, 0x8) 404.065242ms ago: executing program 5 (id=994): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)=@rc={0x1f, @none}, 0x3) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) shutdown$auto(0x200000003, 0x400002) (async) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) (async) prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=995): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlock$auto(0x7c88, 0x7ffe) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r1, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326a070c800dcdf25020000007c35ddbba9ff8da11fe3d834f900ad2a8e7c590c4f545c0ab8ea292c6f1fc4f2f6ac41ac4ad9a71a59007100cc1ef62a419dda552d446e4e82127879fd8ba37ac1d4d184b82944e53a1beec78fb6424c27c5250d64bf4ca277121e75337f75c98f2fbedc2ce392f67e3f219fe9362707ac7a948a03b273122aa3ee14b08763bcbd3ce93d3574c687174849eb88ecd23f50bc4b7fe4"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="635e28e439eba5c4ec40e46f2ee2da67b86bb957a6a44125df4de7c5103bf6a2afd2d48c9e5ff7f8fae1"], 0x1ac}, 0x1, 0x0, 0x0, 0x2008851}, 0x0) socket(0xa, 0xa, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) kernel console output (not intermixed with test programs): 5: 00007ffcc6b593c8 [ 220.822922][ T8353] [ 220.822937][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.820890][ T8371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.469'. [ 222.511637][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'. [ 222.808502][ T8399] FAULT_INJECTION: forcing a failure. [ 222.808502][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 222.958094][ T5646] Process accounting resumed [ 222.977929][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.977954][ T8399] Tainted: [L]=SOFTLOCKUP [ 222.977959][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.977968][ T8399] Call Trace: [ 222.977974][ T8399] [ 222.977980][ T8399] dump_stack_lvl+0x100/0x190 [ 222.978010][ T8399] should_fail_ex.cold+0x5/0xa [ 222.978031][ T8399] should_failslab+0xc2/0x120 [ 222.978050][ T8399] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 222.978072][ T8399] ? mempool_init_node+0x2f7/0x6e0 [ 222.978090][ T8399] ? lockdep_init_map_type+0x51/0x250 [ 222.978114][ T8399] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 222.978132][ T8399] mempool_init_node+0x2f7/0x6e0 [ 222.978153][ T8399] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 222.978169][ T8399] ? __pfx_mempool_free_slab+0x10/0x10 [ 222.978185][ T8399] mempool_init_noprof+0x3a/0x50 [ 222.978204][ T8399] bioset_init+0x37e/0x8a0 [ 222.978223][ T8399] ? __pfx_bioset_init+0x10/0x10 [ 222.978249][ T8399] __alloc_disk_node+0x83/0x6b0 [ 222.978270][ T8399] __blk_alloc_disk+0xd2/0x170 [ 222.978288][ T8399] ? __pfx___blk_alloc_disk+0x10/0x10 [ 222.978317][ T8399] ? __pfx_idr_alloc+0x10/0x10 [ 222.978338][ T8399] ? lockdep_init_map_type+0x5c/0x250 [ 222.978371][ T8399] ? __raw_spin_lock_init+0x3a/0x110 [ 222.978390][ T8399] ? __pfx_hot_add_show+0x10/0x10 [ 222.978410][ T8399] zram_add+0x1bf/0x5d0 [ 222.978428][ T8399] ? __pfx_zram_add+0x10/0x10 [ 222.978459][ T8399] ? find_held_lock+0x2b/0x80 [ 222.978476][ T8399] ? sysfs_file_kobj+0xe4/0x290 [ 222.978502][ T8399] ? __pfx_hot_add_show+0x10/0x10 [ 222.978521][ T8399] hot_add_show+0x21/0x80 [ 222.978539][ T8399] class_attr_show+0x72/0xa0 [ 222.978556][ T8399] ? __pfx_class_attr_show+0x10/0x10 [ 222.978570][ T8399] sysfs_kf_seq_show+0x217/0x3a0 [ 222.978588][ T8399] seq_read_iter+0x32f/0x1270 [ 222.978604][ T8399] ? lock_acquire+0x1b1/0x370 [ 222.978633][ T8399] kernfs_fop_read_iter+0x46c/0x610 [ 222.978655][ T8399] ? rw_verify_area+0xce/0x6d0 [ 222.978670][ T8399] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 222.978692][ T8399] vfs_read+0x825/0xb30 [ 222.978711][ T8399] ? __pfx_vfs_read+0x10/0x10 [ 222.978740][ T8399] ksys_read+0x12a/0x250 [ 222.978756][ T8399] ? __pfx_ksys_read+0x10/0x10 [ 222.978774][ T8399] ? rcu_is_watching+0x12/0xc0 [ 222.978794][ T8399] do_syscall_64+0x115/0x840 [ 222.978814][ T8399] ? clear_bhb_loop+0x40/0x90 [ 222.978832][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.978847][ T8399] RIP: 0033:0x7f2ee8b9ce59 [ 222.978861][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.978875][ T8399] RSP: 002b:00007f2ee9ab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.978890][ T8399] RAX: ffffffffffffffda RBX: 00007f2ee8e16090 RCX: 00007f2ee8b9ce59 [ 222.978900][ T8399] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 222.978909][ T8399] RBP: 00007f2ee8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 222.978918][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.978927][ T8399] R13: 00007f2ee8e16128 R14: 00007f2ee8e16090 R15: 00007ffe7646f828 [ 222.978948][ T8399] [ 223.835079][ T7498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.855306][ T7498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.864886][ T8407] FAULT_INJECTION: forcing a failure. [ 223.864886][ T8407] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.903083][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.4.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.903108][ T8407] Tainted: [L]=SOFTLOCKUP [ 223.903113][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.903122][ T8407] Call Trace: [ 223.903127][ T8407] [ 223.903133][ T8407] dump_stack_lvl+0x100/0x190 [ 223.903162][ T8407] should_fail_ex.cold+0x5/0xa [ 223.903184][ T8407] _copy_to_user+0x32/0xd0 [ 223.903206][ T8407] simple_read_from_buffer+0xcb/0x170 [ 223.903226][ T8407] proc_fail_nth_read+0x1af/0x230 [ 223.903250][ T8407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.903275][ T8407] ? rw_verify_area+0xce/0x6d0 [ 223.903289][ T8407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.903317][ T8407] vfs_read+0x1e4/0xb30 [ 223.903336][ T8407] ? __pfx_vfs_read+0x10/0x10 [ 223.903352][ T8407] ? __fget_files+0x215/0x3d0 [ 223.903374][ T8407] ? __fget_files+0x21f/0x3d0 [ 223.903396][ T8407] ksys_read+0x12a/0x250 [ 223.903412][ T8407] ? __pfx_ksys_read+0x10/0x10 [ 223.903430][ T8407] ? rcu_is_watching+0x12/0xc0 [ 223.903449][ T8407] do_syscall_64+0x115/0x840 [ 223.903469][ T8407] ? clear_bhb_loop+0x40/0x90 [ 223.903487][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.903502][ T8407] RIP: 0033:0x7f5b0e15d68e [ 223.903515][ T8407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.903529][ T8407] RSP: 002b:00007f5b0f046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.903543][ T8407] RAX: ffffffffffffffda RBX: 00007f5b0f0476c0 RCX: 00007f5b0e15d68e [ 223.903553][ T8407] RDX: 000000000000000f RSI: 00007f5b0f0470a0 RDI: 0000000000000005 [ 223.903564][ T8407] RBP: 00007f5b0f047090 R08: 0000000000000000 R09: 0000000000000000 [ 223.903577][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.903588][ T8407] R13: 00007f5b0e416038 R14: 00007f5b0e415fa0 R15: 00007fff5cc440e8 [ 223.903607][ T8407] [ 224.107521][ T7382] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.120100][ T7382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.127934][ T7382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.649678][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.699087][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.738541][ T8402] bridge_slave_0: entered allmulticast mode [ 225.796182][ T8402] bridge_slave_0: entered promiscuous mode [ 225.872987][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.907562][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.928911][ T8399] zram: Error allocating disk structure for device 1 [ 225.946170][ T8402] bridge_slave_1: entered allmulticast mode [ 225.980616][ T8402] bridge_slave_1: entered promiscuous mode [ 226.150955][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.163299][ T7382] Bluetooth: hci2: command tx timeout [ 226.204204][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.487661][ T8393] Process accounting resumed [ 226.515466][ T8402] team0: Port device team_slave_0 added [ 226.549913][ T8402] team0: Port device team_slave_1 added [ 226.791263][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.835948][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.962912][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.031264][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.088186][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.223343][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.612628][ T8402] hsr_slave_0: entered promiscuous mode [ 227.649883][ T8402] hsr_slave_1: entered promiscuous mode [ 227.691850][ T8402] debugfs: 'hsr0' already exists in 'hsr' [ 227.721913][ T8457] FAULT_INJECTION: forcing a failure. [ 227.721913][ T8457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.746283][ T8402] Cannot create hsr debugfs directory [ 227.834075][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: syz.2.485 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.834102][ T8457] Tainted: [L]=SOFTLOCKUP [ 227.834108][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.834117][ T8457] Call Trace: [ 227.834122][ T8457] [ 227.834128][ T8457] dump_stack_lvl+0x100/0x190 [ 227.834160][ T8457] should_fail_ex.cold+0x5/0xa [ 227.834180][ T8457] _copy_to_iter+0x1f3/0x1720 [ 227.834202][ T8457] ? do_raw_spin_lock+0x128/0x260 [ 227.834219][ T8457] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.834236][ T8457] ? __pfx__copy_to_iter+0x10/0x10 [ 227.834256][ T8457] ? _raw_spin_lock_irqsave+0x52/0x60 [ 227.834275][ T8457] ? find_held_lock+0x2b/0x80 [ 227.834294][ T8457] ? mark_held_locks+0x40/0x70 [ 227.834316][ T8457] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.834338][ T8457] simple_copy_to_iter+0x46/0x90 [ 227.834359][ T8457] __skb_datagram_iter+0x5c8/0x900 [ 227.834384][ T8457] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 227.834420][ T8457] skb_copy_datagram_iter+0xa5/0x270 [ 227.834444][ T8457] tcp_recvmsg_locked+0x1b74/0x2a20 [ 227.834470][ T8457] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 227.834489][ T8457] ? __local_bh_enable_ip+0x9e/0x120 [ 227.834509][ T8457] tcp_recvmsg+0x141/0x630 [ 227.834525][ T8457] ? __pfx_tcp_recvmsg+0x10/0x10 [ 227.834543][ T8457] ? __fget_files+0x215/0x3d0 [ 227.834559][ T8457] ? __fget_files+0x215/0x3d0 [ 227.834579][ T8457] ? __pfx_tcp_recvmsg+0x10/0x10 [ 227.834594][ T8457] inet_recvmsg+0xd5/0x4c0 [ 227.834615][ T8457] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 227.834637][ T8457] ? __pfx_inet_recvmsg+0x10/0x10 [ 227.834660][ T8457] sock_recvmsg+0x187/0x1f0 [ 227.834680][ T8457] __sys_recvfrom+0x200/0x300 [ 227.834694][ T8457] ? 0xffffffff81000000 [ 227.834706][ T8457] ? __pfx___sys_recvfrom+0x10/0x10 [ 227.834735][ T8457] ? xfd_validate_state+0x129/0x190 [ 227.834754][ T8457] __x64_sys_recvfrom+0xe0/0x1c0 [ 227.834768][ T8457] ? do_syscall_64+0x90/0x840 [ 227.834787][ T8457] ? lockdep_hardirqs_on+0x78/0x100 [ 227.834807][ T8457] do_syscall_64+0x115/0x840 [ 227.834826][ T8457] ? clear_bhb_loop+0x40/0x90 [ 227.834843][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.834877][ T8457] RIP: 0033:0x7fa2f619ce59 [ 227.834892][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.834907][ T8457] RSP: 002b:00007fa2f7110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 227.834922][ T8457] RAX: ffffffffffffffda RBX: 00007fa2f6415fa0 RCX: 00007fa2f619ce59 [ 227.834932][ T8457] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 227.834941][ T8457] RBP: 00007fa2f6232d6f R08: 0000000000000000 R09: ffffffff81000000 [ 227.834950][ T8457] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 227.834960][ T8457] R13: 00007fa2f6416038 R14: 00007fa2f6415fa0 R15: 00007ffcc6b593c8 [ 227.834973][ T8457] ? 0xffffffff81000000 [ 227.834990][ T8457] [ 228.529276][ T7382] Bluetooth: hci2: command tx timeout [ 228.752296][ T7382] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 229.114461][ T8402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.191829][ T8402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.233836][ T8402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.281690][ T8402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.382527][ T8402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.440160][ T8402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.466284][ T8402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.492204][ T8402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.301021][ T8512] usb usb15: usbfs: process 8512 (syz.2.496) did not claim interface 0 before use [ 230.565715][ T7382] Bluetooth: hci2: command tx timeout [ 230.704564][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.840451][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.130650][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.137854][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.589475][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.596675][ T7703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.643834][ T7382] Bluetooth: hci2: command tx timeout [ 233.746757][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.709068][ T8402] veth0_vlan: entered promiscuous mode [ 234.714780][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 234.770455][ T8402] veth1_vlan: entered promiscuous mode [ 235.016429][ T8402] veth0_macvtap: entered promiscuous mode [ 235.128828][ T8402] veth1_macvtap: entered promiscuous mode [ 235.886217][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.012692][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.087274][ T7707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.123321][ T7707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.169728][ T7707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.205784][ T7707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.732403][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.772064][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.949511][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.988702][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.951227][ T8655] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 240.207535][ T7382] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 240.381705][ T8706] binder: 8696:8706 ioctl c0046209 ffffffffffffffff returned -22 [ 241.381245][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 243.002514][ T8751] FAULT_INJECTION: forcing a failure. [ 243.002514][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 243.031440][ T8751] CPU: 0 UID: 0 PID: 8751 Comm: syz.5.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.031466][ T8751] Tainted: [L]=SOFTLOCKUP [ 243.031470][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.031480][ T8751] Call Trace: [ 243.031485][ T8751] [ 243.031491][ T8751] dump_stack_lvl+0x100/0x190 [ 243.031520][ T8751] should_fail_ex.cold+0x5/0xa [ 243.031540][ T8751] should_failslab+0xc2/0x120 [ 243.031559][ T8751] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 243.031582][ T8751] ? security_file_alloc+0x34/0x2c0 [ 243.031604][ T8751] ? trace_kmem_cache_alloc+0xd5/0x100 [ 243.031624][ T8751] security_file_alloc+0x34/0x2c0 [ 243.031644][ T8751] init_file+0x95/0x480 [ 243.031665][ T8751] alloc_empty_file+0x79/0x1c0 [ 243.031687][ T8751] alloc_file_pseudo+0x13a/0x230 [ 243.031709][ T8751] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 243.031732][ T8751] ? alloc_fd+0x476/0x790 [ 243.031753][ T8751] sock_alloc_file+0x50/0x210 [ 243.031770][ T8751] __sys_socket+0x1c0/0x260 [ 243.031791][ T8751] ? __pfx___sys_socket+0x10/0x10 [ 243.031816][ T8751] __x64_sys_socket+0x72/0xb0 [ 243.031835][ T8751] ? lockdep_hardirqs_on+0x78/0x100 [ 243.031856][ T8751] do_syscall_64+0x115/0x840 [ 243.031876][ T8751] ? clear_bhb_loop+0x40/0x90 [ 243.031894][ T8751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.031909][ T8751] RIP: 0033:0x7f412c99ce59 [ 243.031922][ T8751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.031935][ T8751] RSP: 002b:00007f412abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 243.031950][ T8751] RAX: ffffffffffffffda RBX: 00007f412cc15fa0 RCX: 00007f412c99ce59 [ 243.031959][ T8751] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 243.031967][ T8751] RBP: 00007f412ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 243.031976][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.031984][ T8751] R13: 00007f412cc16038 R14: 00007f412cc15fa0 R15: 00007ffed8bee278 [ 243.032002][ T8751] [ 246.216600][ T8822] futex_wake_op: syz.1.549 tries to shift op by -2048; fix this program [ 246.248234][ T8822] futex_wake_op: syz.1.549 tries to shift op by -2048; fix this program [ 246.431957][ T8820] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 246.580551][ T22] IRQ fixup: irq 34 move in progress, old vector 49 [ 246.590034][ T8823] smpboot: CPU 1 is now offline [ 246.832334][ T8828] blktrace: Concurrent blktraces are not allowed on loop2 [ 246.977316][ T8829] netlink: 330 bytes leftover after parsing attributes in process `syz.2.551'. [ 248.672759][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 248.994575][ T8874] Process accounting resumed [ 249.145515][ T8894] FAULT_INJECTION: forcing a failure. [ 249.145515][ T8894] name failslab, interval 1, probability 0, space 0, times 0 [ 249.201554][ T8894] CPU: 0 UID: 0 PID: 8894 Comm: syz.1.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.201579][ T8894] Tainted: [L]=SOFTLOCKUP [ 249.201585][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.201594][ T8894] Call Trace: [ 249.201599][ T8894] [ 249.201605][ T8894] dump_stack_lvl+0x100/0x190 [ 249.201635][ T8894] should_fail_ex.cold+0x5/0xa [ 249.201654][ T8894] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 249.201675][ T8894] should_failslab+0xc2/0x120 [ 249.201695][ T8894] __kmalloc_noprof+0xe0/0x850 [ 249.201712][ T8894] blk_rq_map_user_iov+0x2a5/0x14c0 [ 249.201739][ T8894] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 249.201764][ T8894] ? policy_nodemask+0xed/0x4f0 [ 249.201782][ T8894] ? find_held_lock+0x2b/0x80 [ 249.201799][ T8894] ? sg_common_write.isra.0+0xe26/0x1b90 [ 249.201821][ T8894] ? sg_common_write.isra.0+0xe26/0x1b90 [ 249.201841][ T8894] ? import_ubuf+0x1b6/0x220 [ 249.201861][ T8894] blk_rq_map_user_io+0x1ff/0x230 [ 249.201883][ T8894] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 249.201905][ T8894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.201935][ T8894] sg_common_write.isra.0+0xf74/0x1b90 [ 249.201963][ T8894] ? __might_fault+0xc5/0x140 [ 249.201985][ T8894] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 249.202014][ T8894] sg_write+0x7eb/0xdb0 [ 249.202037][ T8894] ? __pfx_sg_write+0x10/0x10 [ 249.202073][ T8894] ? apparmor_file_permission+0x13f/0x1c0 [ 249.202092][ T8894] ? bpf_lsm_file_permission+0x9/0x10 [ 249.202106][ T8894] ? security_file_permission+0x76/0x210 [ 249.202126][ T8894] ? rw_verify_area+0xce/0x6d0 [ 249.202142][ T8894] vfs_write+0x2aa/0x1070 [ 249.202159][ T8894] ? __pfx_sg_write+0x10/0x10 [ 249.202181][ T8894] ? __pfx_vfs_write+0x10/0x10 [ 249.202196][ T8894] ? find_held_lock+0x2b/0x80 [ 249.202222][ T8894] ? __fget_files+0x215/0x3d0 [ 249.202239][ T8894] ? __fget_files+0x215/0x3d0 [ 249.202259][ T8894] ? __fget_files+0x21f/0x3d0 [ 249.202282][ T8894] ksys_write+0x12a/0x250 [ 249.202299][ T8894] ? __pfx_ksys_write+0x10/0x10 [ 249.202318][ T8894] ? rcu_is_watching+0x12/0xc0 [ 249.202338][ T8894] do_syscall_64+0x115/0x840 [ 249.202358][ T8894] ? clear_bhb_loop+0x40/0x90 [ 249.202376][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.202391][ T8894] RIP: 0033:0x7f2ee8b9ce59 [ 249.202405][ T8894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.202418][ T8894] RSP: 002b:00007f2ee9ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.202433][ T8894] RAX: ffffffffffffffda RBX: 00007f2ee8e15fa0 RCX: 00007f2ee8b9ce59 [ 249.202443][ T8894] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 249.202451][ T8894] RBP: 00007f2ee8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 249.202460][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.202468][ T8894] R13: 00007f2ee8e16038 R14: 00007f2ee8e15fa0 R15: 00007ffe7646f828 [ 249.202488][ T8894] [ 251.332314][ T8932] nbd: couldn't find device at index 33904 [ 251.405376][ T8933] nbd: couldn't find device at index 33904 [ 251.420913][ T8939] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* »' [ 251.480785][ T8939] netlink: Conntrack attr has 4 unknown bytes [ 251.960208][ T8930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.998721][ T8930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.026232][ T8930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.032445][ T8930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.051921][ T8930] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.124069][ T8930] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.138646][ T8930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.153067][ T8930] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 252.180370][ T8930] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 253.038299][ T8980] FAULT_INJECTION: forcing a failure. [ 253.038299][ T8980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.070990][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.5.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.071016][ T8980] Tainted: [L]=SOFTLOCKUP [ 253.071021][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.071029][ T8980] Call Trace: [ 253.071034][ T8980] [ 253.071040][ T8980] dump_stack_lvl+0x100/0x190 [ 253.071071][ T8980] should_fail_ex.cold+0x5/0xa [ 253.071090][ T8980] _copy_from_user+0x2e/0xd0 [ 253.071112][ T8980] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 253.071144][ T8980] snd_rawmidi_write+0x2dc/0xc60 [ 253.071170][ T8980] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 253.071193][ T8980] ? __pfx_default_wake_function+0x10/0x10 [ 253.071214][ T8980] ? bpf_lsm_file_permission+0x9/0x10 [ 253.071228][ T8980] ? security_file_permission+0x76/0x210 [ 253.071248][ T8980] ? rw_verify_area+0xce/0x6d0 [ 253.071264][ T8980] vfs_write+0x2aa/0x1070 [ 253.071281][ T8980] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 253.071305][ T8980] ? __pfx_vfs_write+0x10/0x10 [ 253.071320][ T8980] ? find_held_lock+0x2b/0x80 [ 253.071341][ T8980] ? __fget_files+0x215/0x3d0 [ 253.071358][ T8980] ? __fget_files+0x215/0x3d0 [ 253.071377][ T8980] ? __fget_files+0x21f/0x3d0 [ 253.071407][ T8980] ksys_write+0x1f8/0x250 [ 253.071423][ T8980] ? __pfx_ksys_write+0x10/0x10 [ 253.071442][ T8980] ? rcu_is_watching+0x12/0xc0 [ 253.071461][ T8980] do_syscall_64+0x115/0x840 [ 253.071481][ T8980] ? clear_bhb_loop+0x40/0x90 [ 253.071499][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.071514][ T8980] RIP: 0033:0x7f412c99ce59 [ 253.071527][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.071540][ T8980] RSP: 002b:00007f412abd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.071554][ T8980] RAX: ffffffffffffffda RBX: 00007f412cc16090 RCX: 00007f412c99ce59 [ 253.071564][ T8980] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 253.071572][ T8980] RBP: 00007f412ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 253.071581][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.071589][ T8980] R13: 00007f412cc16128 R14: 00007f412cc16090 R15: 00007ffed8bee278 [ 253.071607][ T8980] [ 253.360715][ T8983] ubi: mtd0 is already attached to ubi6 [ 253.366597][ T8980] ubi: mtd0 is already attached to ubi6 [ 253.441595][ T7382] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.510577][ T7368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.588071][ T7368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.613545][ T7368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.648605][ T7368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.662594][ T7368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.003848][ T7368] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.088605][ T7368] Bluetooth: hci4: command 0x0c1a tx timeout [ 254.094912][ T7382] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.163555][ T7382] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.763316][ T7382] Bluetooth: hci5: command tx timeout [ 255.847674][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.858827][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.014828][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 256.165649][ T7382] Bluetooth: hci4: command 0x0c1a tx timeout [ 256.243357][ T7382] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.597503][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.641393][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.687515][ T8985] bridge_slave_0: entered allmulticast mode [ 256.714153][ T8985] bridge_slave_0: entered promiscuous mode [ 256.756995][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.802300][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.833095][ T8985] bridge_slave_1: entered allmulticast mode [ 256.868197][ T8985] bridge_slave_1: entered promiscuous mode [ 256.954211][ T9057] netlink: 146 bytes leftover after parsing attributes in process `syz.5.595'. [ 257.060019][ T9062] nbd: must specify an index to disconnect [ 257.080594][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.183151][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.561549][ T8985] team0: Port device team_slave_0 added [ 257.622508][ T8985] team0: Port device team_slave_1 added [ 257.837291][ T9087] zram: Removed device: zram0 [ 257.846602][ T7382] Bluetooth: hci5: command tx timeout [ 258.019531][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.019546][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.019564][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.069242][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.069257][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.069276][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.207614][ T8985] hsr_slave_0: entered promiscuous mode [ 258.208238][ T8985] hsr_slave_1: entered promiscuous mode [ 258.208673][ T8985] debugfs: 'hsr0' already exists in 'hsr' [ 258.208688][ T8985] Cannot create hsr debugfs directory [ 258.244000][ T7382] Bluetooth: hci4: command 0x0c1a tx timeout [ 258.326307][ T7382] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.087231][ T8985] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.135700][ T8985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.163679][ T8985] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.200895][ T8985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.216488][ T8985] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.243609][ T8985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.256766][ T8985] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.267383][ T8985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.424808][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.504053][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.562159][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.569359][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.633115][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.640310][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.924031][ T7382] Bluetooth: hci5: command tx timeout [ 260.101901][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.609'. [ 260.259326][ T9140] ubi: mtd0 is already attached to ubi6 [ 260.286667][ T9131] veth1_macvtap: left promiscuous mode [ 260.315332][ T9131] macsec0: entered promiscuous mode [ 260.343810][ T9131] macsec0: entered allmulticast mode [ 260.798577][ T9153] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ›11!phy1!netdev:wlan1!rc_rateid [ 261.833349][ T9172] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 261.844328][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.006226][ T7382] Bluetooth: hci5: command tx timeout syzkaller syzkaller login: [ 262.829293][ T9174] FAULT_INJECTION: forcing a failure. [ 262.829293][ T9174] name failslab, interval 1, probability 0, space 0, times 0 [ 262.850921][ T8985] veth0_vlan: entered promiscuous mode [ 262.958100][ T8985] veth1_vlan: entered promiscuous mode [ 262.999614][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.2.614 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.999639][ T9174] Tainted: [L]=SOFTLOCKUP [ 262.999644][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.999653][ T9174] Call Trace: [ 262.999658][ T9174] [ 262.999665][ T9174] dump_stack_lvl+0x100/0x190 [ 262.999693][ T9174] should_fail_ex.cold+0x5/0xa [ 262.999712][ T9174] should_failslab+0xc2/0x120 [ 262.999731][ T9174] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 262.999747][ T9174] ? __devinet_sysctl_register+0xbc/0x360 [ 262.999773][ T9174] kmemdup_noprof+0x29/0x60 [ 262.999789][ T9174] __devinet_sysctl_register+0xbc/0x360 [ 262.999810][ T9174] ? trace_kmalloc+0xe3/0x110 [ 262.999828][ T9174] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 262.999853][ T9174] ? __asan_memcpy+0x3c/0x60 [ 262.999877][ T9174] devinet_init_net+0x334/0x8d0 [ 262.999899][ T9174] ? __pfx_devinet_init_net+0x10/0x10 [ 262.999919][ T9174] ops_init+0x1e2/0x5f0 [ 262.999941][ T9174] setup_net+0x118/0x3a0 [ 262.999957][ T9174] ? __pfx_setup_net+0x10/0x10 [ 262.999973][ T9174] ? mutex_init_lockdep+0xf1/0x120 [ 262.999992][ T9174] copy_net_ns+0x46f/0x7c0 [ 263.000011][ T9174] create_new_namespaces+0x3ea/0xac0 [ 263.000034][ T9174] unshare_nsproxy_namespaces+0xf2/0x220 [ 263.000054][ T9174] ksys_unshare+0x438/0xab0 [ 263.000077][ T9174] ? __pfx_ksys_unshare+0x10/0x10 [ 263.000097][ T9174] ? xfd_validate_state+0x129/0x190 [ 263.000112][ T9174] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 263.000135][ T9174] ? syscall_user_dispatch+0x76/0x130 [ 263.000152][ T9174] __x64_sys_unshare+0x31/0x40 [ 263.000173][ T9174] do_syscall_64+0x115/0x840 [ 263.000193][ T9174] ? clear_bhb_loop+0x40/0x90 [ 263.000212][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.000227][ T9174] RIP: 0033:0x7fa2f619ce59 [ 263.000239][ T9174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.000253][ T9174] RSP: 002b:00007fa2f70ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.000267][ T9174] RAX: ffffffffffffffda RBX: 00007fa2f6416180 RCX: 00007fa2f619ce59 [ 263.000277][ T9174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 263.000285][ T9174] RBP: 00007fa2f6232d6f R08: 0000000000000000 R09: 0000000000000000 [ 263.000293][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.000302][ T9174] R13: 00007fa2f6416218 R14: 00007fa2f6416180 R15: 00007ffcc6b593c8 [ 263.000320][ T9174] [ 264.256410][ T8985] veth0_macvtap: entered promiscuous mode [ 264.297079][ T8985] veth1_macvtap: entered promiscuous mode [ 264.360736][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.413114][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.459014][ T7707] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.501771][ T7707] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.555546][ T7707] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.616632][ T7707] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.866511][ T7367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.906848][ T7382] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 264.924170][ T7367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.066846][ T7367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.105005][ T7367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.630964][ T9201] Process accounting resumed [ 266.964915][ T7382] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.043985][ T7368] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.747117][ T9286] netlink: 'syz.5.633': attribute type 11 has an invalid length. [ 269.867377][ T9286] netlink: 'syz.5.633': attribute type 11 has an invalid length. [ 269.921294][ T9292] FAULT_INJECTION: forcing a failure. [ 269.921294][ T9292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.982183][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.6.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.982214][ T9292] Tainted: [L]=SOFTLOCKUP [ 269.982219][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.982229][ T9292] Call Trace: [ 269.982234][ T9292] [ 269.982241][ T9292] dump_stack_lvl+0x100/0x190 [ 269.982271][ T9292] should_fail_ex.cold+0x5/0xa [ 269.982288][ T9292] ? prepare_alloc_pages+0x16d/0x5f0 [ 269.982312][ T9292] should_fail_alloc_page+0xeb/0x140 [ 269.982333][ T9292] prepare_alloc_pages+0x1f0/0x5f0 [ 269.982355][ T9292] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 269.982387][ T9292] ? __lock_acquire+0x4a5/0x2630 [ 269.982412][ T9292] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.982435][ T9292] ? __lock_acquire+0x4a5/0x2630 [ 269.982466][ T9292] ? find_held_lock+0x2b/0x80 [ 269.982483][ T9292] ? is_bpf_text_address+0x8a/0x1a0 [ 269.982502][ T9292] ? is_bpf_text_address+0x8a/0x1a0 [ 269.982521][ T9292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.982542][ T9292] ? policy_nodemask+0xed/0x4f0 [ 269.982561][ T9292] alloc_pages_mpol+0x1fb/0x540 [ 269.982579][ T9292] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 269.982595][ T9292] ? arch_stack_walk+0xa6/0xf0 [ 269.982620][ T9292] folio_alloc_mpol_noprof+0x36/0x260 [ 269.982640][ T9292] shmem_alloc_folio+0x135/0x160 [ 269.982699][ T9292] shmem_alloc_and_add_folio+0x371/0xd40 [ 269.982728][ T9292] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 269.982754][ T9292] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 269.982774][ T9292] shmem_get_folio_gfp+0x6ab/0x1900 [ 269.982794][ T9292] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 269.982809][ T9292] ? filemap_map_pages+0x9c1/0x2140 [ 269.982836][ T9292] shmem_fault+0x1f9/0xa20 [ 269.982852][ T9292] ? __pfx_shmem_fault+0x10/0x10 [ 269.982866][ T9292] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 269.982891][ T9292] ? __pfx_filemap_map_pages+0x10/0x10 [ 269.982916][ T9292] ? find_held_lock+0x2b/0x80 [ 269.982936][ T9292] __do_fault+0x10b/0x440 [ 269.982953][ T9292] do_fault+0xa99/0x1750 [ 269.982971][ T9292] ? __pmd_alloc+0x3fb/0x950 [ 269.982991][ T9292] __handle_mm_fault+0x187d/0x2a00 [ 269.983015][ T9292] ? mt_find+0x45e/0x8e0 [ 269.983038][ T9292] ? __pfx___handle_mm_fault+0x10/0x10 [ 269.983058][ T9292] ? __pfx_mt_find+0x10/0x10 [ 269.983089][ T9292] ? find_vma+0xbf/0x140 [ 269.983104][ T9292] ? __pfx_find_vma+0x10/0x10 [ 269.983122][ T9292] handle_mm_fault+0x37b/0xa30 [ 269.983147][ T9292] do_user_addr_fault+0x74c/0x12f0 [ 269.983167][ T9292] ? trace_page_fault_kernel+0x7a/0x200 [ 269.983185][ T9292] exc_page_fault+0x6f/0xd0 [ 269.983210][ T9292] asm_exc_page_fault+0x26/0x30 [ 269.983226][ T9292] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 269.983243][ T9292] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 269.983257][ T9292] RSP: 0018:ffffc900038a7a98 EFLAGS: 00050212 [ 269.983270][ T9292] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024 [ 269.983279][ T9292] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900038a7b28 [ 269.983288][ T9292] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff52000714f69 [ 269.983297][ T9292] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 269.983305][ T9292] R13: ffffc900038a7b28 R14: 0000000000000000 R15: 000000000000b6bd [ 269.983324][ T9292] _copy_from_user+0x98/0xd0 [ 269.983346][ T9292] sg_write+0x2af/0xdb0 [ 269.983370][ T9292] ? __pfx_sg_write+0x10/0x10 [ 269.983409][ T9292] ? apparmor_file_permission+0x13f/0x1c0 [ 269.983430][ T9292] ? bpf_lsm_file_permission+0x9/0x10 [ 269.983445][ T9292] ? security_file_permission+0x76/0x210 [ 269.983465][ T9292] ? rw_verify_area+0xce/0x6d0 [ 269.983481][ T9292] vfs_write+0x2aa/0x1070 [ 269.983499][ T9292] ? __pfx_sg_write+0x10/0x10 [ 269.983520][ T9292] ? __pfx_vfs_write+0x10/0x10 [ 269.983535][ T9292] ? find_held_lock+0x2b/0x80 [ 269.983552][ T9292] ? __fget_files+0x215/0x3d0 [ 269.983569][ T9292] ? __fget_files+0x215/0x3d0 [ 269.983589][ T9292] ? __fget_files+0x21f/0x3d0 [ 269.983610][ T9292] ksys_write+0x12a/0x250 [ 269.983627][ T9292] ? __pfx_ksys_write+0x10/0x10 [ 269.983645][ T9292] ? rcu_is_watching+0x12/0xc0 [ 269.983672][ T9292] do_syscall_64+0x115/0x840 [ 269.983692][ T9292] ? clear_bhb_loop+0x40/0x90 [ 269.983711][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.983726][ T9292] RIP: 0033:0x7faceb99ce59 [ 269.983739][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.983752][ T9292] RSP: 002b:00007facec79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.983765][ T9292] RAX: ffffffffffffffda RBX: 00007facebc15fa0 RCX: 00007faceb99ce59 [ 269.983775][ T9292] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 269.983783][ T9292] RBP: 00007faceba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.983792][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.983800][ T9292] R13: 00007facebc16038 R14: 00007facebc15fa0 R15: 00007fffe4337128 [ 269.983822][ T9292] [ 271.003247][ T9286] netlink: 'syz.5.633': attribute type 11 has an invalid length. [ 271.056468][ T9286] netlink: 'syz.5.633': attribute type 11 has an invalid length. [ 272.330321][ T9311] FAULT_INJECTION: forcing a failure. [ 272.330321][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 272.402658][ T9311] CPU: 0 UID: 0 PID: 9311 Comm: syz.1.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.402683][ T9311] Tainted: [L]=SOFTLOCKUP [ 272.402689][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.402698][ T9311] Call Trace: [ 272.402703][ T9311] [ 272.402709][ T9311] dump_stack_lvl+0x100/0x190 [ 272.402739][ T9311] should_fail_ex.cold+0x5/0xa [ 272.402759][ T9311] should_failslab+0xc2/0x120 [ 272.402777][ T9311] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 272.402800][ T9311] ? __kernfs_new_node+0xd2/0x9f0 [ 272.402820][ T9311] __kernfs_new_node+0xd2/0x9f0 [ 272.402839][ T9311] ? __pfx___kernfs_new_node+0x10/0x10 [ 272.402860][ T9311] ? find_held_lock+0x2b/0x80 [ 272.402878][ T9311] ? kernfs_root+0xee/0x2a0 [ 272.402893][ T9311] ? kernfs_root+0xee/0x2a0 [ 272.402915][ T9311] kernfs_new_node+0x11b/0x1a0 [ 272.402936][ T9311] __kernfs_create_file+0x53/0x350 [ 272.402960][ T9311] sysfs_add_file_mode_ns+0x207/0x3c0 [ 272.402980][ T9311] sysfs_create_file_ns+0x145/0x1e0 [ 272.402996][ T9311] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 272.403011][ T9311] ? class_to_subsys+0x10f/0x150 [ 272.403029][ T9311] ? do_raw_spin_unlock+0x145/0x1e0 [ 272.403049][ T9311] class_create_file_ns+0x3d/0x60 [ 272.403067][ T9311] bond_create_sysfs+0x142/0x200 [ 272.403083][ T9311] bond_net_init+0x178/0x360 [ 272.403105][ T9311] ? __pfx_bond_net_init+0x10/0x10 [ 272.403126][ T9311] ops_init+0x1e2/0x5f0 [ 272.403145][ T9311] setup_net+0x118/0x3a0 [ 272.403161][ T9311] ? __pfx_setup_net+0x10/0x10 [ 272.403180][ T9311] ? mutex_init_lockdep+0xf1/0x120 [ 272.403198][ T9311] copy_net_ns+0x46f/0x7c0 [ 272.403218][ T9311] create_new_namespaces+0x3ea/0xac0 [ 272.403242][ T9311] unshare_nsproxy_namespaces+0xf2/0x220 [ 272.403262][ T9311] ksys_unshare+0x438/0xab0 [ 272.403285][ T9311] ? __pfx_ksys_unshare+0x10/0x10 [ 272.403304][ T9311] ? xfd_validate_state+0x129/0x190 [ 272.403318][ T9311] ? exit_to_user_mode_loop+0xf3/0x670 [ 272.403346][ T9311] __x64_sys_unshare+0x31/0x40 [ 272.403366][ T9311] do_syscall_64+0x115/0x840 [ 272.403386][ T9311] ? clear_bhb_loop+0x40/0x90 [ 272.403404][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.403419][ T9311] RIP: 0033:0x7f2ee8b9ce59 [ 272.403432][ T9311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.403452][ T9311] RSP: 002b:00007f2ee9ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 272.403468][ T9311] RAX: ffffffffffffffda RBX: 00007f2ee8e15fa0 RCX: 00007f2ee8b9ce59 [ 272.403478][ T9311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 272.403487][ T9311] RBP: 00007f2ee8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 272.403496][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.403504][ T9311] R13: 00007f2ee8e16038 R14: 00007f2ee8e15fa0 R15: 00007ffe7646f828 [ 272.403524][ T9311] [ 273.264850][ T9323] FAULT_INJECTION: forcing a failure. [ 273.264850][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 273.314948][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.6.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.314973][ T9323] Tainted: [L]=SOFTLOCKUP [ 273.314979][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.314987][ T9323] Call Trace: [ 273.314993][ T9323] [ 273.314999][ T9323] dump_stack_lvl+0x100/0x190 [ 273.315030][ T9323] should_fail_ex.cold+0x5/0xa [ 273.315049][ T9323] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 273.315070][ T9323] should_failslab+0xc2/0x120 [ 273.315089][ T9323] __kmalloc_noprof+0xe0/0x850 [ 273.315107][ T9323] blk_rq_map_user_iov+0x2a5/0x14c0 [ 273.315134][ T9323] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 273.315159][ T9323] ? policy_nodemask+0xed/0x4f0 [ 273.315177][ T9323] ? find_held_lock+0x2b/0x80 [ 273.315195][ T9323] ? sg_common_write.isra.0+0xe26/0x1b90 [ 273.315216][ T9323] ? sg_common_write.isra.0+0xe26/0x1b90 [ 273.315237][ T9323] ? import_ubuf+0x1b6/0x220 [ 273.315263][ T9323] blk_rq_map_user_io+0x1ff/0x230 [ 273.315287][ T9323] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 273.315308][ T9323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.315339][ T9323] sg_common_write.isra.0+0xf74/0x1b90 [ 273.315368][ T9323] ? __might_fault+0xc5/0x140 [ 273.315390][ T9323] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 273.315419][ T9323] sg_write+0x7eb/0xdb0 [ 273.315441][ T9323] ? __pfx_sg_write+0x10/0x10 [ 273.315478][ T9323] ? apparmor_file_permission+0x13f/0x1c0 [ 273.315496][ T9323] ? bpf_lsm_file_permission+0x9/0x10 [ 273.315510][ T9323] ? security_file_permission+0x76/0x210 [ 273.315530][ T9323] ? rw_verify_area+0xce/0x6d0 [ 273.315547][ T9323] vfs_write+0x2aa/0x1070 [ 273.315564][ T9323] ? __pfx_sg_write+0x10/0x10 [ 273.315586][ T9323] ? __pfx_vfs_write+0x10/0x10 [ 273.315601][ T9323] ? find_held_lock+0x2b/0x80 [ 273.315618][ T9323] ? __fget_files+0x215/0x3d0 [ 273.315634][ T9323] ? __fget_files+0x215/0x3d0 [ 273.315654][ T9323] ? __fget_files+0x21f/0x3d0 [ 273.315676][ T9323] ksys_write+0x12a/0x250 [ 273.315692][ T9323] ? __pfx_ksys_write+0x10/0x10 [ 273.315710][ T9323] ? rcu_is_watching+0x12/0xc0 [ 273.315729][ T9323] do_syscall_64+0x115/0x840 [ 273.315749][ T9323] ? clear_bhb_loop+0x40/0x90 [ 273.315767][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.315783][ T9323] RIP: 0033:0x7faceb99ce59 [ 273.315796][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.315810][ T9323] RSP: 002b:00007facec79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.315824][ T9323] RAX: ffffffffffffffda RBX: 00007facebc15fa0 RCX: 00007faceb99ce59 [ 273.315835][ T9323] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 273.315849][ T9323] RBP: 00007faceba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 273.315858][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.315866][ T9323] R13: 00007facebc16038 R14: 00007facebc15fa0 R15: 00007fffe4337128 [ 273.315886][ T9323] [ 274.847789][ T9336] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 274.873055][ T9336] ima: policy update failed [ 274.912174][ T30] audit: type=1802 audit(8277292195.100:9): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.646" res=0 errno=0 [ 274.944164][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 275.712945][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.714763][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.722161][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.730950][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.738277][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.757237][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.764820][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.774859][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.782235][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 275.791403][ T7382] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 276.436676][ T9377] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 281.425774][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.679'. [ 284.387047][ T9532] netlink: 342 bytes leftover after parsing attributes in process `syz.1.687'. [ 284.677098][ T9542] vivid-007: ================= START STATUS ================= [ 284.789677][ T9542] vivid-007: Enable Output Cropping: true grabbed [ 284.915083][ T9542] vivid-007: Enable Output Composing: true grabbed [ 285.030682][ T9542] vivid-007: Enable Output Scaler: true grabbed [ 285.135592][ T9542] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 285.221847][ T9542] vivid-007: Transmit Mode: HDMI grabbed [ 285.327044][ T9542] vivid-007: Hotplug Present: 0x00000000 [ 285.388761][ T9542] vivid-007: RxSense Present: 0x00000000 [ 285.420543][ T9542] vivid-007: EDID Present: 0x00000000 [ 285.456222][ T9542] vivid-007: ================== END STATUS ================== [ 285.806461][ T9557] &#$@\]\-: entered promiscuous mode [ 285.822129][ T9557] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 285.891498][ T9558] ima: policy update failed [ 285.929605][ T30] audit: type=1802 audit(8277292206.120:10): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.692" res=0 errno=0 [ 286.478846][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 287.406725][ T9584] nbd: must specify at least one socket [ 288.139343][ T9582] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.146936][ T9582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.153161][ T9582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.160040][ T9582] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.166396][ T9582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.172567][ T9582] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.178906][ T9582] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 288.186997][ T9582] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 289.443465][ T7382] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.849979][ T9623] nbd: must specify at least one socket [ 290.142490][ T9625] FAULT_INJECTION: forcing a failure. [ 290.142490][ T9625] name failslab, interval 1, probability 0, space 0, times 0 [ 290.155547][ T9625] CPU: 0 UID: 0 PID: 9625 Comm: syz.1.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.155571][ T9625] Tainted: [L]=SOFTLOCKUP [ 290.155576][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.155616][ T9625] Call Trace: [ 290.155622][ T9625] [ 290.155627][ T9625] dump_stack_lvl+0x100/0x190 [ 290.155657][ T9625] should_fail_ex.cold+0x5/0xa [ 290.155677][ T9625] should_failslab+0xc2/0x120 [ 290.155695][ T9625] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 290.155720][ T9625] ? zswap_store+0xc6d/0x2e70 [ 290.155744][ T9625] zswap_store+0xc6d/0x2e70 [ 290.155767][ T9625] ? rmap_walk_anon+0x561/0x870 [ 290.155790][ T9625] ? __pfx_zswap_store+0x10/0x10 [ 290.155810][ T9625] ? find_held_lock+0x2b/0x80 [ 290.155828][ T9625] ? folio_free_swap+0x60a/0x9f0 [ 290.155844][ T9625] ? folio_free_swap+0x60a/0x9f0 [ 290.155864][ T9625] ? folio_free_swap+0x3f/0x9f0 [ 290.155885][ T9625] swap_writeout+0x47e/0x14f0 [ 290.155911][ T9625] shrink_folio_list+0x51c5/0x60c0 [ 290.155941][ T9625] ? __pfx_shrink_folio_list+0x10/0x10 [ 290.155961][ T9625] ? rcu_is_watching+0x12/0xc0 [ 290.155978][ T9625] ? trace_pelt_se_tp+0xb0/0x190 [ 290.156004][ T9625] ? __lock_acquire+0x4a5/0x2630 [ 290.156034][ T9625] ? lock_acquire+0x1b1/0x370 [ 290.156070][ T9625] ? __lock_acquire+0x4a5/0x2630 [ 290.156092][ T9625] ? __css_rstat_updated+0x1ce/0x5a0 [ 290.156115][ T9625] ? __pfx___css_rstat_updated+0x10/0x10 [ 290.156140][ T9625] reclaim_folio_list+0xdc/0x5e0 [ 290.156164][ T9625] ? __pfx_reclaim_folio_list+0x10/0x10 [ 290.156185][ T9625] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 290.156216][ T9625] ? lru_gen_update_size+0x431/0xe20 [ 290.156241][ T9625] ? lru_gen_del_folio+0x382/0x5f0 [ 290.156263][ T9625] reclaim_pages+0x428/0x5e0 [ 290.156286][ T9625] ? __pfx_reclaim_pages+0x10/0x10 [ 290.156308][ T9625] ? find_held_lock+0x2b/0x80 [ 290.156326][ T9625] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 290.156350][ T9625] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 290.156378][ T9625] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 290.156403][ T9625] ? __lock_acquire+0x4a5/0x2630 [ 290.156425][ T9625] ? __css_rstat_updated+0x1ce/0x5a0 [ 290.156446][ T9625] ? arch_stack_walk+0xa6/0xf0 [ 290.156464][ T9625] ? __pfx___css_rstat_updated+0x10/0x10 [ 290.156488][ T9625] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 290.156509][ T9625] walk_pgd_range+0xc1a/0x1dd0 [ 290.156528][ T9625] ? rcu_read_unlock+0x17/0x60 [ 290.156554][ T9625] ? __pfx_walk_pgd_range+0x10/0x10 [ 290.156570][ T9625] ? folios_put_refs+0x716/0xa90 [ 290.156591][ T9625] __walk_page_range+0x171/0x850 [ 290.156607][ T9625] ? find_held_lock+0x2b/0x80 [ 290.156631][ T9625] walk_page_range_vma_unsafe+0x209/0x8f0 [ 290.156650][ T9625] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 290.156670][ T9625] ? find_held_lock+0x2b/0x80 [ 290.156687][ T9625] ? mlock_drain_local+0x254/0x4e0 [ 290.156701][ T9625] ? mlock_drain_local+0x254/0x4e0 [ 290.156718][ T9625] walk_page_range_vma+0x63/0x90 [ 290.156735][ T9625] madvise_pageout+0x259/0x540 [ 290.156754][ T9625] ? __pfx_madvise_pageout+0x10/0x10 [ 290.156782][ T9625] ? find_held_lock+0x2b/0x80 [ 290.156800][ T9625] ? mt_find+0x687/0x8e0 [ 290.156823][ T9625] madvise_vma_behavior+0x452/0x2240 [ 290.156843][ T9625] ? mt_find+0x45e/0x8e0 [ 290.156865][ T9625] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 290.156885][ T9625] ? __pfx_mt_find+0x10/0x10 [ 290.156910][ T9625] ? find_vma_prev+0xd8/0x150 [ 290.156933][ T9625] ? find_vma+0xbf/0x140 [ 290.156948][ T9625] ? __pfx_find_vma+0x10/0x10 [ 290.156965][ T9625] ? preempt_schedule_common+0x42/0xc0 [ 290.156988][ T9625] madvise_walk_vmas+0x2fe/0xa90 [ 290.157011][ T9625] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 290.157036][ T9625] madvise_do_behavior+0x1ea/0x510 [ 290.157055][ T9625] ? futex_private_hash_put+0x107/0x1c0 [ 290.157080][ T9625] ? __pfx_madvise_do_behavior+0x10/0x10 [ 290.157100][ T9625] ? down_read+0x13b/0x450 [ 290.157121][ T9625] do_madvise+0x195/0x240 [ 290.157140][ T9625] ? __pfx_do_madvise+0x10/0x10 [ 290.157159][ T9625] ? do_futex+0x192/0x350 [ 290.157185][ T9625] ? ksys_write+0x1ac/0x250 [ 290.157206][ T9625] __x64_sys_madvise+0xa9/0x110 [ 290.157226][ T9625] ? lockdep_hardirqs_on+0x78/0x100 [ 290.157246][ T9625] do_syscall_64+0x115/0x840 [ 290.157267][ T9625] ? clear_bhb_loop+0x40/0x90 [ 290.157285][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.157300][ T9625] RIP: 0033:0x7f2ee8b9ce59 [ 290.157313][ T9625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.157327][ T9625] RSP: 002b:00007f2ee9ad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 290.157343][ T9625] RAX: ffffffffffffffda RBX: 00007f2ee8e15fa0 RCX: 00007f2ee8b9ce59 [ 290.157353][ T9625] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 290.157362][ T9625] RBP: 00007f2ee8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 290.157371][ T9625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.157379][ T9625] R13: 00007f2ee8e16038 R14: 00007f2ee8e15fa0 R15: 00007ffe7646f828 [ 290.157398][ T9625] [ 290.663698][ T7368] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.669741][ T7368] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.677123][ T7368] Bluetooth: hci5: command 0x0c1a tx timeout [ 290.683155][ T7368] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.689286][ T7382] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.209812][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 292.723270][ T7382] Bluetooth: hci5: command 0x0c1a tx timeout [ 293.118751][ T7498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.131408][ T7498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.142209][ T7498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.156193][ T7498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.168447][ T7498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.960030][ T9671] FAULT_INJECTION: forcing a failure. [ 293.960030][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 294.007630][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.1.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.007657][ T9671] Tainted: [L]=SOFTLOCKUP [ 294.007662][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.007672][ T9671] Call Trace: [ 294.007678][ T9671] [ 294.007684][ T9671] dump_stack_lvl+0x100/0x190 [ 294.007716][ T9671] should_fail_ex.cold+0x5/0xa [ 294.007736][ T9671] should_failslab+0xc2/0x120 [ 294.007754][ T9671] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 294.007777][ T9671] ? alloc_empty_file+0x5b/0x1c0 [ 294.007803][ T9671] alloc_empty_file+0x5b/0x1c0 [ 294.007825][ T9671] alloc_file_pseudo+0x13a/0x230 [ 294.007850][ T9671] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 294.007871][ T9671] ? security_inode_init_security_anon+0x7b/0x230 [ 294.007894][ T9671] __anon_inode_getfile+0xe8/0x280 [ 294.007917][ T9671] new_userfaultfd+0x255/0x400 [ 294.007935][ T9671] __x64_sys_userfaultfd+0x4b/0xb0 [ 294.007954][ T9671] do_syscall_64+0x115/0x840 [ 294.007974][ T9671] ? clear_bhb_loop+0x40/0x90 [ 294.007992][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.008008][ T9671] RIP: 0033:0x7f2ee8b9ce59 [ 294.008021][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.008036][ T9671] RSP: 002b:00007f2ee9ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 294.008052][ T9671] RAX: ffffffffffffffda RBX: 00007f2ee8e15fa0 RCX: 00007f2ee8b9ce59 [ 294.008062][ T9671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 294.008071][ T9671] RBP: 00007f2ee8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 294.008079][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.008088][ T9671] R13: 00007f2ee8e16038 R14: 00007f2ee8e15fa0 R15: 00007ffe7646f828 [ 294.008107][ T9671] [ 294.603864][ T7382] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 294.611391][ T7382] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 294.804870][ T7498] Bluetooth: hci5: command 0x0c1a tx timeout [ 294.881015][ T9681] ksmbd: Unknown IPC event: 14, ignore. [ 294.895181][ T9668] Process accounting resumed [ 294.912800][ T9681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.203966][ T7498] Bluetooth: hci6: command tx timeout [ 295.350237][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.373731][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.384672][ T9656] bridge_slave_0: entered allmulticast mode [ 295.403150][ T9656] bridge_slave_0: entered promiscuous mode [ 295.417504][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.433536][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.450935][ T9656] bridge_slave_1: entered allmulticast mode [ 295.462090][ T9656] bridge_slave_1: entered promiscuous mode [ 295.541142][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.565085][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.656049][ T9656] team0: Port device team_slave_0 added [ 295.679746][ T9656] team0: Port device team_slave_1 added [ 295.776300][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.814594][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.875592][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.918799][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.939891][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.010422][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.722'. [ 296.030593][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.072268][ T9701] hsr_slave_0 (unregistering): left promiscuous mode [ 296.241337][ T9708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 296.275411][ T9656] hsr_slave_0: entered promiscuous mode [ 296.281778][ T9656] hsr_slave_1: entered promiscuous mode [ 296.288455][ T9656] debugfs: 'hsr0' already exists in 'hsr' [ 296.294537][ T9656] Cannot create hsr debugfs directory [ 296.317451][ T9708] bond0: (slave bond_slave_0): Releasing backup interface [ 297.044895][ T30] audit: type=1326 audit(8277292217.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.1.725" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ee8b9ce59 code=0x0 [ 297.283292][ T7498] Bluetooth: hci6: command tx timeout [ 297.305384][ T9656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 297.317998][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.331416][ T9656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 297.367924][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.380135][ T9656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 297.389532][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.397999][ T9656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 297.410082][ T9656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.502404][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.522547][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.538320][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.545506][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.561666][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.568845][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.444715][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.919804][ T9656] veth0_vlan: entered promiscuous mode [ 298.967947][ T9656] veth1_vlan: entered promiscuous mode [ 299.018351][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 299.105455][ T9656] veth0_macvtap: entered promiscuous mode [ 299.157637][ T9656] veth1_macvtap: entered promiscuous mode [ 299.250430][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.296295][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.341557][ T7707] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.373032][ T7498] Bluetooth: hci6: command tx timeout [ 299.403366][ T7707] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.436195][ T7707] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.470932][ T7707] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.122348][ T7367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.169752][ T7367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.275100][ T8402] Process accounting paused [ 300.314585][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.355467][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.709041][ T7382] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.740276][ T7382] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.750019][ T7382] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.758083][ T7382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.766424][ T7382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.094827][ T9768] bond0: invalid ARP target specified [ 301.307059][ T9768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 301.444802][ T7382] Bluetooth: hci6: command tx timeout [ 301.889918][ T9795] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 302.046324][ T30] audit: type=1800 audit(8277292222.240:12): pid=9799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.736" name="dbroot" dev="configfs" ino=33646 res=0 errno=0 [ 302.076547][ T9799] db_root: cannot open: /sys/z [ 302.264807][ T9769] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.285570][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.309298][ T9769] bridge_slave_0: entered allmulticast mode [ 302.330055][ T9769] bridge_slave_0: entered promiscuous mode [ 302.336342][ T9807] syz.1.738 (9807): attempted to duplicate a private mapping with mremap. This is not supported. [ 302.355158][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.391145][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.430378][ T9769] bridge_slave_1: entered allmulticast mode [ 302.461815][ T9769] bridge_slave_1: entered promiscuous mode [ 302.576897][ T9769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.621433][ T9769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.737867][ T9769] team0: Port device team_slave_0 added [ 302.778395][ T9769] team0: Port device team_slave_1 added [ 302.809098][ T7382] Bluetooth: hci7: command tx timeout [ 302.948772][ T9769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.988677][ T9769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.109850][ T9769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.209008][ T9769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.245119][ T9769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.391605][ T9769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.597614][ T9769] hsr_slave_0: entered promiscuous mode [ 303.620975][ T9769] hsr_slave_1: entered promiscuous mode [ 303.637569][ T9769] debugfs: 'hsr0' already exists in 'hsr' [ 303.650375][ T9769] Cannot create hsr debugfs directory [ 304.544040][ T9769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 304.558363][ T9769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.558952][ T9769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 304.571102][ T9769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.574112][ T9769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 304.586143][ T9769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.586717][ T9769] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.592541][ T9769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.776642][ T9769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.810596][ T9769] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.829723][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.829821][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.839296][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.839363][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.889244][ T7382] Bluetooth: hci7: command tx timeout [ 305.758836][ T9769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.191767][ T9769] veth0_vlan: entered promiscuous mode [ 306.215725][ T9769] veth1_vlan: entered promiscuous mode [ 306.279601][ T9769] veth0_macvtap: entered promiscuous mode [ 306.316700][ T9769] veth1_macvtap: entered promiscuous mode [ 306.402917][ T9769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.438840][ T9769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.493096][ T7707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.541271][ T7707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.588049][ T7707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.620089][ T7707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.849166][ T7707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.887385][ T7707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.964029][ T7382] Bluetooth: hci7: command tx timeout [ 307.005623][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.032836][ T9870] FAULT_INJECTION: forcing a failure. [ 307.032836][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 307.053376][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.108378][ T9870] CPU: 0 UID: 0 PID: 9870 Comm: syz.7.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.108406][ T9870] Tainted: [L]=SOFTLOCKUP [ 307.108411][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.108423][ T9870] Call Trace: [ 307.108429][ T9870] [ 307.108436][ T9870] dump_stack_lvl+0x100/0x190 [ 307.108468][ T9870] should_fail_ex.cold+0x5/0xa [ 307.108488][ T9870] should_failslab+0xc2/0x120 [ 307.108506][ T9870] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 307.108529][ T9870] ? mas_preallocate+0x1105/0x14a0 [ 307.108549][ T9870] mas_preallocate+0x1105/0x14a0 [ 307.108566][ T9870] ? __pfx_mas_preallocate+0x10/0x10 [ 307.108585][ T9870] ? vm_area_alloc+0x1f/0x160 [ 307.108607][ T9870] ? lockdep_init_map_type+0x5c/0x250 [ 307.108633][ T9870] __mmap_region+0x124a/0x2dd0 [ 307.108659][ T9870] ? __pfx___mmap_region+0x10/0x10 [ 307.108683][ T9870] ? __lock_acquire+0x4a5/0x2630 [ 307.108716][ T9870] ? __lock_acquire+0x4a5/0x2630 [ 307.108739][ T9870] ? do_raw_spin_unlock+0x145/0x1e0 [ 307.108756][ T9870] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.108785][ T9870] ? rcu_is_watching+0x12/0xc0 [ 307.108809][ T9870] ? rcu_is_watching+0x12/0xc0 [ 307.108826][ T9870] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 307.108853][ T9870] ? lockdep_hardirqs_on+0x78/0x100 [ 307.108903][ T9870] mmap_region+0x35d/0x620 [ 307.108918][ T9870] ? rcu_is_watching+0x12/0xc0 [ 307.108936][ T9870] ? __pfx_mmap_region+0x10/0x10 [ 307.108953][ T9870] ? cap_mmap_addr+0x4b/0x120 [ 307.108968][ T9870] ? bpf_lsm_mmap_addr+0x9/0x30 [ 307.108982][ T9870] ? security_mmap_addr+0x71/0x1e0 [ 307.109001][ T9870] ? __get_unmapped_area+0x255/0x3e0 [ 307.109022][ T9870] do_mmap+0xc63/0x12f0 [ 307.109043][ T9870] ? __pfx_do_mmap+0x10/0x10 [ 307.109062][ T9870] ? __pfx_down_write_killable+0x10/0x10 [ 307.109080][ T9870] vm_mmap_pgoff+0x29e/0x470 [ 307.109102][ T9870] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 307.109122][ T9870] ? do_futex+0x192/0x350 [ 307.109138][ T9870] ? __pfx_do_futex+0x10/0x10 [ 307.109156][ T9870] ksys_mmap_pgoff+0xe4/0x610 [ 307.109174][ T9870] ? __x64_sys_futex+0x358/0x4d0 [ 307.109190][ T9870] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 307.109207][ T9870] ? xfd_validate_state+0x129/0x190 [ 307.109227][ T9870] __x64_sys_mmap+0x125/0x190 [ 307.109245][ T9870] do_syscall_64+0x115/0x840 [ 307.109264][ T9870] ? clear_bhb_loop+0x40/0x90 [ 307.109282][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.109298][ T9870] RIP: 0033:0x7f06e1d9ce59 [ 307.109311][ T9870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.109326][ T9870] RSP: 002b:00007f06e2c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.109346][ T9870] RAX: ffffffffffffffda RBX: 00007f06e2015fa0 RCX: 00007f06e1d9ce59 [ 307.109357][ T9870] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 307.109366][ T9870] RBP: 00007f06e1e32d6f R08: ffffffffffffffff R09: 0000000000008000 [ 307.109376][ T9870] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 307.109385][ T9870] R13: 00007f06e2016038 R14: 00007f06e2015fa0 R15: 00007ffca6b33878 [ 307.109405][ T9870] [ 308.853882][ T9902] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 308.946715][ T7382] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 309.044504][ T7498] Bluetooth: hci7: command tx timeout [ 311.129218][ T7382] Bluetooth: hci7: command 0x2016 tx timeout [ 311.881045][ T7498] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 313.205348][ T7498] Bluetooth: hci7: command 0x2016 tx timeout [ 313.662016][ T9965] Process accounting resumed [ 314.147655][ T9981] random: crng reseeded on system resumption [ 315.123507][T10022] FAULT_INJECTION: forcing a failure. [ 315.123507][T10022] name failslab, interval 1, probability 0, space 0, times 0 [ 315.136705][T10022] CPU: 0 UID: 0 PID: 10022 Comm: syz.7.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.136731][T10022] Tainted: [L]=SOFTLOCKUP [ 315.136737][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.136747][T10022] Call Trace: [ 315.136752][T10022] [ 315.136757][T10022] dump_stack_lvl+0x100/0x190 [ 315.136788][T10022] should_fail_ex.cold+0x5/0xa [ 315.136809][T10022] should_failslab+0xc2/0x120 [ 315.136827][T10022] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 315.136850][T10022] ? alloc_io_context+0x21/0x2f0 [ 315.136870][T10022] ? set_task_ioprio+0x48f/0x670 [ 315.136892][T10022] alloc_io_context+0x21/0x2f0 [ 315.136912][T10022] set_task_ioprio+0x49e/0x670 [ 315.136933][T10022] __do_sys_ioprio_set+0x74c/0xb40 [ 315.136952][T10022] ? rcu_is_watching+0x12/0xc0 [ 315.136972][T10022] do_syscall_64+0x115/0x840 [ 315.136993][T10022] ? clear_bhb_loop+0x40/0x90 [ 315.137011][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.137026][T10022] RIP: 0033:0x7f06e1d9ce59 [ 315.137041][T10022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.137055][T10022] RSP: 002b:00007f06e2c86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 315.137070][T10022] RAX: ffffffffffffffda RBX: 00007f06e2015fa0 RCX: 00007f06e1d9ce59 [ 315.137080][T10022] RDX: 0000000000000008 RSI: 0000000800000000 RDI: 0000000000000002 [ 315.137088][T10022] RBP: 00007f06e1e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 315.137097][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.137105][T10022] R13: 00007f06e2016038 R14: 00007f06e2015fa0 R15: 00007ffca6b33878 [ 315.137125][T10022] [ 315.567278][ T7498] Bluetooth: hci7: command 0x2016 tx timeout [ 316.178693][T10034] FAULT_INJECTION: forcing a failure. [ 316.178693][T10034] name fail_futex, interval 1, probability 0, space 0, times 0 [ 316.253998][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.7.778 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.254026][T10034] Tainted: [L]=SOFTLOCKUP [ 316.254031][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.254041][T10034] Call Trace: [ 316.254046][T10034] [ 316.254052][T10034] dump_stack_lvl+0x100/0x190 [ 316.254082][T10034] should_fail_ex.cold+0x5/0xa [ 316.254101][T10034] get_futex_key+0x1d2/0x1510 [ 316.254127][T10034] ? __pfx_get_futex_key+0x10/0x10 [ 316.254150][T10034] ? lockdep_hardirqs_on+0x78/0x100 [ 316.254173][T10034] ? kfree_skbmem+0x19a/0x210 [ 316.254195][T10034] futex_wait_setup+0x83/0x510 [ 316.254218][T10034] __futex_wait+0x19f/0x300 [ 316.254238][T10034] ? __pfx___futex_wait+0x10/0x10 [ 316.254257][T10034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.254279][T10034] ? __pfx_futex_wake_mark+0x10/0x10 [ 316.254300][T10034] ? futex_hash+0x2ad/0x370 [ 316.254323][T10034] ? futex_hash+0x141/0x370 [ 316.254347][T10034] futex_wait+0xe6/0x370 [ 316.254365][T10034] ? __pfx_futex_wait+0x10/0x10 [ 316.254387][T10034] ? vfs_write+0x15d/0x1070 [ 316.254404][T10034] ? __pfx_sock_write_iter+0x10/0x10 [ 316.254426][T10034] do_futex+0x1ef/0x350 [ 316.254441][T10034] ? __pfx_do_futex+0x10/0x10 [ 316.254461][T10034] __x64_sys_futex+0x34f/0x4d0 [ 316.254478][T10034] ? fput+0x79/0x100 [ 316.254496][T10034] ? __pfx___x64_sys_futex+0x10/0x10 [ 316.254511][T10034] ? ksys_write+0x1ac/0x250 [ 316.254530][T10034] ? __pfx_ksys_write+0x10/0x10 [ 316.254548][T10034] ? rcu_is_watching+0x12/0xc0 [ 316.254567][T10034] do_syscall_64+0x115/0x840 [ 316.254587][T10034] ? clear_bhb_loop+0x40/0x90 [ 316.254606][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.254621][T10034] RIP: 0033:0x7f06e1d9ce59 [ 316.254634][T10034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.254649][T10034] RSP: 002b:00007f06e2c860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 316.254664][T10034] RAX: ffffffffffffffda RBX: 00007f06e2015fa8 RCX: 00007f06e1d9ce59 [ 316.254674][T10034] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06e2015fa8 [ 316.254684][T10034] RBP: 00007f06e2015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 316.254693][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.254702][T10034] R13: 00007f06e2016038 R14: 00007ffca6b33790 R15: 00007ffca6b33878 [ 316.254722][T10034] [ 317.303038][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.311189][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.604544][ T7382] Bluetooth: hci7: command 0x2016 tx timeout [ 319.573046][ T7498] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 319.586016][ T7498] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 319.596755][ T7498] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 319.605981][ T7498] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 319.619759][ T7498] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 320.118067][T10110] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 321.684061][ T7498] Bluetooth: hci8: command tx timeout [ 322.888804][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.949499][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.015362][T10098] bridge_slave_0: entered allmulticast mode [ 323.071001][T10098] bridge_slave_0: entered promiscuous mode [ 323.136084][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.182768][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.221690][T10098] bridge_slave_1: entered allmulticast mode [ 323.248598][T10183] random: crng reseeded on system resumption [ 323.262684][T10098] bridge_slave_1: entered promiscuous mode [ 323.379776][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.421005][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.572942][T10098] team0: Port device team_slave_0 added [ 323.592276][T10098] team0: Port device team_slave_1 added [ 323.659794][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.681300][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.763607][ T7498] Bluetooth: hci8: command tx timeout [ 323.789738][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.842460][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.866482][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.924252][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.195201][T10098] hsr_slave_0: entered promiscuous mode [ 324.214057][T10098] hsr_slave_1: entered promiscuous mode [ 324.229490][T10098] debugfs: 'hsr0' already exists in 'hsr' [ 324.242317][T10098] Cannot create hsr debugfs directory [ 325.358569][T10217] Process accounting paused [ 325.499048][T10098] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 325.509259][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.512950][T10098] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 325.519653][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.520383][T10098] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 325.526294][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.529930][T10098] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 325.536259][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.747082][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.775900][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.795743][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.795809][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.804182][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.804295][ T7378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.850056][ T7498] Bluetooth: hci8: command tx timeout [ 326.707503][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.071608][T10098] veth0_vlan: entered promiscuous mode [ 327.097745][T10098] veth1_vlan: entered promiscuous mode [ 327.159941][T10098] veth0_macvtap: entered promiscuous mode [ 327.185725][T10098] veth1_macvtap: entered promiscuous mode [ 327.220590][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.251020][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.282872][ T7367] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.312452][ T7367] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.470388][ T7367] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.561197][ T7367] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.816850][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.865051][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.923762][ T7498] Bluetooth: hci8: command tx timeout [ 327.975757][ T7367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.998548][ T7367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.782222][T10273] zswap: compressor 000 not available [ 329.170581][ T7498] bt_warn_ratelimited: 55 callbacks suppressed [ 329.170602][ T7498] Bluetooth: hci6: unexpected event 0x3e length: 508 > 260 [ 329.176918][ T7498] Bluetooth: hci6: unexpected subevent 0x02 length: 507 > 260 [ 329.192495][ T7498] Bluetooth: hci6: Dropping invalid advertising data [ 329.202839][ T7498] Bluetooth: hci6: unknown advertising packet type: 0xe9 [ 329.202866][ T7498] Bluetooth: hci6: Dropping invalid advertising data [ 329.217471][ T7498] Bluetooth: hci6: Malformed LE Event: 0x02 [ 329.253326][T10291] ubi: mtd0 is already attached to ubi6 [ 329.762285][T10304] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 330.850770][T10321] ubi: mtd0 is already attached to ubi6 [ 330.892848][T10321] ubi: mtd0 is already attached to ubi6 [ 330.939623][T10321] ubi: mtd0 is already attached to ubi6 [ 330.965896][T10321] ubi: mtd0 is already attached to ubi6 [ 331.010253][T10321] ubi: mtd0 is already attached to ubi6 [ 331.049115][T10321] ubi: mtd0 is already attached to ubi6 [ 331.056022][T10326] random: crng reseeded on system resumption [ 331.064659][T10321] ubi: mtd0 is already attached to ubi6 [ 331.090599][T10321] ubi: mtd0 is already attached to ubi6 [ 331.120677][T10337] can: request_module (can-proto-0) failed. [ 331.133161][T10321] ubi: mtd0 is already attached to ubi6 [ 331.225142][T10321] ubi: mtd0 is already attached to ubi6 [ 331.305632][T10321] ubi: mtd0 is already attached to ubi6 [ 331.325539][T10321] ubi: mtd0 is already attached to ubi6 [ 331.347526][T10321] ubi: mtd0 is already attached to ubi6 [ 331.370282][T10321] ubi: mtd0 is already attached to ubi6 [ 331.384999][T10321] ubi: mtd0 is already attached to ubi6 [ 331.408449][T10321] ubi: mtd0 is already attached to ubi6 [ 331.420626][T10321] ubi: mtd0 is already attached to ubi6 [ 331.436282][T10321] ubi: mtd0 is already attached to ubi6 [ 331.582978][ T30] audit: type=1400 audit(8277292251.770:13): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10343 comm="syz.7.821" [ 331.902972][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.7.824'. [ 333.328443][T10443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.130168][T10476] can0: slcan on ptm0. [ 334.235136][T10472] can0 (unregistered): slcan off ptm0. [ 334.559336][T10483] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 334.559336][T10483] The task syz.9.829 (10483) triggered the difference, watch for misbehavior. [ 338.475120][ T7382] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 338.488381][ T7382] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 338.498741][ T7382] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 338.509410][ T7382] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 338.524311][ T7382] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 340.028910][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.041962][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.053076][T10575] bridge_slave_0: entered allmulticast mode [ 340.061381][T10575] bridge_slave_0: entered promiscuous mode [ 340.071200][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.078745][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.097059][T10575] bridge_slave_1: entered allmulticast mode [ 340.120417][T10575] bridge_slave_1: entered promiscuous mode [ 340.300050][T10575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.387531][T10575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.541100][T10575] team0: Port device team_slave_0 added [ 340.563419][ T7382] Bluetooth: hci9: command tx timeout [ 340.586046][T10575] team0: Port device team_slave_1 added [ 340.642711][T10639] netlink: 334 bytes leftover after parsing attributes in process `syz.9.848'. [ 340.722701][T10575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.738527][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.802998][T10575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.842942][T10575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.858436][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.930240][T10575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.215443][T10575] hsr_slave_0: entered promiscuous mode [ 341.250180][T10575] hsr_slave_1: entered promiscuous mode [ 341.289435][T10575] debugfs: 'hsr0' already exists in 'hsr' [ 341.307897][T10575] Cannot create hsr debugfs directory [ 342.639765][ T30] audit: type=1800 audit(8277292262.830:14): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.858" name="dbroot" dev="configfs" ino=38368 res=0 errno=0 [ 342.668767][ T7382] Bluetooth: hci9: command tx timeout [ 343.008087][ T7498] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 343.027811][ T7498] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 343.039384][ T7498] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 343.052645][ T7498] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 343.072493][ T7498] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 343.531360][T10575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.576065][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.622823][T10575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.655015][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.681648][T10575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.711400][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.819170][T10575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.856766][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.153616][T10683] Process accounting paused [ 344.281406][T10575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.392370][T10575] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.571532][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.578742][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.707547][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.707615][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.724576][ T7498] Bluetooth: hci9: command tx timeout [ 345.207183][ T7498] Bluetooth: hci10: command tx timeout [ 346.803815][ T7498] Bluetooth: hci9: command tx timeout [ 347.074602][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.129976][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.172902][T10692] bridge_slave_0: entered allmulticast mode [ 347.223899][T10692] bridge_slave_0: entered promiscuous mode [ 347.279387][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.287577][ T7498] Bluetooth: hci10: command tx timeout [ 347.350009][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.414988][T10692] bridge_slave_1: entered allmulticast mode [ 347.452001][T10692] bridge_slave_1: entered promiscuous mode [ 347.600283][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.615688][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.726105][T10692] team0: Port device team_slave_0 added [ 347.741711][T10692] team0: Port device team_slave_1 added [ 347.854289][T10692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.854304][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.854323][T10692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.855553][T10692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.855564][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.855583][T10692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.095924][T10692] hsr_slave_0: entered promiscuous mode [ 348.096606][T10692] hsr_slave_1: entered promiscuous mode [ 348.099083][T10692] debugfs: 'hsr0' already exists in 'hsr' [ 348.099101][T10692] Cannot create hsr debugfs directory [ 348.100734][T10575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.506778][T10575] veth0_vlan: entered promiscuous mode [ 348.514794][T10575] veth1_vlan: entered promiscuous mode [ 348.639889][T10575] veth0_macvtap: entered promiscuous mode [ 348.657264][T10575] veth1_macvtap: entered promiscuous mode [ 348.714040][T10575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.732020][T10575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.968623][T10692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.109791][ T9392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.155119][ T9392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.227065][ T9392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.271774][ T9392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.369559][ T7498] Bluetooth: hci10: command tx timeout [ 349.392972][T10692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.415768][T10819] ceph: Failed to parse sending metrics switch value 'P^' [ 349.495146][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.865'. [ 349.700742][T10692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.386380][ T7378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.426229][ T7378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.751582][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.767996][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.192530][T10852] hub 1-0:1.0: USB hub found [ 351.218206][T10852] hub 1-0:1.0: 1 port detected [ 351.235080][T10692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.282160][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.331005][T10692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.381884][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.431464][T10692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.443682][ T7498] Bluetooth: hci10: command tx timeout [ 351.484190][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.529641][T10692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.571621][T10692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.668959][T10863] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 352.231021][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.344203][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.415492][T10887] random: crng reseeded on system resumption [ 352.549217][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.556385][ T7378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.727902][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.735072][ T7378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.753949][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.916459][T10692] veth0_vlan: entered promiscuous mode [ 354.975586][T10692] veth1_vlan: entered promiscuous mode [ 355.095237][T10692] veth0_macvtap: entered promiscuous mode [ 355.139462][T10692] veth1_macvtap: entered promiscuous mode [ 355.416149][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.492622][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.726318][ T7371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.775920][ T7371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.860763][ T7371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.915792][ T7371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.207081][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.261239][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.369196][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.412812][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.608047][ T30] audit: type=1800 audit(8277292276.800:15): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.877" name="dbroot" dev="configfs" ino=40395 res=0 errno=0 [ 356.642212][T10968] db_root: cannot open: /sys [ 356.706589][T10927] FAULT_INJECTION: forcing a failure. [ 356.706589][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 356.786110][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.3.874 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.786137][T10927] Tainted: [L]=SOFTLOCKUP [ 356.786142][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.786156][T10927] Call Trace: [ 356.786216][T10927] [ 356.786242][T10927] dump_stack_lvl+0x100/0x190 [ 356.786313][T10927] should_fail_ex.cold+0x5/0xa [ 356.786345][T10927] should_failslab+0xc2/0x120 [ 356.786380][T10927] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 356.786409][T10927] ? copy_process+0x69a/0x7ed0 [ 356.786439][T10927] ? mark_held_locks+0x40/0x70 [ 356.786471][T10927] copy_process+0x69a/0x7ed0 [ 356.786501][T10927] ? __pfx_copy_process+0x10/0x10 [ 356.786523][T10927] ? lockdep_init_map_type+0x5c/0x250 [ 356.786553][T10927] ? lockdep_init_map_type+0x5c/0x250 [ 356.786577][T10927] ? __pfx_vhost_run_work_list+0x10/0x10 [ 356.786672][T10927] ? __pfx_vhost_worker_killed+0x10/0x10 [ 356.786686][T10927] vhost_task_create+0x1db/0x370 [ 356.786708][T10927] ? __pfx_vhost_task_create+0x10/0x10 [ 356.786729][T10927] ? __pfx_vhost_task_fn+0x10/0x10 [ 356.786749][T10927] ? snprintf+0xc7/0x100 [ 356.786841][T10927] vhost_task_worker_create+0x8d/0x260 [ 356.786859][T10927] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 356.786875][T10927] ? lockdep_init_map_type+0x5c/0x250 [ 356.786900][T10927] ? lockdep_init_map_type+0x5c/0x250 [ 356.786926][T10927] vhost_worker_create+0x243/0x310 [ 356.786950][T10927] ? __pfx_vhost_worker_create+0x10/0x10 [ 356.786987][T10927] vhost_dev_set_owner+0x719/0xa30 [ 356.787009][T10927] vhost_net_ioctl+0xfa3/0x1910 [ 356.787024][T10927] ? do_vfs_ioctl+0x226/0x13e0 [ 356.787050][T10927] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 356.787064][T10927] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 356.787086][T10927] ? hook_file_ioctl_common+0x149/0x410 [ 356.787161][T10927] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 356.787178][T10927] __x64_sys_ioctl+0x18e/0x210 [ 356.787196][T10927] do_syscall_64+0x115/0x840 [ 356.787216][T10927] ? clear_bhb_loop+0x40/0x90 [ 356.787242][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.787257][T10927] RIP: 0033:0x7fdaf5f9ce59 [ 356.787272][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.787287][T10927] RSP: 002b:00007fdaf6ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.787307][T10927] RAX: ffffffffffffffda RBX: 00007fdaf6215fa0 RCX: 00007fdaf5f9ce59 [ 356.787318][T10927] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 356.787326][T10927] RBP: 00007fdaf6032d6f R08: 0000000000000000 R09: 0000000000000000 [ 356.787335][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.787344][T10927] R13: 00007fdaf6216038 R14: 00007fdaf6215fa0 R15: 00007ffe9e38a708 [ 356.787363][T10927] [ 357.656688][T10985] netlink: 252 bytes leftover after parsing attributes in process `syz.3.879'. [ 359.590205][T11006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.721488][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 363.346913][T11086] vhci_hcd: not connected 4 [ 363.523833][T11093] random: crng reseeded on system resumption [ 367.123369][T11141] vhci_hcd: not connected 4 [ 367.130430][ T7382] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 367.148195][ T7382] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 367.156526][ T7382] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 367.164541][ T7382] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 367.177355][ T7382] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 368.111147][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.130288][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.148355][T11142] bridge_slave_0: entered allmulticast mode [ 368.161723][T11142] bridge_slave_0: entered promiscuous mode [ 368.181317][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.197833][T11142] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.205350][T11142] bridge_slave_1: entered allmulticast mode [ 368.217765][T11142] bridge_slave_1: entered promiscuous mode [ 368.271967][T11142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.293311][T11142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.358273][T11142] team0: Port device team_slave_0 added [ 368.461428][T11142] team0: Port device team_slave_1 added [ 368.561825][T11142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.596752][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.652581][T11142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.676605][T11142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.686129][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.715145][T11142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.779982][T11142] hsr_slave_0: entered promiscuous mode [ 368.787719][T11142] hsr_slave_1: entered promiscuous mode [ 368.795826][T11142] debugfs: 'hsr0' already exists in 'hsr' [ 368.801662][T11142] Cannot create hsr debugfs directory [ 369.203645][ T7382] Bluetooth: hci11: command tx timeout [ 369.241120][T11142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.327801][T11142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.400043][T11142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.465104][T11142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.611935][T11142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.622184][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.632206][T11142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.645828][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.655911][T11142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.667351][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.675512][T11142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.688349][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.776519][T11142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.796784][T11142] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.808568][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.815723][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.955938][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.963053][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.094380][T11142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.211830][T11192] kAFS: Invalid Command on /proc/fs/afs/cells file [ 370.365066][T11192] zswap: compressor 000 not available [ 370.646477][T11142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.877832][T11142] veth0_vlan: entered promiscuous mode [ 370.900395][T11142] veth1_vlan: entered promiscuous mode [ 370.927100][T11142] veth0_macvtap: entered promiscuous mode [ 370.937649][T11142] veth1_macvtap: entered promiscuous mode [ 370.956971][T11142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.978004][T11142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.995980][ T7380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.021260][ T7380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.057353][ T7380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.101969][ T7380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.170195][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.197357][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.237871][T11175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.247433][T11175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.284686][ T7382] Bluetooth: hci11: command tx timeout [ 372.616929][T11235] Process accounting resumed [ 373.259678][ T7498] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 373.275270][ T7498] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 373.289842][ T7498] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 373.298065][ T7498] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 373.308522][ T7498] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 373.364632][ T7382] Bluetooth: hci11: command tx timeout [ 374.094842][T11286] netlink: 334 bytes leftover after parsing attributes in process `syz.4.926'. [ 375.444321][ T7498] Bluetooth: hci12: command tx timeout [ 375.451154][ T7382] Bluetooth: hci11: command tx timeout [ 375.749834][T11322] FAULT_INJECTION: forcing a failure. [ 375.749834][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 375.793055][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.4.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.793081][T11322] Tainted: [L]=SOFTLOCKUP [ 375.793086][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.793096][T11322] Call Trace: [ 375.793102][T11322] [ 375.793108][T11322] dump_stack_lvl+0x100/0x190 [ 375.793139][T11322] should_fail_ex.cold+0x5/0xa [ 375.793159][T11322] should_failslab+0xc2/0x120 [ 375.793180][T11322] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 375.793204][T11322] ? sk_prot_alloc+0x60/0x2a0 [ 375.793334][T11322] sk_prot_alloc+0x60/0x2a0 [ 375.793354][T11322] sk_alloc+0x36/0xe80 [ 375.793371][T11322] smc_create+0x11a/0x290 [ 375.793493][T11322] __sock_create+0x339/0x860 [ 375.793517][T11322] __sys_socket+0x14d/0x260 [ 375.793538][T11322] ? __pfx___sys_socket+0x10/0x10 [ 375.793564][T11322] __x64_sys_socket+0x72/0xb0 [ 375.793584][T11322] ? lockdep_hardirqs_on+0x78/0x100 [ 375.793629][T11322] do_syscall_64+0x115/0x840 [ 375.793650][T11322] ? clear_bhb_loop+0x40/0x90 [ 375.793669][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.793685][T11322] RIP: 0033:0x7f286e19ce59 [ 375.793699][T11322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.793713][T11322] RSP: 002b:00007f286f131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 375.793728][T11322] RAX: ffffffffffffffda RBX: 00007f286e415fa0 RCX: 00007f286e19ce59 [ 375.793739][T11322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 375.793749][T11322] RBP: 00007f286e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 375.793758][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.793767][T11322] R13: 00007f286e416038 R14: 00007f286e415fa0 R15: 00007ffc47b91a68 [ 375.793786][T11322] [ 376.003162][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.010951][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.018142][T11259] bridge_slave_0: entered allmulticast mode [ 376.025409][T11259] bridge_slave_0: entered promiscuous mode [ 376.032813][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.039974][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.047193][T11259] bridge_slave_1: entered allmulticast mode [ 376.054225][T11259] bridge_slave_1: entered promiscuous mode [ 376.079386][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.091483][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.120380][T11259] team0: Port device team_slave_0 added [ 376.128078][T11259] team0: Port device team_slave_1 added [ 376.149717][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.156782][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.184683][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.199838][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.206866][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.232863][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.271915][T11259] hsr_slave_0: entered promiscuous mode [ 376.288819][T11320] kafs: addr_prefs: Invalid Command [ 376.304753][T11259] hsr_slave_1: entered promiscuous mode [ 376.320910][T11259] debugfs: 'hsr0' already exists in 'hsr' [ 376.341924][T11259] Cannot create hsr debugfs directory [ 376.792839][T11259] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.072731][T11259] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.235748][T11259] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.532706][T11259] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.545532][ T7382] Bluetooth: hci12: command tx timeout [ 378.103576][T11259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.119081][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 378.136934][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.164656][T11259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.184233][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.247551][T11259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.277155][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.302208][T11259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.339958][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.630112][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.695269][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.726766][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734004][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.766915][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.774136][T11175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.827012][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.834298][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.604148][ T7382] Bluetooth: hci12: command tx timeout [ 380.286457][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.994490][T11259] veth0_vlan: entered promiscuous mode [ 381.011184][T11397] netlink: 'syz.4.942': attribute type 3 has an invalid length. [ 381.051441][T11259] veth1_vlan: entered promiscuous mode [ 381.189912][T11259] veth0_macvtap: entered promiscuous mode [ 381.241174][T11259] veth1_macvtap: entered promiscuous mode [ 381.337382][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.381662][ T7498] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 381.396011][ T7498] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 381.406615][ T7498] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 381.429450][ T7498] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 381.442160][ T7498] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 381.493002][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.589633][ T7373] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.662123][ T7373] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.687801][ T7498] Bluetooth: hci12: command tx timeout [ 381.731570][ T7373] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.825045][ T7373] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.062166][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.105152][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.222575][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.279210][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.604488][ T7498] Bluetooth: hci13: command tx timeout [ 385.066141][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.085915][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.108351][T11404] bridge_slave_0: entered allmulticast mode [ 385.121474][T11404] bridge_slave_0: entered promiscuous mode [ 385.155789][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.172703][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.187866][T11464] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 385.198806][T11404] bridge_slave_1: entered allmulticast mode [ 385.217755][T11404] bridge_slave_1: entered promiscuous mode [ 385.296438][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.462084][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.542913][T11472] FAULT_INJECTION: forcing a failure. [ 385.542913][T11472] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.587599][T11472] CPU: 0 UID: 0 PID: 11472 Comm: syz.6.952 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.587627][T11472] Tainted: [L]=SOFTLOCKUP [ 385.587633][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.587642][T11472] Call Trace: [ 385.587648][T11472] [ 385.587654][T11472] dump_stack_lvl+0x100/0x190 [ 385.587685][T11472] should_fail_ex.cold+0x5/0xa [ 385.587703][T11472] ? prepare_alloc_pages+0x16d/0x5f0 [ 385.587725][T11472] should_fail_alloc_page+0xeb/0x140 [ 385.587745][T11472] prepare_alloc_pages+0x1f0/0x5f0 [ 385.587764][T11472] ? kernel_text_address+0x8d/0x100 [ 385.587802][T11472] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 385.587833][T11472] ? copy_splice_read+0x1a3/0xb90 [ 385.587859][T11472] ? stack_trace_save+0x8e/0xc0 [ 385.587889][T11472] ? __pfx_stack_trace_save+0x10/0x10 [ 385.587909][T11472] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.587935][T11472] ? copy_splice_read+0x1a3/0xb90 [ 385.587952][T11472] ? kasan_save_stack+0x3f/0x50 [ 385.587967][T11472] ? kasan_save_stack+0x30/0x50 [ 385.587981][T11472] ? kasan_save_track+0x14/0x30 [ 385.587996][T11472] ? __kasan_kmalloc+0xaa/0xb0 [ 385.588010][T11472] ? __kmalloc_noprof+0x301/0x850 [ 385.588023][T11472] ? copy_splice_read+0x1a3/0xb90 [ 385.588042][T11472] ? do_syscall_64+0x115/0x840 [ 385.588063][T11472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.588088][T11472] alloc_pages_bulk_noprof+0x649/0x1360 [ 385.588119][T11472] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 385.588149][T11472] ? __kmalloc_noprof+0x320/0x850 [ 385.588168][T11472] copy_splice_read+0x1e1/0xb90 [ 385.588190][T11472] ? __pfx_copy_splice_read+0x10/0x10 [ 385.588217][T11472] ? find_held_lock+0x2b/0x80 [ 385.588237][T11472] ? __pfx_copy_splice_read+0x10/0x10 [ 385.588255][T11472] do_splice_read+0x285/0x370 [ 385.588274][T11472] splice_direct_to_actor+0x2a1/0xa30 [ 385.588294][T11472] ? __pfx_direct_splice_actor+0x10/0x10 [ 385.588316][T11472] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 385.588340][T11472] do_splice_direct+0x174/0x240 [ 385.588359][T11472] ? __pfx_do_splice_direct+0x10/0x10 [ 385.588378][T11472] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 385.588399][T11472] ? rw_verify_area+0xce/0x6d0 [ 385.588419][T11472] do_sendfile+0xadc/0xe20 [ 385.588442][T11472] ? __pfx_do_sendfile+0x10/0x10 [ 385.588457][T11472] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 385.588497][T11472] __x64_sys_sendfile64+0x1d8/0x220 [ 385.588516][T11472] ? exit_to_user_mode_loop+0xf3/0x670 [ 385.588539][T11472] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 385.588558][T11472] ? exit_to_user_mode_loop+0xf3/0x670 [ 385.588581][T11472] ? rcu_is_watching+0x12/0xc0 [ 385.588600][T11472] do_syscall_64+0x115/0x840 [ 385.588620][T11472] ? clear_bhb_loop+0x40/0x90 [ 385.588638][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.588653][T11472] RIP: 0033:0x7ff84b79ce59 [ 385.588666][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.588680][T11472] RSP: 002b:00007ff84c669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 385.588695][T11472] RAX: ffffffffffffffda RBX: 00007ff84ba16090 RCX: 00007ff84b79ce59 [ 385.588706][T11472] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 385.588714][T11472] RBP: 00007ff84b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 385.588723][T11472] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000000 [ 385.588732][T11472] R13: 00007ff84ba16128 R14: 00007ff84ba16090 R15: 00007ffd90ab73d8 [ 385.588752][T11472] [ 386.260289][T11404] team0: Port device team_slave_0 added [ 386.267892][T11404] team0: Port device team_slave_1 added [ 386.290123][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.297140][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.323981][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.339625][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.346637][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.372560][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.409045][ T7498] Bluetooth: hci13: command tx timeout [ 386.469807][T11404] hsr_slave_0: entered promiscuous mode [ 386.479557][T11404] hsr_slave_1: entered promiscuous mode [ 386.486023][T11404] debugfs: 'hsr0' already exists in 'hsr' [ 386.493111][T11404] Cannot create hsr debugfs directory [ 386.765180][T11484] netlink: 330 bytes leftover after parsing attributes in process `syz.3.954'. [ 386.860398][T11404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.980050][T11484] –õ\­: renamed from lo (while UP) [ 387.229482][T11404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.516022][T11498] random: crng reseeded on system resumption [ 387.597421][T11404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.616640][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.957'. [ 387.722203][T11498] hub 1-0:1.0: USB hub found [ 387.738455][T11498] hub 1-0:1.0: 1 port detected [ 387.746079][T11404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.485417][ T7382] Bluetooth: hci13: command tx timeout [ 388.604578][T11514] ubi: mtd0 is already attached to ubi6 [ 389.527510][T11520] FAULT_INJECTION: forcing a failure. [ 389.527510][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 389.568094][T11404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.628166][T11520] CPU: 0 UID: 0 PID: 11520 Comm: syz.3.961 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.628194][T11520] Tainted: [L]=SOFTLOCKUP [ 389.628200][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.628209][T11520] Call Trace: [ 389.628215][T11520] [ 389.628221][T11520] dump_stack_lvl+0x100/0x190 [ 389.628251][T11520] should_fail_ex.cold+0x5/0xa [ 389.628271][T11520] should_failslab+0xc2/0x120 [ 389.628289][T11520] __kmalloc_cache_noprof+0x7a/0x6f0 [ 389.628311][T11520] ? vb2_vmalloc_alloc+0xf9/0x410 [ 389.628418][T11520] ? trace_kmalloc+0xe3/0x110 [ 389.628435][T11520] ? __kasan_kmalloc+0xaa/0xb0 [ 389.628453][T11520] vb2_vmalloc_alloc+0xf9/0x410 [ 389.628470][T11520] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 389.628489][T11520] __vb2_queue_alloc+0x8d5/0x1160 [ 389.628546][T11520] vb2_core_reqbufs+0x899/0xf30 [ 389.628567][T11520] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 389.628594][T11520] __vb2_init_fileio+0x32d/0x1000 [ 389.628612][T11520] ? aa_file_perm+0x7f3/0x14d0 [ 389.628685][T11520] __vb2_perform_fileio+0x91e/0x1380 [ 389.628707][T11520] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 389.628724][T11520] ? __pfx___might_resched+0x10/0x10 [ 389.628740][T11520] ? futex_hash+0x141/0x370 [ 389.628772][T11520] vb2_fop_read+0x211/0x520 [ 389.628790][T11520] v4l2_read+0x229/0x2c0 [ 389.628855][T11520] ? __pfx_v4l2_read+0x10/0x10 [ 389.628878][T11520] vfs_read+0x1e4/0xb30 [ 389.628899][T11520] ? __pfx_vfs_read+0x10/0x10 [ 389.628915][T11520] ? find_held_lock+0x2b/0x80 [ 389.628932][T11520] ? __fget_files+0x215/0x3d0 [ 389.628949][T11520] ? __fget_files+0x215/0x3d0 [ 389.628969][T11520] ? __fget_files+0x21f/0x3d0 [ 389.628991][T11520] ksys_read+0x12a/0x250 [ 389.629007][T11520] ? __pfx_ksys_read+0x10/0x10 [ 389.629025][T11520] ? rcu_is_watching+0x12/0xc0 [ 389.629045][T11520] do_syscall_64+0x115/0x840 [ 389.629065][T11520] ? clear_bhb_loop+0x40/0x90 [ 389.629085][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.629100][T11520] RIP: 0033:0x7fdaf5f9ce59 [ 389.629114][T11520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.629129][T11520] RSP: 002b:00007fdaf6ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.629144][T11520] RAX: ffffffffffffffda RBX: 00007fdaf6215fa0 RCX: 00007fdaf5f9ce59 [ 389.629154][T11520] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 389.629163][T11520] RBP: 00007fdaf6032d6f R08: 0000000000000000 R09: 0000000000000000 [ 389.629172][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.629181][T11520] R13: 00007fdaf6216038 R14: 00007fdaf6215fa0 R15: 00007ffe9e38a708 [ 389.629201][T11520] [ 390.260395][T11533] capability: warning: `syz.4.965' uses 32-bit capabilities (legacy support in use) [ 390.588539][ T7382] Bluetooth: hci13: command tx timeout [ 390.779966][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.804460][T11404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 390.834632][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.905163][T11404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.929454][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.951977][T11404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.014797][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.405184][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.586875][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.789006][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.796177][T11175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.821811][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.829029][T11175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.482846][T11404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.166341][ T8041] NFSD: Failed to start, no listeners configured. [ 394.507850][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.622707][T11404] veth0_vlan: entered promiscuous mode [ 395.685015][T11404] veth1_vlan: entered promiscuous mode [ 395.813964][T11404] veth0_macvtap: entered promiscuous mode [ 395.886867][T11404] veth1_macvtap: entered promiscuous mode [ 395.955454][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.992543][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.048544][T11175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.099903][T11175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.245746][T11175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.291874][T11175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.226884][T11175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.260824][T11175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.368233][ T7373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.406151][ T7373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.054323][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 399.519683][ T7382] Bluetooth: hci12: unexpected subevent 0x01 length: 123 > 18 [ 399.846757][ T31] INFO: task syz.4.523:8668 blocked for more than 143 seconds. [ 399.911785][ T31] Tainted: G L syzkaller #0 [ 399.962757][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.022254][ T31] task:syz.4.523 state:D stack:27528 pid:8668 tgid:8663 ppid:7559 task_flags:0x400140 flags:0x00080002 [ 400.092301][ T31] Call Trace: [ 400.110038][ T31] [ 400.125247][ T31] __schedule+0x1295/0x67a0 [ 400.146673][ T31] ? __pfx___schedule+0x10/0x10 [ 400.167672][ T31] ? find_held_lock+0x2b/0x80 [ 400.182546][ T31] ? schedule+0x2bf/0x390 [ 400.202489][ T31] schedule+0xdd/0x390 [ 400.216850][ T31] schedule_preempt_disabled+0x13/0x30 [ 400.236653][ T31] __mutex_lock+0xced/0x1b10 [ 400.252967][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 400.285196][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 400.313917][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 400.352476][ T31] ? net_generic+0xea/0x2a0 [ 400.381291][ T31] ? net_generic+0xea/0x2a0 [ 400.416563][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 400.454546][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 400.495142][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 400.520702][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 400.556436][ T31] ? genl_get_cmd+0x3e7/0x760 [ 400.577141][ T31] ? bpf_lsm_capable+0x9/0x10 [ 400.592350][ T31] ? security_capable+0x80/0x260 [ 400.598836][ T31] genl_rcv_msg+0x560/0x800 [ 400.604190][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.609341][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 400.615740][ T31] netlink_rcv_skb+0x159/0x420 [ 400.620605][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.626527][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.632212][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 400.638921][ T31] genl_rcv+0x28/0x40 [ 400.643041][ T31] netlink_unicast+0x585/0x850 [ 400.655752][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 400.661212][ T31] netlink_sendmsg+0x8b0/0xda0 [ 400.666725][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.676369][ T31] ? __import_iovec+0x1d2/0x640 [ 400.681460][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 400.687472][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 400.692900][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.698867][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.704978][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 400.710375][ T31] ___sys_sendmsg+0x190/0x1e0 [ 400.715987][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.721301][ T31] __sys_sendmsg+0x170/0x220 [ 400.729734][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.735746][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 400.740845][ T31] ? rcu_is_watching+0x12/0xc0 [ 400.747173][ T31] do_syscall_64+0x115/0x840 [ 400.751887][ T31] ? clear_bhb_loop+0x40/0x90 [ 400.768474][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.782979][ T31] RIP: 0033:0x7f5b0e19ce59 [ 400.787711][ T31] RSP: 002b:00007f5b0f026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.796985][ T31] RAX: ffffffffffffffda RBX: 00007f5b0e416090 RCX: 00007f5b0e19ce59 [ 400.807763][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003 [ 400.816560][ T31] RBP: 00007f5b0e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 400.825361][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.833618][ T31] R13: 00007f5b0e416128 R14: 00007f5b0e416090 R15: 00007fff5cc440e8 [ 400.841704][ T31] [ 400.889956][ T31] [ 400.889956][ T31] Showing all locks held in the system: [ 400.921665][ T31] 1 lock held by khungtaskd/31: [ 400.939045][ T31] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 400.970414][ T31] 2 locks held by syz-executor/5634: [ 400.988627][ T31] #0: ffff888087aa20d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.013072][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.036719][ T31] 2 locks held by syz-executor/5638: [ 401.056340][ T31] #0: ffff888033ef60d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.075654][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.089819][ T31] 2 locks held by kworker/u10:1/7371: [ 401.098599][ T31] #0: ffff88801efe0140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 401.110073][ T31] #1: ffffc9000408fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 401.128775][ T31] 3 locks held by kworker/u11:2/7498: [ 401.134683][ T31] #0: ffff88807e362140 ((wq_completion)hci12){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 401.145956][ T31] #1: ffffc900045d7d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 401.158716][ T31] #2: ffff88805d5c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 401.170124][ T31] 2 locks held by kworker/u10:6/7703: [ 401.176316][ T31] #0: ffff88801efe0140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 401.191551][ T31] #1: ffffc90003617d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 401.205985][ T31] 2 locks held by syz.0.411/8041: [ 401.211062][ T31] #0: ffffffff906b4088 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 401.219569][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 401.231023][ T31] 2 locks held by syz.4.523/8668: [ 401.237568][ T31] #0: ffffffff906b4088 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 401.246295][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 401.257751][ T31] 2 locks held by syz-executor/8985: [ 401.263143][ T31] #0: ffff888089b2e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.275829][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.291149][ T31] 2 locks held by getty/9178: [ 401.296079][ T31] #0: ffff888037bc90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 401.306831][ T31] #1: ffffc900031762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 401.318986][ T31] 2 locks held by syz.5.690/9546: [ 401.324754][ T31] #0: ffff88807c3580d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.336355][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.347560][ T31] 2 locks held by syz-executor/9656: [ 401.352889][ T31] #0: ffff8880811740d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.369515][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.381202][ T31] 2 locks held by syz-executor/9769: [ 401.390781][ T31] #0: ffff88802ceb80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.402322][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.412747][ T31] 2 locks held by syz-executor/10098: [ 401.418345][ T31] #0: ffff88807773e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 401.430615][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 401.440540][ T31] 2 locks held by syz.0.880/10989: [ 401.447300][ T31] #0: ffffffff906b4088 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 401.457349][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 401.467739][ T31] 5 locks held by kworker/u10:9/11175: [ 401.475317][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 401.486535][ T31] #1: ffffc90005ebfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 401.500701][ T31] #2: ffffffff905ecec8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 401.511455][ T31] #3: ffffffff90605c20 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 401.520782][ T31] #4: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 401.531819][ T31] [ 401.558786][ T31] ============================================= [ 401.558786][ T31] [ 401.570998][ T31] NMI backtrace for cpu 0 [ 401.571014][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 401.571035][ T31] Tainted: [L]=SOFTLOCKUP [ 401.571040][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.571049][ T31] Call Trace: [ 401.571054][ T31] [ 401.571060][ T31] dump_stack_lvl+0x100/0x190 [ 401.571091][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 401.571109][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 401.571124][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 401.571226][ T31] sys_info+0x141/0x190 [ 401.571245][ T31] watchdog+0xcb1/0x1030 [ 401.571275][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 401.571356][ T31] ? __pfx_watchdog+0x10/0x10 [ 401.571377][ T31] ? __kthread_parkme+0x18c/0x230 [ 401.571398][ T31] ? kthread+0x13a/0x450 [ 401.571418][ T31] ? __pfx_watchdog+0x10/0x10 [ 401.571436][ T31] kthread+0x370/0x450 [ 401.571457][ T31] ? __pfx_kthread+0x10/0x10 [ 401.571480][ T31] ret_from_fork+0x72b/0xd50 [ 401.571501][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 401.571517][ T31] ? __switch_to+0x800/0x1100 [ 401.571536][ T31] ? __switch_to_asm+0x39/0x70 [ 401.571554][ T31] ? __pfx_kthread+0x10/0x10 [ 401.571577][ T31] ret_from_fork_asm+0x1a/0x30 [ 401.571603][ T31] [ 401.730502][ T7498] Bluetooth: hci12: command 0x2016 tx timeout [ 401.771417][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 401.778289][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 401.788952][ T31] Tainted: [L]=SOFTLOCKUP [ 401.793253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.803294][ T31] Call Trace: [ 401.806562][ T31] [ 401.809475][ T31] dump_stack_lvl+0x100/0x190 [ 401.814151][ T31] vpanic+0x552/0x970 [ 401.818121][ T31] ? __pfx_vpanic+0x10/0x10 [ 401.822608][ T31] panic+0xd1/0xe0 [ 401.826314][ T31] ? __pfx_panic+0x10/0x10 [ 401.830724][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 401.836884][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 401.843040][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 401.849196][ T31] ? watchdog.cold+0x1ec/0x234 [ 401.853964][ T31] ? watchdog+0xcc1/0x1030 [ 401.858469][ T31] watchdog.cold+0x1fd/0x234 [ 401.863074][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 401.868890][ T31] ? __pfx_watchdog+0x10/0x10 [ 401.873560][ T31] ? __kthread_parkme+0x18c/0x230 [ 401.878576][ T31] ? kthread+0x13a/0x450 [ 401.882835][ T31] ? __pfx_watchdog+0x10/0x10 [ 401.887516][ T31] kthread+0x370/0x450 [ 401.891585][ T31] ? __pfx_kthread+0x10/0x10 [ 401.896174][ T31] ret_from_fork+0x72b/0xd50 [ 401.900752][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 401.905846][ T31] ? __switch_to+0x800/0x1100 [ 401.910509][ T31] ? __switch_to_asm+0x39/0x70 [ 401.915261][ T31] ? __pfx_kthread+0x10/0x10 [ 401.919861][ T31] ret_from_fork_asm+0x1a/0x30 [ 401.924620][ T31] [ 401.927690][ T31] Kernel Offset: disabled [ 401.932008][ T31] Rebooting in 86400 seconds..