last executing test programs: 3m25.875733971s ago: executing program 1 (id=1610): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/038/001\x00', 0x82202, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x402, 0x0) r2 = socket(0x10, 0x3, 0xa) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, "c1cfe96d57e9e20c3540dcb6ad"}, 0x24}}, 0x20048804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x1c, r5, 0x929, 0x70bd28, 0x25dfdbfb, {}, [@HSR_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240008c5}, 0x48094) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r6 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r6, &(0x7f0000000680)={0x0, 0x40200}, 0x3) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000180), r2) sendmsg$auto_SMC_PNETID_FLUSH(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x6, 0x1, '(\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000380000048a12bf25ed4abb7512b23c24eda3dc01318cabdebc102bf9ac17768bdccd4d9dba9f2b883deb9c201fe9c2aacae1cc840e9576fd4d48f4371631f0400378094b67628fabc98e522de82dce0001e7183781582"]) 3m25.167751991s ago: executing program 1 (id=1613): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) r1 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x2c9, 0x3, 0x0) 3m24.257442186s ago: executing program 1 (id=1620): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7f, 0x9) r0 = mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) r1 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="205c782002200dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) (async, rerun: 32) ioperm$auto(0x7, 0x6, 0x90c) (rerun: 32) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) acct$auto(0x0) (rerun: 64) rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async, rerun: 64) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getsockopt$auto_SO_BROADCAST(r2, 0x5, 0x6, &(0x7f00000000c0)='):\\\x00', &(0x7f0000000140)=0x4) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r4 = socket(0x2c, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r4, &(0x7f0000000100)=@xdp={0x2c, 0xc, r6, 0x1e}, 0x6b) (async) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async, rerun: 32) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyc3\x00', 0x40400, 0x0) (rerun: 32) ioctl$auto_TCFLSH2(r8, 0x80045439, 0x0) (async) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x5405, 0x0) (async) read$auto(r1, &(0x7f0000000000)='^^@]I%\x00', 0x8) (async, rerun: 32) mq_timedreceive$auto(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) (async) set_mempolicy$auto(0x8, &(0x7f0000000040)=0x8, 0xc) 3m23.806238416s ago: executing program 1 (id=1622): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/misc/rdma_cm/abi_version\x00', 0x8800, 0x0) read$auto(r2, 0x0, 0x1) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 3m23.431436125s ago: executing program 1 (id=1623): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x40505331, 0x38) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 3m23.242271336s ago: executing program 1 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) (async) sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) 3m8.151214246s ago: executing program 32 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) (async) sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) 2m30.826712065s ago: executing program 3 (id=1844): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) (async) msgctl$auto_MSG_STAT(0x1, 0xb, &(0x7f0000000100)={{0x3, 0xee00, 0x0, 0xe74, 0x7, 0x7, 0x65da}, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x8, 0xe, 0x8000000000000001, 0xfffffffffffff001, 0x5, 0x81, 0x8001, 0x8, 0x8, @raw=0x3, @inferred=0xffffffffffffffff}) msgctl$auto_MSG_STAT_ANY(0x7f, 0xd, &(0x7f0000000200)={{0x2, 0xee00, 0xffffffffffffffff, 0x2, 0x7fff, 0x9, 0x8}, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x4, 0x1, 0x7, 0x8001, 0xb07, 0x823, 0x101, 0x5, 0x7, @raw=0xb07, @inferred=0xffffffffffffffff}) getpgid(0x0) (async, rerun: 32) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000280)={0x1, 0xfffa, 0x800, 0x428f, 0x2, 0xffffffffffffffff}) (async, rerun: 32) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000015c0), 0x6eb82, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0x91) io_uring_setup$auto(0x1, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0x38) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 64) shmctl$auto_SHM_STAT_ANY(0xa, 0xf, &(0x7f0000001380)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8, 0x7, 0x5}, 0x0, 0x5, 0x8, 0x0, @inferred, @inferred=0xffffffffffffffff, 0x8, 0x0, &(0x7f00000002c0)="2026c0cb5b266fbdf5a868ab2a3050f060e56e226d839f346d8821db2e170b0c98500ddfce4ec688c1544c669dce1519bb034c9bed275c6b3b81f423d8e1120ce3511ebc18840b8a2a67041225ec59c598761d321c2c1e14b5c0c8350942b0a9b5369ce860d0edb920eed8b546b333c3329b51ae668bae79c4b968ad5af592afb70bc7afff1086c58808d5e49bde47b78cdae9b9d56dbe0372bd2c263c63f0d5fe14afb4a6d61ffcd1588597a937d9032940c8f4ca3eaa5f8618955c", &(0x7f0000000380)="e088beebda7a03193493bb7db6501014bf42f1f779631133869418af5ebe109d4e7b6173f91cd4be7998f04d2062803e8ad132de6c995b1c83491311076ffe4a7121580b045876e7102e852809117475dcc8962643f5d4a93be0e86873a962147e8916798e0c6f4b9324a11a3bbad2a53cd673ae5c5f02fed47782904ae9e6d6ac9456064c09a1f3a30e64b12f5ab747bda5a3e160b6e6b19cbd52bbd91067b37f590c8c68894db72cffbf543e7afc631e70c613ec25541c4226904c3b3bad90ba6ecc24d9d267c9bc0a17d0e3a0ff61b121a510e103090760e1488fc0ff5053739f58a1e2a60fc15bbb526d7ad3cb04a6af59c304277c8acbd1ec495b39e15db1184df8c11846b50b456cdadb1822de93d7a2eb10fd1f6854764c0f29a427f8f3db50699b85cdca392e9799c2f7600dd803d0dbf2b66e46b6396ff246d61c4576a994422a0c70802b5d3ad34bd6a30962feeba39c7a619cd3d3085f91714a7c5470b225753b4ac53e910ca139e68b1c254968068e0296ebf321f17bf9876aa33b4a9b3f4caf44799ba0af3df221947c642473f88e1f09846ab1a8f6ee65309b03ddcb64acbcdc556f9165ba660340b7a3df3f7bafd50cedeb9987e1306c91086fb7c0d3f2bb741aa4047bdcb3d80ac2a9757218c0c7fac335f78c0bf3bc81126d9573c3cdf98715918a484ca2e5ecaa180c1675d3ffd32ed5107b1aa283167cad5ce5f5ac64f76943ecbfc4ffa1ec1521e3b39fa628a3f42ed0ffd588360eb48e4be2699b100ea62edc7e22f3c4826eaf80b53a2371f28ccdacebc4bfff5b50e3d6188090988d8e438791f48af00ef548a0e95d36f44b1adfb275cf2fcde3849220e9c51e9f9396308f50beb0a2860abf45682c88876ed05957406a604983d99787bc622262c00f83e46f11dd7ac5f4746d2907d9a7ccc8c3afb1b7adf16c059ebc2f7751050619b2f0d9b10762db0d6399040e5a8065183657fad864c917bf41ba59ce881e20a0118db4c29b0211cedfe3651d33f4ba49912795c5c69aafb756ff7cbf2262bb9ed29aa8bc66ab043fb71176d379b3ab24d2e346215d09996c0425987efe21b6ff2d9565ba959fe635ec746fd21b00813a8fd438fb00ac31a684ee088d720df260ff45a1e2758797bfd6335cc46ca5176f87766c3e224417f60e082298e033334e47201966978b0401ff3c9a1ca80c23595f30d1ec2d6c4dbf0e9698ab757da957604c8c51e851ac775b340cfac33e08e80c7d9e7a62d79b79e510af04b15651a8fff1f00361c0575cdd6863af1991a97648f2d7b6e8fac03c9d09b053144928f825fd82fd8e51facf048960cbf1b3a2daedba4f6b2351df2f7e16bf7a49a445a4a942f933bfefe53d08aac0e8d01e0914c20309ae4906a64c187a22b1cc786e55e9416487e75a1613dcc9f80ade2ce6254f7a9096229746081c8375228f56091ab6379ead259ec13d4c43a048540b0ea299b477952626a856ecac48628e8f1b253f0ab0ebd40b6edb1bf607c9546dd127588b51959ff79a055549f729bdf4baa9facfc30e240eee2f02247df698b461085ec33bbbeaae07b25de53247819f7566451ff5d08e19816fa2c1363fd41972d8275f211487f6063bc33e9ea70bd1e436c48aa0923ee5454bfa9b4ad375a4e21f54eab6b003bc103a33f6e8f447a71fedfedae762a6f6f009dc8766e7485f6307aa9bcdb2cb72d58cf0ee4f7f6b8449d2693e79000da95c9e75e6424801b8759ffbeaac597c42c97dc5c50ce34a902d8df93215e6280ffa1aba4182fb59994031059bf911785460b5d00b414a0fe5469816292c98f9fda4aaa12191d0a3f56e3f72b01002773c5d02f8a512286675ab1f304d77139838f5873952c97b5648d8ad4dd4d0768583c2c5da98b6292b100ba4c20148b740a3375116cb1d71dd69188c8c40f12017be7af2559ba27c174eb48f9ec37dd05bd1e3f326cdb74d4802da053a7e1bf67cc0c0055daa4fa84cc679711ec842979c1fb6dc6f20020a4c22406cac31c9c2d655db53531c342b07a8f2293f6d514e3b07be0f77ce1290006a007f1dcfc615cef4b6fe9f7433db64f2b6c35437ecb50477ea30c0fce812be736c555008b8dbd7a92342ae25eaf39e52607491eced0e19d39fa7e528742575f4077680d0e8fde1e84b98236a9596448191652f879887627323643e30d732fdb1c0345366954fead82d22c0619bdb74e99918816be3cff15c7a66acb98de246708a6e2339fbc1193e850d015c0496f3c59ec2eeb15bb8d19c979f8fd3a2955611365b1e53986a4e87ab53d58ceeadc7e684cec42bee16bed9fbc736f5e3f78826f14d441659a4f70328d09f6e2f45dc63281910eb6aef01ea9bdcfc6474a4161eeed1fd6f5ee18f36240b266649c0ff07cb3b3b6f3feed1c585de78d112ccdf69b151ed7a293bfc42b91bf4a916933076d1459e129f552f506458c0d6b307f5d7cade23754c74ab0ab3ae6e5fa4f4e4a3a931e0f09af7c11df41ddef8f960988071b45e479cf0ca290ed39dce1cbbcc94e1055068328ff4d1f128208951ddf6a8893b01fd3a63fa380013528daf43b746842a72cc66a3f84677a20903a99c94e98894022ec55f12bbda3f2bb99cd87374fe83a0382024d014583f4f83575d2f33f6a35de8c3d40c315167aad01db27b9daa4c854aeb9167f2314d74665c91a23525f77fd42d65531cdcf46c481e4a6d3446219bbb2af1ddec8a622369ea868eb51175ede162f073c4b07674b38e9fb421c2b0d245269e85c6883ad643d727291893587b2d9057ad4cb7da791b4d2a1b94f850156a4b840ce036e0e9acf65f960a7c0bc3ba091c15ef56c2030f7f00cd6e48e8a7650de89361e722ce706af116250f5663aab3714c9c714739122400098aa9b122af95d7f8883985a1af5f1d26cd13fed5177d0184aad0919d5465b6cfad6cdd73eeb23edbe468c10f3ba06db6249cd5322ba83e4c1c8825c8f4f747eff45d1981f03cde33b262bf689fdf11cd7bea7e548936010c1cad7caae41a9cdfc099262bf67026482f96909882031a643bd1feb21a9ad66a9415f2ae1042d17a3b4ea76262a41fc2ce8289adfa2b65baf7a2695a977c433062fa8bbe27ffdd4b2c77ff264999338c0a633f491648e4b1ea7de1036baf7426311a5dc7c4f09f0dade758836a444e30a813eed05c12d6500de13d676e0f428735b0d54e18f2d3c3be248cf72ea90b07b0cc522677b4951fbc40465705479c1eb76c0d89183169f8e2604bc6a2998436d27ae9194cdf0469bbdb972c4beb911ab1a42d2eb8438f94f713b211756cad51e9039067515b5a8d998c8f53bf625e498f92d720b32f841060567dc6cd226a5b4139661ec1558fc761a9bc611de007084185ff8d855baca6ae813be787192ad3fe44ce06fcc2114468fc9a2365596a5e4843e91d47c5ba61e96644cb18be931ce1371ef658acd6bb03d050d528c2b6da9c0dae4249d39fdab97b42a27abb4d5889a2490f16852f1142cfd5e8ea1ea665de720e0f67c9c3825b37022ceffc1767587f8fc4245692d433a4662cb1d0986b0d9d8037efa77f0a962e7df89160ec2e1297d33e389f8088d433126d591e1dcfb7274005b51768b7e16c138c7ea4cd62a7f24350603f5a828c3bdc7856fa46d1edadf4046776fb98620cf10277d0f87150918eda2517d99a1003d76c1a91829da7ab06a0e75129c9d68234f560a7f6c030b161488aa546a920b7b9277a3e6f06cd88737942c25e1a7112cc6cf6f5d89041c627aeeda28179baad565264889dd5a48fe1226bb391bfb0467088d6a3354ec70a5324bdb57cdffebe996f74570aafa5070012ed9f9bcb191d51401207f5683c5c754d225ba01ac537d0ccd87cc86905054d2e2ab264f0ab69facb581166d6fc6e0a9112812dff5359e91dc6c567ac7d4a2d9f07f5d1ce23da07c8d0d09366ee964a7b62546177ac00891575d5914f289e56fb3e16eaac00d45a5b068dab2733f770574e9ac85334c3707e3cf2cafe7c04ba0841ff4d0869e4bf46bca52befe4dc7e51173dc6087a9f745f11b9582d2226e0a7ccf8da97be9cfa051626993269fad17e547c71e5091dda393cfcc6ae2c3e3a7979f49d28096b7d5cc1fe744181b7a2bf59462b1af6083f185888108a356ff5dff27c37798c6cbfccbf12da86d835f7327ec6412b4c3f992feb34edc4e19e2a075342c6dd357b856691deb24be90c25c1677d67fd75d67e6f21190f37ee3beafaa8ce024f9b001f57e50350c6aed40c4af03bf6cded468d6024c270af19e58c5257cde31665972502db5ae249e49c41864bdeb1d49e73b0308a87ab30739cd8944e012e1bf3efa204d0c22d1af172ad6c806d282d7cd5bc457aadf3899a4206d720111c238a37ef5f7b535a227d0cc9de5ed3d480adcf1170175510388c65136df897475d36f79805c0fee86ac5f66519464c81aecbd009542333f5505aa9008795bd3453521da958dd095f6ea1708e9bb8d3762964e6e3d45607d062ef75bc093654df8e27e70ab6e850fa601cc3491af6cb17477c63d9da5e41af8231dfd5df84a79017ae8034f9d7e1f41d7642e7b5ac9aece694efa3ffa401e480d45c856883c697d80f41427564faaa51fe15ead79d2a48bcfdf25284e082d8f4568ff677fd82fba6135dce63045a1137ba6c0a4a08d3ace1d5fe079959e5098750e4ae2e25e7a9caf1f0b4c33780f0e78ce9e9fbefef1bf352c3bb7a80992c33203fa0d71ee45dd39677a01456e083eff8a4d319594e106f7d7454b525e2ffd86dababd0d32fa2f75bb598e241aabbfeced6e075c25a0ff45dc00c0dda514d10081bf1a32f31f98182252c10e1ce5b2947ca014e215e116816c29be54ba808dc735b78cf9b06dcdf0e232ca07981f6b53e6dc6d346fd5d592d9b471c70407e1c87fc6a1512d163d6e37768f000f774187c035e2a5bf58d993488b971f59e90215bb0bc60a949c3f652124b64fe19436637761bdfafafe18de14e599afd7585dfc1f3f5dc54d4a3d529bdbe1296ba09b1294ec2743e3eae47e6ac8cba98f11ff3d6e4735e8dceb1e25d5a6498770c31f29375a516ac8ce51fa07060d6dd46b7df2377e492c9f13fb7f4721ba07dd15fda072c89901314b14a1923d7c5d7c6909cd585f72be73d657507a2772f0f072be374ae31f7ae8404416b0ce52369ecdb2f9ba76a2e77f17502e4ffc4ddcf086c3f83b6877111585e75573e6aa6bdd458f56c4ea2225f3d829b9f05221638a5ca86e83c39d6a36f8689af1f9344f58aba821a52dbbf6b8e5a9451c5a0071a58ab4313ec15b062947f2ea7edcb8c23f648cec27c8bf4e88f48e0b7dee0977b550c3191ea4b75341f7327dc36e6a26bce7c32dcf37f51348e3d0875ec0542ebf8d6a1a20a0eeca76b1c203802971c53453c3b90ff2d461cce565cc71ba5649b8d0f9535bd9a1ff879b546d1015a099a5c8c064f19de29dd4365f460e3e5c5d08798b5f40d4f82bc11ad3daa47f6fb2356c6b66afda486130ebbc4a8e887db20e8fe4a09dfd0fffe931f3a740e3cd114198e7bc822dd57df584ff63120cf1da35ad4671884a2591e93e4c8c5a07a4576fc3c8c7e238ea5556f2cf5ecf753c18741c4509a3f68fc7070ad0010f4bb47f9387d3731930c0d064567e23f4801d4efb1898858fac89d197a83b8545ed27b596869b45e049045e25c150154d3fead5a7e209099c3caac52f9f85fa252c32b3f84317f8c0abae77b10ff814a09d65f236183bb9fa2c7c64e91e86aa4bc08768369145d9d0d20"}) (async, rerun: 64) r5 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000001400), 0xe1401, 0x0) (async) r6 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) pread64$auto(r6, &(0x7f0000000040)=',/+\x00', 0x9, 0x61) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000001440)={"1abbc5e15e57029aaea1de4dcceadee49e0d7a623254a925393044c423ce2eac", 0xfff7, 0xf347, 0x0, 0x3, 0x8, 0x0}) (async, rerun: 32) lstat$auto(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x80, 0x3, 0xd84, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x51cfbe6c, 0x52c, 0x42cb, 0x6, 0x3, 0x5, 0x9, 0xfffffffffffffff8, 0xfff}) (rerun: 32) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f00000055c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005580)={&(0x7f000000d5c0)=ANY=[@ANYBLOB="fa050000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRESDEC=r4, @ANYBLOB="08001100ac1e0101040024800008000c0005000000192901806d516cacf7889d94d0603eb2414d8cf1f590b96a9df1621ba7252f3ce26c7a5cd7c5f2e5211d6b230b9c78d1f33ed5db78fece3a7675243d957fd0d121cec96e757513c803472fab4e034eb88afb2d19ed00928008008700", @ANYRES32=r2, @ANYBLOB="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", @ANYBLOB="ffca21506d6dc77350a8b7b2e21fc513b7f847e1c7278861a4b85791c2e0b2b30e26688a320ba4848f171a0e9c62ee5599775c", @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="f39714c75db93fef2a893ca9688be5818c9b022baf6a45f11e4369bb6f07581c655823ddc2c47c6af88dd8bed14643ba7de33a556759a9eae9a35760e6d7fa68598cb62d07f0042c72e2c5c156a17035a21fcd3fdcd42f7d3d5dceb0767d95d8a7b3dd460c22f16d3989e3c477ef6692f6ad645b39f7dffd166c4b5e4ad93ae040f816d6d643b807b4a1ba07ba4519c4bd2a8718de99d6916a4f3ad6e5b4a2872308009700", @ANYRES32=r5, @ANYBLOB='\b\x00-\x00', @ANYRES32=r7, @ANYBLOB="5263dce24b3d3fbed1279f0f9eb7fcbc2c1b16c7473349fc68db10f70a64b7d6910f73811fda9185acd1f36998ef32738eb11b1e1dbd16993eacdcd41291c99c35d684f6477eefe2410f6a4c5b3bd09717cd48b9d8d24c57c734fc112e052e7fd37ef99bf42030dc8d40415d8ec7b075cb622ea09fdd138562e778a69169e3591059c3de5838e4dda0e514c4b96a13e001b9f3be420fc59532f8a8d21d48d273564107325db29ec0512610f88bcb10ca36bf64938000000006040180d4a58c200c62354f413badc8d2e7a4bfe4d9f7a2b33c7e73663c99d5187bacd7627a9802c01d8c38e20b2cd9f9a0dfca3e8ebcec118895aeec2ee30077360c11e42d722df1588c228de94b0f78e263625e2d54149fe233ab5aaf417ec30bbd04806b033bbf80d2f06d951784d8949d517319c1cd299a742eaca8881abbaf381aa6039f4ab19b6a5c471a04b00d06f1458c4f63e347051ed2420007800800eb00", @ANYRES32=r8, @ANYBLOB="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"], 0x3fb0}}, 0x10) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2m29.481926553s ago: executing program 3 (id=1854): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x4, 0x32c, 0x1000000000002, 0xeb1, 0xfffffffffffffffa, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x82, 0x0) writev$auto(r2, &(0x7f0000000d80)={0x0, 0x2}, 0x5) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) read$auto_page_owner_stack_operations_page_owner(r1, &(0x7f0000000400)=""/173, 0xad) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000003c0)={0xd, 0x66, 0x6, 0x1638, 0x0, 0x0, &(0x7f0000000300)="0421d911dce5e346f1768bf247f6330712803001df4e0ab3e5f67c8f4315d3f6b022c5b7c4966c708e68325cf614aaf027d17314d53f3f86e83221969880f4c9a155f94504c75b87b9a2c9d2dfc8497eec64e0754f45f7e0a3b547ee0c74a7effd06cbb043757a12efba89bd06de8fc6498cd4bc7e00f9008c599e0a720ef490b8c65d945d99d0f4d8374b055189d32462a0fc0b15131d09d2c3e2668fb8c4f9"}) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r3) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r4, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 2m27.291421017s ago: executing program 3 (id=1858): r0 = socket(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x4140, 0x0) (async) bpf$auto(0x40000000, &(0x7f0000000100)=@bpf_attr_3={0x8, 0x1, 0x933, 0x2, 0x9, 0xf, 0x7, 0x5, 0x0, "f97ed27b6d6658e95750cf777f2926e4", 0x0, 0x10000, 0xffffffffffffffff, 0x8, 0x1c00000, 0x101, 0xffffffff, 0x9, 0xe, 0x7, @attach_btf_obj_fd, 0x1, 0x80, 0x8, 0x8, 0x4, 0xffffffffffffffff, r1}, 0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) (async) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)="fb", 0x1) (async) gettid() (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop12\x00', 0x204000, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) (async) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video11\x00', 0x280, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r7, 0x80085617, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r6, @ANYBLOB="01002b00040010000000002176ca59040003b4da83fb7d0a10a41e0ffb0cc99f1f02bd872528eb428cb565f8da016b5af3f103db26496bbbf1b403ce979aad3f2d0b64e97f9b3e6d9998d8e8aa061eab25659c31df4db9ad63c79cae9dd4880b0916771f4d87ea3d01fb80"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) (async) close_range$auto(r5, 0x8, 0x0) (async) ioctl$auto_TIOCMGET(r4, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2bdd73929a3210e1f216ce5179acff73330045a851373ef9915a21c09ce72ec04c574ca") (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 2m27.066210584s ago: executing program 3 (id=1861): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x484080, 0x0) r1 = semctl$auto(0xaec, 0x7fff, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240024e9872f9f0000", @ANYRES16=r3, @ANYBLOB="230027bd7000fcdbdf2509000000040003800400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = syz_clone(0x84000000, &(0x7f0000000040)="8c10df497fb76866495fa73a9c88d6cba4b2bfe6575663476472d35efe3ae281170f1dc9f15476e0c696d3b8bd7a94a2790bfe0e0f77664c5ec0023f9e167f8523e158b734c3684c80a568b82068526b9b3ff552a9faabd74b69c29939fed776ee3fcb2d4600066827092032f1412ed54c30d317b356cf636995eab7fcd0233dc9f761141ccc7de6a13a0d25f71fd1bc8246dfb256024d060072c70f3d6530548c8f98833f183e25e04c6d0aee3af6543c185b586f6de3fc1db92455136641b0298451f848939e82eff173466515b912b634b796485e964214", 0xd9, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="1935b1e648707365d666d9559e282ff963d142f421d2d248b61517f76ce1a1e8461c823f673aa5e439ea0162e6caf9c77655c54bc936a8cd219e7e83af12d510de5ff86bf825f07155ba33d32089778ffc7a0bb1c58d6bcac6964ba2c8d5d39cc09353b5ebcc6d6c8bfd380a526b6dfe07113149399693790e7217ed46eb31c8c291367b5a56f1a79b6ce81131783be5693ebc6b19497499d553606cf2567a8d71212b5a83e6e3327359c5d8a1") ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{@inferred=r1, 0x80000000, 0x6, 0x0, "69dd65d2bd5ab8feb3785d5ee0880cd066e3fb486eb0c4b1f88589e1442361fd3cdb0e3044a46be22601650b", @inferred=r4}, 0x1, 0xf73, 0x6a, @raw=0x2, @integer={0x6, 0xf, 0x5}, "8dfdb6b4495b77908cea3334a7f775b690d732517b94fd021ed17f61e89e69a0940f10b68e5c0c6b2ebd474a5a45245c5778ad8c0353811c2dadf343fb930a00"}) close_range$auto(r2, 0xfffffffffffff000, 0x2) socket(0x1e, 0x2, 0x6) poll$auto(0x0, 0x2, 0xc) bind$auto(r2, &(0x7f00000003c0)=@nl=@unspec, 0x7) r5 = socket(0x2, 0x2, 0x0) setsockopt$auto(r5, 0x1, 0x8, 0x0, 0x9) 2m26.717075233s ago: executing program 3 (id=1863): sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="2101000000d42c"], 0x122c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) pwrite64$auto(0xc8, &(0x7f0000000580)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\tC\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd2/k\xf5,\xe61\x11\xe5t\xf6\x03y\xa4', 0xfdf0, 0x64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x82, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)='8', 0x1) setsockopt$auto_SO_BUF_LOCK(r0, 0x8, 0x48, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x2) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x0, 0x0) r3 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x40, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r3, &(0x7f0000000500)=""/109, 0x6d) sendmmsg$auto(r2, &(0x7f0000000440)={{&(0x7f0000000240)="61651934f1885abb5522d919a204f09ac86d8cb65666fda2492b205879c3171ed70ef003ecf1d80541782c0c5d0902cdcccaa87c3b120348fcd19137a32a2babb798695fc560e039ef1d340dc23af2b305f35730520e65a117d9e813f5c312d6cad32152bcda9c112262ccf61f5213939a9c9e87a8a77166bd1001ef76ca3215b82e656ae8f4a6e8c9d0eb8d923c26beccbceccd635e50be0896ca48ed56edad032561f9103c784f718fd5e8c857c04779cf719424ae", 0x5, &(0x7f0000000380)={&(0x7f0000000300)="e321a081a7e5fc042b2020ae273f7a79872f90242c2188fc9dd82687531c8c176fda9ace832c5ea13f6f6f6f2d136fd4fc1d48be90b60b8242e646ee874b0a61f3890aad4082bd1b56", 0xffffffffffffdff8}, 0x0, &(0x7f00000003c0)="294e11d2e988e4df9fa794d0e15fdfa7126618a9939b0fd3e7543bef99db31f6a856474313e3d86c51cd5e7e8b99ffecaede3c86658805ced57258a0b2d2cd7fecb5f834b63edb732813bbfa949019aad6cfd7dc03c8", 0x0, 0xff}}, 0x4, 0x0) 2m26.174311568s ago: executing program 3 (id=1867): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop14\x00', 0x2b655452b6b32dea, 0x0) mmap$auto(0x7fffffff, 0x810002, 0xffb, 0x8000000008013, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0x7) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x2, 0x4, 0x0, 0x2, 0xffbffffffffffffe) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r2, 0x4140, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000002c0), r2) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0xfffffffffffffffe, 0x200007, 0xa98) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420005, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3f, 0x1, 0x4, 0xb6, 0x7) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x7, &(0x7f00000001c0)="23f8f516a90fdcf59be3c1808e25ed72b536cae2", 0xc694, 0x3, 0x80005, @number_of_packets=0x7fff, 0x2004b, 0xc, 0x0}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a2a, 0x1000, 0x0, 0x8000000000000b74, 0x3f2a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x6, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_drm_edid_fops_drm_debugfs(r2, 0x0, 0x0) 2m11.063940707s ago: executing program 33 (id=1867): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop14\x00', 0x2b655452b6b32dea, 0x0) mmap$auto(0x7fffffff, 0x810002, 0xffb, 0x8000000008013, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0x7) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x2, 0x4, 0x0, 0x2, 0xffbffffffffffffe) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r2, 0x4140, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000002c0), r2) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0xfffffffffffffffe, 0x200007, 0xa98) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420005, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3f, 0x1, 0x4, 0xb6, 0x7) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x7, &(0x7f00000001c0)="23f8f516a90fdcf59be3c1808e25ed72b536cae2", 0xc694, 0x3, 0x80005, @number_of_packets=0x7fff, 0x2004b, 0xc, 0x0}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a2a, 0x1000, 0x0, 0x8000000000000b74, 0x3f2a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x6, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_drm_edid_fops_drm_debugfs(r2, 0x0, 0x0) 1m59.220161403s ago: executing program 4 (id=1996): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x6, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0xffff67d2, 0x0) 1m58.052230087s ago: executing program 4 (id=2004): r0 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy10/hwflags\x00', 0x284801, 0x0) bpf$auto(0x0, &(0x7f0000000080)=@info={r0, 0xfffffffd, 0x80000000}, 0xfffffc47) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/misc/rdma_cm/abi_version\x00', 0x8800, 0x0) read$auto(r3, 0x0, 0x1) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 1m57.624286496s ago: executing program 4 (id=2007): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) socket(0x2b, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/snd/midiC2D2\x00', 0x40881, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000002000)={0x1, 0xfffffff5, 0x1, 0x9, 0x2, "54c6f727760af2d3f9cff1dda86faf4b"}) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr8\x00', 0x0, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000), 0x0) ioctl$auto(r3, 0x4b67, 0x1) getsockopt$auto(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m56.577428703s ago: executing program 4 (id=2013): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r1 = socket(0x2, 0x1, 0x0) (rerun: 64) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) (async) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) write$auto(0x3, 0x0, 0x7fffffff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/zone_append_max_bytes\x00', 0x48500, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async) open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) (async, rerun: 64) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/net/raw6\x00', 0x500, 0x0) pread64$auto(r3, 0x0, 0x206, 0x7) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x79, 0xe8, 0x3, 0x4, 0x0, 0x2}) 1m55.684980958s ago: executing program 4 (id=2018): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x541b, 0x10000000000402) 1m55.567340324s ago: executing program 4 (id=2019): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r1, 0x4140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x7ff, 0x6, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x6, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_drm_edid_fops_drm_debugfs(r1, 0x0, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) 1m40.370135961s ago: executing program 34 (id=2019): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r1, 0x4140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x7ff, 0x6, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x6, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_drm_edid_fops_drm_debugfs(r1, 0x0, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) 40.995105273s ago: executing program 6 (id=2303): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8001) r3 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r3, 0x8, &(0x7f0000001100), 0x5) mmap$auto(0x0, 0x10000000000, 0x3, 0xeb1, r0, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r3, 0x7, 0xffffffffffffffff) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, 0x0, 0x8000000000001b) unshare$auto(0x40000080) msgget$auto(0x0, 0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) shmctl$auto(0xffff, 0xad, &(0x7f0000002540)={{0x80000001, 0x0, 0xee01, 0x1, 0x5, 0x81}, 0x4, 0xfffffffffffffffd, 0x1, 0x0, @inferred=0xffffffffffffffff, @inferred, 0x5, 0x0, 0x0, &(0x7f0000001540)="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"}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x20, 0x0, 0x0) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0x5) 39.957332214s ago: executing program 6 (id=2307): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex$auto(0x0, 0x204, 0x3, 0x0, 0x0, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r0, 0x29, 0x3d, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xa0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket(0x2b, 0x1, 0x401) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa802, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto(0x3, r2, 0x400000000, 0x400000000041e) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 39.264171802s ago: executing program 6 (id=2310): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) swapon$auto(0x0, 0x6) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) ioctl$auto_VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r0) (rerun: 32) close_range$auto(r1, r2, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x12, 0x2, 0x4, 0xffffffffffffffff, 0xa, "ef9dc39a64180900", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x1ff, 0x5}, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x204500, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xc0605345, 0x38) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) (async) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0x21, "01e983638bffff4993021400"}, 0x1c) (async) write$auto(r0, &(0x7f0000000040)='(}]@^\x00', 0x5) (async, rerun: 32) r3 = socket(0x25, 0x2, 0x4) (async, rerun: 32) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001a80), 0x420102, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000001ac0)={{0x1, 0x8, 0x1, 0x1, 0x80}, 0x4, 0xffd, "853166de856904a0212d0d2240da22061b73f80a2dde2000"}) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) remap_file_pages$auto(0x6a27, 0x1004, 0x0, 0x3, 0x4) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) write$auto(r3, &(0x7f0000000000)='\x13\x00', 0xfdef) (rerun: 32) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)=@link_update={0xffffffffffffffff, @new_map_fd=r4, 0x8, @old_map_fd}, 0x1) close_range$auto(r5, 0x8, 0xfffffe02) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20002, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c3382, 0x0) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) (rerun: 32) 34.926107227s ago: executing program 6 (id=2318): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x8000, 0x4, 0xfffd, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x101, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x3, &(0x7f00000000c0)='X**\x00', &(0x7f0000000140)="7b95cdc84489a79c877c34fe5e5582a828a009edfc68b713b92ac42c4eed3cc33ed05b85bf4fe20914cf93429505e800987fb29467dc2941bd0a4e72593db09fd27df29384adbbf83a9e582400b0772e6800d4204367b370c9ecea9cda036dd9d1ab8a0ebf891af04bdf1f914149d1e0b698a5e4d4de2dfab1e9746345e6c9bb447a00fba6220250967c5ca575f7f1d8ea0f6942e5938a0b7caba9de5634011bbf7b5aa0811e1ba91bcd0e32f073ff8d0629ceae6eea5ee81369d17f134c1ebb37d9dc5b55119c6bb84a754321387c2bca54c4b9592edc2732679ccb797934ad146543f6105c49cb3af779a98530c714297b0f0c7ed03c", 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) ioctl$auto(0xffffffffffffffff, 0x2284, r1) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r3, 0x40095505, 0x0) epoll_ctl$auto(r0, 0x1, r2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000000)=0x6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20100, 0x0) read$auto(0x3, 0x0, 0x80) r4 = epoll_create$auto(0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) epoll_ctl$auto(r4, 0x1, r0, 0x0) 33.925934122s ago: executing program 6 (id=2321): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r0, 0x7fff, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x3}}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x22b01, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) keyctl$auto(0x6, 0xfffffffffffffffd, 0xee01, 0x0, 0xfff) mremap$auto(0x0, 0xbfffffffffffffff, 0x401, 0x0, 0x7fffffffb000) unshare$auto(0x40000080) chroot$auto(&(0x7f00000000c0)='}[,&*}\x00') mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open$auto(&(0x7f0000000180)='}[,&*}\x00', 0x7, 0x98cc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0xd3a7, 0xfffffffd, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x400005, 0x25, 0x4, @inferred, @reserved="630d530e55f2940f87c5580dd6d03d326858cba1428368e17dd0ceca88463efa0e31cd124fc844bc62fc6fce5ce6dcdea7d8b0aaa17e657c5969b5b494035f33865acc90360b98bd8e36c3b553f3c18172a2579ad612531a4dccc48e8770223069caf4694e9f7759a0d16ffa4780bc3f828dd4a8cc877abd7dc6ae56ff3f0cce", "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cb7c0eb32791702b8d7c2d"}) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000080)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x5, 0xe}, 0x5}, 0x1, 0x101) pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0) 31.994784024s ago: executing program 6 (id=2330): mmap$auto(0x0, 0x20004, 0x6, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) socket(0x2, 0x3, 0x100) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x40800, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='\xde\x00', 0xfded) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) r5 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r5, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0xfffffffffffffffc, 0x1, 0x7, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, 0x0, 0xc004) 23.306842617s ago: executing program 2 (id=2365): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20040, 0x0) read$auto(r0, &(0x7f0000000240)='$\x00', 0xb) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0x8000000000000011, 0x401, 0x8000) prctl$auto(0x3, 0x1, 0x0, 0x2, 0x3) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x6, 0xf, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0xfff) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0xffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x81) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x400, 0x3f) r3 = pidfd_open$auto(0x1, 0x0) move_mount$auto(r3, 0x0, 0xffffffffffffffff, 0x0, 0x104) read$auto_nsim_pp_hold_fops_netdev(r3, 0x0, 0x0) 22.953564052s ago: executing program 2 (id=2367): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex$auto(0x0, 0x204, 0x3, 0x0, 0x0, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r0, 0x29, 0x3d, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xa0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket(0x2b, 0x1, 0x401) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa802, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 22.684999983s ago: executing program 2 (id=2368): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88\xca\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x840, 0x0) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{@raw=0x81, 0x6, 0x8001, 0x8, "b132ce14b9fa7a699c29a892e255dab2591457de9c4db5868db157e9cc1910aa07e336ede9b387eac3eae00a", @raw=0x8ef}, 0x2, 0x8, 0x1895, @raw=0x4, @integer={0x0, 0xf, 0x9}, "f82d0516c633863c5281ae962fd8c811792ad96298c95d5a9da1400adb4ee0bc170d51ef637d9927912407406936d9cbf46ddadb7820b40766245026a272cd3a"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) mmap$auto(0x4, 0x6, 0x0, 0x9b72, r1, 0xa8000) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 20.865387103s ago: executing program 2 (id=2376): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0xffffffffffffffff, 0xffffffff, 0xffffffffffffffff, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop5/events_async\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000002c0), 0x3001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x1, 0x80000001, &(0x7f0000000180)={@buf=&(0x7f00000000c0)="311e01368899b17e41ec89b4a925de9a118d574e1db5353c2380c36176160d58444401bd8f478fab53f56304358d842dfba57d40cc4b505e174840ac5af2065f4b7edf08bb7bca8402df27b77fd4517f2e8cf655975b552067a6e0271a71a5ab5e3a8cb216241e1c5978454f59e105056f8e63d29768be57507c35f0b8369155791303", 0x4, 0x5, 0x3}, 0x9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0xc, 0xffff) 18.691084244s ago: executing program 2 (id=2378): r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000019c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x14, r1, 0xf03, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xb5aa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x458}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x97e6}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3694}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/rose15/addr_len\x00', 0x1dab02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) removexattr$auto(&(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000100)='/+!}\x00') 18.406047185s ago: executing program 2 (id=2380): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x8000, 0x4, 0xfffd, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x101, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x3, &(0x7f00000000c0)='X**\x00', &(0x7f0000000140)="7b95cdc84489a79c877c34fe5e5582a828a009edfc68b713b92ac42c4eed3cc33ed05b85bf4fe20914cf93429505e800987fb29467dc2941bd0a4e72593db09fd27df29384adbbf83a9e582400b0772e6800d4204367b370c9ecea9cda036dd9d1ab8a0ebf891af04bdf1f914149d1e0b698a5e4d4de2dfab1e9746345e6c9bb447a00fba6220250967c5ca575f7f1d8ea0f6942e5938a0b7caba9de5634011bbf7b5aa0811e1ba91bcd0e32f073ff8d0629ceae6eea5ee81369d17f134c1ebb37d9dc5b55119c6bb84a754321387c2bca54c4b9592edc2732679ccb797934ad146543f6105c49cb3af779a98530c714297b0f0c7ed03c", 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) ioctl$auto(0xffffffffffffffff, 0x2284, r1) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r4, 0x40095505, 0x0) epoll_ctl$auto(r0, 0x1, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000000)=0x6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20100, 0x0) read$auto(0x3, 0x0, 0x80) r5 = epoll_create$auto(0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) epoll_ctl$auto(r5, 0x1, r0, 0x0) 16.800420501s ago: executing program 35 (id=2330): mmap$auto(0x0, 0x20004, 0x6, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) socket(0x2, 0x3, 0x100) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x40800, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='\xde\x00', 0xfded) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) r5 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r5, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0xfffffffffffffffc, 0x1, 0x7, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, 0x0, 0xc004) 7.937216861s ago: executing program 0 (id=2395): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000280)="13") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x5, 0x1) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) socketpair$auto(0x4, 0x0, 0x100, &(0x7f0000000000)=0x6) sendfile$auto(r1, r1, 0x0, 0x2) 7.043539915s ago: executing program 7 (id=2398): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/hid/drivers/hid-udraw/uevent\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/213, 0xd5) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) setsockopt$auto_SO_RCVLOWAT(r2, 0x9eb, 0x12, &(0x7f00000001c0)='/proc/sys/net/i\n\xf1p\xd2\xed\xf8 \xaf_WR\x88Q\x8b\x84\x17\av68conf/geneve0/diqa\xbf\xd6ble_ipvCa\xac\xba\b\xe4\x94\x03J\x90\xa6\xf7\xf4\xa9\xed\xfc\xb6\xb4\a\xc1<\xd7\xaf3\x10J)z\xae\xd8Y\xb8F\xe4\x84.\x05\x00\xe9^\f\xa6%\xe4\xe4\xe5', 0x2) write$auto(r2, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram3\x00', 0x28000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) connect$auto(0x3, 0x0, 0x54) ioctl$auto_BLKSSZGET(r3, 0x1268, 0x0) socket(0x5, 0x2, 0x0) bpf$auto(0x0, 0x0, 0x4f4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x40, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x3) mmap$auto(0x100, 0x6, 0x86, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd8/hctx0/dispatch\x00', 0x84801, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000280)=""/146, 0x92) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid$auto(0x800000000008) fadvise64$auto_POSIX_FADV_NOREUSE(r1, 0x8, 0x4, 0x5) 6.849700146s ago: executing program 5 (id=2399): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex$auto(0x0, 0x204, 0x3, 0x0, 0x0, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r0, 0x29, 0x3d, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xa0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket(0x2b, 0x1, 0x401) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa802, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 6.844499601s ago: executing program 0 (id=2400): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r3 = open(0x0, 0x261c2, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_objects_fops_(r2, &(0x7f0000000480)=""/172, 0xac) r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r8, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x4000000) sendmsg$auto_ILA_CMD_ADD(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x54, r6, 0x201, 0x70bd28, 0x25dfdc03, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x8}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x40000000000001c}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r9}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r9}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x38) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf25010000000c000300040000000000000005000800060000000c0001000400000000000000050008000700000005000800ec0000000500080004000000050008000200000008000400", @ANYRES32=r1, @ANYBLOB="0c000100010800006d7c02bb2d764b520104000000000000b4c52bd85f598e1b0c3456cd107c7f60125b12d8e2b6741f4e7549d23b05f18d69f41d4264d8189dfd1c3f33ccd3700c84117d7d7dbed1a12ce5b9de1c6e0429c5110dd62cd07c35c716b1dadf6b80e9a7749544fcdd6bc418bc0912a358d51ebfccf0b23588ae7730a77be43db5977f96"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x48014) bpf$auto(0x9, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) 5.574552672s ago: executing program 0 (id=2401): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x10001, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd, 0x0, 0x10001]}, 0x1fa, 0x11) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) exit$auto(0x9) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x88) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x3, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x3, 0x5, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x4, 0x0, 0x0, 0xe3a, 0x0, 0x1]}, 0x400, 0x44) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) r3 = getpid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40383d0c, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@inferred=r3, 0x304, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0xffffffff}, 0x3, 0x3, 0x4, @inferred, @integer={0x1, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) 5.524558219s ago: executing program 5 (id=2402): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='5', 0x1) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000480)="3472517ba6", 0x1}, 0x100000001) 5.363223317s ago: executing program 5 (id=2403): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000080)=@bpf_attr_3={0x8, 0x6, 0xfffffffffffffff9, 0x8, 0x2, 0x3, 0x0, 0xb, 0x3, "433c1c196a177a5c17ee4b9e99dd5595", 0x0, 0x4, 0xffffffffffffffff, 0x22, 0x6, 0x7, 0x9, 0xfffffffffffffff8, 0x6, 0x1ff, @attach_prog_fd, 0x10, 0xcea, 0x7, 0x100, 0x1ff}, 0xff) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f0000000140)={0xf, 0x0, 0x7, 0x2, 0x400, 0xffffffffffffffff}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x12) getcpu$auto(&(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x5, 0x0) 5.040512881s ago: executing program 7 (id=2404): mmap$auto(0xfffffffffffffffd, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x7) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r3, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/105, 0x69) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) 3.982275272s ago: executing program 5 (id=2405): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x17, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) open(0x0, 0x22240, 0x154) ioctl$auto_FIONREAD(r0, 0x541b, 0x7) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) sendfile$auto(r2, r2, 0x0, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) getitimer$auto(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.775505711s ago: executing program 7 (id=2406): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r1, 0x1, 0x1, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x40) socket(0xa, 0x3, 0x3a) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) 3.321385582s ago: executing program 7 (id=2407): mmap$auto(0xb4e, 0xe983, 0xc53, 0x200000000009d, 0x401, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcd) read$auto(0xffffffffffffffff, 0x0, 0x426a9212) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/radio14\x00', 0x808003, 0x0) ioctl$auto(r0, 0xc0405648, r0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r4, 0x0, 0x17) r5 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r5, 0x29, 0x7fffffff, 0x0, 0x80110) r6 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0x3) landlock_restrict_self$auto(r6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000e", @ANYRES16=r7, @ANYBLOB="1c0027bd7000fcdbdf2562000000"], 0x14}, 0x1, 0x0, 0x0, 0x20009004}, 0x2000c081) ioctl$auto_FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x2) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x200201, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyze\x00', 0x8000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0) 3.239037407s ago: executing program 36 (id=2380): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x8000, 0x4, 0xfffd, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x101, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x3, &(0x7f00000000c0)='X**\x00', &(0x7f0000000140)="7b95cdc84489a79c877c34fe5e5582a828a009edfc68b713b92ac42c4eed3cc33ed05b85bf4fe20914cf93429505e800987fb29467dc2941bd0a4e72593db09fd27df29384adbbf83a9e582400b0772e6800d4204367b370c9ecea9cda036dd9d1ab8a0ebf891af04bdf1f914149d1e0b698a5e4d4de2dfab1e9746345e6c9bb447a00fba6220250967c5ca575f7f1d8ea0f6942e5938a0b7caba9de5634011bbf7b5aa0811e1ba91bcd0e32f073ff8d0629ceae6eea5ee81369d17f134c1ebb37d9dc5b55119c6bb84a754321387c2bca54c4b9592edc2732679ccb797934ad146543f6105c49cb3af779a98530c714297b0f0c7ed03c", 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) ioctl$auto(0xffffffffffffffff, 0x2284, r1) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r4, 0x40095505, 0x0) epoll_ctl$auto(r0, 0x1, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000000)=0x6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20100, 0x0) read$auto(0x3, 0x0, 0x80) r5 = epoll_create$auto(0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) epoll_ctl$auto(r5, 0x1, r0, 0x0) 1.957372732s ago: executing program 0 (id=2409): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_NO_VIF={0x4}]}, 0x76}, 0x1, 0x0, 0x0, 0x2000083c}, 0x200008d0) socket(0xa, 0x802, 0x3a) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fcntl$auto_F_DUPFD(r3, 0x0, r3) ioctl$auto_vmwgfx_driver_fops_vmwgfx_drv(r4, 0x0, &(0x7f0000000000)="090bdb70d726e558a345cb58a01a9260fe797efced430832e041e5b4448edc94099e69b14ff229aaffe01b8c7cc0a4e4685c3e05699f4688b1ff06722e58877038caeb5a907ed463f4133ad88082cdf0207393724e3701ee9dcb69af2261a670ad24917121a7db34b8152aca9292b1bed9034d4e7baa6b6a23ea437a5995faf65fafa7b0df371cd7322417527efa70e95d3a3d32a69abd7e859e1057223c308821049e83e5e3399c65eddd235c0b2a35b1170f1800ea040a5dffa5c5d23151138887d66d85828b3bc39683280490b449a1029e8c7b7de03345f0d2625869fa1dfbc5ae982dcbc2ceda") read$auto_tun_fops_tun(r4, &(0x7f0000000180)=""/106, 0x6a) socket(0xa, 0x1, 0x100) read$auto(r4, &(0x7f0000000980)='-$+!{!$!/&-]\x00', 0x7fff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000240)={0x3, @raw=0x6, @raw=0x8, 0xdd2, 0x83, '\x00', {0x5, 0xffff, 0x20, 0xee00, 0x0, 0x3, 0x10001, 0xb, {0x1, 0xffffffff}, {0xb, 0x8}, {0x7f, 0x6}, 0x6, 0xae7c, 0xf6, 0xf, 0x8001, 0x7, 0x2, 0x3, 0x9, 0x9, '\x00', 0x7, 0x8, 0x5, 0x8}}) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x4cc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7fff}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1af, 0x6e, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @pid}, @nested={0x11c, 0xd1, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xa6}, @generic="75a23b06c0e6081c1d680dca9e556b5874042405b5735b9183b2", @typed={0x8, 0x85, 0x0, 0x0, @fd=r4}, @generic="c6fb2490c224ec999c952e5d3c87c9947d39fb81261cd02e407ff4c79c3edda3cb2ead6c26cec83e3a8883e4c02fbfaeb3db6bf4791d52097ef3945afa0df85562d06748ec124a654ea536411a0f964cbfdc25a504ab225dc9823d69e9de24d6e9d098c1f869321dd2ba066be0936c29228ba55ffed3d5c1c243f6607e32b6013850fcbf129eb45ac2a27eeaf7eb96de7853797dd43665e444c6624da106033767ea4d0e1e3e132895941656ed6eb4f05c7cc292f358acc0a2fa9deea531da8d18de64add4d2a928fb13a12f9105e3a5578fd261ee8f0a075716a13bf84a", @typed={0x8, 0x25, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x116}]}, @generic="f00339fc0a9b7cc84cfce0dac0069e86cc6a610828c33d874240d5727a289db400a64744a01e245a05c61b5d8057c269203609ac6710bdb1d99d116f886dbfc25b04374537a1ffb6ee07b1e133a6f168698b2e93300d143babd12a90a2ee0e84f8f3691d4c09898b692b62e3d9345e06b59010e12eca73c87d1a5e2cfbd2c908541d05ed79d9b3"]}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x380000}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x2f4, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x2ed, 0x2, "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"}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x800}, 0x4801) close_range$auto(0x2, r0, 0x0) openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 1.431560658s ago: executing program 0 (id=2410): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/hid/drivers/hid-udraw/uevent\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/213, 0xd5) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) setsockopt$auto_SO_RCVLOWAT(r2, 0x9eb, 0x12, &(0x7f00000001c0)='/proc/sys/net/i\n\xf1p\xd2\xed\xf8 \xaf_WR\x88Q\x8b\x84\x17\av68conf/geneve0/diqa\xbf\xd6ble_ipvCa\xac\xba\b\xe4\x94\x03J\x90\xa6\xf7\xf4\xa9\xed\xfc\xb6\xb4\a\xc1<\xd7\xaf3\x10J)z\xae\xd8Y\xb8F\xe4\x84.\x05\x00\xe9^\f\xa6%\xe4\xe4\xe5', 0x2) write$auto(r2, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram3\x00', 0x28000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) connect$auto(0x3, 0x0, 0x54) ioctl$auto_BLKSSZGET(r3, 0x1268, 0x0) socket(0x5, 0x2, 0x0) bpf$auto(0x0, 0x0, 0x4f4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x40, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x3) mmap$auto(0x100, 0x6, 0x86, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd8/hctx0/dispatch\x00', 0x84801, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000280)=""/146, 0x92) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid$auto(0x800000000008) fadvise64$auto_POSIX_FADV_NOREUSE(r1, 0x8, 0x4, 0x5) 1.100211934s ago: executing program 7 (id=2411): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex$auto(0x0, 0x204, 0x3, 0x0, 0x0, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r0, 0x29, 0x3d, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xa0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket(0x2b, 0x1, 0x401) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa802, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 856.268038ms ago: executing program 5 (id=2412): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5523, r0) r1 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x8, 0x0) setsockopt$auto(r1, 0x20107, 0x14, 0x0, 0x4) r2 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/projid_map\x00', 0x181000, 0x0) mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/txpower\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x0) close_range$auto(r2, r4, 0x6) r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000840), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r5, 0x40045201, &(0x7f0000000880)=0x80000001) mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$auto_MEMREAD(r3, 0xc0404d1a, &(0x7f00000000c0)={0x0, 0x200, 0xffffffffffffff43, 0x5, 0x8, 0x0, '\x00', {0x9, 0x0, 0xcb8}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x2711, 0xfffffffffffffffc, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x20000, 0x0) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') 548.269308ms ago: executing program 5 (id=2413): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/ipvlan0/rpl_seg_enabled\x00', 0x2000, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0x7, &(0x7f0000000580)="f2e37aa851f172bd24a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d729df54521578258b38aad5615b16c73b5c0cedf17801dfeceb350f1eee0e7c269c25c01679442d287388dedeedd83d20b9d079d0a931a993bfa4adebc6c7388b1f299cc8eea04565ea40416caff77e59c59ca4a9060c84561bfd604d4de30929e2eeafb9ad6979d6f09a839f1cd416251cfa09b3b49466b33fcdb5d97d6247058b8fd6ca6fb531580c321e1fb7c465b389381a4144d9ee3e2e3efd6dd25e7c2672bf18c9f7205cc60b3e648845c4dcc2ac6594e116800147335fdc9b9d96bdc0bd9abf069dc20a730c24eee32b32d985dda4ecdda376678fd6817dfbdcfe3aae28f46137e65d319e8622c71dc120b68aebafeb46f26ed0424033eeff3bc1f1b498aa90ea604ce8f9b73d68b360171fcf27a3b9c5d68123fa05263e1cb50c7598682a82f25837fb56f260be41da9e55e1a7536a996c2c6763a6d224ad48eed4d1ab2dc5d81520ae601f9f86cc6498cc858bf7a525dafd6f160e3283d49f8e85d40c9fd36f6f50b7af9c63808aa0d3db77fdb5213be1775249434fca87e25843ab1eee73676ea4281e232c400c1ebe6454e70bf48a04e0b274c99058694b78b7f7bb2e32099056a7ee63000029c"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x4000084) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x14fa02, 0x0) open(0x0, 0x11b802, 0x508) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x300, 0x0) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x801, 0x0) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop14\x00', 0x14f602, 0x0) msync$auto(0x9, 0x3ff, 0x7) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0xa4) kexec_load$auto(0x5b50, 0xa, &(0x7f0000000040)={@buf=&(0x7f00000001c0)="52245073518c10504bf7a3ab0b9630ef34fac8a512880a73f2a33add66e341ca36418fa428c8f7b67fec81f0347587e9e446", 0x800100000001, 0xfffffffffffffffd, 0x820c000}, 0x66234124) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/page_lock_unfairness\x00', 0xecc40, 0x0) write$auto(r3, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8e080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x4, 0x2091d0, 0x5, 0x0, 0x10001, 0x2) 416.819501ms ago: executing program 7 (id=2414): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) shmctl$auto(0x8, 0xffffffff, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14c5c9f3", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x10, 0xc, 0x0}) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000200)=[0x1, 0x6]) socket(0x10, 0x2, 0x4) r4 = socket(0x2, 0x3, 0xa) r5 = getsockopt$auto(r4, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r5) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/softnet_stat\x00', 0x18b082, 0x0) pread64$auto(r7, 0x0, 0x400100000001, 0x1ff) ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000001c0)=r3) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x26a8}, 0x1, 0x0, 0x0, 0xc4}, 0x4000880) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="35b099e23272565b1c9486e0b70100733d4af7f3599438a88203c0843115004c22b86b794d7e16eb470e8bde694e5ece44ba353f7be91f0000000000", @ANYRES16=r6, @ANYBLOB="20002cbd7000fedbdf25060000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10044001}, 0x4008800) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x400000000000, &(0x7f0000000400)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x1, 0x8, 0xdf, 0x11, 0xffffffffffffffff, 0x4) sysfs$auto(0x2, 0x20, 0xfffffffffffffffb) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=2415): mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) r0 = socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) bind$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000100)="42ca8ed0b3362ea1108f86fd14f91c62f2d473a77681dcae889fda5ae46ec0500b65dc9141b7592334abcd395186e546048bc798cf41222c53df90d650f69a7fc8c0f34b49f2f41ff2b8fba812f44ad4e7a5dbe329dd35f29632d6d045e3ee6cb6cf134ef497cc3fb4e0b051ce70807f08db60c23ffbbfa675151b53f81e06331a18950d599fe58c3e572587e22f2447c3c5144f72917cf8d0faf4671ab2e2afa5b8a60e8cf45af7a9aea1cd", 0xac) ioctl$auto_I2C_SMBUS(r1, 0x720, &(0x7f0000000080)) r3 = socket(0x11, 0xa, 0xa) bind$auto(r3, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc091}, 0x24004000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/beacon_timeout\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) kernel console output (not intermixed with test programs): 6081 - 0 [ 472.018888][T13073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.140166][T13073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.853931][T13074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.909528][T13074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.947128][ T6995] Bluetooth: hci4: command tx timeout [ 473.069679][T13071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.115587][T13071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.842326][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 473.924163][T13739] netlink: 'syz.0.1733': attribute type 19 has an invalid length. [ 474.004951][T13739] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1733'. [ 478.669598][T13814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1751'. [ 480.851098][ T6995] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 481.272672][T13870] FAULT_INJECTION: forcing a failure. [ 481.272672][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 481.329071][T13870] CPU: 0 UID: 0 PID: 13870 Comm: syz.0.1762 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.329099][T13870] Tainted: [L]=SOFTLOCKUP [ 481.329104][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.329113][T13870] Call Trace: [ 481.329119][T13870] [ 481.329125][T13870] dump_stack_lvl+0x100/0x190 [ 481.329155][T13870] should_fail_ex.cold+0x5/0xa [ 481.329175][T13870] should_failslab+0xc2/0x120 [ 481.329197][T13870] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 481.329217][T13870] ? alloc_empty_file+0x5b/0x1c0 [ 481.329258][T13870] ? __pfx_stack_trace_save+0x10/0x10 [ 481.329280][T13870] alloc_empty_file+0x5b/0x1c0 [ 481.329297][T13870] path_openat+0xe8/0x31a0 [ 481.329318][T13870] ? kasan_save_stack+0x3f/0x50 [ 481.329338][T13870] ? kasan_save_stack+0x30/0x50 [ 481.329357][T13870] ? kasan_save_track+0x14/0x30 [ 481.329376][T13870] ? __kasan_slab_alloc+0x89/0x90 [ 481.329399][T13870] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 481.329417][T13870] ? do_getname+0x35/0x390 [ 481.329431][T13870] ? do_sys_openat2+0xc5/0x1e0 [ 481.329447][T13870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.329464][T13870] ? __pfx_path_openat+0x10/0x10 [ 481.329493][T13870] do_file_open+0x20e/0x430 [ 481.329516][T13870] ? __pfx_do_file_open+0x10/0x10 [ 481.329551][T13870] ? alloc_fd+0x476/0x790 [ 481.329574][T13870] ? do_getname+0x191/0x390 [ 481.329591][T13870] do_sys_openat2+0x10d/0x1e0 [ 481.329607][T13870] ? __pfx_do_sys_openat2+0x10/0x10 [ 481.329631][T13870] __x64_sys_openat+0x12d/0x210 [ 481.329649][T13870] ? __pfx___x64_sys_openat+0x10/0x10 [ 481.329664][T13870] ? ksys_write+0x1ac/0x250 [ 481.329687][T13870] ? rcu_is_watching+0x12/0xc0 [ 481.329705][T13870] do_syscall_64+0x10b/0xf80 [ 481.329724][T13870] ? clear_bhb_loop+0x40/0x90 [ 481.329743][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.329758][T13870] RIP: 0033:0x7f2bd679c819 [ 481.329772][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.329787][T13870] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.329802][T13870] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 481.329812][T13870] RDX: 0000000000038000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 481.329822][T13870] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 481.329830][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.329839][T13870] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 481.329859][T13870] [ 482.036159][T13881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 482.881311][T13900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 482.975330][T13905] FAULT_INJECTION: forcing a failure. [ 482.975330][T13905] name failslab, interval 1, probability 0, space 0, times 0 [ 483.044860][T13905] CPU: 0 UID: 0 PID: 13905 Comm: syz.0.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.044886][T13905] Tainted: [L]=SOFTLOCKUP [ 483.044891][T13905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.044899][T13905] Call Trace: [ 483.044912][T13905] [ 483.044918][T13905] dump_stack_lvl+0x100/0x190 [ 483.044947][T13905] should_fail_ex.cold+0x5/0xa [ 483.044966][T13905] should_failslab+0xc2/0x120 [ 483.044989][T13905] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 483.045008][T13905] ? jbd2__journal_start+0x194/0x6a0 [ 483.045036][T13905] jbd2__journal_start+0x194/0x6a0 [ 483.045062][T13905] __ext4_journal_start_sb+0x36d/0x670 [ 483.045081][T13905] ? ext4_do_writepages+0xc21/0x3f20 [ 483.045103][T13905] ext4_do_writepages+0xc21/0x3f20 [ 483.045122][T13905] ? do_raw_spin_lock+0x128/0x260 [ 483.045139][T13905] ? find_held_lock+0x2b/0x80 [ 483.045161][T13905] ? hrtimer_start_range_ns+0x860/0x1a50 [ 483.045181][T13905] ? __pfx_ext4_do_writepages+0x10/0x10 [ 483.045209][T13905] ? ext4_writepages+0x347/0x790 [ 483.045227][T13905] ext4_writepages+0x347/0x790 [ 483.045247][T13905] ? __pfx_ext4_writepages+0x10/0x10 [ 483.045271][T13905] ? do_writepages+0x4b5/0x600 [ 483.045285][T13905] ? do_writepages+0x4b5/0x600 [ 483.045301][T13905] ? __pfx_ext4_writepages+0x10/0x10 [ 483.045321][T13905] do_writepages+0x278/0x600 [ 483.045338][T13905] ? __pfx_do_writepages+0x10/0x10 [ 483.045351][T13905] ? do_raw_spin_unlock+0x145/0x1e0 [ 483.045366][T13905] ? _raw_spin_unlock+0x28/0x50 [ 483.045385][T13905] filemap_writeback+0x22d/0x2e0 [ 483.045402][T13905] ? __pfx_filemap_writeback+0x10/0x10 [ 483.045438][T13905] ? mt_find+0x45e/0x8e0 [ 483.045460][T13905] ? __pfx_mt_find+0x10/0x10 [ 483.045481][T13905] file_write_and_wait_range+0xcd/0x140 [ 483.045501][T13905] ext4_sync_file+0x358/0xb90 [ 483.045521][T13905] ? __pfx_ext4_sync_file+0x10/0x10 [ 483.045537][T13905] ? __up_read+0x290/0x6e0 [ 483.045554][T13905] ? __pfx___up_read+0x10/0x10 [ 483.045566][T13905] ? __do_sys_msync+0x39b/0x590 [ 483.045587][T13905] ? __pfx_ext4_sync_file+0x10/0x10 [ 483.045604][T13905] vfs_fsync_range+0x9b/0x190 [ 483.045621][T13905] __do_sys_msync+0x3ca/0x590 [ 483.045644][T13905] do_syscall_64+0x10b/0xf80 [ 483.045662][T13905] ? clear_bhb_loop+0x40/0x90 [ 483.045680][T13905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.045695][T13905] RIP: 0033:0x7f2bd679c819 [ 483.045708][T13905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.045722][T13905] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 483.045737][T13905] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 483.045747][T13905] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 483.045756][T13905] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 483.045765][T13905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.045773][T13905] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 483.045792][T13905] [ 483.361482][T13905] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2021; err -12 [ 484.295323][T13935] FAULT_INJECTION: forcing a failure. [ 484.295323][T13935] name failslab, interval 1, probability 0, space 0, times 0 [ 484.453449][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.0.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.453477][T13935] Tainted: [L]=SOFTLOCKUP [ 484.453483][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 484.453492][T13935] Call Trace: [ 484.453498][T13935] [ 484.453504][T13935] dump_stack_lvl+0x100/0x190 [ 484.453534][T13935] should_fail_ex.cold+0x5/0xa [ 484.453555][T13935] ? tomoyo_realpath_from_path+0xb6/0x690 [ 484.453577][T13935] should_failslab+0xc2/0x120 [ 484.453600][T13935] __kmalloc_noprof+0xe0/0x850 [ 484.453624][T13935] tomoyo_realpath_from_path+0xb6/0x690 [ 484.453650][T13935] tomoyo_check_open_permission+0x2af/0x3c0 [ 484.453671][T13935] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 484.453694][T13935] ? pidfs_alloc_file+0x18f/0x290 [ 484.453716][T13935] ? do_syscall_64+0x10b/0xf80 [ 484.453735][T13935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.453762][T13935] ? hook_file_open+0x24e/0x7a0 [ 484.453791][T13935] ? lock_acquire+0x1b1/0x370 [ 484.453819][T13935] tomoyo_file_open+0x6b/0x90 [ 484.453836][T13935] security_file_open+0xb5/0x1e0 [ 484.453856][T13935] do_dentry_open+0x5aa/0x1660 [ 484.453884][T13935] vfs_open+0x82/0x3f0 [ 484.453902][T13935] dentry_open+0x71/0xd0 [ 484.453917][T13935] pidfs_alloc_file+0x18f/0x290 [ 484.453938][T13935] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 484.453964][T13935] pidfd_prepare+0x10c/0x1b0 [ 484.453985][T13935] __x64_sys_pidfd_open+0x105/0x1a0 [ 484.454008][T13935] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 484.454032][T13935] ? rcu_is_watching+0x12/0xc0 [ 484.454049][T13935] do_syscall_64+0x10b/0xf80 [ 484.454067][T13935] ? clear_bhb_loop+0x40/0x90 [ 484.454085][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.454100][T13935] RIP: 0033:0x7f2bd679c819 [ 484.454113][T13935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.454128][T13935] RSP: 002b:00007f2bd75b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 484.454143][T13935] RAX: ffffffffffffffda RBX: 00007f2bd6a16090 RCX: 00007f2bd679c819 [ 484.454154][T13935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 484.454163][T13935] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 484.454174][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.454183][T13935] R13: 00007f2bd6a16128 R14: 00007f2bd6a16090 R15: 00007ffe7cf8ce88 [ 484.454202][T13935] [ 484.454209][T13935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.045912][T13941] FAULT_INJECTION: forcing a failure. [ 485.045912][T13941] name fail_futex, interval 1, probability 0, space 0, times 0 [ 485.147182][T13941] CPU: 0 UID: 0 PID: 13941 Comm: syz.3.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.147210][T13941] Tainted: [L]=SOFTLOCKUP [ 485.147216][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.147226][T13941] Call Trace: [ 485.147231][T13941] [ 485.147237][T13941] dump_stack_lvl+0x100/0x190 [ 485.147267][T13941] should_fail_ex.cold+0x5/0xa [ 485.147287][T13941] get_futex_key+0x1d2/0x1600 [ 485.147311][T13941] ? __pfx_get_futex_key+0x10/0x10 [ 485.147334][T13941] ? __lock_acquire+0x4a5/0x2630 [ 485.147359][T13941] futex_wake+0xea/0x530 [ 485.147377][T13941] ? __pfx_futex_wake+0x10/0x10 [ 485.147395][T13941] ? __fget_files+0x215/0x3d0 [ 485.147425][T13941] do_futex+0x32b/0x350 [ 485.147447][T13941] ? __pfx_do_futex+0x10/0x10 [ 485.147470][T13941] ? fput+0x79/0x100 [ 485.147484][T13941] ? __sys_sendmsg+0x18f/0x220 [ 485.147506][T13941] __x64_sys_futex+0x34f/0x4d0 [ 485.147531][T13941] ? __pfx___x64_sys_futex+0x10/0x10 [ 485.147557][T13941] ? rcu_is_watching+0x12/0xc0 [ 485.147576][T13941] do_syscall_64+0x10b/0xf80 [ 485.147595][T13941] ? clear_bhb_loop+0x40/0x90 [ 485.147613][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.147628][T13941] RIP: 0033:0x7fc4c979c819 [ 485.147641][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.147656][T13941] RSP: 002b:00007fc4ca5cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 485.147671][T13941] RAX: ffffffffffffffda RBX: 00007fc4c9a15fa8 RCX: 00007fc4c979c819 [ 485.147681][T13941] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc4c9a15fac [ 485.147690][T13941] RBP: 00007fc4c9a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 485.147699][T13941] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 485.147707][T13941] R13: 00007fc4c9a16038 R14: 00007ffc89113cd0 R15: 00007ffc89113db8 [ 485.147726][T13941] [ 486.535721][ T6995] Bluetooth: hci4: unexpected event 0x3e length: 358 > 260 [ 486.535748][ T6995] Bluetooth: hci4: unexpected subevent 0x1b length: 357 > 260 [ 489.497647][T14018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 489.551026][T14018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 489.604550][T14018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 489.675856][T14018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 489.762059][T14018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 489.845181][T14018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 489.940215][T14018] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 490.101399][T14018] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 491.560963][T14044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.583816][T14044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.605626][T14044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.634330][T14044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.663558][T14044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.866879][ T6995] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.315925][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1813'. [ 493.587032][ T6995] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.667117][ T6995] Bluetooth: hci4: command 0x0c1a tx timeout [ 493.673297][T13544] Bluetooth: hci3: command 0x0c1a tx timeout [ 493.680528][ T6995] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.746741][T14100] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.752948][ T7001] Bluetooth: hci4: command 0x0c1a tx timeout [ 497.638223][T14162] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1830'. [ 497.826867][ T7001] Bluetooth: hci4: command 0x0c1a tx timeout [ 498.093459][T14166] binder: 14163:14166 ioctl c00c620f 2000000001c0 returned -22 [ 498.838514][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1833'. [ 501.592865][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.599398][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.688346][T14260] netlink: 'syz.0.1853': attribute type 27 has an invalid length. [ 502.732755][T14260] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1853'. [ 503.089286][T14268] FAULT_INJECTION: forcing a failure. [ 503.089286][T14268] name failslab, interval 1, probability 0, space 0, times 0 [ 503.148851][T14268] CPU: 0 UID: 0 PID: 14268 Comm: syz.0.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.148880][T14268] Tainted: [L]=SOFTLOCKUP [ 503.148892][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.148902][T14268] Call Trace: [ 503.148908][T14268] [ 503.148915][T14268] dump_stack_lvl+0x100/0x190 [ 503.148946][T14268] should_fail_ex.cold+0x5/0xa [ 503.148967][T14268] should_failslab+0xc2/0x120 [ 503.148989][T14268] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 503.149008][T14268] ? __proc_create+0x2cb/0x8c0 [ 503.149038][T14268] __proc_create+0x2cb/0x8c0 [ 503.149061][T14268] ? __pfx___proc_create+0x10/0x10 [ 503.149091][T14268] _proc_mkdir+0xb9/0x210 [ 503.149113][T14268] ? __pfx__proc_mkdir+0x10/0x10 [ 503.149136][T14268] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 503.149154][T14268] ? proc_net_ns_init+0x42/0x420 [ 503.149172][T14268] proc_net_ns_init+0x273/0x420 [ 503.149186][T14268] ? __pfx_proc_net_ns_init+0x10/0x10 [ 503.149208][T14268] ops_init+0x1e2/0x5f0 [ 503.149233][T14268] setup_net+0x118/0x3a0 [ 503.149255][T14268] ? __pfx_setup_net+0x10/0x10 [ 503.149276][T14268] ? mutex_init_lockdep+0xf1/0x120 [ 503.149304][T14268] copy_net_ns+0x46f/0x7c0 [ 503.149319][T14268] create_new_namespaces+0x3ea/0xac0 [ 503.149342][T14268] unshare_nsproxy_namespaces+0xf2/0x220 [ 503.149361][T14268] ksys_unshare+0x438/0xa90 [ 503.149383][T14268] ? __pfx_ksys_unshare+0x10/0x10 [ 503.149402][T14268] ? xfd_validate_state+0x129/0x190 [ 503.149441][T14268] __x64_sys_unshare+0x31/0x40 [ 503.149462][T14268] do_syscall_64+0x10b/0xf80 [ 503.149483][T14268] ? clear_bhb_loop+0x40/0x90 [ 503.149503][T14268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.149519][T14268] RIP: 0033:0x7f2bd679c819 [ 503.149533][T14268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.149548][T14268] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 503.149563][T14268] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 503.149574][T14268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 503.149583][T14268] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 503.149593][T14268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.149602][T14268] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 503.149622][T14268] [ 505.273195][T14285] input:  as /devices/virtual/input/input17 [ 505.660004][T14298] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1863'. [ 505.910979][T14301] FAULT_INJECTION: forcing a failure. [ 505.910979][T14301] name fail_futex, interval 1, probability 0, space 0, times 0 [ 505.977936][T14301] CPU: 0 UID: 0 PID: 14301 Comm: syz.0.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.977965][T14301] Tainted: [L]=SOFTLOCKUP [ 505.977970][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.977980][T14301] Call Trace: [ 505.977986][T14301] [ 505.977992][T14301] dump_stack_lvl+0x100/0x190 [ 505.978027][T14301] should_fail_ex.cold+0x5/0xa [ 505.978051][T14301] get_futex_key+0x1d2/0x1600 [ 505.978076][T14301] ? __pfx_get_futex_key+0x10/0x10 [ 505.978098][T14301] ? trace_ignore_this_task+0xbc/0x100 [ 505.978115][T14301] ? trace_ignore_this_task+0xbc/0x100 [ 505.978135][T14301] futex_wait_setup+0x83/0x510 [ 505.978157][T14301] __futex_wait+0x19f/0x300 [ 505.978182][T14301] ? __pfx___futex_wait+0x10/0x10 [ 505.978198][T14301] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 505.978220][T14301] ? __pfx_futex_wake_mark+0x10/0x10 [ 505.978240][T14301] ? find_held_lock+0x2b/0x80 [ 505.978257][T14301] ? futex_wake+0x456/0x530 [ 505.978279][T14301] futex_wait+0xe6/0x370 [ 505.978296][T14301] ? __pfx_futex_wait+0x10/0x10 [ 505.978323][T14301] do_futex+0x1ef/0x350 [ 505.978346][T14301] ? __pfx_do_futex+0x10/0x10 [ 505.978368][T14301] ? __sys_bind+0x1c7/0x260 [ 505.978389][T14301] __x64_sys_futex+0x34f/0x4d0 [ 505.978414][T14301] ? __pfx___x64_sys_futex+0x10/0x10 [ 505.978440][T14301] ? rcu_is_watching+0x12/0xc0 [ 505.978458][T14301] do_syscall_64+0x10b/0xf80 [ 505.978477][T14301] ? clear_bhb_loop+0x40/0x90 [ 505.978495][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.978510][T14301] RIP: 0033:0x7f2bd679c819 [ 505.978524][T14301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.978539][T14301] RSP: 002b:00007f2bd75d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 505.978553][T14301] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa8 RCX: 00007f2bd679c819 [ 505.978564][T14301] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bd6a15fa8 [ 505.978574][T14301] RBP: 00007f2bd6a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 505.978583][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.978592][T14301] R13: 00007f2bd6a16038 R14: 00007ffe7cf8cda0 R15: 00007ffe7cf8ce88 [ 505.978611][T14301] [ 508.316872][T14351] futex_wake_op: syz.4.1878 tries to shift op by -2048; fix this program [ 508.414301][T14351] futex_wake_op: syz.4.1878 tries to shift op by -2048; fix this program [ 512.127222][T14426] futex_wake_op: syz.4.1893 tries to shift op by -2048; fix this program [ 512.479099][ T7001] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 512.746058][T14437] FAULT_INJECTION: forcing a failure. [ 512.746058][T14437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.780826][T14441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 512.795707][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.0.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.795735][T14437] Tainted: [L]=SOFTLOCKUP [ 512.795740][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 512.795750][T14437] Call Trace: [ 512.795755][T14437] [ 512.795761][T14437] dump_stack_lvl+0x100/0x190 [ 512.795792][T14437] should_fail_ex.cold+0x5/0xa [ 512.795809][T14437] ? prepare_alloc_pages+0x16d/0x5f0 [ 512.795826][T14437] should_fail_alloc_page+0xeb/0x140 [ 512.795849][T14437] prepare_alloc_pages+0x1f0/0x5f0 [ 512.795864][T14437] ? arch_stack_walk+0xa6/0xf0 [ 512.795884][T14437] __alloc_frozen_pages_noprof+0x19a/0x2bd0 [ 512.795908][T14437] ? stack_trace_save+0x8e/0xc0 [ 512.795929][T14437] ? __pfx_stack_trace_save+0x10/0x10 [ 512.795946][T14437] ? stack_depot_save_flags+0x27/0x9d0 [ 512.795972][T14437] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 512.795991][T14437] ? kasan_save_stack+0x3f/0x50 [ 512.796010][T14437] ? kasan_save_stack+0x30/0x50 [ 512.796028][T14437] ? kasan_save_track+0x14/0x30 [ 512.796048][T14437] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 512.796068][T14437] ? move_page_tables+0x3224/0x4500 [ 512.796085][T14437] ? copy_vma_and_data+0x25c/0x7c0 [ 512.796102][T14437] ? move_vma+0x51b/0x1890 [ 512.796118][T14437] ? mremap_to+0x1b7/0x450 [ 512.796135][T14437] ? do_mremap+0xb76/0x2130 [ 512.796151][T14437] ? __do_sys_mremap+0x126/0x170 [ 512.796169][T14437] ? do_syscall_64+0x10b/0xf80 [ 512.796187][T14437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.796210][T14437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.796231][T14437] ? policy_nodemask+0xed/0x4f0 [ 512.796255][T14437] alloc_pages_mpol+0x1fb/0x550 [ 512.796278][T14437] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 512.796305][T14437] alloc_pages_noprof+0x136/0x390 [ 512.796329][T14437] pte_alloc_one+0x1c/0x3d0 [ 512.796349][T14437] __pte_alloc+0x6d/0x3e0 [ 512.796370][T14437] ? __pfx___pte_alloc+0x10/0x10 [ 512.796392][T14437] ? _raw_spin_unlock+0x28/0x50 [ 512.796408][T14437] ? __pmd_alloc+0x3fb/0x950 [ 512.796424][T14437] move_page_tables+0x257e/0x4500 [ 512.796444][T14437] ? __pfx_copy_vma+0x10/0x10 [ 512.796469][T14437] ? __pfx_move_page_tables+0x10/0x10 [ 512.796502][T14437] copy_vma_and_data+0x25c/0x7c0 [ 512.796523][T14437] ? __pfx_copy_vma_and_data+0x10/0x10 [ 512.796549][T14437] ? __vma_start_write+0x17f/0x280 [ 512.796566][T14437] ? __pfx___vma_start_write+0x10/0x10 [ 512.796587][T14437] move_vma+0x51b/0x1890 [ 512.796609][T14437] ? __pfx_move_vma+0x10/0x10 [ 512.796630][T14437] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 512.796653][T14437] ? cap_mmap_addr+0x4b/0x120 [ 512.796668][T14437] ? bpf_lsm_mmap_addr+0x9/0x30 [ 512.796695][T14437] ? security_mmap_addr+0x71/0x1e0 [ 512.796717][T14437] ? __get_unmapped_area+0x255/0x3e0 [ 512.796744][T14437] ? vrm_set_new_addr+0x204/0x290 [ 512.796765][T14437] mremap_to+0x1b7/0x450 [ 512.796785][T14437] do_mremap+0xb76/0x2130 [ 512.796813][T14437] ? __pfx_do_mremap+0x10/0x10 [ 512.796835][T14437] ? ksys_write+0x190/0x250 [ 512.796861][T14437] __do_sys_mremap+0x126/0x170 [ 512.796880][T14437] ? __pfx___do_sys_mremap+0x10/0x10 [ 512.796904][T14437] ? __x64_sys_futex+0x34f/0x4d0 [ 512.796935][T14437] ? rcu_is_watching+0x12/0xc0 [ 512.796955][T14437] do_syscall_64+0x10b/0xf80 [ 512.796974][T14437] ? clear_bhb_loop+0x40/0x90 [ 512.796992][T14437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.797008][T14437] RIP: 0033:0x7f2bd679c819 [ 512.797021][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.797036][T14437] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 512.797052][T14437] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 512.797063][T14437] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 512.797072][T14437] RBP: 00007f2bd6832c91 R08: 0000000100000000 R09: 0000000000000000 [ 512.797082][T14437] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 512.797091][T14437] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 512.797111][T14437] [ 513.784534][T14450] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 515.400262][T14490] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1906'. [ 515.441905][T14490] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1906'. [ 516.690822][T14519] futex_wake_op: syz.2.1916 tries to shift op by -2048; fix this program [ 516.709804][T14519] futex_wake_op: syz.2.1916 tries to shift op by -2048; fix this program [ 516.783383][T14523] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1924'. [ 518.428807][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1926'. [ 518.822661][T14564] netlink: 142 bytes leftover after parsing attributes in process `syz.0.1927'. [ 519.811781][T14582] FAULT_INJECTION: forcing a failure. [ 519.811781][T14582] name fail_futex, interval 1, probability 0, space 0, times 0 [ 519.934848][T14582] CPU: 0 UID: 0 PID: 14582 Comm: syz.0.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.934877][T14582] Tainted: [L]=SOFTLOCKUP [ 519.934883][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.934892][T14582] Call Trace: [ 519.934898][T14582] [ 519.934905][T14582] dump_stack_lvl+0x100/0x190 [ 519.934936][T14582] should_fail_ex.cold+0x5/0xa [ 519.934957][T14582] get_futex_key+0x1d2/0x1600 [ 519.934981][T14582] ? __pfx_get_futex_key+0x10/0x10 [ 519.935008][T14582] futex_wake+0xea/0x530 [ 519.935025][T14582] ? rcu_is_watching+0x12/0xc0 [ 519.935041][T14582] ? __pfx_futex_wake+0x10/0x10 [ 519.935060][T14582] ? putname+0xb1/0x110 [ 519.935072][T14582] ? kmem_cache_free+0x124/0x690 [ 519.935093][T14582] do_futex+0x32b/0x350 [ 519.935115][T14582] ? __pfx_do_futex+0x10/0x10 [ 519.935136][T14582] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.935155][T14582] ? __fget_files+0x21f/0x3d0 [ 519.935187][T14582] __x64_sys_futex+0x34f/0x4d0 [ 519.935211][T14582] ? __x64_sys_openat+0x12d/0x210 [ 519.935229][T14582] ? __pfx___x64_sys_futex+0x10/0x10 [ 519.935256][T14582] ? rcu_is_watching+0x12/0xc0 [ 519.935274][T14582] do_syscall_64+0x10b/0xf80 [ 519.935294][T14582] ? clear_bhb_loop+0x40/0x90 [ 519.935316][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.935333][T14582] RIP: 0033:0x7f2bd679c819 [ 519.935346][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.935364][T14582] RSP: 002b:00007f2bd75d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 519.935379][T14582] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa8 RCX: 00007f2bd679c819 [ 519.935389][T14582] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2bd6a15fac [ 519.935398][T14582] RBP: 00007f2bd6a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 519.935406][T14582] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 519.935415][T14582] R13: 00007f2bd6a16038 R14: 00007ffe7cf8cda0 R15: 00007ffe7cf8ce88 [ 519.935434][T14582] [ 520.364620][T14589] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 521.788969][ T7001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.805872][ T7001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.814344][ T7001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.824950][ T7001] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.837313][ T7001] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.553875][T14617] chnl_net:caif_netlink_parms(): no params data found [ 523.048145][T14617] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.094392][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.118340][T14617] bridge_slave_0: entered allmulticast mode [ 523.140653][T14617] bridge_slave_0: entered promiscuous mode [ 523.184253][T14617] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.224252][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.261438][T14617] bridge_slave_1: entered allmulticast mode [ 523.303016][T14617] bridge_slave_1: entered promiscuous mode [ 523.552430][T14651] openvswitch: netlink: Missing valid actions attribute. [ 523.572357][T14617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.630003][ T7001] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 523.660447][T14617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.817419][T14617] team0: Port device team_slave_0 added [ 523.872430][T14617] team0: Port device team_slave_1 added [ 523.907306][ T7001] Bluetooth: hci5: command tx timeout [ 524.050156][T14617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.078030][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.183055][T14617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.269911][T14617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.297865][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.368075][T14617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.555617][T14617] hsr_slave_0: entered promiscuous mode [ 524.570881][T14617] hsr_slave_1: entered promiscuous mode [ 524.579837][T14617] debugfs: 'hsr0' already exists in 'hsr' [ 524.585658][T14617] Cannot create hsr debugfs directory [ 525.987510][ T7001] Bluetooth: hci5: command tx timeout [ 526.087380][T14617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 526.156292][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.193557][T14617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 526.229453][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.271170][T14617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 526.308872][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.333257][T14617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 526.376890][T14617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.319910][T14617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.369336][T14617] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.404346][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.411542][T13072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.474050][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.481261][T13072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.879623][T14617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.067247][ T7001] Bluetooth: hci5: command tx timeout [ 528.780328][T14617] veth0_vlan: entered promiscuous mode [ 528.832993][T14617] veth1_vlan: entered promiscuous mode [ 529.016365][T14617] veth0_macvtap: entered promiscuous mode [ 529.073554][T14617] veth1_macvtap: entered promiscuous mode [ 529.183964][T14617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.283318][T14617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.336339][T13075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.367520][T13075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.404623][T13075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.452081][T13075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.751216][T13072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.801828][T13072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.979944][T13072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.033515][T13072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.142168][T14775] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 530.153211][ T7001] Bluetooth: hci5: command tx timeout [ 530.213202][T14774] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 530.633845][T14792] FAULT_INJECTION: forcing a failure. [ 530.633845][T14792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.696146][T14792] CPU: 0 UID: 0 PID: 14792 Comm: syz.4.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.696173][T14792] Tainted: [L]=SOFTLOCKUP [ 530.696179][T14792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.696188][T14792] Call Trace: [ 530.696192][T14792] [ 530.696198][T14792] dump_stack_lvl+0x100/0x190 [ 530.696228][T14792] should_fail_ex.cold+0x5/0xa [ 530.696247][T14792] _copy_from_user+0x2e/0xd0 [ 530.696268][T14792] sk_setsockopt+0x2f2/0x5c40 [ 530.696294][T14792] ? __pfx_sk_setsockopt+0x10/0x10 [ 530.696314][T14792] ? find_held_lock+0x2b/0x80 [ 530.696331][T14792] ? get_pid_task+0xfc/0x250 [ 530.696350][T14792] ? get_pid_task+0xfc/0x250 [ 530.696423][T14792] ? __pfx___might_resched+0x10/0x10 [ 530.696438][T14792] ? __lock_acquire+0x4a5/0x2630 [ 530.696463][T14792] udp_lib_setsockopt+0x42b/0x890 [ 530.696478][T14792] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 530.696507][T14792] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 530.696527][T14792] ? find_held_lock+0x2b/0x80 [ 530.696546][T14792] udp_setsockopt+0xa3/0xb0 [ 530.696562][T14792] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 530.696584][T14792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 530.696613][T14792] do_sock_setsockopt+0xf3/0x1d0 [ 530.696639][T14792] __sys_setsockopt+0x119/0x190 [ 530.696663][T14792] __x64_sys_setsockopt+0xbd/0x160 [ 530.696681][T14792] ? do_syscall_64+0x90/0xf80 [ 530.696700][T14792] ? lockdep_hardirqs_on+0x78/0x100 [ 530.696719][T14792] do_syscall_64+0x10b/0xf80 [ 530.696737][T14792] ? clear_bhb_loop+0x40/0x90 [ 530.696755][T14792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.696770][T14792] RIP: 0033:0x7fcfa959c819 [ 530.696783][T14792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.696797][T14792] RSP: 002b:00007fcfaa4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 530.696812][T14792] RAX: ffffffffffffffda RBX: 00007fcfa9815fa0 RCX: 00007fcfa959c819 [ 530.696821][T14792] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000003 [ 530.696830][T14792] RBP: 00007fcfaa4d0090 R08: 0000000000000009 R09: 0000000000000000 [ 530.696838][T14792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.696847][T14792] R13: 00007fcfa9816038 R14: 00007fcfa9815fa0 R15: 00007ffd30f8c5c8 [ 530.696866][T14792] [ 533.372728][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1998'. [ 533.404605][T14851] netlink: 354 bytes leftover after parsing attributes in process `syz.5.1998'. [ 534.758558][T14889] blktrace: Concurrent blktraces are not allowed on loop2 [ 536.975213][T14924] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 537.040279][T14924] vhci_hcd vhci_hcd.2: invalid port number 111 [ 537.122952][T14924] vhci_hcd vhci_hcd.2: invalid port number 111 [ 537.278683][T14934] ovs_: entered promiscuous mode [ 537.361919][T14941] syz.0.2023 (14941): attempted to duplicate a private mapping with mremap. This is not supported. [ 539.176369][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 540.419807][T14996] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 540.468184][T14996] netlink: 230 bytes leftover after parsing attributes in process `syz.2.2034'. [ 542.127942][T15021] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 542.478992][T15034] FAULT_INJECTION: forcing a failure. [ 542.478992][T15034] name failslab, interval 1, probability 0, space 0, times 0 [ 542.502624][T15034] CPU: 0 UID: 0 PID: 15034 Comm: syz.0.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.502656][T15034] Tainted: [L]=SOFTLOCKUP [ 542.502662][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.502671][T15034] Call Trace: [ 542.502677][T15034] [ 542.502683][T15034] dump_stack_lvl+0x100/0x190 [ 542.502713][T15034] should_fail_ex.cold+0x5/0xa [ 542.502734][T15034] should_failslab+0xc2/0x120 [ 542.502757][T15034] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 542.502777][T15034] ? __kernfs_new_node+0xd2/0x9f0 [ 542.502801][T15034] __kernfs_new_node+0xd2/0x9f0 [ 542.502823][T15034] ? __pfx___kernfs_new_node+0x10/0x10 [ 542.502848][T15034] ? find_held_lock+0x2b/0x80 [ 542.502865][T15034] ? kernfs_root+0xee/0x2a0 [ 542.502884][T15034] ? kernfs_root+0xee/0x2a0 [ 542.502907][T15034] kernfs_new_node+0x11b/0x1a0 [ 542.502932][T15034] __kernfs_create_file+0x53/0x350 [ 542.502951][T15034] sysfs_add_file_mode_ns+0x207/0x3c0 [ 542.502974][T15034] sysfs_merge_group+0x194/0x340 [ 542.502994][T15034] ? kernfs_add_one+0x214/0x850 [ 542.503015][T15034] ? __pfx_sysfs_merge_group+0x10/0x10 [ 542.503035][T15034] ? bus_add_device+0x368/0x6b0 [ 542.503052][T15034] ? __pfx_bus_add_device+0x10/0x10 [ 542.503066][T15034] ? __pfx_dev_add_physical_location+0x10/0x10 [ 542.503092][T15034] dpm_sysfs_add+0x237/0x280 [ 542.503114][T15034] device_add+0x9ef/0x1920 [ 542.503138][T15034] ? __pfx_device_add+0x10/0x10 [ 542.503166][T15034] nfc_register_device+0x41/0x3e0 [ 542.503186][T15034] nci_register_device+0x7f1/0xb80 [ 542.503202][T15034] ? __pfx_nci_register_device+0x10/0x10 [ 542.503220][T15034] ? lockdep_init_map_type+0x5c/0x250 [ 542.503246][T15034] virtual_ncidev_open+0x141/0x220 [ 542.503261][T15034] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 542.503275][T15034] misc_open+0x26d/0x450 [ 542.503295][T15034] ? __pfx_misc_open+0x10/0x10 [ 542.503315][T15034] chrdev_open+0x234/0x6a0 [ 542.503337][T15034] ? __pfx_apparmor_file_open+0x10/0x10 [ 542.503354][T15034] ? __pfx_chrdev_open+0x10/0x10 [ 542.503377][T15034] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 542.503404][T15034] do_dentry_open+0x6d8/0x1660 [ 542.503429][T15034] ? __pfx_chrdev_open+0x10/0x10 [ 542.503455][T15034] vfs_open+0x82/0x3f0 [ 542.503474][T15034] path_openat+0x208c/0x31a0 [ 542.503509][T15034] ? __pfx_path_openat+0x10/0x10 [ 542.503540][T15034] do_file_open+0x20e/0x430 [ 542.503564][T15034] ? __pfx_do_file_open+0x10/0x10 [ 542.503600][T15034] ? alloc_fd+0x476/0x790 [ 542.503624][T15034] ? do_getname+0x191/0x390 [ 542.503641][T15034] do_sys_openat2+0x10d/0x1e0 [ 542.503658][T15034] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.503685][T15034] __x64_sys_openat+0x12d/0x210 [ 542.503703][T15034] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.503723][T15034] ? rcu_is_watching+0x12/0xc0 [ 542.503741][T15034] do_syscall_64+0x10b/0xf80 [ 542.503760][T15034] ? clear_bhb_loop+0x40/0x90 [ 542.503779][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.503794][T15034] RIP: 0033:0x7f2bd679c819 [ 542.503808][T15034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.503822][T15034] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.503837][T15034] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 542.503847][T15034] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 542.503857][T15034] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 542.503867][T15034] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 542.503876][T15034] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 542.503897][T15034] [ 542.943087][T15038] netlink: NAT attribute has 4 unknown bytes [ 543.996968][T15057] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2048'. [ 544.013697][ T30] audit: type=1804 audit(4295040725.999:19): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2046" name="/newroot/507/file0" dev="tmpfs" ino=2666 res=1 errno=0 [ 544.096938][ T30] audit: type=1804 audit(4295040726.019:20): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2046" name="/newroot/507/file0" dev="tmpfs" ino=2666 res=1 errno=0 [ 544.367399][T15068] FAULT_INJECTION: forcing a failure. [ 544.367399][T15068] name failslab, interval 1, probability 0, space 0, times 0 [ 544.428517][T15068] CPU: 0 UID: 8 PID: 15068 Comm: syz.5.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.428546][T15068] Tainted: [L]=SOFTLOCKUP [ 544.428552][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.428563][T15068] Call Trace: [ 544.428569][T15068] [ 544.428575][T15068] dump_stack_lvl+0x100/0x190 [ 544.428606][T15068] should_fail_ex.cold+0x5/0xa [ 544.428626][T15068] should_failslab+0xc2/0x120 [ 544.428649][T15068] __kmalloc_cache_noprof+0x7a/0x6f0 [ 544.428666][T15068] ? snd_seq_queue_alloc+0x56/0x540 [ 544.428688][T15068] snd_seq_queue_alloc+0x56/0x540 [ 544.428709][T15068] snd_seq_ioctl_create_queue+0xa9/0x370 [ 544.428733][T15068] call_seq_client_ctl+0xa3/0x130 [ 544.428758][T15068] snd_seq_kernel_client_ctl+0x77/0xd0 [ 544.428783][T15068] alloc_seq_queue+0xdb/0x180 [ 544.428797][T15068] ? __pfx_alloc_seq_queue+0x10/0x10 [ 544.428823][T15068] ? mark_held_locks+0x40/0x70 [ 544.428847][T15068] snd_seq_oss_open+0x2b2/0xa10 [ 544.428865][T15068] odev_open+0x6f/0x90 [ 544.428877][T15068] ? __pfx_odev_open+0x10/0x10 [ 544.428890][T15068] soundcore_open+0x2e3/0x5a0 [ 544.428906][T15068] ? __pfx_soundcore_open+0x10/0x10 [ 544.428920][T15068] chrdev_open+0x234/0x6a0 [ 544.428941][T15068] ? __pfx_apparmor_file_open+0x10/0x10 [ 544.428959][T15068] ? __pfx_chrdev_open+0x10/0x10 [ 544.428982][T15068] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 544.429010][T15068] do_dentry_open+0x6d8/0x1660 [ 544.429032][T15068] ? __pfx_chrdev_open+0x10/0x10 [ 544.429059][T15068] vfs_open+0x82/0x3f0 [ 544.429077][T15068] path_openat+0x208c/0x31a0 [ 544.429105][T15068] ? __pfx_path_openat+0x10/0x10 [ 544.429138][T15068] do_file_open+0x20e/0x430 [ 544.429161][T15068] ? __pfx_do_file_open+0x10/0x10 [ 544.429196][T15068] ? alloc_fd+0x476/0x790 [ 544.429220][T15068] ? do_getname+0x191/0x390 [ 544.429237][T15068] do_sys_openat2+0x10d/0x1e0 [ 544.429255][T15068] ? __pfx_do_sys_openat2+0x10/0x10 [ 544.429272][T15068] ? find_held_lock+0x2b/0x80 [ 544.429294][T15068] __x64_sys_openat+0x12d/0x210 [ 544.429311][T15068] ? __pfx___x64_sys_openat+0x10/0x10 [ 544.429338][T15068] ? rcu_is_watching+0x12/0xc0 [ 544.429357][T15068] do_syscall_64+0x10b/0xf80 [ 544.429377][T15068] ? clear_bhb_loop+0x40/0x90 [ 544.429397][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.429416][T15068] RIP: 0033:0x7f714cd9c819 [ 544.429439][T15068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.429455][T15068] RSP: 002b:00007f714db91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 544.429471][T15068] RAX: ffffffffffffffda RBX: 00007f714d015fa0 RCX: 00007f714cd9c819 [ 544.429482][T15068] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 544.429491][T15068] RBP: 00007f714ce32c91 R08: 0000000000000000 R09: 0000000000000000 [ 544.429500][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.429509][T15068] R13: 00007f714d016038 R14: 00007f714d015fa0 R15: 00007ffc77757878 [ 544.429535][T15068] [ 545.139262][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'. [ 546.192500][T15076] : Can't lookup blockdev [ 547.851872][T15107] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2061'. [ 547.928568][T15107] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 549.760264][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 550.671762][T15129] nfs: Unknown parameter 'nfs' [ 551.504340][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 552.157380][T14100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.178023][T14100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.187096][T14100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.197915][T14100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.208952][T14100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 552.570460][T15184] bridge0: port 3(dummy0) entered blocking state [ 552.585654][T15184] bridge0: port 3(dummy0) entered disabled state [ 552.601679][T15184] dummy0: entered allmulticast mode [ 552.620186][T15184] dummy0: entered promiscuous mode [ 552.641242][T15184] bridge0: port 3(dummy0) entered blocking state [ 552.647727][T15184] bridge0: port 3(dummy0) entered listening state [ 553.067364][T15177] chnl_net:caif_netlink_parms(): no params data found [ 553.412738][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.451771][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.490695][T15177] bridge_slave_0: entered allmulticast mode [ 553.532790][T15177] bridge_slave_0: entered promiscuous mode [ 553.568841][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.609555][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.644509][T15177] bridge_slave_1: entered allmulticast mode [ 553.680538][T15177] bridge_slave_1: entered promiscuous mode [ 553.821082][T15177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.885509][T15177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.034780][T15177] team0: Port device team_slave_0 added [ 554.306816][T14100] Bluetooth: hci6: command tx timeout [ 554.434768][T15219] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2089'. [ 554.653217][T15177] team0: Port device team_slave_1 added [ 554.679372][T15219] bond_slave_0: entered allmulticast mode [ 554.813088][T15177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.865336][T15177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.865361][T15177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.910638][T15177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.910656][T15177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.910676][T15177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.065681][T15177] hsr_slave_0: entered promiscuous mode [ 555.070332][T15177] hsr_slave_1: entered promiscuous mode [ 555.072800][T15177] debugfs: 'hsr0' already exists in 'hsr' [ 555.072820][T15177] Cannot create hsr debugfs directory [ 555.764458][T15239] Invalid ELF header magic: != ELF [ 556.399929][T14100] Bluetooth: hci6: command tx timeout [ 557.317871][T15177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 557.357935][T14100] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 557.365629][T14100] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 557.378784][T15177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.410055][T15177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 557.429518][T15177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.457226][T15177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 557.475013][T15177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.517983][T15177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 557.545595][T15177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.208759][T15177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.278393][T15177] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.344172][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.351421][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.429074][T13074] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.436263][T13074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.473278][T14100] Bluetooth: hci6: command tx timeout [ 559.361227][T15177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.452429][T15319] random: crng reseeded on system resumption [ 560.546870][T14100] Bluetooth: hci6: command tx timeout [ 560.557890][T15177] veth0_vlan: entered promiscuous mode [ 560.774743][T15177] veth1_vlan: entered promiscuous mode [ 560.873268][T15177] veth0_macvtap: entered promiscuous mode [ 560.913628][T15177] veth1_macvtap: entered promiscuous mode [ 560.985188][T15355] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 561.024810][T15177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.040679][T15355] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2114'. [ 561.090565][T15177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.148282][T13071] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.184330][T13071] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.222491][T13071] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.256138][T13071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.590396][T13071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.628198][T13071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.904119][T13073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.914595][T14100] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 561.924799][T14100] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 561.967048][T13073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.312809][T15363] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2116'. [ 562.501499][ T30] audit: type=1800 audit(4295040744.529:21): pid=15367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2079" name="sr0" dev="devtmpfs" ino=2895 res=0 errno=0 [ 562.659157][T15372] FAULT_INJECTION: forcing a failure. [ 562.659157][T15372] name failslab, interval 1, probability 0, space 0, times 0 [ 562.794168][T15372] CPU: 0 UID: 0 PID: 15372 Comm: syz.0.2117 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.794194][T15372] Tainted: [L]=SOFTLOCKUP [ 562.794198][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.794207][T15372] Call Trace: [ 562.794212][T15372] [ 562.794218][T15372] dump_stack_lvl+0x100/0x190 [ 562.794246][T15372] should_fail_ex.cold+0x5/0xa [ 562.794266][T15372] should_failslab+0xc2/0x120 [ 562.794288][T15372] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 562.794307][T15372] ? sk_prot_alloc+0x60/0x2a0 [ 562.794325][T15372] sk_prot_alloc+0x60/0x2a0 [ 562.794340][T15372] sk_alloc+0x36/0xe80 [ 562.794359][T15372] rxrpc_create+0x116/0x8d0 [ 562.794381][T15372] __sock_create+0x339/0x860 [ 562.794400][T15372] __sys_socket+0x14d/0x260 [ 562.794417][T15372] ? __pfx___sys_socket+0x10/0x10 [ 562.794438][T15372] __x64_sys_socket+0x72/0xb0 [ 562.794453][T15372] ? lockdep_hardirqs_on+0x78/0x100 [ 562.794472][T15372] do_syscall_64+0x10b/0xf80 [ 562.794490][T15372] ? clear_bhb_loop+0x40/0x90 [ 562.794508][T15372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.794523][T15372] RIP: 0033:0x7f2bd679c819 [ 562.794536][T15372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.794550][T15372] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.794565][T15372] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 562.794575][T15372] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 562.794583][T15372] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 562.794592][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.794601][T15372] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 562.794619][T15372] [ 563.223421][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.236994][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.399628][T14100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 563.426454][T14100] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 563.492753][ T6995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 563.581401][ T6995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 563.617185][ T6995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 564.458293][T15378] chnl_net:caif_netlink_parms(): no params data found [ 565.077111][T13071] dummy0: left allmulticast mode [ 565.119665][T13071] dummy0: left promiscuous mode [ 565.143225][T13071] bridge0: port 3(dummy0) entered disabled state [ 565.213496][T13071] bridge_slave_1: left allmulticast mode [ 565.241998][T13071] bridge_slave_1: left promiscuous mode [ 565.268690][T13071] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.310163][T13071] bridge_slave_0: left allmulticast mode [ 565.333517][T13071] bridge_slave_0: left promiscuous mode [ 565.360880][T13071] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.746966][ T6995] Bluetooth: hci7: command tx timeout [ 565.855160][T13071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.883971][T13071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.909508][T13071] bond0 (unregistering): Released all slaves [ 566.084544][T13071] ovs_: left promiscuous mode [ 566.439041][T15378] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.488613][T15378] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.521063][T15378] bridge_slave_0: entered allmulticast mode [ 566.565142][T15378] bridge_slave_0: entered promiscuous mode [ 566.684551][T15378] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.704913][T15378] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.728911][T15378] bridge_slave_1: entered allmulticast mode [ 566.747399][T15378] bridge_slave_1: entered promiscuous mode [ 567.135630][T15378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.249446][T15378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.405505][T15378] team0: Port device team_slave_0 added [ 567.452513][T15378] team0: Port device team_slave_1 added [ 567.684664][T15378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.733834][T15378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.827491][ T6995] Bluetooth: hci7: command tx timeout [ 567.853854][T15378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.943897][T15378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.957473][T15441] Invalid ELF header magic: != ELF [ 567.966515][T15378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.057023][T15378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.156460][ C0] bridge0: port 3(dummy0) entered learning state [ 568.340233][T15378] hsr_slave_0: entered promiscuous mode [ 568.375359][T15378] hsr_slave_1: entered promiscuous mode [ 568.394694][T15378] debugfs: 'hsr0' already exists in 'hsr' [ 568.417356][T15378] Cannot create hsr debugfs directory [ 569.906965][ T6995] Bluetooth: hci7: command tx timeout [ 569.961357][T15463] tipc: Started in network mode [ 569.980079][T15463] tipc: Node identity ffffffff, cluster identity 4711 [ 570.001293][T15463] tipc: Node number set to 4294967295 [ 570.336264][T15378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.389306][T15378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.436176][T15378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 570.507963][T15378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.541041][T15378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 570.610677][T15378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.716437][T15378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 570.726281][T15479] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 570.851149][T15378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.489648][T15378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.596306][T15378] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.665120][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.672292][T13070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.870630][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.878049][T13070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.991102][ T7001] Bluetooth: hci7: command tx timeout [ 572.378640][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.411883][T13071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.452110][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.498985][T13071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.612493][T15508] FAULT_INJECTION: forcing a failure. [ 572.612493][T15508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.640616][T13071] veth1_vlan: left promiscuous mode [ 572.700779][T15508] CPU: 0 UID: 0 PID: 15508 Comm: syz.6.2145 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.700807][T15508] Tainted: [L]=SOFTLOCKUP [ 572.700812][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.700822][T15508] Call Trace: [ 572.700828][T15508] [ 572.700834][T15508] dump_stack_lvl+0x100/0x190 [ 572.700866][T15508] should_fail_ex.cold+0x5/0xa [ 572.700883][T15508] ? prepare_alloc_pages+0x16d/0x5f0 [ 572.700900][T15508] should_fail_alloc_page+0xeb/0x140 [ 572.700924][T15508] prepare_alloc_pages+0x1f0/0x5f0 [ 572.700942][T15508] __alloc_frozen_pages_noprof+0x19a/0x2bd0 [ 572.700969][T15508] ? __lock_acquire+0x4a5/0x2630 [ 572.700989][T15508] ? css_rstat_updated+0x1ce/0x5a0 [ 572.701010][T15508] ? __pfx_css_rstat_updated+0x10/0x10 [ 572.701030][T15508] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.701055][T15508] ? rcu_is_watching+0x12/0xc0 [ 572.701073][T15508] ? __lock_acquire+0x4a5/0x2630 [ 572.701095][T15508] ? __lock_acquire+0x4a5/0x2630 [ 572.701114][T15508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.701134][T15508] ? policy_nodemask+0xed/0x4f0 [ 572.701158][T15508] alloc_pages_mpol+0x1fb/0x550 [ 572.701181][T15508] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 572.701203][T15508] ? find_held_lock+0x2b/0x80 [ 572.701222][T15508] ? filemap_get_entry+0x1a7/0x3b0 [ 572.701242][T15508] ? filemap_get_entry+0x1a7/0x3b0 [ 572.701271][T15508] folio_alloc_noprof+0x22/0x330 [ 572.701288][T15508] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 572.701304][T15508] ? __pfx_filemap_get_entry+0x10/0x10 [ 572.701324][T15508] ? filemap_add_folio+0x114/0x690 [ 572.701346][T15508] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 572.701365][T15508] ? rcu_is_watching+0x12/0xc0 [ 572.701382][T15508] __filemap_get_folio_mpol+0x6a4/0xe70 [ 572.701408][T15508] ioctx_alloc+0x7e1/0x21a0 [ 572.701431][T15508] ? __pfx_ioctx_alloc+0x10/0x10 [ 572.701450][T15508] __x64_sys_io_setup+0xc9/0x220 [ 572.701467][T15508] do_syscall_64+0x10b/0xf80 [ 572.701486][T15508] ? clear_bhb_loop+0x40/0x90 [ 572.701504][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.701520][T15508] RIP: 0033:0x7ff8f0d9c819 [ 572.701534][T15508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.701548][T15508] RSP: 002b:00007ff8f1bc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 572.701563][T15508] RAX: ffffffffffffffda RBX: 00007ff8f1015fa0 RCX: 00007ff8f0d9c819 [ 572.701573][T15508] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 572.701582][T15508] RBP: 00007ff8f0e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 572.701591][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.701600][T15508] R13: 00007ff8f1016038 R14: 00007ff8f1015fa0 R15: 00007fff5705f6e8 [ 572.701620][T15508] [ 574.208524][T15533] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2152'. [ 574.792754][T13071] team0 (unregistering): Port device team_slave_1 removed [ 574.816448][T15527] slcan: can't register candev [ 574.838223][T13071] team0 (unregistering): Port device team_slave_0 removed [ 575.199039][T15533] mac80211_hwsim hwsim118 : renamed from wlan0 (while UP) [ 576.127726][T15378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.425046][T15378] veth0_vlan: entered promiscuous mode [ 576.478346][T15378] veth1_vlan: entered promiscuous mode [ 576.611293][T15378] veth0_macvtap: entered promiscuous mode [ 576.665363][T15378] veth1_macvtap: entered promiscuous mode [ 576.743182][T15553] ubi0: attaching mtd0 [ 576.768887][T15378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.778899][T15553] FAULT_INJECTION: forcing a failure. [ 576.778899][T15553] name failslab, interval 1, probability 0, space 0, times 0 [ 576.826408][T15378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.851649][T15553] CPU: 0 UID: 0 PID: 15553 Comm: syz.0.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.851677][T15553] Tainted: [L]=SOFTLOCKUP [ 576.851683][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 576.851692][T15553] Call Trace: [ 576.851698][T15553] [ 576.851705][T15553] dump_stack_lvl+0x100/0x190 [ 576.851735][T15553] should_fail_ex.cold+0x5/0xa [ 576.851757][T15553] should_failslab+0xc2/0x120 [ 576.851782][T15553] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 576.851802][T15553] ? __kernfs_new_node+0xd2/0x9f0 [ 576.851827][T15553] __kernfs_new_node+0xd2/0x9f0 [ 576.851851][T15553] ? __pfx___kernfs_new_node+0x10/0x10 [ 576.851877][T15553] ? find_held_lock+0x2b/0x80 [ 576.851894][T15553] ? kernfs_root+0xee/0x2a0 [ 576.851912][T15553] ? kernfs_root+0xee/0x2a0 [ 576.851938][T15553] kernfs_new_node+0x11b/0x1a0 [ 576.851974][T15553] __kernfs_create_file+0x53/0x350 [ 576.851994][T15553] sysfs_add_file_mode_ns+0x207/0x3c0 [ 576.852019][T15553] internal_create_group+0x593/0xf40 [ 576.852045][T15553] ? __pfx_internal_create_group+0x10/0x10 [ 576.852065][T15553] ? kernfs_remove_by_name_ns+0xdf/0x120 [ 576.852086][T15553] sysfs_slab_add+0x1a4/0x1f0 [ 576.852109][T15553] do_kmem_cache_create+0x472/0x540 [ 576.852134][T15553] __kmem_cache_create_args+0x386/0x420 [ 576.852155][T15553] ubi_attach+0x32a/0x4d30 [ 576.852180][T15553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 576.852197][T15553] ? ubi_msg+0x114/0x159 [ 576.852213][T15553] ? __pfx_ubi_msg+0x10/0x10 [ 576.852228][T15553] ? __pfx_ubi_attach+0x10/0x10 [ 576.852245][T15553] ? lockdep_init_map_type+0x5c/0x250 [ 576.852269][T15553] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 576.852288][T15553] ? __vmalloc_node_noprof+0xad/0xf0 [ 576.852304][T15553] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 576.852325][T15553] ubi_attach_mtd_dev+0x139f/0x32a0 [ 576.852353][T15553] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 576.852371][T15553] ? __pfx_get_mtd_device+0x10/0x10 [ 576.852390][T15553] ctrl_cdev_ioctl+0x36a/0x400 [ 576.852410][T15553] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 576.852433][T15553] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 576.852453][T15553] __x64_sys_ioctl+0x18e/0x210 [ 576.852473][T15553] do_syscall_64+0x10b/0xf80 [ 576.852492][T15553] ? clear_bhb_loop+0x40/0x90 [ 576.852511][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.852527][T15553] RIP: 0033:0x7f2bd679c819 [ 576.852541][T15553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.852555][T15553] RSP: 002b:00007f2bd75d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.852570][T15553] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa0 RCX: 00007f2bd679c819 [ 576.852580][T15553] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000008 [ 576.852589][T15553] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 576.852598][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.852606][T15553] R13: 00007f2bd6a16038 R14: 00007f2bd6a15fa0 R15: 00007ffe7cf8ce88 [ 576.852627][T15553] [ 577.172903][T15553] SLUB: Unable to add cache ubi_aeb_slab_cache to sysfs [ 577.180346][T15553] ubi0: scanning is finished [ 577.185057][T15553] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 577.763377][T10543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.782107][T15553] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 577.816729][T13070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.885722][T13070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.036250][T13070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.158101][T13070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.203278][T13070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.350881][T13072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.373695][T13072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.704460][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 579.251269][T15577] sp0: Synchronizing with TNC [ 579.633388][T15577] sp0: Synchronizing with TNC [ 581.979233][T15633] netlink: 'syz.5.2176': attribute type 11 has an invalid length. [ 582.085761][T15633] netlink: 'syz.5.2176': attribute type 11 has an invalid length. [ 582.085787][T15633] netlink: 'syz.5.2176': attribute type 11 has an invalid length. [ 582.856673][T15660] futex_wake_op: syz.0.2179 tries to shift op by -2048; fix this program [ 583.458430][T15671] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2185'. [ 583.518283][ C0] bridge0: port 3(dummy0) entered forwarding state [ 583.524910][ C0] bridge0: topology change detected, propagating [ 585.736110][T15713] bridge0: port 3(dummy0) entered blocking state [ 585.751554][T15713] bridge0: port 3(dummy0) entered disabled state [ 585.769794][T15713] dummy0: entered allmulticast mode [ 585.786464][T15713] dummy0: entered promiscuous mode [ 585.802738][T15713] bridge0: port 3(dummy0) entered blocking state [ 585.809309][T15713] bridge0: port 3(dummy0) entered forwarding state [ 586.427405][T15724] FAULT_INJECTION: forcing a failure. [ 586.427405][T15724] name failslab, interval 1, probability 0, space 0, times 0 [ 586.598072][T15724] CPU: 0 UID: 0 PID: 15724 Comm: syz.5.2194 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.598119][T15724] Tainted: [L]=SOFTLOCKUP [ 586.598130][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 586.598149][T15724] Call Trace: [ 586.598159][T15724] [ 586.598169][T15724] dump_stack_lvl+0x100/0x190 [ 586.598199][T15724] should_fail_ex.cold+0x5/0xa [ 586.598225][T15724] should_failslab+0xc2/0x120 [ 586.598250][T15724] __kmalloc_cache_noprof+0x7a/0x6f0 [ 586.598267][T15724] ? refill_pi_state_cache+0x91/0x260 [ 586.598289][T15724] refill_pi_state_cache+0x91/0x260 [ 586.598306][T15724] futex_lock_pi+0x16d/0x7a0 [ 586.598323][T15724] ? __pfx_futex_lock_pi+0x10/0x10 [ 586.598342][T15724] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 586.598376][T15724] ? __pfx_futex_wake_mark+0x10/0x10 [ 586.598397][T15724] ? __might_fault+0x111/0x140 [ 586.598416][T15724] ? do_vfs_ioctl+0x226/0x13e0 [ 586.598438][T15724] do_futex+0x18a/0x350 [ 586.598461][T15724] ? __pfx_do_futex+0x10/0x10 [ 586.598484][T15724] ? find_held_lock+0x2b/0x80 [ 586.598503][T15724] __x64_sys_futex+0x34f/0x4d0 [ 586.598529][T15724] ? __pfx___x64_sys_futex+0x10/0x10 [ 586.598555][T15724] ? rcu_is_watching+0x12/0xc0 [ 586.598572][T15724] do_syscall_64+0x10b/0xf80 [ 586.598591][T15724] ? clear_bhb_loop+0x40/0x90 [ 586.598608][T15724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.598623][T15724] RIP: 0033:0x7f714cd9c819 [ 586.598637][T15724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.598652][T15724] RSP: 002b:00007f714db70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 586.598667][T15724] RAX: ffffffffffffffda RBX: 00007f714d016090 RCX: 00007f714cd9c819 [ 586.598677][T15724] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 586.598685][T15724] RBP: 00007f714ce32c91 R08: 0000000000000000 R09: 000000008000fff5 [ 586.598694][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.598703][T15724] R13: 00007f714d016128 R14: 00007f714d016090 R15: 00007ffc77757878 [ 586.598722][T15724] [ 588.253263][ T30] audit: type=1800 audit(4295040770.269:22): pid=15744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2198" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 588.765602][T15750] tipc: Started in network mode [ 588.789354][T15750] tipc: Node identity ffffffff, cluster identity 4711 [ 588.826475][T15750] tipc: Node number set to 4294967295 [ 589.716363][T15777] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 589.739469][T15782] Console: switching to colour VGA+ 80x25 [ 590.357793][T15795] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2212'. [ 590.372046][T15798] tipc: Started in network mode [ 590.399651][T15798] tipc: Node identity ffffffff, cluster identity 4711 [ 590.420924][T15798] tipc: Node number set to 4294967295 [ 591.292799][T15819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2218'. [ 591.442865][T15825] netlink: 86 bytes leftover after parsing attributes in process `syz.6.2219'. [ 591.982828][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 591.983335][T15836] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2222'. [ 592.571919][T15848] bridge0: port 4(veth1_macvtap) entered blocking state [ 592.598389][T15848] bridge0: port 4(veth1_macvtap) entered disabled state [ 592.624722][T15848] veth1_macvtap: entered allmulticast mode [ 592.660215][T15848] veth1_macvtap: left allmulticast mode [ 593.737198][T15873] futex_wake_op: syz.6.2232 tries to shift op by -2048; fix this program [ 595.491398][T15905] FAULT_INJECTION: forcing a failure. [ 595.491398][T15905] name failslab, interval 1, probability 0, space 0, times 0 [ 595.586458][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.0.2239 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.586486][T15905] Tainted: [L]=SOFTLOCKUP [ 595.586492][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 595.586502][T15905] Call Trace: [ 595.586507][T15905] [ 595.586520][T15905] dump_stack_lvl+0x100/0x190 [ 595.586553][T15905] should_fail_ex.cold+0x5/0xa [ 595.586576][T15905] should_failslab+0xc2/0x120 [ 595.586599][T15905] __kmalloc_cache_noprof+0x7a/0x6f0 [ 595.586617][T15905] ? refill_pi_state_cache+0x91/0x260 [ 595.586637][T15905] refill_pi_state_cache+0x91/0x260 [ 595.586654][T15905] futex_lock_pi+0x16d/0x7a0 [ 595.586672][T15905] ? __pfx_futex_lock_pi+0x10/0x10 [ 595.586707][T15905] ? __pfx_futex_wake_mark+0x10/0x10 [ 595.586728][T15905] ? __might_fault+0x111/0x140 [ 595.586746][T15905] ? do_vfs_ioctl+0x226/0x13e0 [ 595.586767][T15905] do_futex+0x18a/0x350 [ 595.586790][T15905] ? __pfx_do_futex+0x10/0x10 [ 595.586814][T15905] ? find_held_lock+0x2b/0x80 [ 595.586833][T15905] __x64_sys_futex+0x34f/0x4d0 [ 595.586858][T15905] ? __pfx___x64_sys_futex+0x10/0x10 [ 595.586884][T15905] ? rcu_is_watching+0x12/0xc0 [ 595.586901][T15905] do_syscall_64+0x10b/0xf80 [ 595.586920][T15905] ? clear_bhb_loop+0x40/0x90 [ 595.586938][T15905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.586953][T15905] RIP: 0033:0x7f2bd679c819 [ 595.586966][T15905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.586981][T15905] RSP: 002b:00007f2bd75b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 595.586997][T15905] RAX: ffffffffffffffda RBX: 00007f2bd6a16090 RCX: 00007f2bd679c819 [ 595.587007][T15905] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 595.587015][T15905] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 000000008000fff5 [ 595.587024][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.587033][T15905] R13: 00007f2bd6a16128 R14: 00007f2bd6a16090 R15: 00007ffe7cf8ce88 [ 595.587052][T15905] [ 596.711219][T15919] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[k<:1 is already present [ 597.139916][ T6995] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 597.197849][T15929] FAULT_INJECTION: forcing a failure. [ 597.197849][T15929] name failslab, interval 1, probability 0, space 0, times 0 [ 597.282465][T15929] CPU: 0 UID: 0 PID: 15929 Comm: syz.6.2246 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.282500][T15929] Tainted: [L]=SOFTLOCKUP [ 597.282505][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 597.282515][T15929] Call Trace: [ 597.282521][T15929] [ 597.282527][T15929] dump_stack_lvl+0x100/0x190 [ 597.282558][T15929] should_fail_ex.cold+0x5/0xa [ 597.282578][T15929] should_failslab+0xc2/0x120 [ 597.282601][T15929] __kmalloc_cache_noprof+0x7a/0x6f0 [ 597.282618][T15929] ? __request_module+0x2c3/0x6c0 [ 597.282640][T15929] ? lockdep_hardirqs_on+0x78/0x100 [ 597.282663][T15929] __request_module+0x2c3/0x6c0 [ 597.282688][T15929] ? __pfx___request_module+0x10/0x10 [ 597.282720][T15929] ? find_held_lock+0x2b/0x80 [ 597.282735][T15929] ? inet_create+0xa72/0x1060 [ 597.282757][T15929] inet_create+0xd45/0x1060 [ 597.282775][T15929] ? inet_create+0x94/0x1060 [ 597.282795][T15929] __sock_create+0x339/0x860 [ 597.282815][T15929] __sys_socket+0x14d/0x260 [ 597.282832][T15929] ? __pfx___sys_socket+0x10/0x10 [ 597.282847][T15929] ? ksys_write+0x1ac/0x250 [ 597.282872][T15929] __x64_sys_socket+0x72/0xb0 [ 597.282888][T15929] ? lockdep_hardirqs_on+0x78/0x100 [ 597.282906][T15929] do_syscall_64+0x10b/0xf80 [ 597.282924][T15929] ? clear_bhb_loop+0x40/0x90 [ 597.282942][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.282957][T15929] RIP: 0033:0x7ff8f0d9c819 [ 597.282970][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.282985][T15929] RSP: 002b:00007ff8f1bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 597.282999][T15929] RAX: ffffffffffffffda RBX: 00007ff8f1015fa0 RCX: 00007ff8f0d9c819 [ 597.283009][T15929] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000002 [ 597.283018][T15929] RBP: 00007ff8f0e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 597.283026][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.283035][T15929] R13: 00007ff8f1016038 R14: 00007ff8f1015fa0 R15: 00007fff5705f6e8 [ 597.283053][T15929] [ 598.739996][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'. [ 599.033595][T15958] FAULT_INJECTION: forcing a failure. [ 599.033595][T15958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 599.092289][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.0.2253 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.092317][T15958] Tainted: [L]=SOFTLOCKUP [ 599.092329][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 599.092339][T15958] Call Trace: [ 599.092344][T15958] [ 599.092350][T15958] dump_stack_lvl+0x100/0x190 [ 599.092381][T15958] should_fail_ex.cold+0x5/0xa [ 599.092401][T15958] get_futex_key+0x1d2/0x1600 [ 599.092425][T15958] ? __pfx_get_futex_key+0x10/0x10 [ 599.092445][T15958] ? futex_hash+0x2ad/0x370 [ 599.092466][T15958] ? __lock_acquire+0x4a5/0x2630 [ 599.092491][T15958] futex_wake+0xea/0x530 [ 599.092509][T15958] ? __pfx_futex_wake+0x10/0x10 [ 599.092527][T15958] ? __fget_files+0x215/0x3d0 [ 599.092552][T15958] do_futex+0x32b/0x350 [ 599.092578][T15958] ? __pfx_do_futex+0x10/0x10 [ 599.092600][T15958] ? fdget+0x18b/0x210 [ 599.092620][T15958] ? __sys_sendmsg+0x18f/0x220 [ 599.092643][T15958] __x64_sys_futex+0x34f/0x4d0 [ 599.092668][T15958] ? __pfx___x64_sys_futex+0x10/0x10 [ 599.092694][T15958] ? rcu_is_watching+0x12/0xc0 [ 599.092712][T15958] do_syscall_64+0x10b/0xf80 [ 599.092731][T15958] ? clear_bhb_loop+0x40/0x90 [ 599.092749][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.092764][T15958] RIP: 0033:0x7f2bd679c819 [ 599.092776][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.092791][T15958] RSP: 002b:00007f2bd75d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 599.092806][T15958] RAX: ffffffffffffffda RBX: 00007f2bd6a15fa8 RCX: 00007f2bd679c819 [ 599.092816][T15958] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2bd6a15fac [ 599.092825][T15958] RBP: 00007f2bd6a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 599.092834][T15958] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 599.092843][T15958] R13: 00007f2bd6a16038 R14: 00007ffe7cf8cda0 R15: 00007ffe7cf8ce88 [ 599.092862][T15958] [ 599.355961][T15958] kAFS: Invalid Command on /proc/fs/afs/cells file [ 600.269924][T15983] ubi0: attaching mtd0 [ 600.314586][T15983] ubi0: scanning is finished [ 600.335851][T15983] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 600.539877][T15983] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 602.353061][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2271'. [ 603.142748][ T30] audit: type=1800 audit(4295059129.168:23): pid=16050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2275" name="discovery_nqn" dev="configfs" ino=70837 res=0 errno=0 [ 603.323720][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2276'. [ 603.640558][T16074] random: crng reseeded on system resumption [ 604.081614][T16082] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 604.192895][T16083] FAULT_INJECTION: forcing a failure. [ 604.192895][T16083] name failslab, interval 1, probability 0, space 0, times 0 [ 604.242627][T16083] CPU: 0 UID: 0 PID: 16083 Comm: syz.2.2281 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.242658][T16083] Tainted: [L]=SOFTLOCKUP [ 604.242664][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 604.242674][T16083] Call Trace: [ 604.242679][T16083] [ 604.242685][T16083] dump_stack_lvl+0x100/0x190 [ 604.242715][T16083] should_fail_ex.cold+0x5/0xa [ 604.242736][T16083] should_failslab+0xc2/0x120 [ 604.242759][T16083] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 604.242778][T16083] ? vm_area_dup+0x27/0x8e0 [ 604.242798][T16083] vm_area_dup+0x27/0x8e0 [ 604.242817][T16083] __split_vma+0x18c/0xd90 [ 604.242837][T16083] ? __pfx___split_vma+0x10/0x10 [ 604.242858][T16083] ? __pfx_mas_prev+0x10/0x10 [ 604.242892][T16083] vms_gather_munmap_vmas+0x39f/0x1500 [ 604.242912][T16083] ? validate_mm+0x261/0x4e0 [ 604.242929][T16083] ? validate_mm+0x261/0x4e0 [ 604.242948][T16083] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 604.242968][T16083] ? validate_mm+0x392/0x4e0 [ 604.242988][T16083] ? __pfx_validate_mm+0x10/0x10 [ 604.243010][T16083] do_vmi_align_munmap+0x287/0x5f0 [ 604.243032][T16083] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 604.243077][T16083] do_vmi_munmap+0x1f8/0x3e0 [ 604.243098][T16083] __vm_munmap+0x196/0x390 [ 604.243118][T16083] ? __pfx___vm_munmap+0x10/0x10 [ 604.243149][T16083] __x64_sys_munmap+0x59/0x80 [ 604.243164][T16083] do_syscall_64+0x10b/0xf80 [ 604.243182][T16083] ? clear_bhb_loop+0x40/0x90 [ 604.243200][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.243215][T16083] RIP: 0033:0x7f5babb9c647 [ 604.243228][T16083] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.243243][T16083] RSP: 002b:00007f5ba9df4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 604.243258][T16083] RAX: ffffffffffffffda RBX: 00007f5ba4000000 RCX: 00007f5babb9c647 [ 604.243268][T16083] RDX: 0000000000000000 RSI: 0000000002400000 RDI: 00007f5ba1c00000 [ 604.243277][T16083] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 604.243285][T16083] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 604.243294][T16083] R13: 0000000000001000 R14: 00007f5ba8000000 R15: 0000000002400000 [ 604.243313][T16083] [ 604.613648][T16093] FAULT_INJECTION: forcing a failure. [ 604.613648][T16093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.628388][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.2.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.628413][T16093] Tainted: [L]=SOFTLOCKUP [ 604.628418][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 604.628427][T16093] Call Trace: [ 604.628432][T16093] [ 604.628438][T16093] dump_stack_lvl+0x100/0x190 [ 604.628467][T16093] should_fail_ex.cold+0x5/0xa [ 604.628486][T16093] _copy_from_user+0x2e/0xd0 [ 604.628507][T16093] io_uring_setup+0xc0/0x160 [ 604.628531][T16093] ? __pfx_io_uring_setup+0x10/0x10 [ 604.628554][T16093] ? do_futex+0x192/0x350 [ 604.628577][T16093] ? __pfx_do_futex+0x10/0x10 [ 604.628607][T16093] ? xfd_validate_state+0x129/0x190 [ 604.628630][T16093] ? ksys_write+0x1ac/0x250 [ 604.628655][T16093] __x64_sys_io_uring_setup+0xc2/0x170 [ 604.628678][T16093] do_syscall_64+0x10b/0xf80 [ 604.628696][T16093] ? clear_bhb_loop+0x40/0x90 [ 604.628714][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.628729][T16093] RIP: 0033:0x7f5babb9c819 [ 604.628742][T16093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.628756][T16093] RSP: 002b:00007f5ba9df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 604.628771][T16093] RAX: ffffffffffffffda RBX: 00007f5babe15fa0 RCX: 00007f5babb9c819 [ 604.628781][T16093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 604.628798][T16093] RBP: 00007f5babc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 604.628806][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.628815][T16093] R13: 00007f5babe16038 R14: 00007f5babe15fa0 R15: 00007fffed1ca378 [ 604.628834][T16093] [ 605.042691][T16088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.049316][T16088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.095305][T16088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.135107][T16088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.154804][T16088] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 605.187386][T16088] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 605.224033][T16088] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 605.293842][T16088] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 605.318465][T16088] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 605.412627][T16088] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 605.469958][T16088] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 605.504709][T16088] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 605.559829][T16088] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 605.807689][T16119] futex_wake_op: syz.0.2288 tries to shift op by -2048; fix this program [ 605.865765][T16119] futex_wake_op: syz.0.2288 tries to shift op by -2048; fix this program [ 607.116779][ T6995] Bluetooth: hci1: command 0x0c1a tx timeout [ 607.122964][ T7001] Bluetooth: hci0: command 0x0c1a tx timeout [ 607.194394][ T6995] Bluetooth: hci5: command 0x0c1a tx timeout [ 607.200528][ T7001] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.206694][T14100] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.347308][ T6995] Bluetooth: hci6: command 0x0c1a tx timeout [ 607.507377][ T6995] Bluetooth: hci7: command 0x0c1a tx timeout [ 607.650792][T16144] loop6: detected capacity change from 0 to 8 [ 608.991486][T16166] ubi0: attaching mtd0 [ 608.997332][T16164] netlink: 202 bytes leftover after parsing attributes in process `syz.0.2298'. [ 609.086852][T16166] ubi0: scanning is finished [ 609.134368][T16166] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 609.267108][ T6995] Bluetooth: hci5: command 0x0c1a tx timeout [ 609.392492][T16166] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 609.427354][ T6995] Bluetooth: hci6: command 0x0c1a tx timeout [ 609.587026][ T6995] Bluetooth: hci7: command 0x0c1a tx timeout [ 610.343284][T16187] random: crng reseeded on system resumption [ 610.559931][T16189] FAULT_INJECTION: forcing a failure. [ 610.559931][T16189] name failslab, interval 1, probability 0, space 0, times 0 [ 610.651964][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.0.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.651992][T16189] Tainted: [L]=SOFTLOCKUP [ 610.651997][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 610.652007][T16189] Call Trace: [ 610.652012][T16189] [ 610.652018][T16189] dump_stack_lvl+0x100/0x190 [ 610.652054][T16189] should_fail_ex.cold+0x5/0xa [ 610.652074][T16189] should_failslab+0xc2/0x120 [ 610.652098][T16189] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 610.652117][T16189] ? __kernfs_new_node+0xd2/0x9f0 [ 610.652141][T16189] __kernfs_new_node+0xd2/0x9f0 [ 610.652164][T16189] ? __pfx___kernfs_new_node+0x10/0x10 [ 610.652189][T16189] ? find_held_lock+0x2b/0x80 [ 610.652205][T16189] ? kernfs_root+0xee/0x2a0 [ 610.652224][T16189] ? kernfs_root+0xee/0x2a0 [ 610.652247][T16189] kernfs_new_node+0x11b/0x1a0 [ 610.652272][T16189] __kernfs_create_file+0x53/0x350 [ 610.652291][T16189] sysfs_add_file_mode_ns+0x207/0x3c0 [ 610.652315][T16189] sysfs_merge_group+0x194/0x340 [ 610.652336][T16189] ? __pfx_sysfs_merge_group+0x10/0x10 [ 610.652356][T16189] ? bus_add_device+0x368/0x6b0 [ 610.652378][T16189] ? __pfx_bus_add_device+0x10/0x10 [ 610.652393][T16189] ? __pfx_dev_add_physical_location+0x10/0x10 [ 610.652420][T16189] dpm_sysfs_add+0x237/0x280 [ 610.652443][T16189] device_add+0x9ef/0x1920 [ 610.652474][T16189] ? __pfx_device_add+0x10/0x10 [ 610.652502][T16189] nfc_register_device+0x41/0x3e0 [ 610.652523][T16189] nci_register_device+0x7f1/0xb80 [ 610.652539][T16189] ? __pfx_nci_register_device+0x10/0x10 [ 610.652560][T16189] ? lockdep_init_map_type+0x5c/0x250 [ 610.652588][T16189] virtual_ncidev_open+0x141/0x220 [ 610.652603][T16189] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 610.652618][T16189] misc_open+0x26d/0x450 [ 610.652639][T16189] ? __pfx_misc_open+0x10/0x10 [ 610.652658][T16189] chrdev_open+0x234/0x6a0 [ 610.652680][T16189] ? __pfx_apparmor_file_open+0x10/0x10 [ 610.652697][T16189] ? __pfx_chrdev_open+0x10/0x10 [ 610.652720][T16189] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 610.652748][T16189] do_dentry_open+0x6d8/0x1660 [ 610.652770][T16189] ? __pfx_chrdev_open+0x10/0x10 [ 610.652797][T16189] vfs_open+0x82/0x3f0 [ 610.652815][T16189] path_openat+0x208c/0x31a0 [ 610.652844][T16189] ? __pfx_path_openat+0x10/0x10 [ 610.652872][T16189] do_file_open+0x20e/0x430 [ 610.652896][T16189] ? __pfx_do_file_open+0x10/0x10 [ 610.652932][T16189] ? alloc_fd+0x476/0x790 [ 610.652955][T16189] ? do_getname+0x191/0x390 [ 610.652972][T16189] do_sys_openat2+0x10d/0x1e0 [ 610.652989][T16189] ? __pfx_do_sys_openat2+0x10/0x10 [ 610.653013][T16189] __x64_sys_openat+0x12d/0x210 [ 610.653031][T16189] ? __pfx___x64_sys_openat+0x10/0x10 [ 610.653051][T16189] ? rcu_is_watching+0x12/0xc0 [ 610.653069][T16189] do_syscall_64+0x10b/0xf80 [ 610.653088][T16189] ? clear_bhb_loop+0x40/0x90 [ 610.653106][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.653121][T16189] RIP: 0033:0x7f2bd679c819 [ 610.653135][T16189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.653149][T16189] RSP: 002b:00007f2bd75b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.653164][T16189] RAX: ffffffffffffffda RBX: 00007f2bd6a16090 RCX: 00007f2bd679c819 [ 610.653175][T16189] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 610.653184][T16189] RBP: 00007f2bd6832c91 R08: 0000000000000000 R09: 0000000000000000 [ 610.653194][T16189] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 610.653203][T16189] R13: 00007f2bd6a16128 R14: 00007f2bd6a16090 R15: 00007ffe7cf8ce88 [ 610.653224][T16189] [ 611.385446][ T6995] Bluetooth: hci5: command 0x0c1a tx timeout [ 611.568107][ T7001] Bluetooth: hci6: command 0x0c1a tx timeout [ 611.592472][T16208] FAULT_INJECTION: forcing a failure. [ 611.592472][T16208] name failslab, interval 1, probability 0, space 0, times 0 [ 611.622430][T16208] CPU: 0 UID: 0 PID: 16208 Comm: syz.0.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.622459][T16208] Tainted: [L]=SOFTLOCKUP [ 611.622465][T16208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 611.622474][T16208] Call Trace: [ 611.622479][T16208] [ 611.622486][T16208] dump_stack_lvl+0x100/0x190 [ 611.622517][T16208] should_fail_ex.cold+0x5/0xa [ 611.622537][T16208] ? lsm_blob_alloc+0x68/0x90 [ 611.622561][T16208] should_failslab+0xc2/0x120 [ 611.622585][T16208] __kmalloc_noprof+0xe0/0x850 [ 611.622605][T16208] ? trace_kmalloc+0xe3/0x110 [ 611.622629][T16208] lsm_blob_alloc+0x68/0x90 [ 611.622652][T16208] security_sk_alloc+0x2d/0x290 [ 611.622669][T16208] sk_prot_alloc+0x12a/0x2a0 [ 611.622685][T16208] sk_alloc+0x36/0xe80 [ 611.622704][T16208] __netlink_create+0x5e/0x2c0 [ 611.622724][T16208] ? __wake_up+0x3f/0x60 [ 611.622744][T16208] netlink_create+0x298/0x610 [ 611.622765][T16208] ? __pfx_genl_bind+0x10/0x10 [ 611.622780][T16208] ? __pfx_genl_unbind+0x10/0x10 [ 611.622794][T16208] ? __pfx_genl_release+0x10/0x10 [ 611.622812][T16208] __sock_create+0x339/0x860 [ 611.622831][T16208] __sys_socket+0x14d/0x260 [ 611.622846][T16208] ? exc_page_fault+0x6f/0xd0 [ 611.622865][T16208] ? __pfx___sys_socket+0x10/0x10 [ 611.622887][T16208] __x64_sys_socket+0x72/0xb0 [ 611.622910][T16208] ? lockdep_hardirqs_on+0x78/0x100 [ 611.622930][T16208] do_syscall_64+0x10b/0xf80 [ 611.622949][T16208] ? clear_bhb_loop+0x40/0x90 [ 611.622968][T16208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.622984][T16208] RIP: 0033:0x7f2bd679e087 [ 611.622998][T16208] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.623012][T16208] RSP: 002b:00007f2bd758ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 611.623027][T16208] RAX: ffffffffffffffda RBX: 00007f2bd6a16180 RCX: 00007f2bd679e087 [ 611.623037][T16208] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 611.623046][T16208] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 611.623054][T16208] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 611.623064][T16208] R13: 00007f2bd6a16218 R14: 00007f2bd6a16180 R15: 00007ffe7cf8ce88 [ 611.623083][T16208] [ 611.868314][ T7001] Bluetooth: hci7: command 0x0c1a tx timeout [ 612.986421][T16227] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 615.108264][T16242] block2mtd: illegal erase size [ 615.137199][T16242] random: crng reseeded on system resumption [ 615.253936][T16244] bond0: Unable to set down delay as MII monitoring is disabled [ 615.376322][T16244] ecryptfs_miscdev_write: Invalid packet size [81] [ 618.558993][T16288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2322'. [ 618.755119][T16294] netlink: 202 bytes leftover after parsing attributes in process `syz.2.2323'. [ 618.927772][T16298] netlink: 202 bytes leftover after parsing attributes in process `syz.0.2324'. [ 619.387372][T16310] futex_wake_op: syz.2.2326 tries to shift op by -2048; fix this program [ 620.985711][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 621.129057][T16338] netlink: 'syz.2.2334': attribute type 4 has an invalid length. [ 621.157541][T16338] netlink: 62 bytes leftover after parsing attributes in process `syz.2.2334'. [ 621.223093][T16339] openvswitch: netlink: Key type 234 is out of range max 32 [ 621.340191][T16338] futex_wake_op: syz.2.2334 tries to shift op by -15; fix this program [ 621.455017][T16342] netlink: 202 bytes leftover after parsing attributes in process `syz.0.2335'. [ 622.481848][T16371] futex_wake_op: syz.2.2340 tries to shift op by -2048; fix this program [ 623.749123][T16399] FAULT_INJECTION: forcing a failure. [ 623.749123][T16399] name failslab, interval 1, probability 0, space 0, times 0 [ 623.883364][T16399] CPU: 0 UID: 0 PID: 16399 Comm: syz.5.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.883392][T16399] Tainted: [L]=SOFTLOCKUP [ 623.883397][T16399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.883407][T16399] Call Trace: [ 623.883413][T16399] [ 623.883419][T16399] dump_stack_lvl+0x100/0x190 [ 623.883450][T16399] should_fail_ex.cold+0x5/0xa [ 623.883470][T16399] should_failslab+0xc2/0x120 [ 623.883497][T16399] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 623.883517][T16399] ? __anon_vma_prepare+0xae/0x5e0 [ 623.883539][T16399] __anon_vma_prepare+0xae/0x5e0 [ 623.883555][T16399] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 623.883579][T16399] __vmf_anon_prepare+0x11f/0x250 [ 623.883595][T16399] hugetlb_no_page+0xe2e/0x1980 [ 623.883618][T16399] hugetlb_fault+0x5e5/0x1450 [ 623.883637][T16399] ? __pfx_hugetlb_fault+0x10/0x10 [ 623.883661][T16399] ? find_vma+0xbf/0x140 [ 623.883683][T16399] ? __pfx_find_vma+0x10/0x10 [ 623.883717][T16399] handle_mm_fault+0x5f1/0xa20 [ 623.883739][T16399] do_user_addr_fault+0x74c/0x12f0 [ 623.883760][T16399] ? trace_page_fault_kernel+0x7a/0x200 [ 623.883779][T16399] exc_page_fault+0x6f/0xd0 [ 623.883800][T16399] asm_exc_page_fault+0x26/0x30 [ 623.883815][T16399] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 623.883831][T16399] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 623.883846][T16399] RSP: 0018:ffffc9000421fb70 EFLAGS: 00050206 [ 623.883858][T16399] RAX: 0000000000000001 RBX: ffff88802b73f000 RCX: 0000000000000800 [ 623.883868][T16399] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802b73f000 [ 623.883877][T16399] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056e7eff [ 623.883885][T16399] R10: ffff88802b73f7ff R11: 0000000000000000 R12: ffffc9000421fd80 [ 623.883894][T16399] R13: 0000000000000000 R14: 0000000000000800 R15: 0000000000000000 [ 623.883913][T16399] _copy_from_iter+0x355/0x1690 [ 623.883939][T16399] ? __pfx__copy_from_iter+0x10/0x10 [ 623.883958][T16399] ? trace_kmalloc+0xe3/0x110 [ 623.883980][T16399] ? __kasan_kmalloc+0xaa/0xb0 [ 623.884001][T16399] ? file_tty_write.isra.0+0x694/0x890 [ 623.884017][T16399] ? rcu_is_watching+0x12/0xc0 [ 623.884031][T16399] ? file_tty_write.isra.0+0x694/0x890 [ 623.884045][T16399] ? kfree+0x2ce/0x690 [ 623.884065][T16399] file_tty_write.isra.0+0x45b/0x890 [ 623.884086][T16399] vfs_write+0x6ac/0x1070 [ 623.884107][T16399] ? __pfx_tty_write+0x10/0x10 [ 623.884123][T16399] ? __pfx_vfs_write+0x10/0x10 [ 623.884142][T16399] ? find_held_lock+0x2b/0x80 [ 623.884172][T16399] ksys_write+0x12a/0x250 [ 623.884193][T16399] ? __pfx_ksys_write+0x10/0x10 [ 623.884215][T16399] ? rcu_is_watching+0x12/0xc0 [ 623.884233][T16399] do_syscall_64+0x10b/0xf80 [ 623.884252][T16399] ? clear_bhb_loop+0x40/0x90 [ 623.884270][T16399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.884285][T16399] RIP: 0033:0x7f714cd9c819 [ 623.884298][T16399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.884312][T16399] RSP: 002b:00007f714db70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.884326][T16399] RAX: ffffffffffffffda RBX: 00007f714d016090 RCX: 00007f714cd9c819 [ 623.884335][T16399] RDX: 0000200000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 623.884344][T16399] RBP: 00007f714ce32c91 R08: 0000000000000000 R09: 0000000000000000 [ 623.884353][T16399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.884361][T16399] R13: 00007f714d016128 R14: 00007f714d016090 R15: 00007ffc77757878 [ 623.884382][T16399] [ 624.290168][T16396] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 624.300694][T16396] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 624.309623][T16396] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 624.317418][T16396] page_type: f5(slab) [ 624.322953][T16396] raw: 00fff00000000040 ffff888140482a00 dead000000000100 dead000000000122 [ 624.331737][T16396] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 624.340479][T16396] head: 00fff00000000040 ffff888140482a00 dead000000000100 dead000000000122 [ 624.350093][T16396] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 624.358930][T16396] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 624.369286][T16396] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 624.378240][T16396] page dumped because: unmovable page [ 624.383810][T16396] page_owner tracks the page as allocated [ 624.390269][T16396] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5199, tgid 5199 (udevd), ts 49200654509, free_ts 49177934804 [ 624.414600][T16396] post_alloc_hook+0x153/0x170 [ 624.419501][T16396] get_page_from_freelist+0x111d/0x3140 [ 624.426436][T16396] __alloc_frozen_pages_noprof+0x27c/0x2bd0 [ 624.432434][T16396] new_slab+0xa6/0x6b0 [ 624.436631][T16396] refill_objects+0x26b/0x400 [ 624.441332][T16396] __pcs_replace_empty_main+0x1ab/0x660 [ 624.447101][T16396] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 624.453767][T16396] shmem_alloc_inode+0x25/0x50 [ 624.458666][T16396] alloc_inode+0x68/0x250 [ 624.464142][T16396] new_inode+0x22/0x1c0 [ 624.476369][T16396] shmem_get_inode+0x212/0x1030 [ 624.481335][T16396] shmem_mknod+0x20c/0x470 [ 624.486254][T16396] lookup_open.isra.0+0xc47/0x11b0 [ 624.491461][T16396] path_openat+0x2291/0x31a0 [ 624.496190][T16396] do_file_open+0x20e/0x430 [ 624.500765][T16396] do_sys_openat2+0x10d/0x1e0 [ 624.505483][T16396] page last free pid 5195 tgid 5195 stack trace: [ 624.511986][T16396] __free_frozen_pages+0x7e1/0x10d0 [ 624.517233][T16396] qlist_free_all+0x47/0xe0 [ 624.521735][T16396] kasan_quarantine_reduce+0x1a0/0x1f0 [ 624.527330][T16396] __kasan_slab_alloc+0x69/0x90 [ 624.532184][T16396] __kvmalloc_node_noprof+0x316/0xa00 [ 624.537662][T16396] seq_read_iter+0x819/0x1270 [ 624.542339][T16396] kernfs_fop_read_iter+0x46c/0x610 [ 624.547644][T16396] vfs_read+0x825/0xb30 [ 624.552396][T16396] ksys_read+0x12a/0x250 [ 624.556972][T16396] do_syscall_64+0x10b/0xf80 [ 624.561559][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.661686][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.669433][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.496839][T16458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.505071][T16458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 628.520394][T16458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.542895][T16458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.571040][T16458] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 628.580955][T16458] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 628.589496][T16458] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 629.282824][T16489] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 629.326295][T16489] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2366'. [ 629.388406][T16489] openvswitch: netlink: Key type 234 is out of range max 32 [ 629.493771][T16494] futex_wake_op: syz.0.2366 tries to shift op by -15; fix this program [ 629.746858][ T6995] Bluetooth: hci0: command 0x0c1a tx timeout [ 630.172576][T16505] futex_wake_op: syz.5.2370 tries to shift op by -2048; fix this program [ 630.546940][ T7001] Bluetooth: hci3: command 0x0c1a tx timeout [ 630.553080][T13544] Bluetooth: hci1: command 0x0c1a tx timeout [ 630.559170][ T6995] Bluetooth: hci4: command 0x0c1a tx timeout [ 630.628375][ T7001] Bluetooth: hci6: command 0x0c1a tx timeout [ 630.634456][T13544] Bluetooth: hci5: command 0x0c1a tx timeout [ 630.640564][ T6995] Bluetooth: hci7: command 0x0c1a tx timeout [ 631.353275][T16524] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2375'. [ 631.677032][ T7001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.694182][ T7001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.703064][ T7001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.713753][ T7001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.722009][ T7001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 632.759240][T16528] chnl_net:caif_netlink_parms(): no params data found [ 632.987518][T16528] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.011493][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.033922][T16528] bridge_slave_0: entered allmulticast mode [ 633.056100][T16528] bridge_slave_0: entered promiscuous mode [ 633.085671][T16528] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.110526][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.133893][T16528] bridge_slave_1: entered allmulticast mode [ 633.156334][T16528] bridge_slave_1: entered promiscuous mode [ 633.246341][T16528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.294833][T16528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.318920][T16534] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 633.414763][T16528] team0: Port device team_slave_0 added [ 633.452353][T16528] team0: Port device team_slave_1 added [ 633.679331][T16528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.714266][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.765083][T16528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.784696][T16528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.792134][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.826772][ T7001] Bluetooth: hci2: command tx timeout [ 633.837460][T16528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.896027][T16528] hsr_slave_0: entered promiscuous mode [ 633.902877][T16528] hsr_slave_1: entered promiscuous mode [ 633.909562][T16528] debugfs: 'hsr0' already exists in 'hsr' [ 633.915411][T16528] Cannot create hsr debugfs directory [ 634.455600][T16528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.674808][T16528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.846545][T16560] FAULT_INJECTION: forcing a failure. [ 634.846545][T16560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 634.893323][T16560] CPU: 0 UID: 0 PID: 16560 Comm: syz.5.2381 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.893351][T16560] Tainted: [L]=SOFTLOCKUP [ 634.893356][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 634.893366][T16560] Call Trace: [ 634.893372][T16560] [ 634.893378][T16560] dump_stack_lvl+0x100/0x190 [ 634.893408][T16560] should_fail_ex.cold+0x5/0xa [ 634.893425][T16560] ? prepare_alloc_pages+0x16d/0x5f0 [ 634.893442][T16560] should_fail_alloc_page+0xeb/0x140 [ 634.893465][T16560] prepare_alloc_pages+0x1f0/0x5f0 [ 634.893483][T16560] __alloc_frozen_pages_noprof+0x19a/0x2bd0 [ 634.893504][T16560] ? __lock_acquire+0x4a5/0x2630 [ 634.893525][T16560] ? __pfx_css_rstat_updated+0x10/0x10 [ 634.893546][T16560] ? kasan_save_stack+0x3f/0x50 [ 634.893565][T16560] ? kasan_save_stack+0x30/0x50 [ 634.893585][T16560] ? kasan_save_track+0x14/0x30 [ 634.893610][T16560] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 634.893648][T16560] ? lock_acquire+0x1b1/0x370 [ 634.893671][T16560] ? find_held_lock+0x2b/0x80 [ 634.893691][T16560] ? page_table_check_set+0x49a/0xa10 [ 634.893712][T16560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.893732][T16560] ? policy_nodemask+0xed/0x4f0 [ 634.893756][T16560] alloc_pages_mpol+0x1fb/0x550 [ 634.893780][T16560] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 634.893807][T16560] folio_alloc_mpol_noprof+0x36/0x340 [ 634.893824][T16560] vma_alloc_folio_noprof+0xed/0x1d0 [ 634.893840][T16560] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 634.893861][T16560] do_anonymous_page+0xb3a/0x1fb0 [ 634.893885][T16560] __handle_mm_fault+0x1d48/0x2b60 [ 634.893908][T16560] ? __pfx___handle_mm_fault+0x10/0x10 [ 634.893926][T16560] ? pte_offset_map_lock+0x174/0x320 [ 634.893951][T16560] ? find_held_lock+0x2b/0x80 [ 634.893973][T16560] ? follow_page_pte+0x5b3/0x1400 [ 634.894000][T16560] handle_mm_fault+0x36d/0xa20 [ 634.894021][T16560] __get_user_pages+0xf9c/0x34d0 [ 634.894042][T16560] ? __pfx___get_user_pages+0x10/0x10 [ 634.894063][T16560] populate_vma_page_range+0x267/0x3f0 [ 634.894080][T16560] ? __pfx_populate_vma_page_range+0x10/0x10 [ 634.894095][T16560] ? __pfx_find_vma_intersection+0x10/0x10 [ 634.894119][T16560] ? do_mmap+0x93f/0x12f0 [ 634.894134][T16560] __mm_populate+0x107/0x3a0 [ 634.894150][T16560] ? __pfx___mm_populate+0x10/0x10 [ 634.894166][T16560] ? up_write+0x28c/0x4f0 [ 634.894182][T16560] vm_mmap_pgoff+0x37f/0x470 [ 634.894198][T16560] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 634.894214][T16560] ? do_futex+0x192/0x350 [ 634.894236][T16560] ? __pfx_do_futex+0x10/0x10 [ 634.894257][T16560] ? __pfx_do_sys_openat2+0x10/0x10 [ 634.894277][T16560] ksys_mmap_pgoff+0xe1/0x650 [ 634.894299][T16560] ? __x64_sys_futex+0x34f/0x4d0 [ 634.894320][T16560] ? __x64_sys_futex+0x358/0x4d0 [ 634.894343][T16560] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 634.894365][T16560] ? xfd_validate_state+0x129/0x190 [ 634.894393][T16560] __x64_sys_mmap+0x125/0x190 [ 634.894410][T16560] do_syscall_64+0x10b/0xf80 [ 634.894428][T16560] ? clear_bhb_loop+0x40/0x90 [ 634.894448][T16560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.894463][T16560] RIP: 0033:0x7f714cd9c819 [ 634.894478][T16560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.894492][T16560] RSP: 002b:00007f714db70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 634.894507][T16560] RAX: ffffffffffffffda RBX: 00007f714d016090 RCX: 00007f714cd9c819 [ 634.894517][T16560] RDX: 000000000000005f RSI: 0000000000400008 RDI: 0000000000000000 [ 634.894526][T16560] RBP: 00007f714ce32c91 R08: 0000000000000002 R09: 0000000000008000 [ 634.894536][T16560] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 634.894545][T16560] R13: 00007f714d016128 R14: 00007f714d016090 R15: 00007ffc77757878 [ 634.894565][T16560] [ 635.390144][ T6995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.404077][ T6995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.413737][ T6995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 635.423223][ T6995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 635.431065][ T6995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 635.460476][T16528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.558714][T16528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.651663][T16562] chnl_net:caif_netlink_parms(): no params data found [ 635.826409][T16562] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.853675][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.880288][T16562] bridge_slave_0: entered allmulticast mode [ 635.898271][T16562] bridge_slave_0: entered promiscuous mode [ 635.907190][ T6995] Bluetooth: hci2: command tx timeout [ 635.933979][T16562] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.947283][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.954670][T16562] bridge_slave_1: entered allmulticast mode [ 635.978568][T16562] bridge_slave_1: entered promiscuous mode [ 636.158634][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.234812][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.382086][T16562] team0: Port device team_slave_0 added [ 636.398943][T16562] team0: Port device team_slave_1 added [ 636.528440][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.546299][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.582549][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.594952][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.602825][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.634698][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.646884][T16528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 636.659436][T16528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.704767][T16528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 636.714821][T16528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.746334][T16528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 636.765952][T16528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.780952][T16562] hsr_slave_0: entered promiscuous mode [ 636.791881][T16562] hsr_slave_1: entered promiscuous mode [ 636.798359][T16562] debugfs: 'hsr0' already exists in 'hsr' [ 636.804170][T16562] Cannot create hsr debugfs directory [ 636.811846][T16528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 636.823680][T16528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.196370][T16528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.335379][T16528] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.415612][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.422766][T13070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.498583][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.505709][T13070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.520137][ T6995] Bluetooth: hci0: command tx timeout [ 637.549173][T16562] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 637.575139][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.594097][T16562] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 637.615957][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.666362][T16562] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 637.700618][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.736072][T16562] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 637.762138][T16562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.987846][ T6995] Bluetooth: hci2: command tx timeout [ 638.185071][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.250182][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.291841][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.299080][T13072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.353053][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.360497][T13072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.485095][T16528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.745747][T16528] veth0_vlan: entered promiscuous mode [ 638.802415][T16528] veth1_vlan: entered promiscuous mode [ 638.925793][T16607] futex_wake_op: syz.5.2385 tries to shift op by -2048; fix this program [ 638.970845][T16528] veth0_macvtap: entered promiscuous mode [ 638.994236][T16528] veth1_macvtap: entered promiscuous mode [ 639.053210][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.100671][T16528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.148207][T16528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.221093][T13076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.245656][T13076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.282955][T13076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.315935][T13076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.587882][ T6995] Bluetooth: hci0: command tx timeout [ 639.809329][T13070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.853912][T13070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.959186][T10542] bridge_slave_1: left allmulticast mode [ 639.968861][T16619] Invalid ELF header magic: != ELF [ 639.979555][T10542] bridge_slave_1: left promiscuous mode [ 639.997093][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.052986][T10542] bridge_slave_0: left allmulticast mode [ 640.067450][ T6995] Bluetooth: hci2: command tx timeout [ 640.079053][T10542] bridge_slave_0: left promiscuous mode [ 640.096796][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.563122][T10542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.590031][T10542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.635427][T10542] bond0 (unregistering): Released all slaves [ 640.777473][T10542] tipc: Left network mode [ 640.783553][T13082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.820467][T13082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.968468][T16562] veth0_vlan: entered promiscuous mode [ 641.039526][T16562] veth1_vlan: entered promiscuous mode [ 641.183966][T16562] veth0_macvtap: entered promiscuous mode [ 641.242828][T16562] veth1_macvtap: entered promiscuous mode [ 641.529714][T16626] futex_wake_op: syz.0.2374 tries to shift op by -2048; fix this program [ 641.548136][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.667902][ T6995] Bluetooth: hci0: command tx timeout [ 641.675380][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.821696][T13070] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.871355][T13070] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.941416][T13070] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.995699][T13070] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.412546][T10543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.456184][T10543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.644320][T10543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.702588][T10543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.750218][ T6995] Bluetooth: hci0: command tx timeout [ 644.265102][T16664] futex_wake_op: syz.7.2394 tries to shift op by -2048; fix this program [ 644.833030][T16667] hub 1-0:1.0: USB hub found [ 644.909307][T16667] hub 1-0:1.0: 1 port detected [ 645.084211][T16671] tipc: Started in network mode [ 645.105426][T16671] tipc: Node identity ffffffff, cluster identity 4711 [ 645.135660][T16671] tipc: Node number set to 4294967295 [ 645.257071][T16681] futex_wake_op: syz.7.2398 tries to shift op by -2048; fix this program [ 645.403808][T10542] hsr_slave_0: left promiscuous mode [ 645.432600][T10542] hsr_slave_1: left promiscuous mode [ 645.456033][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.491619][T10542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.526234][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.553134][T10542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.635136][T10542] veth1_macvtap: left promiscuous mode [ 645.656540][T10542] veth0_macvtap: left promiscuous mode [ 645.684610][T10542] veth1_vlan: left promiscuous mode [ 645.695547][T10542] veth0_vlan: left promiscuous mode [ 646.220306][T10542] team0 (unregistering): Port device team_slave_1 removed [ 646.260095][T10542] team0 (unregistering): Port device team_slave_0 removed [ 646.746125][T16696] __vm_enough_memory: pid: 16696, comm: syz.0.2401, bytes: 4398046511104 not enough memory for the allocation [ 647.678645][T16702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.716525][T16702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.755760][T16702] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.783993][T16702] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 647.830809][T16702] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 647.862420][T16702] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 647.904092][T16702] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.933092][T16702] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 647.979804][T16702] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.097023][T16702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.131723][T16702] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 648.206171][T16702] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 649.373683][T16722] FAULT_INJECTION: forcing a failure. [ 649.373683][T16722] name fail_futex, interval 1, probability 0, space 0, times 0 [ 649.425449][ T7001] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 649.450573][ T7001] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 649.459550][ T7001] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 649.470017][ T7001] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 649.479571][ T7001] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 649.559244][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.7.2407 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.559271][T16722] Tainted: [L]=SOFTLOCKUP [ 649.559276][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.559285][T16722] Call Trace: [ 649.559290][T16722] [ 649.559296][T16722] dump_stack_lvl+0x100/0x190 [ 649.559324][T16722] should_fail_ex.cold+0x5/0xa [ 649.559344][T16722] get_futex_key+0x295/0x1600 [ 649.559369][T16722] ? __pfx_get_futex_key+0x10/0x10 [ 649.559389][T16722] ? lock_acquire+0x1b1/0x370 [ 649.559415][T16722] futex_wake+0xea/0x530 [ 649.559433][T16722] ? __pfx_futex_wake+0x10/0x10 [ 649.559449][T16722] ? exit_mm_release+0x19/0x30 [ 649.559474][T16722] do_futex+0x32b/0x350 [ 649.559497][T16722] ? __pfx_do_futex+0x10/0x10 [ 649.559517][T16722] ? __might_fault+0xc5/0x140 [ 649.559540][T16722] mm_release+0x24a/0x2f0 [ 649.559557][T16722] do_exit+0x704/0x2b50 [ 649.559587][T16722] ? __pfx_do_exit+0x10/0x10 [ 649.559608][T16722] ? do_raw_spin_lock+0x128/0x260 [ 649.559622][T16722] ? find_held_lock+0x2b/0x80 [ 649.559637][T16722] ? get_signal+0x7e0/0x21e0 [ 649.559656][T16722] do_group_exit+0xd5/0x2a0 [ 649.559679][T16722] get_signal+0x1ec7/0x21e0 [ 649.559699][T16722] ? ksys_read+0x190/0x250 [ 649.559722][T16722] ? __pfx_get_signal+0x10/0x10 [ 649.559740][T16722] ? do_futex+0x192/0x350 [ 649.559767][T16722] arch_do_signal_or_restart+0x91/0x770 [ 649.559790][T16722] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.559816][T16722] ? __pfx___x64_sys_futex+0x10/0x10 [ 649.559839][T16722] ? rcu_is_watching+0x12/0xc0 [ 649.559856][T16722] exit_to_user_mode_loop+0x86/0x4a0 [ 649.559877][T16722] ? do_syscall_64+0x519/0xf80 [ 649.559898][T16722] do_syscall_64+0x6f2/0xf80 [ 649.559916][T16722] ? clear_bhb_loop+0x40/0x90 [ 649.559934][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.559949][T16722] RIP: 0033:0x7fb94f39c819 [ 649.559962][T16722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.559976][T16722] RSP: 002b:00007fb9502560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 649.559991][T16722] RAX: fffffffffffffe00 RBX: 00007fb94f615fa8 RCX: 00007fb94f39c819 [ 649.560000][T16722] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb94f615fa8 [ 649.560009][T16722] RBP: 00007fb94f615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 649.560018][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.560027][T16722] R13: 00007fb94f616038 R14: 00007ffea8d86270 R15: 00007ffea8d86358 [ 649.560046][T16722] [ 650.150700][ T7001] Bluetooth: hci3: command 0x0c1a tx timeout [ 650.157035][ T7001] Bluetooth: hci1: command 0x0c1a tx timeout [ 650.163552][ T7001] Bluetooth: hci5: command 0x0c1a tx timeout [ 650.176632][ T7001] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.182779][ T7001] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.188865][ T7001] Bluetooth: hci7: command 0x0c1a tx timeout [ 650.194849][ T7001] Bluetooth: hci6: command 0x0c1a tx timeout [ 650.200967][ T7001] Bluetooth: hci0: command 0x0c1a tx timeout [ 650.748702][T16725] chnl_net:caif_netlink_parms(): no params data found [ 651.083734][T16740] futex_wake_op: syz.0.2410 tries to shift op by -2048; fix this program [ 651.398859][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.414063][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.455590][T16725] bridge_slave_0: entered allmulticast mode [ 651.487218][T16725] bridge_slave_0: entered promiscuous mode [ 651.522442][T16742] tipc: Started in network mode [ 651.531605][T16742] tipc: Node identity ffffffff, cluster identity 4711 [ 651.574941][T16742] tipc: Node number set to 4294967295 [ 651.586766][ T6995] Bluetooth: hci8: command tx timeout [ 651.642298][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.688306][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.732659][T16725] bridge_slave_1: entered allmulticast mode [ 651.772496][T16725] bridge_slave_1: entered promiscuous mode [ 651.790923][T16759] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 651.884994][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.938098][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.226775][ T6995] Bluetooth: hci0: command 0x0c1a tx timeout [ 652.232890][ T7001] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.399045][T16725] team0: Port device team_slave_0 added [ 652.456042][T16725] team0: Port device team_slave_1 added [ 652.593982][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.629364][ T31] INFO: task syz.3.1867:14310 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 652.658950][ T31] Tainted: G L syzkaller #0 [ 652.684751][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.718200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.785886][ T31] task:syz.3.1867 state:D stack:27528 pid:14310 tgid:14307 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 652.856348][ T31] Call Trace: [ 652.876091][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.893744][ T31] [ 652.909236][ T31] __schedule+0x10e9/0x6820 [ 652.935293][ T31] ? __pfx___schedule+0x10/0x10 [ 652.962261][ T31] ? find_held_lock+0x2b/0x80 [ 652.993190][ T31] ? schedule+0x2bf/0x390 [ 653.030746][ T31] schedule+0xdd/0x390 [ 653.053229][ T31] schedule_preempt_disabled+0x13/0x30 [ 653.085763][ T31] __mutex_lock+0xced/0x1b10 [ 653.143222][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 653.190492][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 653.234572][ T31] ? net_generic+0xea/0x2a0 [ 653.275387][ T31] ? net_generic+0xea/0x2a0 [ 653.295818][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 653.325351][ T31] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 653.360192][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 653.380190][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 653.404107][ T31] ? genl_get_cmd+0x3e7/0x760 [ 653.419493][ T31] ? bpf_lsm_capable+0x9/0x10 [ 653.437610][ T31] ? security_capable+0x80/0x260 [ 653.456653][ T31] genl_rcv_msg+0x560/0x800 [ 653.461261][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.476622][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 653.483452][ T31] netlink_rcv_skb+0x159/0x420 [ 653.496590][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.503216][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.517688][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 653.530367][ T31] genl_rcv+0x28/0x40 [ 653.545134][ T31] netlink_unicast+0x585/0x850 [ 653.552656][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 653.565658][ T31] netlink_sendmsg+0x8b0/0xda0 [ 653.571057][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.576410][ T31] ? __import_iovec+0x1d2/0x640 [ 653.581655][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 653.589077][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 653.593875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.599548][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.604898][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 653.610620][ T31] ___sys_sendmsg+0x190/0x1e0 [ 653.615321][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.620855][ T31] __sys_sendmsg+0x170/0x220 [ 653.625488][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.632979][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 653.638885][ T31] ? rcu_is_watching+0x12/0xc0 [ 653.643673][ T31] do_syscall_64+0x10b/0xf80 [ 653.653223][ T31] ? clear_bhb_loop+0x40/0x90 [ 653.658896][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.665011][ T31] RIP: 0033:0x7fc4c979c819 [ 653.669676][ T6995] Bluetooth: hci8: command tx timeout [ 653.675992][ T31] RSP: 002b:00007fc4ca58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.685366][ T31] RAX: ffffffffffffffda RBX: 00007fc4c9a16180 RCX: 00007fc4c979c819 [ 653.693864][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 653.702132][ T31] RBP: 00007fc4c9832c91 R08: 0000000000000000 R09: 0000000000000000 [ 653.710453][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.718715][ T31] R13: 00007fc4c9a16218 R14: 00007fc4c9a16180 R15: 00007ffc89113db8 [ 653.727169][ T31] [ 653.807534][ T31] [ 653.807534][ T31] Showing all locks held in the system: [ 653.837863][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.849383][ T31] 1 lock held by khungtaskd/31: [ 653.858258][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.892928][ T31] #0: ffffffff8e7e70a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 653.938282][ T31] 2 locks held by getty/5586: [ 653.954867][ T31] #0: ffff888038bb00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 653.985011][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.004729][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 654.046785][ T31] 2 locks held by kworker/u10:9/10543: [ 654.089557][ T31] #0: ffff88801ebbc140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 654.147375][ T31] #1: ffffc9000425fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 654.194354][ T31] 4 locks held by kworker/u10:16/13071: [ 654.215171][ T31] #0: ffff88801c6b6940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 654.266642][ T31] #1: ffffc9000357fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 654.306864][ T7001] Bluetooth: hci2: command 0x0c1a tx timeout [ 654.313001][ T6995] Bluetooth: hci0: command 0x0c1a tx timeout [ 654.322606][ T31] #2: ffffffff90604108 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 654.368865][ T31] #3: ffffffff8e7f2be8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 654.390725][ T31] 2 locks held by syz.1.1624/13261: [ 654.401984][ T31] #0: ffffffff906caa08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 654.418323][ T31] #1: ffffffff8ec5f820 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 654.446682][ T31] 2 locks held by syz.3.1867/14310: [ 654.452952][ T31] #0: ffffffff906caa08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 654.477712][ T31] #1: ffffffff8ec5f820 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 654.503996][ T31] 2 locks held by syz.4.2019/14928: [ 654.509858][ T31] #0: ffffffff906caa08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 654.523029][ T31] #1: ffffffff8ec5f820 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 654.533397][ T31] 2 locks held by syz-executor/15177: [ 654.539059][ T31] #0: ffff88808dbb00d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 654.565132][ T31] #1: ffffffff8ec5f820 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 654.580303][ T31] 2 locks held by syz-executor/15378: [ 654.585729][ T31] #0: ffff888051cf00d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 654.597615][ T31] #1: ffffffff8ec5f820 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 654.608167][ T31] 1 lock held by syz.5.2396/16676: [ 654.613310][ T31] #0: ffffffff9061ca60 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 654.622853][ T31] 1 lock held by syz-executor/16725: [ 654.628835][ T31] #0: ffffffff8e7f2be8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 654.639112][ T31] 1 lock held by syz.7.2414/16757: [ 654.644266][ T31] #0: ffffffff9061ca60 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 654.653630][ T31] 1 lock held by syz.0.2415/16762: [ 654.659905][ T31] #0: ffffffff90604108 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 654.717890][ T31] [ 654.723467][ T31] ============================================= [ 654.723467][ T31] [ 654.775411][ T31] NMI backtrace for cpu 0 [ 654.775430][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 654.775452][ T31] Tainted: [L]=SOFTLOCKUP [ 654.775457][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.775466][ T31] Call Trace: [ 654.775471][ T31] [ 654.775477][ T31] dump_stack_lvl+0x100/0x190 [ 654.775505][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 654.775522][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 654.775538][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 654.775555][ T31] sys_info+0x141/0x190 [ 654.775576][ T31] watchdog+0xd18/0x1040 [ 654.775600][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.775620][ T31] ? __kthread_parkme+0x18c/0x230 [ 654.775641][ T31] ? kthread+0x13a/0x450 [ 654.775661][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.775677][ T31] kthread+0x370/0x450 [ 654.775697][ T31] ? __pfx_kthread+0x10/0x10 [ 654.775719][ T31] ret_from_fork+0x72b/0xd50 [ 654.775734][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 654.775750][ T31] ? __switch_to+0x800/0x1100 [ 654.775769][ T31] ? __switch_to_asm+0x39/0x70 [ 654.775786][ T31] ? __pfx_kthread+0x10/0x10 [ 654.775807][ T31] ret_from_fork_asm+0x1a/0x30 [ 654.775833][ T31] [ 655.124095][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 655.130993][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 655.141673][ T31] Tainted: [L]=SOFTLOCKUP [ 655.145979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.156122][ T31] Call Trace: [ 655.159405][ T31] [ 655.162324][ T31] dump_stack_lvl+0x100/0x190 [ 655.167030][ T31] vpanic+0x552/0x970 [ 655.171035][ T31] ? __pfx_vpanic+0x10/0x10 [ 655.175529][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 655.181684][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 655.187824][ T31] panic+0xd1/0xe0 [ 655.191528][ T31] ? __pfx_panic+0x10/0x10 [ 655.195942][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 655.202091][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 655.208246][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 655.214391][ T31] ? watchdog.cold+0x1a0/0x1d2 [ 655.219157][ T31] ? watchdog+0xd28/0x1040 [ 655.223567][ T31] watchdog.cold+0x1b1/0x1d2 [ 655.228156][ T31] ? __pfx_watchdog+0x10/0x10 [ 655.232823][ T31] ? __kthread_parkme+0x18c/0x230 [ 655.237838][ T31] ? kthread+0x13a/0x450 [ 655.242258][ T31] ? __pfx_watchdog+0x10/0x10 [ 655.246935][ T31] kthread+0x370/0x450 [ 655.251011][ T31] ? __pfx_kthread+0x10/0x10 [ 655.255605][ T31] ret_from_fork+0x72b/0xd50 [ 655.260199][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 655.265397][ T31] ? __switch_to+0x800/0x1100 [ 655.270076][ T31] ? __switch_to_asm+0x39/0x70 [ 655.274853][ T31] ? __pfx_kthread+0x10/0x10 [ 655.279526][ T31] ret_from_fork_asm+0x1a/0x30 [ 655.284298][ T31] [ 655.287356][ T31] Kernel Offset: disabled [ 655.291688][ T31] Rebooting in 86400 seconds..