last executing test programs: 24m13.136921375s ago: executing program 0 (id=116): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r1 = setfsgid$auto(0xee01) (rerun: 32) setresgid$auto(r1, 0x0, 0x0) keyctl$auto(0x2, 0x1, 0x6, r1, 0x89f) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) (async) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x4, 0x3, 0x3) (async) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim3/bpf_bind_accept\x00', 0x1a3041, 0x0) (async) write$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = bpf$auto(0x2, 0x0, 0x1) (async, rerun: 32) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x113102, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x126400, 0x0) (async, rerun: 32) process_mrelease$auto(0xffffffffffffffff, 0x635) (async, rerun: 32) mmap$auto(0x0, 0x3, 0xdf, 0xeb4, 0x403, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) mmap$auto(0xfffffffffffffffe, 0x2020006, 0x3, 0xeb1, r3, 0x8003) (async) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) 24m12.552975574s ago: executing program 0 (id=117): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) setresuid$auto(0x0, 0x0, 0x0) r0 = creat$auto(&(0x7f0000000380)='./file0\x00', 0x0) fdatasync$auto(r0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000180), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "62414e6eef64d15cac405e1870de2b3e"}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x7}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 24m12.478051728s ago: executing program 0 (id=118): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bind$auto(0x3, &(0x7f0000000540)=@l2={0x1f, 0x2, @any, 0xbd91}, 0x1) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xffb}, 0x10000000001, &(0x7f0000000280)={&(0x7f0000000300)="cab9cbd7d657207c8bd4937ea877", 0xfffffffffffffffb}, 0x8, 0x0) (async) close_range$auto(0x2, r0, 0xfffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) (async) r4 = prctl$auto(0x3371, 0xffff, 0x0, 0x0, 0x0) (async) mmap$auto(0x5, 0x4020009, 0x9, 0xeb1, r3, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) (async) read$auto_proc_pid_cmdline_ops_base(0xffffffffffffffff, &(0x7f0000000180)=""/202, 0xca) (async) statx$auto(r4, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) (async) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000fcdbdf2507000000160001002f6465762f736e642f6d696469433244300000003950dab78a65ed3f0be898e496d5cdc3f98929e1c6b66cffee4fe603e27c179aa5d35d1ef2e0328f351e68d7d6b02adf90a11df2e52cf8a2e8d2a13ac1951a1295f4be7f89d9565cbdcbddd37e101690d74e159c3793ed5a4777715841b9e625d309fe5eaf3ea6cd98d49c6418928414bfcc6b8a3f12d697ebf3b141db0f3145a6d12840eda159f782e02df9046188d9a6b291cd910118f29867dc5228e3ad1d81f16c1189501519bf4989cb538ace01e478ed9b63ba5ff9232ac4419d7ddf6eb1d21c6d40a2b3b78bccda9df96b6889729e3e7744151093ee82b39d7e53060b8610e21615237d8b712009707bbd8948cbe0d5249278b4b3301a57b259d06684b7c82d46b7c5e9c176a8c948da54fe9d618f2a2c4232547e7f389afe8db908ad"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4020) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) listxattrat$auto(r5, 0x0, 0x4, 0x0, 0x10000000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 24m11.892919975s ago: executing program 0 (id=121): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/queue/fua\x00', 0x68e00, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x200, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) r2 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timer_create$auto(0x3, 0x0, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r3, 0x9, 0x0) getdents$auto(r3, 0x0, 0x62d4) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x801, 0x84) r5 = fanotify_init$auto(0x6, 0x2000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000001200)={0x153c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x59, 0x129, "4489067003100cbc9fa117a20628ff83f0a18d2b226532129e427bf5d5d39d83d33f0a23ccd418f12596342837d55b06a484a7ae613f29f9c39143a08504f825a8111615037837eda62e262cb45a8ae58962783666"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "4890be75bddc296377dde526a2ffaa82781db034"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x13a7, 0x2c, 0x0, 0x1, [@nested={0x11df, 0x23, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0x8c}, @nested={0x112a, 0x9e, 0x0, 0x1, [@nested={0x10e6, 0x10c, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64}, @generic="f5c6dc4d00a2eed82cfb91992974f90c94915f2cdf4c2571039b9eb87a91670d41ed4424f65f281f12dfe787319c51e8563a9fa21e5545d6166b74714842abca554a73b79818d03eafcf2e73e5d239a463be1048f22bec9a6003aee11bf84b5e758dd24e31fa8ec36e2e97976c0465384d3c600844cc4c627113f5f6438b167912d95c8378310ceec84e55b9840edbff3c9b5fefbb56f8754f6f5ef5469b902bb34d10938ac6d982cd4e40901062c250d84d82eb1d5063f8ae305886802aeb", @generic="a3db17e50e8729836de90f8b469eb625ca4aa68acb62f959e1ad8e9a36d9bfd87adc3bd8819231f2d151078ddfcd481404e07103028bc82ec537e9b8cbdd88f4b7aa9c670ed9fe0b5a866803210ced9bde5a5752ab947a420e3f5301d9ec959336080d273d4a6450bbf8758b83ad094cbfe909e0663e4b6d1d563c415323cfdd875e63ea284f9d82e00b0d82a5dd0535c652f8a5794c0b1574ec60db86085aff6708df11b5dafe10412b3cbc3c86490a6d992a2e903a099ef0834199c383ce714027bab6b18d4149b5f4fe1d17a055982551b0545edaa4e44f6488c0d178f01e5cf87a15cea378594f9fb502fd972fcf8d4da37f5e32f0c2bdf2d058d803da7f08a54b62e6f95e0381fc06dfcfd4d911b200e2f28d3beef88fabe8ff235834ec84f269c1af6f8ea97018b90c2c47c39315557d20ca79e944335e6a4cfae5e269e781e402416167874154b4133b6a54639993338dfbcb7aad7a6ea13f5c43eff7da4391aa2bae8ab295f8ea47c88d913d2add7132cdfaa838d99a4acddbb7db0f39d37bc484c01cfb3412d86fd1dc403e98f5d0399850884262bcc7d9419ba4e182c6f4e77ea5489daf9e615ae71a9ab92c46540583b9769cc9bbbca3c97d748d2f63f9534da21af026211f928119bd6e135f7dff8dc7f8b5bbfd36aae76debc84fbe6a80920da9d2573437c264343700664f2366af2fa6263a6b9801607224011dbe483242cc61875a29f73591263f3b874d7297c4580c54fac4881d58e1ad35952b31eee0558944b114b9c4ff60f393db40496237fedeed9eb6b44938e094d426a01c57a298c729d544c12c9cd233645404d148faef91bf0dc27ea087e950f73fb1784115244fe7978af9e8dd1369ba4180cd5d0d25086c5f2392202187650c1965b6f2c4ffed7989e027299b23cce0f0aad67e4f4defe2321ecba34c5ad1f8e8345ddf13975ce3c8cac0e9e52e36823cda19a07cf8e856dd02a03a477daed1c2396e9150e70a32953f474050d2c933773843609199103846636273b650f745cc774aa54f2b4ad9c1c87fdc87eda3b11b4864e3cd9d231ebfb810bdcbbf349e084660d941ae40e8517627d487a97d919a48edd86c4c6b510b9bc3bbb9609780624203232406a2c148f8e19fbdad79d386457f90c9843ad8a93ad48a3cf07e508c55551805af572e8d54b9b1e067af2222ca1f7a8a925a841ca69c993076523c0a9f67b84159f312bc14a14e7461fb03f821a4057c041dde92808a1d4012ffedacab427ccc9cce78851830bf68e41b7a619786806bae4320d7f32c210f7d8cb461d4ad18dfb7d43036e731070ea1be6b8b1cc259aa8e45d751690a1d2dd52611c6cd85454f06ab7d4ec74968c7d9bad8af336b3c8cf81fe3ccdf0c22f82ce20307f2fdc721ae94454a1fd2344ff68e8f3b9db0e3f6d76dad9588a2c1772ccf26780f30e288153bd2bc2012f7d8657960e55c4be492b84a0aa30e1af052fc37acf4949c3a7b863c92732a2e44d477ceaae0e04191ea1dbc5ebf7fa2c90da976c991f1c5119d7257920de0fc39bf74f0e59fafbc0447acd69299255619230568cde16afc6247eb1ab5ae14db2ebf6fb2da897c372c114eadedd74431f92f2296902e2a10845b0649cef34c44897e34a5da2ef60d797baa896d2f3962689ffcb9411a7dee291933d719659820c9f443e2e0b9331ca7077177e2f3b588b9f15f99fd1d045dd77dfa75dd614a52e830968f6892932a936b58730aa1e1e76aef2de5d33e6525303b7971a8c3f409a745c50cd2aedd714c151090c76316c31f8f21ee77c3987cc47a52bb3677567188f0aeaf0b0092b0acdb706b18d55c5b5a7586363b9a54ee9bcb9ceadf49eb4f6ac31c2faee538f42ed48cbe83f5d69de494ccbc9b222a8591bc35f67d263e5b2ab6b05a9112f6d493afc091164a1d9ec7f8f412f92c0089feb388942709c0f9ddc3a1960316ce4369aeb23d255171cf958e56ef141c8da05c32b310f6e6b8e4efa7a9f51dd5aebad90995dff309c7d78179fc843130830e1329d3d816c2e8eb43cf4f1fdb0c3af878bb73b7f4bf01325040477fed8020eb5e01fb8433f69403fc1aec62911fc109dadc9ad8085dec6892fa2f843c13d510f72f39d0f823d1a14f4f0aa8476ac5e691de7f9a499cf0161825d17a6ea75bf65103ea41c7af951ed1c04d8c7a9385f12752c02a0ca081739f5d16c075d986d7ffb387eebadf1fc523332f5fe56e06917a94eb80b7bf550d4796a51f37a1e20015dc69d109a2c80beddb235bf738d30d7c692ae28c05c800d35685d6d3a142d85da8eb934e365d15762d7155f85678e41cb6fd92383623b14cd9fa4d8b97b309bff0eb45b1507fb5a40c5d01d0f45e1e8a79ee11cf758982f2981e72860e9bc0584c6027edd4050096f56ae224e1ec8855c0ff65723b18020f48381d0045099d3f64d62966089b30f2bff221086ab74dfcacafe85c77288e331eb17d91bb2f4665e12669cb54a176e6c69f0ab232214e8ba1b8a700328639404c084cc3c559eeffc4b698ffe2bcb90a5b07b233a1c403fdc37acd347c374f0f30594aaa7ef15d6f21c89d8b57f269a335ed7e52080319425726918f9cc78ab45018039e4b9337cdf3059444abc8fd530da378ce14132e15266d30352066e79a0fca9a1f90b59788cf24605ae27750f0810690d76551efb4ce140368ab91b78bfd64acef4d4414b0b9a0dddb23858e746809a933c38be1dd4baf6e3a87ee644a70c9f823fa7aefdac0706b380ed1b438a2f3af847de22e7019dd77720b72cdf98b08640e256bea3bde55276f3235f6c6b0df3b34ce88724cf2a2fc7ad8d730bf49af063d950a137fb0bca6cf155c1736dc14ce534075094ffbc11972932c23efe34bd13a354034785e7acf6ae91dc909906be459febdd2aa737caa5701140df952dbf532548c2205f848aec4c9803369fc93eb696b88cc3a0afad1fa77bf8564d3b92a922719fb487c281fb5603d17dabff9606e633225164c8e4f3034c1e02225871120290b6432ff6734e0ca3e38a8e79c442ea581dcea48f93001dc5616ae07427b6a5e3c51a23bbccfe28770b4eaba5d4a1bf6debfa89b39589c3131cc241987404a15c3a1bd461cb8110392dc406dccc130f708f75805a2fc71010ea50bbe79c651c75640d75bac2cadcf21e8fa6ae001ba860a88a139708d5d93e381d0c0fe6ad2e7d748623737534cfa8d7c3c1c4b80fb9cb4958d6ec18b1b58974eb0544e9bddef00ce55b023aeed7894c2185ac570b327be96f577c4ec0a83ec2c1241ae6c29629bfc36809de3b3f23107cdec73e35feaa189cfb4e1a426ec57b3521b7925a799b1edad6073c6269ceea64c03de6b5cb376a59c012429523b9a7e63e20cbc25c75132eacce48d31eceecc3c2ad7bab2e42d0828adcc9cb017194e69023146c21f03f0feb3e58588f446f94c9c8694846e787ea9c9cd4b6ba912250503befb95af2dabb3ae2f7d03642e84d9c89255555d44d9c72a7751d877ea2ceb0a08eb51e68e91c67c66fcdfe952ff26114f512ba3b70a0eeb5e15d73f86ace65e17cf4eff9aba4142164cb1e22157e9da69312e5ec8b59311a672db3b5fd8ec05146f7a768b8f55fddafa99ed0cd0f1a304d318c01d71e7332795ba5f458d4e20bfd4961f12f9744a9f331f4079b2ddf17ce23ab2d4e8eed97d17bb8b23f0507cf3b17969fd21398b5ab0b982048e8f67e9cc651ca201e96f79e65952bfde8a98d519a19de8ef0417d08e137005a30fcfc665bbe29afca567773c8f46fae81e171f0a0f3e073301705b9065314b834afced9bb14beb3dfaf884e0fd4779aacd05c618bc9d69c1fbd1e982aca9c0ece5fe632c5fc8d443f841fd60b2c54551aa60d9b27f60c276d92f5f571c17af9213874f3691d2c379d9c0ad67d835000006698cb9b068f45946cabb419d47f4716743a933c52dbe42567b9ab37ee2af4671711bb446f20086fcafcab8756d179f45b9c64566836de494f7fa4bfba892188e6a69559b6e00f5cc9360d465db4840f82e217a5ba1a7b332e5d7fcc702c14973db5c4fc912fa3720262cca1249075f0c9bfcee4d2dfe8b8ffb17760951d0b4e2de02c7bb66ebf8b10c1e665eed15d738500889405f34dd66c804db11ff9d17e4bd3cf0c757ded17c434a2b2fc14dc7d492fb7ef4b0c8d7e7e315817dbde49e9ec32194346338999d6ebfaa7cebeec5aeab7123cb334306c21ffb3cbe472824cff1bb88f4b1fabf10ddcf2e4da192817b821b8b97ad69ea23a6cb0f6f3665199445cd125594c3c12cbf45355b1f2f4c9d8cfd102728e79d23141627ebaf6df974253f3ee2f3d972f186f89d17ad67880e04c770128acbc7b17301a3305f9a02aa4ea5172bf4143460faf4da354da7b929debc95f852790ee12ba83714eb882e9f10fe7079f55be8f5493289dee85aab24dd0c8aae92c88d49c79807057221f365210a7765d8bc538969f5b1641621c157e6b21a87d9d7d22cd8a2d8c6a47b63f8f7249fa85259a92706fc231b8bb27a09619f77a39c3fcdaafa5a05b652b19d43c74374e7f2d101624294ce03814b7405889087b1d7642109175418fd3cc9785d83c413c1b322471d93ae0eacc3ea37f49657766b8eada02688195e754789b0999a8d2aca9fe06b5a7e373141bab9b01581e17f5d41d2bebab19f427dd4c9fc5263a4baae90e9e26f0d97c3d0ac9b52f8d8519e07b736d1b3eee6ab635dfe12e9e7b747d1d401a5f710cb1dbbe0f2ae89fa8436eaee6eeef40e61cd10354ead22b5976cfdedacbfd99c6d467f085def724843c49d3838b2648ffcb06b8d2fcc1c3f91537cae18c43d137f0d751c1267ac2c6670fad2bd514b84b5f15af62eb02cc13c4d8887cfa4658cad07b40fe573911a717f4050068c8fff02c326ddd4255565b069899dd360f3d7c46d4fbdb2be3940b690a2e67e61fd7ab99d20d4352d52074f4ced9cd0152e277eb306121302c8660d0573f591890f216ebf0e49dbcff430861ecd495f2ae370b3491fc20e5e42941882db9276c84e6f00b4ee25585873371615e295db702c795c1c2e6c9a77a8c48770edf196ab026a49550af9d16a44b360464f017646ae821d344cf5df799405734ff43bbe254bc2203a5320f986f3570cdacbadb09aad3943bdec3f82eb3a20c6be94e48bd0d4f0c358f5ec01d214b18726b777aa2a395c2d145dd3163dd0e4afa3de4876c9383eb7af6d0f1ebcb5524392650f061d4b405eea3f01b0578ee95635a00196b0d00ec4c1f33c3e8584908aeb759c39fcd5c189e1ac8188f80262ef5ffb522b1d278bdfc9df70b117e043b81b695f3a07caf32c1db342968c140522d725c46efceed0ff455882750cfaed05b657cc9fb98f0c458a4ac0c4e43094a82abb0d170a243e76699bd160522686090074ac94d90be23e03363a995ee104bec7ed47b7e48781925958f7e4f7fb6cd748240f38b43eb079f619f530c6009b29ccd5fca29dcfc8e1927bd6a67814212f3deed5a619a483f361f50dd00e08d5d6691c9d6c6b4c4d7cc192b63cd54fdfdb744f7dc7fbde6bb39405913ffaaa664f8fddee485e18200891715be50025882b8178dfee6dd9035c728f5fbea8b73a882e81d3fdfb2cad0e6e208dafd20d265654234cc1704c3d5544ca502bb0cec7542824ae4f9d8cd171f56fdb4da53794b56c0d13166931a69954e5f2d85e4346b4b3ee26b0868b80e48614e2f2c34e5153aa5ef469d4899bd7b3543df607266b6d46065e582eb992d06b671fe51a4ae1fe31c8", @generic="e1e8acc6264d909993dc16", @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x9b}]}, @generic="b59848d5ad6f8740f5c425f787baf7163426860e821100548934e90d2ca30ad0659ef589a438e2864e6644461febb8fff70d99e5a869aa2d2c2de599d74f"]}, @typed={0x8, 0x79, 0x0, 0x0, @fd=r4}, @generic="eecfa1ad83fc69811d05b50d352e779851b3aed9e8ee6f8ef30313bf400da91482dc9dcc47f8d64a92ea8654aee6711de30051119c979fd47220b3d5dc398f0d1e4c56d36ec90ade0ace5da0052a2bef31b441b14377623a4a010193208d4a16bb4810c03cd86ae4a545960fef654cfb86d730edf88c22c6e6d082668caf488259f9aa0bd92d7858ecc1062e6cf9a44c08f050e93b54c1fc237065e6a5f4c2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @nested={0x149, 0xf7, 0x0, 0x1, [@generic="a7ab20d01819c8c278a1957f3b74b595fbc235fee37e29b9f00a791939853106689ea8d1394471c34e20e5cdd75c41dfb4ff0f1c8ec04b9742e18403da17056d3fbfdfe8880b199bc5be789e28f1a529", @generic="0b9a3ea8f406be56cbe33a404e1099209c5d8af1394f31bca4db984db94887f950963cd7fc39ee4eb21f9701bf425dcc37e13abef79b3d41e80ae242ecd4ba53c9826cb6127c80d24a873220b315e1552dde74672531849195a16d85c2adcbcc7fc33383b60c17e1c1a89036548e5278ad3a083c150c6cfdb2588e16984b227c33a0576fb1a8bb971b0a7e1a8f9364312a959aa643a4f0c9c096314c23a36281007856e5c46969a021206731926141e957acd73ab78ba21386ce32f1bd7eced7d52aa2fe5225f0d7fcd66189a8ec1ddb7e8ea2f3e6961a6df1f71facd305132021eeea79d0dc10a489cab95b2e", @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x5, 0x46, 0x0, 0x0, @str='\x00'}, @generic="70d27bc76d9a6e4b2a462c007209849595c7cc3aa1782cc75d03e6406725940f2056eb753bb08ce6f825d534a531186e8b35737d7fae8d76f8e0d6d983ef70d024d4e68822c448abf86b9b3be1fa9c0351e321e18727653f2ea6177d0a5109a5a11612aeb9d765"]}, @NL80211_ATTR_MPATH_NEXT_HOP={0xe5, 0x1a, "48f125f24d205abc11f246fb0ad1a5e5e906152c5a3e6fb50fb6d2e7874dbec0ccd20ac66c75969b3a63313adf7bdf410d607bcd66a5beedf5b3cfb69ca8f7971e8aee63af3e7c5aa0433beb95dfc7dcfc96ab462fc1eba92cbe1e952304c6b172e440ded7a1fe07d98c8adc864cf52cdb2dceb61c000ecf3bc29df0e1c1988a5977ab0209e041c0bb6106031b403d10f597596df46eb23f4876408aa7bb2360459695665450a4805ea4e86464cc5d06daa72d67cf0b3efeef981195355f281f1b24a32caf16370c7e9210e9d33cdaa1e4f1f85613418d18446d061421d27c0390"}, @NL80211_ATTR_HT_CAPABILITY={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10001}]}, 0x153c}}, 0x0) getsockopt$auto(r4, 0x84, 0x7f, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 24m11.303313889s ago: executing program 0 (id=125): mmap$auto(0x0, 0xfd8, 0x4000000000df, 0x10, 0x401, 0xffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r0, 0x0, 0x85) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x48a42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) timer_settime$auto(0x0, 0x3, 0x0, 0x0) 24m10.701193223s ago: executing program 0 (id=126): io_uring_enter$auto(0xffffffffffffffff, 0x4, 0x6, 0x800, &(0x7f0000000080)="0fd986df83bc90eeeb05bdd779794d59cb4dd666faf9781578d021628c4a8d95ef20431cd52a1e85984ae73439db225cedb08bbea990a618591b8a34a3ea67e7cc947e7efcfd2ec8c54ae38f32b96889f87075742ec57248ee3c79ccb6b80f64c3799387245180fbc10645dc1e412c18062a9c68a746fede94b73f55b96e7f3baf7ae3ad5a32ec0c7adfe48bac1df5b933833929908c904d6788efe885fd820099f626b954b61e9c8b05e92ec6f21a3ccd6c25ee6b8b13e8667ceeb0cba5931f98618c50e85e488d93e55eedb14ec4405956435d778d334fc95c36d8e606d2ba76f6d42535a663a3ebe482346bf279fa2dffb01d24c1", 0x1f8) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x4100000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)='[') socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "0400"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x7) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0xb02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @inferred=0xffffffffffffffff, 0x0, "5059d005d689f01a18c00f29b5fa49429146f0fced3c14fab52cc63a1547e39e1154bf627c7fd574bccc61a93bf6de84233c"}) read$auto(r1, 0x0, 0x7fd) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x2, 0xfd) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 24m10.262043483s ago: executing program 32 (id=126): io_uring_enter$auto(0xffffffffffffffff, 0x4, 0x6, 0x800, &(0x7f0000000080)="0fd986df83bc90eeeb05bdd779794d59cb4dd666faf9781578d021628c4a8d95ef20431cd52a1e85984ae73439db225cedb08bbea990a618591b8a34a3ea67e7cc947e7efcfd2ec8c54ae38f32b96889f87075742ec57248ee3c79ccb6b80f64c3799387245180fbc10645dc1e412c18062a9c68a746fede94b73f55b96e7f3baf7ae3ad5a32ec0c7adfe48bac1df5b933833929908c904d6788efe885fd820099f626b954b61e9c8b05e92ec6f21a3ccd6c25ee6b8b13e8667ceeb0cba5931f98618c50e85e488d93e55eedb14ec4405956435d778d334fc95c36d8e606d2ba76f6d42535a663a3ebe482346bf279fa2dffb01d24c1", 0x1f8) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x4100000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)='[') socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "0400"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x7) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0xb02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @inferred=0xffffffffffffffff, 0x0, "5059d005d689f01a18c00f29b5fa49429146f0fced3c14fab52cc63a1547e39e1154bf627c7fd574bccc61a93bf6de84233c"}) read$auto(r1, 0x0, 0x7fd) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x2, 0xfd) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 17m44.923903194s ago: executing program 3 (id=1808): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = memfd_create$auto(0x0, 0x80000004) fcntl$auto_F_GETOWN(r0, 0x9, 0x10000) ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x6, r0}) getsockopt$auto_SO_BUSY_POLL(r1, 0x4, 0x2e, &(0x7f0000000180)='#/\x00', &(0x7f00000001c0)=0xff) r2 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) pread64$auto(r2, 0x0, 0x393a, 0x2b) 17m44.729954081s ago: executing program 3 (id=1810): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) unshare$auto(0x40000080) mmap$auto(0x0, 0x401, 0x1c00000, 0xeb1, r0, 0xfffffffffffffffa) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_FS_IOC_RESVSP(r1, 0x40305828, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x5, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x2, &(0x7f0000000380)="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") setreuid$auto(0xffffffffffffffff, 0x8) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)={0x4, 0x9, 0x4, @inferred=r1}, 0x1) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0005, 0x4) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r5 = socket(0x1a, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) 17m43.741631882s ago: executing program 3 (id=1814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008084) r2 = socket(0x6, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) madvise$auto(0x8000000000000000, 0x1, 0xd) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="02002abd7000ffdbdf2502000000040002001c00048005bc48242d10b34cfb6a801306b44fd2162bb3596680cddf0800070000100000080001"], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000011d08fd2bbcfd0ac0962a36e0aab1c00e550e46c9fada9141d964b4dda90bf1eb0a15aa62542ac5d79ecdae5ce6de9a809c937b23598a9a3d97f300a0c4a8946f4f273fa53f5c8de8e6dcdd665a72a", @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x8000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc5}, 0x2, &(0x7f00000001c0), 0xf5, 0xa505}, 0x800}, 0x7, 0x4008) 17m42.259193071s ago: executing program 3 (id=1822): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x111001, 0x0) 17m42.118294593s ago: executing program 3 (id=1824): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x662041, 0x0) prctl$auto(0x3e, 0x6, 0xffffffffffffffff, 0x1, 0x1200000) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) (async) fanotify_mark$auto(r1, 0x5, 0x8, 0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00') (async, rerun: 32) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) (rerun: 32) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='o\x00'], 0x14}}, 0x0) madvise$auto(0x0, 0x200007, 0x19) (async) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=@bpf_attr_11={0x36ac, 0xd0, 0xcf07, 0xb9c, 0x5, 0x1d4, 0x6, r2}, 0x800) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) 17m40.873415058s ago: executing program 3 (id=1830): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) (async) read$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f00000010c0)=""/48, 0x30) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_hda_intel/parameters/align_buffer_size\x00', 0x208080, 0x0) write$auto(r2, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) (async) write$auto(0x3, 0x0, 0xfdef) (async) r4 = prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) (async) mmap$auto(0x2, 0x1, 0xdb, 0x16, r3, 0x4) socketpair$auto(0x6d, 0x2, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0x81) (async) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x62000, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000011c0)=':,\x00', &(0x7f0000001200)={0x503240, 0x153, 0x10}, 0x18) copy_file_range$auto(0xffffffffffffffff, 0x0, r6, 0x0, 0xffffffffffffffff, 0x8) futimesat$auto(r7, &(0x7f0000001240)=':,\x00', &(0x7f0000001280)={0xa, 0x1000}) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r4, 0x40045702, &(0x7f0000001080)=0x10000) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') mmap$auto(0x0, 0x2000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 17m25.706817042s ago: executing program 33 (id=1830): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) (async) read$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f00000010c0)=""/48, 0x30) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_hda_intel/parameters/align_buffer_size\x00', 0x208080, 0x0) write$auto(r2, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) (async) write$auto(0x3, 0x0, 0xfdef) (async) r4 = prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) (async) mmap$auto(0x2, 0x1, 0xdb, 0x16, r3, 0x4) socketpair$auto(0x6d, 0x2, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0x81) (async) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x62000, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000011c0)=':,\x00', &(0x7f0000001200)={0x503240, 0x153, 0x10}, 0x18) copy_file_range$auto(0xffffffffffffffff, 0x0, r6, 0x0, 0xffffffffffffffff, 0x8) futimesat$auto(r7, &(0x7f0000001240)=':,\x00', &(0x7f0000001280)={0xa, 0x1000}) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r4, 0x40045702, &(0x7f0000001080)=0x10000) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') mmap$auto(0x0, 0x2000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 12m16.132085948s ago: executing program 1 (id=2908): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0x80000011, 0xd6, r0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x40, 0x100000000, 0x0, 0xffffffffffff467d, 0x80003ff) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0xffffff71, 0x10000}) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) 12m13.81615951s ago: executing program 1 (id=2918): mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) readv$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000000), 0x7}, 0x10) (async) mmap$auto(0x0, 0x80000002, 0xdb, 0x16, 0xffffffffffffffff, 0x8000) (async, rerun: 64) capget$auto(0x0, 0xfffffffffffffffe) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, 0x0) prctl$auto_PR_SET_MM_ARG_START(0x7, 0x8, 0xffffffffffffffff, 0x80, 0x0) (async) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) (async) mmap$auto(0x4, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) socket(0xa, 0x80802, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x1}, 0x55) (async) read$auto_proc_environ_operations_base(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) (async) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) (async) close_range$auto(0x2, 0x8, 0x0) 12m13.185377914s ago: executing program 1 (id=2920): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x44c00, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0x19, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x80008003}, 0x8}, 0x5, 0x1c) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f000000", @ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r3) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_RINGS_TX_PUSH={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) pwrite64$auto(0xc8, &(0x7f0000000380)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\t\x00\x00\x00X\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\xa2\x01\x88\v\xae\xa9\xe98W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*6\x9b\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbb\x9e\x93H\xdan\x1d\x00\xeb]B\xa0\x99\xb0R\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1uO\x8fL\"\xact\xee\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4_\x85\xf0k\xe0\"*^o\x83-\xc2\xcc\xa6\x12\x96\xe7\xef3\xcay\xfcl:Du9U\xf6\x1f&F\xa8\xe0\x0f\xd0\x04\xa2*\x17\x81\x85\xf3p7Oq\xd6\x97-\xb7CFKU\xf0\x7f1Qg\xe12\x84\xbfl \x06aq \x04\xd3\x15\x0f\nn\xf3\xf5\xe3\x1a\xad;\x8d\x80\x86\xec6Xm>\xd8,YhS\xf3\xac\xd1)\xa3\x9b\xd4\xd2\x86?\fH\xfaa()\xd1A\x9b\xabZ54i\x95\xac\x1a\xf2\xff\x19\xc7.\xfe\x06i\xcfAy\t)\xf3m\x93_\xe0I\x99\x89\xcb\xb7.\xa2\xd8\x97.\xbfH\x9bP\xaf{\x1c_\xfa6\f\a\x84\xc6\xa0\xe7\x00\x00\x00', 0xfded, 0x6) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) 12m12.728913273s ago: executing program 1 (id=2922): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r1, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0a00022c", @ANYRES16=r2, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x10814}, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x404a004) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(r0, r0, 0xfff7fffb) socket(0x18, 0xa, 0x1) ioctl$auto_SNDCTL_SEQ_RESET(r3, 0x5100, &(0x7f0000000040)="a53c4ca6d8bbc8b521f7ba795664fa111cfe1f0b844e4a058e2601f2c074e2dc04ee4752855a0d0f7b5ee92687b367863c0712b7ea695ce3d3b5f83a5beba69a6e65dd2c8ac242bd12e15c18285211eb56e3652a203851fce04279c96eee925f") socket(0xa, 0x2, 0xc8) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x26, "ab06fdffff00fff500"}, 0x55) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) lsm_list_modules$auto(0x0, 0x0, 0x0) 12m10.539637718s ago: executing program 1 (id=2928): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 12m6.444369134s ago: executing program 1 (id=2936): r0 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000080)=0x5a0) mmap$auto(0x0, 0x400000000000004, 0x4000000000df, 0x40eb1, r0, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0xa894, 0x6, 0x6c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0x28002, 0x0) ioctl$auto(r1, 0x4d13, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r2 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x1a, 0x1, 0x84) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) write$auto_ctl_device_fops_user(r2, &(0x7f0000000180)="1ce200b0", 0x4) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) removexattrat$auto(r0, &(0x7f0000000100)='./file0\x00', 0x1, &(0x7f0000000140)='().$\x00') close_range$auto(0x2, 0x8, 0x0) 11m51.486324601s ago: executing program 34 (id=2936): r0 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000080)=0x5a0) mmap$auto(0x0, 0x400000000000004, 0x4000000000df, 0x40eb1, r0, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0xa894, 0x6, 0x6c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0x28002, 0x0) ioctl$auto(r1, 0x4d13, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r2 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x1a, 0x1, 0x84) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) write$auto_ctl_device_fops_user(r2, &(0x7f0000000180)="1ce200b0", 0x4) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) removexattrat$auto(r0, &(0x7f0000000100)='./file0\x00', 0x1, &(0x7f0000000140)='().$\x00') close_range$auto(0x2, 0x8, 0x0) 8m41.465134291s ago: executing program 6 (id=3457): r0 = socket(0xa, 0x5, 0x84) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x74) fcntl$auto(0x3, 0x4, 0xa553) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, &(0x7f0000000440)=@batch={0x9, 0x46e, 0x2, 0x2, 0x3, r1, 0x9, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e9a42, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0x26, 0x1, 0xfe) write$auto(0x3, 0x0, 0xffd8) shmctl$auto_IPC_SET(0x84, 0x1, &(0x7f0000000280)={{0x5, 0xee00, 0xee00, 0xca6d, 0x69, 0x8, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x5, @inferred=0xffffffffffffffff, @raw, 0x9, 0x0, &(0x7f0000000080)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815affff214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) fsconfig$auto(r2, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r3) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) 8m39.311187197s ago: executing program 6 (id=3460): r0 = socket(0x18, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4008b100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010329bd700002dcdf250500"], 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) 8m38.682506771s ago: executing program 6 (id=3461): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000480), 0xc02, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a", 0xa4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={@inferred, 0x8, 0x100000002, @btrfs_ioctl_vol_args_v2_3_0={0x6, 0x0}, @name="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"}) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001100), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 8m37.807606718s ago: executing program 6 (id=3464): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x2, 0x3}, 0xed7138c}, 0x9ae, 0x0) (async) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/nbd13/hctx0/cpu1/default_rq_list\x00', 0x169100, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/ep_81/wMaxPacketSize\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/170, 0xaa) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) 8m37.591648827s ago: executing program 6 (id=3465): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(0xffffffffffffffff, 0x9, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x8000000004) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB], 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x500000}, 0x9) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) ioctl$auto_ep0_operations_inode(0xffffffffffffffff, 0x1, &(0x7f0000000080)="5519315bf41a42282df3faa6055acad941695471ac5dafaf22370d") read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003180)=""/4118, 0x1016) mmap$auto(0x0, 0x4020009, 0x7701eb1f, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4003f00, 0x0) 8m37.078896669s ago: executing program 6 (id=3468): r0 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) times$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x3, 0x0, 0x79ad226b) 8m21.774896748s ago: executing program 35 (id=3468): r0 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) times$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x3, 0x0, 0x79ad226b) 5m27.125416491s ago: executing program 7 (id=3975): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sync_file_range$auto(r0, 0x3, 0x0, 0x8) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) 5m26.668293202s ago: executing program 7 (id=3978): mlock$auto(0x3, 0xfffffffffffffffa) mlock$auto(0xa3, 0x755) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) lseek$auto(0x3, 0x2, 0x0) 5m26.303890185s ago: executing program 7 (id=3980): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17c1", 0x7115}, 0x8) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [0x1ff], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x80000001, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socketpair$auto(0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x0) fcntl$auto(r2, 0x7, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x2, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0xe8182, 0xa8, 0x1a}, 0x18) setxattrat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x9, &(0x7f0000000200)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', &(0x7f0000000240)={0xffff, 0x6, 0xc4e}, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) fsopen$auto(0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r8, @ANYBLOB="0800050006000000110001006f76735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="a196864a7d948bbb3ea7"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x14c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7edb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PHY_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PHY_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x400005, 0xe1, 0x9a72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5m25.172656649s ago: executing program 7 (id=3983): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) clock_nanosleep$auto(0x7, 0x7fff, 0x0, 0x0) (async) clock_nanosleep$auto(0xb, 0x8000, 0x0, 0x0) (async) settimeofday$auto(0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x7) (async) mmap$auto(0x0, 0x6, 0x1000000003, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) ioctl$auto(r0, 0x5319, r0) 5m24.513586966s ago: executing program 7 (id=3985): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, 0x0, 0x6a) 5m24.237589132s ago: executing program 7 (id=3987): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0xcd1e23e41b02d660, 0x154) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 5m9.14408158s ago: executing program 36 (id=3987): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0xcd1e23e41b02d660, 0x154) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 3m39.651264365s ago: executing program 5 (id=4248): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) read$auto(r0, &(0x7f00000001c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) shmctl$auto_SHM_UNLOCK(0x9, 0xc, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/over_current_count\x00', 0x60000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001080)=""/98, 0x62) waitid$auto_P_ALL(0x0, 0xfc, 0x0, 0x400, &(0x7f0000000b40)={{0x6, 0x2}, {0xffdffffffffff4c8, 0x80}, 0x3, 0xc, 0x3, 0x83, 0x2, 0x0, 0x3, 0x9, 0x5, 0x8, 0x0, 0x40, 0xffffffffffffff11, 0xbf0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x101882, 0x0) write$auto_nsim_psample_enable_fops_psample(r4, &(0x7f0000000000)='D', 0x1) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="0e68e1ce492a64798e4fee220bc8eee9c37ee81d369569dfe49ce0b1ea489b7fa250b362a35c7b1cc5223ad7c2238cd8ca62e96bbaae70543c2096574000a346c83ebb26e947fce3d54fa9638c7312286b5ac2ffd6a1a399cca479c7c66ae517d268e175bc6b58e59d96a32ce63594814ffb36455004311bf92cab5708659c5e2630b338473696543a91f36057f828f8846f546530527611e8e97fe9f5c15bbc007612dcfae8ef3a7749ea773efcea4b", @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0xc04c013}, 0x80) r5 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ftruncate$auto(0xffffffffffffffff, 0x100000001) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r8, 0x2f}, 0x22) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r9, 0x104000000000010e, 0x5, 0x0, 0x400) r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r7) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa0000, 0x0) sendmsg$auto_NFC_CMD_START_POLL(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="c0da569986b931d8bffc178de767306c0a96ef0981f5825192db30951464dbee89efefcbfe0d7437997d9cbdaffaf9de29b7b7484dda9149a7e616724c6d25f924a98b65999393354caf4895cde987106749fdb0e270ed8458aecd49140a7be3e02d42e1eb8c06a36d820ca8f20e09d052ba424bd67a4e5ae6cbb7bdc44601e59d314f6d5fdce10aa3b7dee8fcc8d40d8d929dd86f47223ea226d4ee27065f6a572f95a9cee3ba357c6e1fca01aac915ac7bbca823ca015976121a90a9e5e121ce3c242cad5e4f26792b032ce6c286a10311b489ef18a0f9259a7ee8af", @ANYRES16=r10, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x400440d1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) 3m35.316527723s ago: executing program 5 (id=4260): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8008000) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = socket(0x23, 0x80805, 0x0) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00193984d37b00dcdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) setreuid$auto(0x15, 0x5) (async) setrlimit$auto(0x8, 0x0) mlock$auto(0x3, 0x9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x90c2, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) (async) getsockopt$auto_SO_TXREHASH(r4, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x6653, 0xfffffffffffffff6, 0x6, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x509001, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m32.723620734s ago: executing program 5 (id=4265): io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x30880, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xc}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000081}, 0x4040840) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000040)={0xbb, 0x6, 0x4, 0x4, 0x5, 0x0}) capget$auto(&(0x7f0000000100)={0x1, r4}, &(0x7f0000000140)={0x4, 0x6, 0x7}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r6 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x8, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r6, 0x9, 0x820e, 0x8b, 0x0, 0x18) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) 3m32.473610817s ago: executing program 5 (id=4266): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r3 = memfd_secret$auto(0x0) flistxattr$auto(r3, 0x0, 0x80000001) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x264, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_KEK={0x34, 0xf2, "24bb68e113d75bc2e9eba1a13979eec0c6c5c545cd28c9bdeb89c9186fb09698038362b6ea58e99c7b8a74d65e070910"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x206, 0x84, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @uid=0xee00}, @typed={0x16, 0x64, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @typed={0x9f, 0x140, 0x0, 0x0, @binary="638e2a070c5053e008f170ea946b6e4f949a7e8983e66655f7c322294c4d642237e9030a51db9c9b721d4bdbd781fb674b39870a0fd87718fe9d3a92ae999ec2f6d0f5a1623f841d281e903eed41f95971503755c66c410ad2fcce49bdca60115db14683e79c39fb9bb70863c29c882fe5354abc26894f740e0f6597e462971a4396118839185f6f19ba90ccc71870111942f6aa2f2fcfb318c3b5"}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x4}, @nested={0x42, 0x57, 0x0, 0x1, [@generic="0e16873cb04b0802734804cbc9b98f680b166ef632daff808d905335a6178113fdd8338238f22f11e87bbdfbbd5637fec32fbb10f2ffb9b5167f1a1a181a"]}, @nested={0x4, 0x8a}, @generic="c1f27ede29e8c07620bb2385c6ae676b798301f243182c2ece76a9801c52d14f7d153dad5cf27c5d13aae152e566d832fea309b1ca725d9cf826aeaeb8313403e14a50ee88af91c09b4ba83255a66763507b76c551d52d76afb9048c0801fe748c406a1c79b467d631bb62221adaed5af82178e1d72ca058b1b6fd0bfa36ab57d8e12d94777c809157ea", @typed={0x63, 0x35, 0x0, 0x0, @binary="49b51e6a16e908fb1e130440dc7dfdb30b0c7afec3f0318f0c2845e1243cf6798b2bc062ace0ef5da0ba3d7ecb31cd055cc1e04c93dff11d3a885aae21a316895f23d7cb0b50f40f049fc4885eb6e5f7c0c59ebb2f90a74a541f11828f5477"}]}, @NL80211_ATTR_KEY_DATA={0x12, 0x7, "54799a74c358f2e0c4312cbd90c4"}]}, 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x40800) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, r0, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x400000b5, 0x2, 0x6}]}) 3m29.845157047s ago: executing program 5 (id=4269): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) mmap$auto(0x0, 0x400007, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0xfffffffffffffffe, 0x1, 0x0, 0x2000000000000e8, 0x0, 0x4, 0x0, 0x8}) r1 = socket(0xa, 0x801, 0x84) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) read$auto(r2, 0x0, 0x20) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x287) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) 3m28.870282867s ago: executing program 5 (id=4273): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x4d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd31, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x20}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18949e0015797f3480060177962b13ae493be28f0d691ec3005d5750f1b18d699b1cba2531b1b6943cbb89", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf250400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3m13.838711549s ago: executing program 37 (id=4273): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x4d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd31, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x20}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18949e0015797f3480060177962b13ae493be28f0d691ec3005d5750f1b18d699b1cba2531b1b6943cbb89", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf250400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1m23.928173802s ago: executing program 2 (id=4567): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0xa, 0x3, 0x3a) (async) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) ioctl$auto(r0, 0x8916, 0x1) 1m23.587917355s ago: executing program 2 (id=4569): mmap$auto(0x0, 0x10001, 0x3f8d, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) setdomainname$auto(0x0, 0x4) 1m23.255562233s ago: executing program 2 (id=4571): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20200, 0x0) io_submit$auto(0x0, 0x0, &(0x7f00000002c0)=&(0x7f0000000300)={0xfffffffffffffff8, 0x5468, 0x9, 0x6, 0x9f2a, r0, 0x7, 0x1, 0x6, 0x0, 0x6, r0}) ioctl$auto_SNDCTL_DSP_NONBLOCK(r1, 0x500e, &(0x7f0000000100)="7a34e6776add2d6fd2a2c99b1fb6171c64e8f8b48b000020000629526a418bdc1b376c67a95da5308ad8ffa4f832f6d3ad849257818fd4c25cb1ac6397f3d53ad11219da2f6c4da21a0706742f79ae631080f2c63cd040ac200a7c1613ee754a0153d257dedc0f00d8a325ee91c96f11c4af7f0d0000003195a56fc1daab952fa8337fe95d21a6b8f4145c130140c5efe702278b1153d798b8a160dfc38ac8096e86c38928f47c536a6efcd29045b0") (async) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x100030, 0x7f}, 0x28a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r3, 0x0, 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x100000d, 0x810004, 0xff9, 0x8000000008014, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) (async) read$auto(r5, 0x0, 0x7fff) (async) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x710f}, 0x6) (async) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20ae47a2ef6e39524926d9568641fd03ae1cf8d48fcdf548bc1f60448"}, 0x9, 0x3, 0x2af3) (async) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x2020009, 0x5, 0xeb2, r2, 0x800) prctl$auto_PR_SET_MM_ENV_END(0xfffffffa, 0xb, 0xffffffffffffffff, 0x79, 0x5) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) (async) pipe$auto(0x0) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) dup2$auto(0x5, 0x4) (async) write$auto(0x6, 0x0, 0x100000001) 1m22.321232009s ago: executing program 2 (id=4574): ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x121482, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000004580)={0x1cc0, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x9}, @NL80211_ATTR_SAR_SPEC={0x2ac, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x729}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x691}]}]}, @NL80211_SAR_ATTR_SPECS={0x10c, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1122a347}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xde}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x100}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc602}]}]}, @NL80211_SAR_ATTR_TYPE={0x0, 0x1, 0x1ff}, @NL80211_SAR_ATTR_SPECS={0xc8, 0x2, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x773}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x55}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x167c4ce6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf9f4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x86dc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0xffffffffffffffd9, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xd}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x1651, 0x2d, 0x0, 0x1, [@generic="8340afca79f0105bfc55aabb4bb497f5f2bf4cba1cee456f47cc3509d026a333552dab9d97f91578aa90f8e3f68cccee8fd5e831e055b935e66b02805084ad53b167901b63", @typed={0x8, 0x4a, 0x0, 0x0, @fd}, @nested={0x1c1, 0x137, 0x0, 0x1, [@generic="e387a16e5433ab21a9f4a78289b6f7f252378c5a0d1b2fdaefe0c2924c8d6e69ceb465975d1f314d0fa8b884d5d2aa4cc3b3e8808d4731f23858d91dae881268f5b95f137fc1c5f8a2cdafd84f91e3933e4d17e7946017b354cdea643ca20f3d8b89ac5df41488c8665f31ae8cad8f21d8e885149e0aed310b99e2f4c53b1a293eb607e915dc913e4d4875c007e4694289f964b0f7a796226d90618b4b66f49391d1c8e4d202a7fec5335f35838279044df6609c87cad4f3a24ba91335ad79980c7ef75871f6f94e24cf2b4bb6e3e55b93", @generic="2bae9b11effebf572e4f286b1d28d3b70f0ff41b8ef75b7702e753c279ed43803b2a60495544a981757c4e43a2c20cb2d054d775dc14f674ae68527f36a05b668317ae4e00301086f1895a424aa3419c6e5783aa2e3d7b8859a448257d1aabaa7dd2ccfc54630178183b1f9989a3dc8019a4c7bfe6bff4e8219aed0a", @nested={0x4, 0x141}, @typed={0x6b, 0x6e, 0x0, 0x0, @binary="87890024b20dfd9a43811c4035845f4bc9ff61b7346c9baf6b19a64b998c4d5711b80abd9e1018f5f725aada5d539bc0da09eb931e5a0873cfefef9d22013b1276f032f31eeb028f61ded607c168aaa72eca84bc4d07703a05c47d1d5487c9afa22ef768701e85"}]}, @nested={0x2c6, 0xb9, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @nested={0x4, 0xec}, @nested={0x4, 0x69}, @typed={0x8, 0x11f, 0x0, 0x0, @pid}, @generic="d338557bfbc23f46e3279d53e019302b7c839756a43deeadae8e0036ac56b0b6997e5d3038c6dad97b93cb", @generic="5ed496044eab11f9ba2f9b11f11de0e71f7d9b057968c29f4d6d2ec683399a88fc365af8996528e61f9d9d2bdf4b13ca4fd6480734c9351431b78b940c734cf4cd68a321ea7bf48287a477e54198832449199653fe0c5ddfc524f2d10bd4563b251afc768377e6e4bac07484d22143e799373cdc1d0d5ee794f6c91bd81727da53385ec046c842a8df917b2022dd890bfbdbeefdf125f5ace58924f8eb1a611bb7cbf126f3308203c506fc476181d8a80f6988004f5eddb2a6c4c51753d8271cd0bd5d3870666cb5038df60f485c666eb2c904967b99db41d3f5d108bf9026fea3b358f7eb008567ffd2ec6eda99d9d740", @generic="5b28a740f868d79e47ba42fd22022d37e0052e1d0cad51f1023b513b0027ea1ffa819f07feb053e94bb78ad1e0eefd668bc9029e24c60c92047b8c87b64ff2f28fbf74d6309bfffd3d517a4e4f6404170cb13d063a55ec7b4c3758ff3393a74abfcce6082590e78a6ecf9df919ba8891811c1f83fc08485cd9deb8e9c97be4f0ff5b1defac499dcb28a172eeecaee37a87c6ae433463dabd0c8f5a1705e3a494faa5dd699e52795f940b9b6e0caf736c49e1a82f90e7daf1a58d9cfb04499e28972591d90f955a2f270a51410f961bbbafd9efe9f76a7cff6c0277e7157a00ff14a3de56ae77d745502e44b830099628e32f7291", @nested={0x4, 0x102}, @generic="9cb83264ad250722aaa5ccb35a9e0048f6e98249e3fbf6f94f2d11ec119f50381b18a50e3ea070dd04cbb319d72fac88a529cdd1826ca1f0bcf28f965d0b52ed5479a5cc1c2e7db18a423b4e196ccd525af8d4c9659f3047d6c285d4f0219cb6c8329ef137c497fbbe52ade7ab8f63b6679513d995d8511de012032cab52af48762dafe21674b76a693c96e4c2bc7f94a940020cc42c5b4b5375aa4367aaa5b9cea9d6e08744f4ed370bdeaf5b88e282a7546b69d5ffcf0f4aa51acb3de73947235d3bfb9f7d16e781a4468b1cd31c31915d2c0e873ec500ba907d0ddbcfe139e287613a5a34c1b6426bec3526ca779e03b9d82bc5e665"]}, @generic="56246d11484230adc277a5a0fd055570ce2e39dcc32df2a6ca4b9cec22ae439aca7100694182ace4b22252a16f88763c18f0c807409058a181d21b52b3b9080c36ffd450807e894a964bc7e0b2413365c75ab20e001c0d362dc12c8617f200f10ec7f6f99af13ca003e7eb89d3e588022701a2e5e63f4b4328c6d34df953d5d1cb8ae5566e94c32d7e2409a7b2f2f12911dd784a145276eea87932f7f1f2e6d6b54b3f0880719e0bc269adc6a2c50e477fb757f7d4e42ccd03902b45373f7156a548ae69b079fc515f6d9eac43bed553", @typed={0xa4, 0x32, 0x0, 0x0, @binary="6b6dc26f0cd3774f800976ac52666772a87c2cf05557a7e826bcc515174050105970d0d9bac51d7c6d572aa5247a7162819e26cc3da0061541d82a0a9f6704419c014ff3986653cab6d3c34cd5f255ee2e32455f557a4bf05339ed29e31f24ca888403763c2d94a65def0730e7d1015f0be3c39f351a2f47e15c35fbf817c49d3bc13723ccbef66a4065ca333d4f6cd153cb4d9ef156bddf7be4d53897fc3619"}, @generic="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"]}, @NL80211_ATTR_MESH_CONFIG={0xbc, 0x23, 0x0, 0x1, [@generic="ae533a165d2c08d8d86a93cc67d5f39ad085af1fcd872beb8903dc41012a5f649c65c0f1a356bbd592027ba593268f090a8d99a04502860270adfedf1bb3bf95f325336c2b90e2b50d91731402b3c3c1884aa74917dd6118e6f2a39f9cccddac66d9156f1bd3af913ef86cb06e200d0c2516d5133cc3cecff4e0e9b1b16d02ce69c1eefae95689e8e284ea14e9b56c6b4bf628313f2a5ed70da055c05870fd07", @nested={0x18, 0x24, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}]}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_BEACON_HEAD={0x2c3, 0xe, "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"}]}, 0x1cc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x13cc36deb80729c2) pwrite64$auto(r0, &(0x7f0000000200)='/proc\'sis/ne4/ipv4/tcp^\xff\xf7\x00\x00', 0x295, 0x200) madvise$auto(0x0, 0x2000040080000004, 0xe) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001880)=""/4101, 0x1005) 1m21.85746574s ago: executing program 2 (id=4576): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1d, 0x3, 0x106) r1 = pidfd_getfd$auto(0xffffffffffffffff, r0, 0x10000) listen$auto(r1, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x0, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0xf08f, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSPGRP2(r1, 0x5410, &(0x7f00000000c0)="ac2cb364f04e3b0f58ddeb858503145768061960533d4c76d5ba8dad4b4f0c2f40735a7c6bffbdd31c253cf7cf0c7bc5579bb29c13b0256a7c5ba6b3be780258d5318726516f4451099812ea57d0ccfbab919453ced90da859a40b") syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) socket(0x2, 0x2, 0x1) sendto$auto(0xffffffffffffffff, 0x0, 0x3, 0xfffffff8, 0x0, 0x1c) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001080)=""/244, 0xf4) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1m20.391943021s ago: executing program 2 (id=4578): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x50) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1m19.642291398s ago: executing program 4 (id=4580): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r0) getsid$auto(0xffffffffffffffff) r1 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x4670c0, 0x0) mmap$auto(0x0, 0x400000000400008, 0x9, 0xf0, 0x2, 0x18000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x8, 0x100000001, 0x9b72, 0x2, 0x4c) close_range$auto(r0, r2, 0x4000000000002) r3 = fanotify_init$auto(0x6, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x20, 0xa, 0x0) clone$auto(0x8000000000000200, 0x10001, 0x0, 0x0, 0x400000000000000e) ioctl$auto(0x3, 0xff0a, 0x0) r4 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r4, &(0x7f000000b040)='\x00', 0x7, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4cc403, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x400000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/1:0/read_ahead_kb\x00', 0x78a600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r3, r6, 0x0, 0x3) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) 1m18.687613588s ago: executing program 4 (id=4581): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/71, 0x47) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x101400, 0x0) ioctl$auto(r2, 0x4b72, 0x4) 1m17.935331305s ago: executing program 4 (id=4583): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810003, 0xff7, 0x18, 0x3, 0xf1b) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xd3040, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0xa, 0x0) r1 = io_uring_setup$auto(0x1d48, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, 0x0, 0x44050) io_uring_register$auto(r1, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto(r3, 0x5514, 0x1) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, 0x0, 0x2004c894) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000342eaecf6da561a8bd8400fc2807230000000000000080905b18713f6eb9de4ed94bf406cd73d3eb60330338ce7aadbb1d96fb1690de30190a9e", @ANYRES16=r4, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRESDEC=r3, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x8004) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4004550c, 0xffffffffffffffff) setresuid$auto(0x8, 0x8, 0x0) r5 = socket(0x10, 0x3, 0x2) bind$auto(r5, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) 1m16.326327874s ago: executing program 4 (id=4587): sched_get_priority_min$auto_SCHED_BATCH(0x3) socket(0x1, 0x5, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) 1m13.703717577s ago: executing program 4 (id=4590): rt_sigprocmask$auto(0xb1, 0x0, 0x0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x10001, 0x3f8d, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:00.0/power/control\x00', 0x200001, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) setdomainname$auto(0x0, 0x4) 1m13.122978533s ago: executing program 4 (id=4592): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/f2fs/features/project_quota\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000008c0)=""/61, 0x3d) r1 = socket(0x2, 0x2, 0x88) setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r5}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0xc00c6211, 0x38) read$auto(r7, 0x0, 0x1ff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) 58.01155054s ago: executing program 38 (id=4592): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/f2fs/features/project_quota\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000008c0)=""/61, 0x3d) r1 = socket(0x2, 0x2, 0x88) setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r5}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0xc00c6211, 0x38) read$auto(r7, 0x0, 0x1ff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) 6.626093051s ago: executing program 8 (id=4735): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0xc042, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b74, r0, 0xfffffffffffffffd) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x100000000) read$auto(r1, 0x0, 0xe8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) remap_file_pages$auto(0x40, 0x2000fff, 0x0, 0xdc, 0x100000) ioctl$auto(r1, 0x7, r1) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.055373932s ago: executing program 8 (id=4737): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x4, 0xe, 0x6, "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"}, 0x80000002, 0x8, 0xfd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x134, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2100, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x0) lseek$auto(r1, 0x6, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 3.657977802s ago: executing program 8 (id=4740): r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0xdd, 0x0, [{0x400, 0x3, 0x2}]}) read$auto_vhost_net_fops_net(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto(0x1, 0x2, 0x2, 0xf00) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) write$auto(r3, 0x0, 0x1) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0x40000df, 0x19, 0x2, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x10000000000df, 0xeb2, r4, 0x4000000000008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) getpid() 2.969421134s ago: executing program 9 (id=4742): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x40900, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) socket(0x1d, 0x3, 0x1) socket(0x1d, 0x2, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_create$auto(0x8800001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) r4 = setfsuid$auto(0xee00) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) fchmod$auto(r3, 0x0) mlockall$auto(0x7) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/force\x00', 0x400081, 0x0) rt_sigprocmask$auto(0x2, &(0x7f0000000000)={0x8}, 0x0, 0x8) r5 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140)={@siginfo_0_0={0x8, 0x10, 0x4, @_sigfault={&(0x7f00000000c0)="0516076155192630bb1b6d948da91d2228adcee1de02c19c2cd5f17335e98c16c619ff681da9389d816afd5f4d18f9362ac8c1849b119f18129dff347aa390368292226bc0df06e0ce3a8b510bffb866beac90c519781f30c2bc0e1d9677ad7e0aa3e139724fcbda782bbb658b88900b764a86c777c6478fe3be3df2442f", @_trapno=0xf}}}, 0x10001, &(0x7f00000001c0)={{}, {0x5, 0xffffffffffff1425}, 0x40, 0x10000, 0x4, 0x60, 0x3, 0x6, 0x7fffffff, 0xb, 0x3, 0x9, 0x400, 0x4, 0x4, 0x8000000000000000}) madvise$auto(0x5, 0x4, 0xc) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)={0x89c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x351, 0x9, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @uid=r4}, @generic="ab42406675ac06446a9c2575a0dbb4e4818ffeabc8f6a0f4b4aef298d81d39e8f0ba69ce43d3902fff98412617e0472eb97bcfb5117a40260f88034deec6d8aaa1e3e7cc2d52037bec707289c8d151b5f2606c992a44f0d7847c4b8cc875ded945f7c2b5f22281fc5c38db32840e980f91d03720221f729929ce", @generic="aabfe79dfcde3e414bfaac70bfb6a8697cf122814eeb8f09d4323bea9b", @generic="c5ac68986f18df1e21efefc7ab0334443245db3dea5fc604189a40e211e2301abbb16007007ae92cae8c2a715041d18584740b51986a2a4f95cdf0451de342b906c6d68320c7f172d1ecbf1f3502168ff82de31bb6aaf669316528b84d18860acf2eff7bdf616b705ec350e24d399e40ca70bb9d1702206d557b41cfbba7252e079a607447a876caf8b95d02d14569455727ddca292db9991d4bbbeb6423cab6225791b580f395fda15dfe6401cc335d3aae04590712ff19d7341ab1f0e0f43a0e34d60f470432d49835877fe9b444c708b47639ca63e3b01b2c1e8c404bf1e3057b98a51f5c6c2c265af5cbcdb35e1bbe455987a06a9d32696db3cfe2bfd7", @nested={0xd6, 0x13e, 0x0, 0x1, [@generic="c7dca2ef210d944c266a423c14026e40330c7c84e9577893b3444be63486b8bc098c7c17c3bd354520c1af72c4546361cdb727b84a62c8bd7f5e598a690cb4d6edbb4dd61f2fb1936aead82e9dccde6c6adeebaa72d1172f9a7bf65b2c", @generic="20ab4f75ff59e2ea11d4867c2adcbdf22d448df43f0d3515a7d0ae406732412d049668578cc357bcda4963f8de35b5267b292fd427d10f73756a175ac09e58d839865976bccdeddcb2570e513946b08375bd5fb1612087b55947996e87ac201b9fb7d76581d0eff3b6650df2cc29758ce93671828d"]}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="1aa125f369e63d6e6d98f035e45a24416c87a951caa1bf90a28d64b6dee144282fb896ec6d911e2df82e37846b9c6be8af08f8ef8824847c6b0953f951e6d865ad356e7d1ce31c9feeb30f4f10d18d6ecf22c754ea3fcd49e9943e3fefc1882061d6e4db1a2cd902b84dbebbce3315e11fefa517f26d84dabc5f44cd2757318e808fba0a43f2114e6fa8d968e7647d855e79c48140673f3bd88ffdff31722179ab1192892e3ffa10556ab0217546b12c46631ffef28e2c140ec4f2048190869fe0808cfbec5892b979c297090165c3"]}, @TIPC_NLA_NODE={0x1f4, 0x6, 0x0, 0x1, [@generic="49badbdd2761ea5b5ffc93886a4f68fd0e84bdc4e2d28fbb7bdbc8e48adebcce5e5c33c402fc3690da971d8529bce8b5070ad10f446bb06b4b0278dcd3f8c2ee4f6d866f2450964a0436a696dd27dae9c3c37626993e5ecbf96df6c04b62a65c8110a84963a3f7ddb7d9930e73882d43e0", @generic="aeee1cb38bc3c9f3b3d7a383873c201d7c03dfb34c46cf3776b40e483169af9c9c06cc6377416f6a3102846f1516ba", @nested={0x150, 0x61, 0x0, 0x1, [@generic="37b96b0e421700d7b3d448523dc4002a04a28312c40c3a369f8b36d0c14181009ec1caa5e544d3ecedbff899dac226f4191829ae21491c8b53315b9e187b4f986e85874041ab68242de0fb9f3963760dc0de0fe355808a3745f3b7360a2641381301b2b1ec1c0a2cf853b2ebbfeb454499ccf5edba72eb5dfcbf90a3acd7570048d4291ffa8c9c3c82900696650a62db13f60740518193ba29101cac2300912c3f5c5cd61aa68bc4076db085079689938de8db90ecebb28275d04e86d0f7b2f09349f628c7e9958e5ac444", @typed={0x8, 0x134, 0x0, 0x0, @fd=r0}, @generic="9a1412f1202d5502d727201fd3ef210117739feabfcd667b7d4bf5932fd85bd7c220b167444e3f279b5ac260a2c366ef5c4fb42475623c69e6af18827dc0bbe1e347a4903721131c0bc30e5b5997152cc1cee8ab5ee3253394750d21ce", @typed={0x8, 0x2, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@empty}]}, @TIPC_NLA_NODE={0x2d7, 0x6, 0x0, 0x1, [@nested={0x121, 0x114, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xad}, @generic="6c9854cfbe413ef0ac166a5ad56fbff1a629edcae5cb1e355c61a0d47a295da4ade85e13712c84b8ee460abbb520886480778f52a698212b57c669cd48dc01376261e566a4da49446289f024be7e1fa2c2108eb1e21e79129cf3b036ee1da0309cbda4102a869a3bdb4b7173928567cee1b1549e16fcbf0f542b900dca3a0900515afa802b00f8ed4f9039afb961c1e3328b326cccf2003b00c7b27b", @generic="895784fe86e686949d0d9e4f5a6eab0ba22212c4f7f3077aeb9b13717d8d056a42f4bf8682d83b3c460bd986a33d339e695843a9b9683b636bc71d6f1144386cb49d239979233a0dbdc1a9ea996eb89a7db1c54a6292c7ec345718341aec57e5503b0354be6effc9d251282f54b67fbe8789260b40"]}, @nested={0x8d, 0x104, 0x0, 0x1, [@generic="06685c24ccc26c03b08e1f65e5ff6af1cd9b3ca16511479be8f47de53a9a1d1a16ad05d1b15e5cf361d6c4dcc74f4d98e919aa97ca3380a31451c815cb8afa23403de3bd2d48b1f2de8bc0b77f6bc3202998716869c407ce0ea79858ee0e0757753e1ddfe3444c92253dd9f4bf1fc176fd77f58b1d28ec1172d913292780ca5a0727b460ddc42ea2d8"]}, @generic="686c969f161bcd59313eb5509bda4326e103b715d54433299d3e5cee15a0d7e4b9174d485e14899063f60b4e6edfc520c1090970b5b50a4cddce6181ae9b22326b3978f66d481bed91028dc7e8356e82b25147933d6552a59bc364a6bf92e9eea23bbc72c796cf7249daf629e0e72602f2723ce306c25604b9a9877a25d622a0c3b6c88bcdacef2364be1e5c8f2fbd5aecea4abb4aaf3dc58a7f867d941deedc259035146e15c0d042e5f27230751c1e0bda270a57ad358d5612d4436e3fb854", @generic="72401fcd1d2c1b3c306da0de7f344dae5160ae737fbdef970b18d07e60adef976a74a64c11956e26753c55a585655046bb58150d4caa8f927cd639b532ad78803a51548efb1cbf787bf658a3caebee07d17b618d41ecb7a584314d2ee23dde"]}, @TIPC_NLA_MON={0x16, 0x9, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @uid=r4}, @generic="44717c6886478344ebd8"]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@typed={0x33, 0xe3, 0x0, 0x0, @binary="e9fbf96676b9cb332e51d6cf32a12ea69a7f196cc7dd77027da11c73af7c785f822491df6a2dd6a7ab23316849f115"}]}]}, 0x89c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) readv$auto(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x5}, 0x5) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) 2.702665205s ago: executing program 8 (id=4743): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x35dc80000000) (async) r0 = epoll_create$auto(0x3e) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) personality$auto(0xfffffffc) (async) mmap$auto(0x5, 0x61, 0x100001004000004, 0xfdfa, 0x2, 0x0) (async) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0x13, r1, 0x8000) (async) mprotect$auto(0x0, 0x7fffffff, 0x7) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x2600, 0x0) (async) socket(0xa, 0x1, 0x84) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x4001, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/netfilter/nf_log\x00', 0x721040, 0x0) pread64$auto(r4, &(0x7f0000000280)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\xc0\xf8\x01V?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99s\x81Q\xca\xeb\xee.\xe3\x85\xcd\xd0\xae!\x9fl}x\xd4\xa5D\x16\x94Ip\f\x96\xb8\xfa\xe5\xf9odtQ', 0x87ff, 0x5) (async) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0xcd0, 0x7fff, 0x1a000, 0x80000948b, 0x0, 0x5, 0x400000006, 0x100000000003, 0xd, 0x9, 0x3, 0x9, 0x400005, 0x5]}, 0x0) (async) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc000cd84061c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1", 0x300) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) epoll_ctl$auto(r0, 0x1, 0xffffffffffffffff, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x202e00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2.581157895s ago: executing program 9 (id=4744): mmap$auto(0x80000000007, 0x4, 0x0, 0x40eb1, 0x401, 0x300000000000) r0 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0xf1) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000040)={0xcf5, 0x9, 0x7, 0x2, 0x9, 0x0}) r2 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r3 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) kcmp$auto(r0, r1, 0x8, r2, r3) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r4, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1004020009, 0x6, 0xeb1, 0x401, 0x8000) msync$auto(0x7, 0x8, 0x400000004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0xa, 0x3, 0x3a) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000100)=@query={@target_fd=r5, 0x1ff, 0x81, 0x4, 0x48ec, @count=0x2, 0x0, 0xffffffff80000000, 0x3, 0xc72, 0x3}, 0x10001) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x200007ff, 0x0, 0x0) getsockopt$auto(r5, 0x29, 0x18, 0x0, 0x0) 2.361443441s ago: executing program 8 (id=4745): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x1, 0x84) unshare$auto(0x40000080) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r1, r1, 0x0, 0x10000800000003) setsockopt$auto_SO_LOCK_FILTER(r1, 0x9, 0x2c, &(0x7f0000000200)='**{}\x00', 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram14\x00', 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0xff8, 0x18, 0x3, 0x2) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x8, 0x4, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX5n\x91p\xe6\x1eRN8\x99\x88\xa2\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0x10, 0x3) read$auto(r2, 0x0, 0x7fff) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20ae47a2ef6e39524926d9568641fd03ae1cf8d48fcdf548bc1f60448"}, 0x9, 0x3, 0x2af3) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x25, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), r0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x2b, 0xa, 0x1) getsockopt$auto(r6, 0x40000000029, 0x4, 0xfffffffffffffffe, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000087ef65dbb07547b1a78f4b250529eafb96c6084f959a9742d2", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf25040000003000180005ac0f0032ebf97695400700ffe0b758d2c73164a1f6ae0699ce56379ef99a84df0cae6adee96b3394a81968"], 0x44}, 0x1, 0x0, 0x0, 0x22008004}, 0x40440a0) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0xc1}, 0x20000004) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team0\x00'}) 2.030152164s ago: executing program 9 (id=4746): mmap$auto(0x0, 0xf, 0x3, 0x9b72, 0x2, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async, rerun: 32) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (rerun: 32) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000080)={0x26, 0xf3, 0xb0, @raw=0xfffff024}}) (async, rerun: 32) write$auto(r1, 0x0, 0x6) (async, rerun: 32) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r2, 0x80044d76, &(0x7f0000000080)) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async, rerun: 64) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r2, 0xae41, r3) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) getsockopt$auto_SO_ACCEPTCONN(r2, 0x1, 0x1e, &(0x7f0000000000)='/dev/raw-gadget\x00', &(0x7f00000001c0)=0x89) (async) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001340), 0xffffffffffffffff) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socketpair$auto(0x1, 0x5, 0x2, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(r0, r2, 0x7c0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b45, r4) 1.229931936s ago: executing program 9 (id=4747): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001880)=""/4101, 0x1005) 1.069465973s ago: executing program 9 (id=4748): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x1f, 0x800, 0xfffffffc) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x4000009, 0x200bf2, 0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)=@batch={0x6, 0x0, 0xa1a, 0x1, 0x2, r3, 0x16e8, 0x200000000000}, 0xff) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 317.479972ms ago: executing program 8 (id=4749): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d8) r1 = socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x3, 0xb31, 0x8000000000000001, 0xeb5, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x3, 0xb31, 0x8000000000000001, 0xeb5, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0xffffffffffffffff, 0x20409, 0x4000000000df, 0x800012, r1, 0x100000000000) (async) mmap$auto(0xffffffffffffffff, 0x20409, 0x4000000000df, 0x800012, r1, 0x100000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b47, r0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x523100, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) r5 = prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x5, 0x7f) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) madvise$auto(0x0, 0x400000000200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x800, 0x0) mmap$auto(0x0, 0x200006, 0x100000000000002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0xfffffffffffffffc, 0x800000420009, 0xdf, 0xfffffffffffffff2, 0x401, 0x8000) (async) mmap$auto(0xfffffffffffffffc, 0x800000420009, 0xdf, 0xfffffffffffffff2, 0x401, 0x8000) madvise$auto(0x0, 0xffffbfffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffbfffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) dup3$auto(r3, r4, 0xfffffc01) (async) dup3$auto(r3, r4, 0xfffffc01) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty8\x00', 0x683, 0x0) ioctl$auto_TCFLSH2(r6, 0x5453, 0x0) mmap$auto(0x1, 0x5, 0x1, 0x40eb2, r5, 0x308000000000) 0s ago: executing program 9 (id=4750): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) acct$auto(&(0x7f0000000400)='/dev/vcsa1\x00') r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_names\x00', 0x40, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000000a315034182127770f8295376c21f5fc2927e60ce28e09ffa3018b955368c0e4c8fd2bbb8a3b0e05af4ac29333b6b75ef7b3f284343aafdec8062db53cd9e6ac404486ca0a8a8b0d47fc175a14645ec58ca044d7ff852c4c506c392f5f716c036febf8439c2a30ec50bc520f680c7f7cb97374ae93717d3e890fb759bde075099b5e28f3c137ff65ba9ffe54824fd34b0a8eb819236f682d984446adefe321a4e406832bd37c40a26e5f0c519306f4dd4081c45fb4bea5eaeabf6d7a421afa43f40d04045ab78227a9a16e061a7d0fe959bc2ad368f38"], 0x14}, 0x1, 0x0, 0x0, 0x40480c0}, 0x40000) io_uring_setup$auto(0x7, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Compute Engine, BIOS Google 01/24/2026 [ 1198.007337][T25470] Call Trace: [ 1198.007343][T25470] [ 1198.007349][T25470] dump_stack_lvl+0x100/0x190 [ 1198.007377][T25470] should_fail_ex.cold+0x5/0xa [ 1198.007396][T25470] should_failslab+0xc2/0x120 [ 1198.007416][T25470] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1198.007435][T25470] ? quirks_param_set+0x9f/0x760 [ 1198.007462][T25470] kstrdup+0x51/0xe0 [ 1198.007481][T25470] quirks_param_set+0x9f/0x760 [ 1198.007502][T25470] ? __lock_acquire+0x4a5/0x2630 [ 1198.007519][T25470] ? __pfx_quirks_param_set+0x10/0x10 [ 1198.007549][T25470] param_attr_store+0x199/0x300 [ 1198.007572][T25470] ? __pfx_param_attr_store+0x10/0x10 [ 1198.007592][T25470] module_attr_store+0x58/0x80 [ 1198.007611][T25470] ? __pfx_module_attr_store+0x10/0x10 [ 1198.007629][T25470] sysfs_kf_write+0xf2/0x150 [ 1198.007651][T25470] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1198.007668][T25470] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1198.007690][T25470] vfs_write+0x6ac/0x1070 [ 1198.007709][T25470] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1198.007729][T25470] ? __pfx_vfs_write+0x10/0x10 [ 1198.007766][T25470] ksys_write+0x12a/0x250 [ 1198.007784][T25470] ? __pfx_ksys_write+0x10/0x10 [ 1198.007808][T25470] do_syscall_64+0x106/0xf80 [ 1198.007830][T25470] ? clear_bhb_loop+0x40/0x90 [ 1198.007849][T25470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.007865][T25470] RIP: 0033:0x7f6a4b39bf79 [ 1198.007880][T25470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.007894][T25470] RSP: 002b:00007f6a4c1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1198.007909][T25470] RAX: ffffffffffffffda RBX: 00007f6a4b616090 RCX: 00007f6a4b39bf79 [ 1198.007920][T25470] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1198.007929][T25470] RBP: 00007f6a4b4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.007940][T25470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.007949][T25470] R13: 00007f6a4b616128 R14: 00007f6a4b616090 R15: 00007fffdbcc0328 [ 1198.007971][T25470] [ 1200.997622][T25494] FAULT_INJECTION: forcing a failure. [ 1200.997622][T25494] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1201.110412][T25494] CPU: 0 UID: 0 PID: 25494 Comm: syz.4.3835 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1201.110440][T25494] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1201.110446][T25494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1201.110455][T25494] Call Trace: [ 1201.110462][T25494] [ 1201.110468][T25494] dump_stack_lvl+0x100/0x190 [ 1201.110494][T25494] should_fail_ex.cold+0x5/0xa [ 1201.110512][T25494] get_futex_key+0x295/0x1620 [ 1201.110538][T25494] ? __pfx_get_futex_key+0x10/0x10 [ 1201.110559][T25494] ? lock_acquire+0x17c/0x330 [ 1201.110581][T25494] futex_wake+0xea/0x530 [ 1201.110600][T25494] ? __pfx_futex_wake+0x10/0x10 [ 1201.110618][T25494] ? exit_mm_release+0x19/0x30 [ 1201.110640][T25494] do_futex+0x32b/0x350 [ 1201.110657][T25494] ? __pfx_do_futex+0x10/0x10 [ 1201.110670][T25494] ? __might_fault+0xc5/0x140 [ 1201.110691][T25494] mm_release+0x24a/0x2f0 [ 1201.110716][T25494] do_exit+0x675/0x2a30 [ 1201.110736][T25494] ? __pfx_do_exit+0x10/0x10 [ 1201.110752][T25494] ? do_raw_spin_lock+0x128/0x260 [ 1201.110769][T25494] ? find_held_lock+0x2b/0x80 [ 1201.110788][T25494] ? get_signal+0x7e0/0x21e0 [ 1201.110817][T25494] do_group_exit+0xd5/0x2a0 [ 1201.110834][T25494] get_signal+0x1ec7/0x21e0 [ 1201.110863][T25494] ? __pfx_get_signal+0x10/0x10 [ 1201.110884][T25494] ? do_futex+0x192/0x350 [ 1201.110901][T25494] arch_do_signal_or_restart+0x91/0x770 [ 1201.110919][T25494] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1201.110939][T25494] ? __pfx___x64_sys_futex+0x10/0x10 [ 1201.110953][T25494] ? __local_bh_enable_ip+0x9e/0x120 [ 1201.110983][T25494] exit_to_user_mode_loop+0x86/0x4a0 [ 1201.110998][T25494] ? rcu_is_watching+0x12/0xc0 [ 1201.111018][T25494] do_syscall_64+0x668/0xf80 [ 1201.111038][T25494] ? clear_bhb_loop+0x40/0x90 [ 1201.111056][T25494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.111071][T25494] RIP: 0033:0x7f6a4b39bf79 [ 1201.111086][T25494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.111100][T25494] RSP: 002b:00007f6a4c2070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1201.111114][T25494] RAX: fffffffffffffe00 RBX: 00007f6a4b615fa8 RCX: 00007f6a4b39bf79 [ 1201.111124][T25494] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a4b615fa8 [ 1201.111133][T25494] RBP: 00007f6a4b615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.111141][T25494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.111155][T25494] R13: 00007f6a4b616038 R14: 00007fffdbcc0240 R15: 00007fffdbcc0328 [ 1201.111175][T25494] [ 1202.448989][T25509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1203.445602][T25541] usb usb15: usbfs: process 25541 (syz.7.3848) did not claim interface 0 before use [ 1204.999036][T25583] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1205.211959][T25586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.301196][T25586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.993767][T25598] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 1206.488070][T25609] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1206.567364][T25609] netlink: 354 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1209.117786][T25646] FAULT_INJECTION: forcing a failure. [ 1209.117786][T25646] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.246573][T25646] CPU: 0 UID: 0 PID: 25646 Comm: syz.7.3879 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1209.246603][T25646] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1209.246610][T25646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1209.246620][T25646] Call Trace: [ 1209.246625][T25646] [ 1209.246631][T25646] dump_stack_lvl+0x100/0x190 [ 1209.246660][T25646] should_fail_ex.cold+0x5/0xa [ 1209.246678][T25646] should_failslab+0xc2/0x120 [ 1209.246699][T25646] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1209.246718][T25646] ? v9fs_init_fs_context+0x133/0x590 [ 1209.246745][T25646] kstrdup+0x51/0xe0 [ 1209.246764][T25646] v9fs_init_fs_context+0x133/0x590 [ 1209.246786][T25646] alloc_fs_context+0x60c/0xf40 [ 1209.246810][T25646] __x64_sys_fsopen+0xed/0x220 [ 1209.246825][T25646] do_syscall_64+0x106/0xf80 [ 1209.246845][T25646] ? clear_bhb_loop+0x40/0x90 [ 1209.246863][T25646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.246878][T25646] RIP: 0033:0x7f97c459bf79 [ 1209.246891][T25646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.246905][T25646] RSP: 002b:00007f97c27f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1209.246920][T25646] RAX: ffffffffffffffda RBX: 00007f97c4815fa0 RCX: 00007f97c459bf79 [ 1209.246930][T25646] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1209.246939][T25646] RBP: 00007f97c46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.246948][T25646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.246957][T25646] R13: 00007f97c4816038 R14: 00007f97c4815fa0 R15: 00007ffe0db747f8 [ 1209.246976][T25646] [ 1209.765134][T25654] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3881'. [ 1212.572093][T25688] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3888'. [ 1212.973029][T21049] block nbd2: Receive control failed (result -32) [ 1216.885445][T25750] netlink: 'syz.4.3905': attribute type 4 has an invalid length. [ 1217.853137][T25768] blktrace: Concurrent blktraces are not allowed on loop2 [ 1218.031447][T25777] FAULT_INJECTION: forcing a failure. [ 1218.031447][T25777] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.083101][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3910'. [ 1218.212965][T25777] CPU: 0 UID: 0 PID: 25777 Comm: syz.4.3911 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1218.212994][T25777] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1218.213001][T25777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1218.213012][T25777] Call Trace: [ 1218.213018][T25777] [ 1218.213025][T25777] dump_stack_lvl+0x100/0x190 [ 1218.213052][T25777] should_fail_ex.cold+0x5/0xa [ 1218.213070][T25777] should_failslab+0xc2/0x120 [ 1218.213091][T25777] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1218.213106][T25777] ? snd_seq_port_connect+0x61/0x560 [ 1218.213130][T25777] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 1218.213152][T25777] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 1218.213177][T25777] snd_seq_port_connect+0x61/0x560 [ 1218.213201][T25777] ? _raw_read_unlock+0x28/0x50 [ 1218.213221][T25777] ? check_subscription_permission.isra.0+0x146/0x240 [ 1218.213252][T25777] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 1218.213271][T25777] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1218.213289][T25777] ? do_raw_spin_lock+0x128/0x260 [ 1218.213316][T25777] call_seq_client_ctl+0xa3/0x130 [ 1218.213340][T25777] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1218.213364][T25777] snd_seq_oss_midi_open+0x48b/0x6b0 [ 1218.213384][T25777] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1218.213403][T25777] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 1218.213428][T25777] ? __mutex_lock+0x26a/0x1b90 [ 1218.213453][T25777] snd_seq_oss_synth_reset+0x439/0x8e0 [ 1218.213473][T25777] ? __pfx___mutex_lock+0x10/0x10 [ 1218.213494][T25777] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 1218.213514][T25777] ? __pfx___fsnotify_parent+0x10/0x10 [ 1218.213538][T25777] snd_seq_oss_reset+0x73/0x290 [ 1218.213553][T25777] ? __pfx_odev_release+0x10/0x10 [ 1218.213568][T25777] snd_seq_oss_release+0x7c/0x180 [ 1218.213584][T25777] ? __pfx_odev_release+0x10/0x10 [ 1218.213597][T25777] odev_release+0x56/0xa0 [ 1218.213610][T25777] __fput+0x3ff/0xb40 [ 1218.213636][T25777] task_work_run+0x150/0x240 [ 1218.213655][T25777] ? __pfx_task_work_run+0x10/0x10 [ 1218.213680][T25777] exit_to_user_mode_loop+0x100/0x4a0 [ 1218.213696][T25777] ? rcu_is_watching+0x12/0xc0 [ 1218.213717][T25777] do_syscall_64+0x668/0xf80 [ 1218.213737][T25777] ? clear_bhb_loop+0x40/0x90 [ 1218.213755][T25777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.213780][T25777] RIP: 0033:0x7f6a4b39bf79 [ 1218.213795][T25777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.213809][T25777] RSP: 002b:00007f6a4c1e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1218.213825][T25777] RAX: 0000000000000000 RBX: 00007f6a4b616090 RCX: 00007f6a4b39bf79 [ 1218.213835][T25777] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1218.213845][T25777] RBP: 00007f6a4b4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.213854][T25777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.213863][T25777] R13: 00007f6a4b616128 R14: 00007f6a4b616090 R15: 00007fffdbcc0328 [ 1218.213884][T25777] [ 1221.884576][T21049] Bluetooth: hci2: unexpected event 0x08 length: 43 > 4 [ 1222.039949][T25821] Invalid ELF header magic: != ELF [ 1223.804603][T25845] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3926'. [ 1225.458620][T25873] random: crng reseeded on system resumption [ 1227.307627][T25902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1228.456594][T25915] mkiss: ax0: crc mode is auto. [ 1236.394811][T26042] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1239.385177][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.391672][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.175013][T26084] netlink: 226 bytes leftover after parsing attributes in process `syz.5.3977'. [ 1241.350808][T26092] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3980'. [ 1242.234187][T26098] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1243.786174][T26122] FAULT_INJECTION: forcing a failure. [ 1243.786174][T26122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.873522][T26122] CPU: 0 UID: 0 PID: 26122 Comm: syz.4.3986 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1243.873550][T26122] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1243.873556][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1243.873565][T26122] Call Trace: [ 1243.873570][T26122] [ 1243.873577][T26122] dump_stack_lvl+0x100/0x190 [ 1243.873602][T26122] should_fail_ex.cold+0x5/0xa [ 1243.873620][T26122] _copy_from_user+0x2e/0xd0 [ 1243.873642][T26122] move_addr_to_kernel+0x65/0x170 [ 1243.873659][T26122] __sys_bind+0x11d/0x260 [ 1243.873676][T26122] ? __pfx___sys_bind+0x10/0x10 [ 1243.873691][T26122] ? __fget_files+0x21f/0x3d0 [ 1243.873716][T26122] ? __pfx_ksys_write+0x10/0x10 [ 1243.873737][T26122] __x64_sys_bind+0x72/0xb0 [ 1243.873753][T26122] ? lockdep_hardirqs_on+0x78/0x100 [ 1243.873774][T26122] do_syscall_64+0x106/0xf80 [ 1243.873793][T26122] ? clear_bhb_loop+0x40/0x90 [ 1243.873811][T26122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.873825][T26122] RIP: 0033:0x7f6a4b39bf79 [ 1243.873838][T26122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.873852][T26122] RSP: 002b:00007f6a4c207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1243.873866][T26122] RAX: ffffffffffffffda RBX: 00007f6a4b615fa0 RCX: 00007f6a4b39bf79 [ 1243.873876][T26122] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000003 [ 1243.873884][T26122] RBP: 00007f6a4c207090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.873893][T26122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.873901][T26122] R13: 00007f6a4b616038 R14: 00007f6a4b615fa0 R15: 00007fffdbcc0328 [ 1243.873921][T26122] [ 1245.157635][T18810] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3392 with max blocks 37 with error 117 [ 1245.288740][T18810] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1245.288740][T18810] [ 1247.605147][T26171] FAULT_INJECTION: forcing a failure. [ 1247.605147][T26171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.873268][T26171] CPU: 0 UID: 0 PID: 26171 Comm: syz.5.3997 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1247.873295][T26171] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1247.873301][T26171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1247.873310][T26171] Call Trace: [ 1247.873315][T26171] [ 1247.873321][T26171] dump_stack_lvl+0x100/0x190 [ 1247.873346][T26171] should_fail_ex.cold+0x5/0xa [ 1247.873364][T26171] _copy_to_user+0x32/0xd0 [ 1247.873388][T26171] simple_read_from_buffer+0xcb/0x170 [ 1247.873407][T26171] proc_fail_nth_read+0x1af/0x230 [ 1247.873428][T26171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1247.873449][T26171] ? rw_verify_area+0xce/0x6d0 [ 1247.873465][T26171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1247.873483][T26171] vfs_read+0x1e4/0xb30 [ 1247.873503][T26171] ? __pfx_vfs_read+0x10/0x10 [ 1247.873519][T26171] ? __fget_files+0x215/0x3d0 [ 1247.873541][T26171] ? __fget_files+0x21f/0x3d0 [ 1247.873564][T26171] ksys_read+0x12a/0x250 [ 1247.873580][T26171] ? __pfx_ksys_read+0x10/0x10 [ 1247.873603][T26171] do_syscall_64+0x106/0xf80 [ 1247.873623][T26171] ? clear_bhb_loop+0x40/0x90 [ 1247.873641][T26171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.873656][T26171] RIP: 0033:0x7fb25ab5c84e [ 1247.873669][T26171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1247.873683][T26171] RSP: 002b:00007fb258df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1247.873697][T26171] RAX: ffffffffffffffda RBX: 00007fb258df66c0 RCX: 00007fb25ab5c84e [ 1247.873707][T26171] RDX: 000000000000000f RSI: 00007fb258df60a0 RDI: 0000000000000005 [ 1247.873716][T26171] RBP: 00007fb258df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.873724][T26171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.873733][T26171] R13: 00007fb25ae16038 R14: 00007fb25ae15fa0 R15: 00007ffdf6d379c8 [ 1247.873752][T26171] [ 1248.617407][T26175] netlink: zone id is out of range [ 1248.623897][T26175] netlink: zone id is out of range [ 1248.892535][T26175] netlink: set zone limit has 8 unknown bytes [ 1254.152673][T26209] netlink: 86 bytes leftover after parsing attributes in process `syz.4.4007'. [ 1256.497460][T26259] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1257.720978][T26286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1257.783696][T26286] nbd: must specify at least one socket [ 1258.652131][T18041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1258.672124][T18041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1258.685915][T18041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1258.693625][T18041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1258.701604][T18041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1259.280250][T18041] Bluetooth: hci6: Malformed LE Event: 0x0b [ 1259.827578][T26301] chnl_net:caif_netlink_parms(): no params data found [ 1260.722845][T18041] Bluetooth: hci3: command tx timeout [ 1260.849608][T26301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.907260][T26301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.945630][T26301] bridge_slave_0: entered allmulticast mode [ 1261.005339][T26301] bridge_slave_0: entered promiscuous mode [ 1261.099553][T26301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.106724][T26301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.218231][T26301] bridge_slave_1: entered allmulticast mode [ 1261.273582][T26301] bridge_slave_1: entered promiscuous mode [ 1261.480685][T26301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.579367][T26301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.036896][T26301] team0: Port device team_slave_0 added [ 1262.098330][T26301] team0: Port device team_slave_1 added [ 1262.260014][T26301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.316031][T26301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.501036][T26301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.604328][T26301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.663141][T26301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.794036][T18041] Bluetooth: hci3: command tx timeout [ 1262.874236][T26301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.512095][T26301] hsr_slave_0: entered promiscuous mode [ 1263.553853][T26301] hsr_slave_1: entered promiscuous mode [ 1263.642486][T26301] debugfs: 'hsr0' already exists in 'hsr' [ 1263.673175][T26301] Cannot create hsr debugfs directory [ 1264.860770][T18041] Bluetooth: hci3: command tx timeout [ 1265.929434][T26301] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1266.028144][T26301] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1266.118495][T26301] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1266.340351][T26301] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1266.931285][T18041] Bluetooth: hci3: command tx timeout [ 1266.946458][T26301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.101863][T26301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.200715][T24080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.207875][T24080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.337265][T24080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.344428][T24080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.439288][T26301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.061711][T26301] veth0_vlan: entered promiscuous mode [ 1270.149408][T26301] veth1_vlan: entered promiscuous mode [ 1270.321327][T26301] veth0_macvtap: entered promiscuous mode [ 1270.435744][T26301] veth1_macvtap: entered promiscuous mode [ 1270.573821][T26301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.668535][T26301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.088046][T24081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.169602][T24081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.475012][T24081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.812210][T24081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.302930][T26502] openvswitch: HfR: Dropping previously announced user features [ 1272.415074][T18692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.465006][T18692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.946267][T18813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.976496][T18813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.273779][T26581] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1280.347184][T26580] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1281.351765][T26591] netlink: 206 bytes leftover after parsing attributes in process `syz.4.4082'. [ 1281.638067][T26593] nbd: illegal input index -212 [ 1285.697340][T26645] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1285.919340][T26645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1287.166246][T26663] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1287.194504][T26658] can: request_module (can-proto-0) failed. [ 1290.928142][T26701] netlink: 'syz.4.4111': attribute type 11 has an invalid length. [ 1290.935987][T26701] netlink: 'syz.4.4111': attribute type 11 has an invalid length. [ 1292.053679][T26711] FAULT_INJECTION: forcing a failure. [ 1292.053679][T26711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1292.305794][T26711] CPU: 0 UID: 0 PID: 26711 Comm: syz.4.4114 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1292.305821][T26711] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1292.305827][T26711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1292.305836][T26711] Call Trace: [ 1292.305842][T26711] [ 1292.305848][T26711] dump_stack_lvl+0x100/0x190 [ 1292.305873][T26711] should_fail_ex.cold+0x5/0xa [ 1292.305895][T26711] ? prepare_alloc_pages+0x16d/0x5f0 [ 1292.305918][T26711] should_fail_alloc_page+0xeb/0x140 [ 1292.305939][T26711] prepare_alloc_pages+0x1f0/0x5f0 [ 1292.305959][T26711] ? bpf_ksym_find+0x124/0x1c0 [ 1292.305983][T26711] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1292.306002][T26711] ? __kernel_text_address+0xd/0x30 [ 1292.306020][T26711] ? unwind_get_return_address+0x59/0xa0 [ 1292.306042][T26711] ? arch_stack_walk+0xa6/0xf0 [ 1292.306070][T26711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1292.306086][T26711] ? stack_trace_save+0x8e/0xc0 [ 1292.306109][T26711] ? stack_depot_save_flags+0x27/0x9d0 [ 1292.306131][T26711] ? mas_wr_store_entry+0x6d2/0x2390 [ 1292.306149][T26711] ? kasan_save_stack+0x3f/0x50 [ 1292.306165][T26711] ? kasan_save_stack+0x30/0x50 [ 1292.306180][T26711] ? kasan_save_track+0x14/0x30 [ 1292.306195][T26711] ? __kasan_slab_alloc+0x89/0x90 [ 1292.306212][T26711] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1292.306228][T26711] ? __pmd_alloc+0xbf/0x9c0 [ 1292.306247][T26711] ? __handle_mm_fault+0xa99/0x2b60 [ 1292.306260][T26711] ? handle_mm_fault+0x36d/0xa20 [ 1292.306273][T26711] ? __get_user_pages+0xf9c/0x34d0 [ 1292.306292][T26711] ? populate_vma_page_range+0x267/0x3f0 [ 1292.306312][T26711] ? __mm_populate+0x107/0x3a0 [ 1292.306331][T26711] ? vm_mmap_pgoff+0x37f/0x470 [ 1292.306350][T26711] ? ksys_mmap_pgoff+0x7d/0x5b0 [ 1292.306368][T26711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1292.306389][T26711] ? policy_nodemask+0xed/0x4f0 [ 1292.306410][T26711] alloc_pages_mpol+0x1fb/0x550 [ 1292.306430][T26711] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1292.306454][T26711] alloc_pages_noprof+0x131/0x390 [ 1292.306474][T26711] pte_alloc_one+0x1e/0x3e0 [ 1292.306489][T26711] __pte_alloc+0x6d/0x3f0 [ 1292.306508][T26711] ? __pfx___pte_alloc+0x10/0x10 [ 1292.306528][T26711] ? do_raw_spin_lock+0x128/0x260 [ 1292.306553][T26711] ? find_held_lock+0x2b/0x80 [ 1292.306575][T26711] do_anonymous_page+0x13cc/0x1fb0 [ 1292.306590][T26711] ? do_huge_pmd_anonymous_page+0x7ee/0x1a60 [ 1292.306608][T26711] ? __pmd_alloc+0x6aa/0x9c0 [ 1292.306630][T26711] __handle_mm_fault+0x1d42/0x2b60 [ 1292.306647][T26711] ? mt_find+0x45e/0x8e0 [ 1292.306670][T26711] ? __pfx___handle_mm_fault+0x10/0x10 [ 1292.306683][T26711] ? __pfx_mt_find+0x10/0x10 [ 1292.306720][T26711] handle_mm_fault+0x36d/0xa20 [ 1292.306738][T26711] __get_user_pages+0xf9c/0x34d0 [ 1292.306766][T26711] ? __pfx___get_user_pages+0x10/0x10 [ 1292.306792][T26711] populate_vma_page_range+0x267/0x3f0 [ 1292.306815][T26711] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1292.306835][T26711] ? __pfx_find_vma_intersection+0x10/0x10 [ 1292.306855][T26711] ? do_mmap+0x93f/0x12f0 [ 1292.306877][T26711] __mm_populate+0x107/0x3a0 [ 1292.306899][T26711] ? __pfx___mm_populate+0x10/0x10 [ 1292.306921][T26711] ? up_write+0x290/0x4f0 [ 1292.306940][T26711] vm_mmap_pgoff+0x37f/0x470 [ 1292.306963][T26711] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1292.306987][T26711] ? __x64_sys_futex+0x34f/0x4d0 [ 1292.307002][T26711] ? __x64_sys_futex+0x358/0x4d0 [ 1292.307019][T26711] ksys_mmap_pgoff+0x7d/0x5b0 [ 1292.307042][T26711] __x64_sys_mmap+0x125/0x190 [ 1292.307063][T26711] do_syscall_64+0x106/0xf80 [ 1292.307082][T26711] ? clear_bhb_loop+0x40/0x90 [ 1292.307100][T26711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.307115][T26711] RIP: 0033:0x7f6a4b39bf79 [ 1292.307128][T26711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.307142][T26711] RSP: 002b:00007f6a4c207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1292.307157][T26711] RAX: ffffffffffffffda RBX: 00007f6a4b615fa0 RCX: 00007f6a4b39bf79 [ 1292.307166][T26711] RDX: 00000000000000e2 RSI: 0000000000040009 RDI: 0000000000000000 [ 1292.307175][T26711] RBP: 00007f6a4b4327e0 R08: 0000000000000007 R09: 0000000000028000 [ 1292.307184][T26711] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1292.307193][T26711] R13: 00007f6a4b616038 R14: 00007f6a4b615fa0 R15: 00007fffdbcc0328 [ 1292.307213][T26711] [ 1293.605813][T26718] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1293.895169][T26718] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1297.061929][T26760] [U] [ 1297.065805][T26760] [U] [ 1297.068493][T26760] [U] [ 1297.071342][T26760] [U] [ 1297.322691][T26760] [U] [ 1297.325397][T26760] [U] ý4óCͨ¶ÁôÀßì7U:†ö)´À0Ä6ÎÞ`î¸Ð$Hò¿(cÊ ©Ù)ï[Šý(A´x—`sÂó(Š‹‰­.É£g[ÐMâÖ¬Ií.ìâs½[ N¹UPÀ]"Ec`Tºsé­}YÞnàòccd=ƒµÆ¨ªŒ£aT3\œ†p°›r½rf¥scÔc-Q [ 1297.340726][T26760] [U] ¶ºùvOÅ”Ú>Æ$K¼‰é‡°IÑBˆÐϳ¼þJgŽŒ‡Ñ¢ [ 1297.346425][T26760] [U] t [ 1297.349168][T26760] [U] ã¹îY»JÏ9Ž›ÛÙQ·œ¤Ãî¹m*|ÜÙÉŠÐ{C«ƒ Åý¢ÁÛ3—¦ÌUv:Ü»>´ [ 1297.356784][T26760] [U] ¬œ.:&™ƒ¾\†£|°&øù½î*¢d`0ÈV´¿d%žç+„H’Lrgf |=’µ6Y$îPï¶j]r‹ï_Um¸ëCuýA~7èv£’i5ó Ä{ûö$®Ÿïr:´¡ª‰L‰ˆk ë ¤ŸÓ£\t~šÍÖU˜z—c¬ê`ü—3Ê~óqñ‚’wÿÆàòdzŒZú5£û\XûY¯¸èBt‡¯»Ú‰hëÑFìbúB¾»SýÈYµ¶r—2êJ×ýÆxX‚L½PÙ]Á0Ì]˜šÎhÿéù×kaŸÆùÔf0q:Îg‡äÆ*o…ƒ‰c1ãW4Æý¬Ç¶§ÊÐ:˹÷–3HðGœ’SKßÉ~‹etቓE„qæ8 xMb$ÅÏ6ôøìÂA@œÝ,§!ä9£ƒ®ªÍ›u¢ý9y#éÛ®[c0xæ>>J8+Zžzf­.4ÙŽ@yàYŸ[‘l0|$t™üôÂa>ò̇,ÙŠMaJ«‹ÀohqA¿Ü=‘Dð€–qÀ|2qåo ã^,¿u°§}¡sNáþÉþ [ 1297.396361][T26760] [U] Ø!ê·î!ÌG–,šùqˆQ(òbÆO:‰u¦D(VªÜï§kªz  ú°uÇvÿ|IÃYƒ»†x~%5ôP»0"|ÛM±€.çAª®“íµÆìþ‹MJª@iå [ 1297.407810][T26760] [U] N‘Í€X½º”T|—ë6΀Z€"åÉ!”®þE¨äÍGC º<­ûŽpæ [ 1297.414648][T26760] [U] £ï%Ô]èâ0G,ÏMØÍܾð¢iÈñ¯´ Õ×EÈÊèÐbêI»©Ç.ÿ#J9:rŒYF»õ™ø Ѓk›<•œ5/‹WóH ¿¤±ÈÒ.û¼à)ËoÔR,CŠÜ—X [ 1297.425386][T26760] [U] ís’eãð‡C˜©cöo_·BÖ;&«íï˜í÷ùSú,ÜŽ"×åïß2/GsÖ_ÃzáÖVL¾ü3êCWX½¸V©Ü*EZóWŠ¡ª÷ÞÎbö2Ö¡ô®ÊkÛ#{"Û5høÛ@ÿ)Àõñ ±šš¡…+2™‚ÉÏ+¥ÇõFÐ݃·Ippƒ)A4ô£ñ5nOØ6ÌÚèP–B…Jþ' /5¸ötOÿwk8bîïæþ¼]º6Ìöñ†‘Æ5Ò›ƒg>HU2Z&ýè—æìµü?dxy5ÓÌG [ 1297.448205][T26760] [U] WÝñ8ÏßFìi(AÆ´i=P'WÒ:YH ª [ 1297.858895][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1297.885846][T26770] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4125'. [ 1297.940747][T26770] mac80211_hwsim hwsim72 ›: renamed from wlan0 (while UP) [ 1298.785399][T26786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1298.874885][T26786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1299.398823][T26760] [U] M¯/ÎCrΩÄN‹–wpžŸ2fµ=áôSÉ4\“ø‘Zù/Pï%þ«u‰q”múÕñ\?þåêCÕëMN݉ÅaLìEˆ¦² ¸Ò„ó]Mç— [ 1299.543359][T26796] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1300.400020][T26808] netlink: 'syz.5.4133': attribute type 15 has an invalid length. [ 1300.463291][T26808] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1300.558266][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.565863][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.588725][T26808] netlink: 'syz.5.4133': attribute type 15 has an invalid length. [ 1300.666119][T26808] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1300.757717][T26808] netlink: 'syz.5.4133': attribute type 15 has an invalid length. [ 1300.852200][T26808] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1300.921392][T26808] netlink: 'syz.5.4133': attribute type 15 has an invalid length. [ 1300.991134][T26808] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1301.057155][T26808] netlink: 'syz.5.4133': attribute type 15 has an invalid length. [ 1301.150532][T26808] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1301.452479][T26822] FAULT_INJECTION: forcing a failure. [ 1301.452479][T26822] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.532714][T26822] CPU: 0 UID: 0 PID: 26822 Comm: syz.8.4136 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1301.532748][T26822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1301.532755][T26822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1301.532765][T26822] Call Trace: [ 1301.532771][T26822] [ 1301.532779][T26822] dump_stack_lvl+0x100/0x190 [ 1301.532806][T26822] should_fail_ex.cold+0x5/0xa [ 1301.532824][T26822] should_failslab+0xc2/0x120 [ 1301.532850][T26822] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1301.532868][T26822] ? do_getname+0x35/0x390 [ 1301.532895][T26822] do_getname+0x35/0x390 [ 1301.532919][T26822] do_sys_openat2+0xc5/0x1e0 [ 1301.532935][T26822] ? __pfx_do_sys_openat2+0x10/0x10 [ 1301.532966][T26822] __x64_sys_openat+0x12d/0x210 [ 1301.532981][T26822] ? __pfx___x64_sys_openat+0x10/0x10 [ 1301.532994][T26822] ? xfd_validate_state+0x129/0x190 [ 1301.533019][T26822] do_syscall_64+0x106/0xf80 [ 1301.533040][T26822] ? clear_bhb_loop+0x40/0x90 [ 1301.533059][T26822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.533075][T26822] RIP: 0033:0x7fd922d9bf79 [ 1301.533090][T26822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.533104][T26822] RSP: 002b:00007fd923c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1301.533119][T26822] RAX: ffffffffffffffda RBX: 00007fd923015fa0 RCX: 00007fd922d9bf79 [ 1301.533129][T26822] RDX: 0000000000000102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1301.533138][T26822] RBP: 00007fd922e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1301.533148][T26822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.533156][T26822] R13: 00007fd923016038 R14: 00007fd923015fa0 R15: 00007fff0ebd2708 [ 1301.533177][T26822] [ 1302.998713][T26846] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1303.435251][T26849] FAULT_INJECTION: forcing a failure. [ 1303.435251][T26849] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.559612][T26849] CPU: 0 UID: 0 PID: 26849 Comm: syz.5.4142 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1303.559661][T26849] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1303.559668][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1303.559677][T26849] Call Trace: [ 1303.559683][T26849] [ 1303.559689][T26849] dump_stack_lvl+0x100/0x190 [ 1303.559717][T26849] should_fail_ex.cold+0x5/0xa [ 1303.559734][T26849] ? tracing_log_err+0xb9/0x6d0 [ 1303.559753][T26849] should_failslab+0xc2/0x120 [ 1303.559773][T26849] __kmalloc_noprof+0xe0/0x850 [ 1303.559796][T26849] tracing_log_err+0xb9/0x6d0 [ 1303.559820][T26849] append_filter_err+0x399/0x620 [ 1303.559842][T26849] apply_subsystem_event_filter+0x73d/0x17d0 [ 1303.559868][T26849] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1303.559892][T26849] ? _copy_from_user+0x59/0xd0 [ 1303.559916][T26849] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1303.559934][T26849] subsystem_filter_write+0x95/0x120 [ 1303.559968][T26849] vfs_writev+0x5ea/0xe10 [ 1303.559992][T26849] ? __pfx_vfs_writev+0x10/0x10 [ 1303.560009][T26849] ? fdget_pos+0x2aa/0x380 [ 1303.560044][T26849] ? __fget_files+0x21f/0x3d0 [ 1303.560067][T26849] ? do_writev+0x13e/0x340 [ 1303.560083][T26849] do_writev+0x13e/0x340 [ 1303.560100][T26849] ? __pfx_do_writev+0x10/0x10 [ 1303.560123][T26849] do_syscall_64+0x106/0xf80 [ 1303.560144][T26849] ? clear_bhb_loop+0x40/0x90 [ 1303.560163][T26849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.560180][T26849] RIP: 0033:0x7fb25ab9bf79 [ 1303.560194][T26849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.560209][T26849] RSP: 002b:00007fb258df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1303.560224][T26849] RAX: ffffffffffffffda RBX: 00007fb25ae15fa0 RCX: 00007fb25ab9bf79 [ 1303.560234][T26849] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000006 [ 1303.560243][T26849] RBP: 00007fb25ac327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1303.560253][T26849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.560263][T26849] R13: 00007fb25ae16038 R14: 00007fb25ae15fa0 R15: 00007ffdf6d379c8 [ 1303.560284][T26849] [ 1304.543110][ T30] audit: type=1800 audit(2147485009.461:69): pid=26856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4145" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1305.134537][T26875] netlink: 330 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1305.290986][T26875] mac80211_hwsim hwsim128 ›: renamed from wlan0 (while UP) [ 1305.867118][T26886] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 1305.941807][T26885] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1306.448412][T26887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 1306.854094][T26885] PCI: Can't parse resource_alignment parameter: B¿Fj˜ [ 1307.049318][T26897] FAULT_INJECTION: forcing a failure. [ 1307.049318][T26897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.176763][T26897] CPU: 0 UID: 0 PID: 26897 Comm: syz.8.4153 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1307.176792][T26897] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1307.176798][T26897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1307.176807][T26897] Call Trace: [ 1307.176814][T26897] [ 1307.176821][T26897] dump_stack_lvl+0x100/0x190 [ 1307.176847][T26897] should_fail_ex.cold+0x5/0xa [ 1307.176865][T26897] _copy_from_user+0x2e/0xd0 [ 1307.176888][T26897] copy_strings.isra.0+0x3ac/0x9b0 [ 1307.176911][T26897] do_execveat_common.isra.0+0x3de/0x580 [ 1307.176932][T26897] __x64_sys_execve+0x93/0xd0 [ 1307.176950][T26897] do_syscall_64+0x106/0xf80 [ 1307.176971][T26897] ? clear_bhb_loop+0x40/0x90 [ 1307.176990][T26897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.177006][T26897] RIP: 0033:0x7fd922d9bf79 [ 1307.177019][T26897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.177034][T26897] RSP: 002b:00007fd923c9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1307.177050][T26897] RAX: ffffffffffffffda RBX: 00007fd923015fa0 RCX: 00007fd922d9bf79 [ 1307.177066][T26897] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000040 [ 1307.177077][T26897] RBP: 00007fd922e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.177087][T26897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.177096][T26897] R13: 00007fd923016038 R14: 00007fd923015fa0 R15: 00007fff0ebd2708 [ 1307.177116][T26897] [ 1308.974502][T26931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4157'. [ 1310.826041][T26974] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1310.902164][T26976] NFSD: Failed to start, no listeners configured. [ 1311.523481][T21049] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1311.561244][T21049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1311.569894][T21049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1311.586640][T21049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1311.594573][T21049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1313.439386][T26989] chnl_net:caif_netlink_parms(): no params data found [ 1313.681615][T21049] Bluetooth: hci4: command tx timeout [ 1313.993034][T26989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.075407][T26989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.129690][T26989] bridge_slave_0: entered allmulticast mode [ 1314.136760][T26989] bridge_slave_0: entered promiscuous mode [ 1314.240128][T26989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.247428][T26989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.358057][T26989] bridge_slave_1: entered allmulticast mode [ 1314.416012][T26989] bridge_slave_1: entered promiscuous mode [ 1314.648553][T26989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.714590][T26989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.966244][T26989] team0: Port device team_slave_0 added [ 1315.027240][T26989] team0: Port device team_slave_1 added [ 1315.751531][T21049] Bluetooth: hci4: command tx timeout [ 1317.005733][T27058] FAULT_INJECTION: forcing a failure. [ 1317.005733][T27058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1317.111558][T27058] CPU: 0 UID: 0 PID: 27058 Comm: syz.4.4176 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1317.111589][T27058] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1317.111596][T27058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1317.111606][T27058] Call Trace: [ 1317.111611][T27058] [ 1317.111619][T27058] dump_stack_lvl+0x100/0x190 [ 1317.111647][T27058] should_fail_ex.cold+0x5/0xa [ 1317.111666][T27058] get_futex_key+0x1d2/0x1620 [ 1317.111694][T27058] ? __pfx_get_futex_key+0x10/0x10 [ 1317.111720][T27058] ? trace_pid_list_is_set+0x11a/0x390 [ 1317.111739][T27058] ? trace_pid_list_is_set+0x22c/0x390 [ 1317.111762][T27058] futex_wait_setup+0x81/0x500 [ 1317.111787][T27058] __futex_wait+0x19f/0x300 [ 1317.111808][T27058] ? __pfx___futex_wait+0x10/0x10 [ 1317.111827][T27058] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.111848][T27058] ? lockdep_hardirqs_on+0x78/0x100 [ 1317.111874][T27058] ? __pfx_futex_wake_mark+0x10/0x10 [ 1317.111898][T27058] ? find_held_lock+0x2b/0x80 [ 1317.111919][T27058] ? futex_wake+0x456/0x530 [ 1317.111942][T27058] futex_wait+0xed/0x380 [ 1317.111962][T27058] ? __pfx_futex_wait+0x10/0x10 [ 1317.111986][T27058] ? __lock_acquire+0x4a5/0x2630 [ 1317.112002][T27058] ? __lock_acquire+0x4a5/0x2630 [ 1317.112046][T27058] do_futex+0x1ef/0x350 [ 1317.112065][T27058] ? __pfx_do_futex+0x10/0x10 [ 1317.112083][T27058] ? do_raw_spin_lock+0x128/0x260 [ 1317.112105][T27058] __x64_sys_futex+0x34f/0x4d0 [ 1317.112123][T27058] ? __local_bh_enable_ip+0x9e/0x120 [ 1317.112148][T27058] ? __pfx___x64_sys_futex+0x10/0x10 [ 1317.112164][T27058] ? __local_bh_enable_ip+0x9e/0x120 [ 1317.112188][T27058] ? __pfx_sctp_shutdown+0x10/0x10 [ 1317.112217][T27058] do_syscall_64+0x106/0xf80 [ 1317.112240][T27058] ? clear_bhb_loop+0x40/0x90 [ 1317.112260][T27058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.112276][T27058] RIP: 0033:0x7f6a4b39bf79 [ 1317.112291][T27058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.112306][T27058] RSP: 002b:00007f6a4c2070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1317.112323][T27058] RAX: ffffffffffffffda RBX: 00007f6a4b615fa8 RCX: 00007f6a4b39bf79 [ 1317.112341][T27058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a4b615fa8 [ 1317.112352][T27058] RBP: 00007f6a4b615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.112363][T27058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.112373][T27058] R13: 00007f6a4b616038 R14: 00007fffdbcc0240 R15: 00007fffdbcc0328 [ 1317.112396][T27058] [ 1317.904592][T21049] Bluetooth: hci4: command tx timeout [ 1319.104366][T27062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'. [ 1319.267074][T26989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.274041][T26989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.458279][T26989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.585876][T26989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.627721][T26989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.793323][T26989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.965306][T21049] Bluetooth: hci4: command tx timeout [ 1320.143581][T26989] hsr_slave_0: entered promiscuous mode [ 1320.174661][T27072] zswap: compressor not available [ 1320.190797][T27075] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1320.199214][T26989] hsr_slave_1: entered promiscuous mode [ 1320.231683][T26989] debugfs: 'hsr0' already exists in 'hsr' [ 1320.237884][T26989] Cannot create hsr debugfs directory [ 1321.836338][T26989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.154096][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4187'. [ 1322.359140][T26989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.672266][T26989] bridge0: port 3(netdevsim1) entered disabled state [ 1322.839158][T26989] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode [ 1322.890076][T26989] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode [ 1322.951227][T26989] bridge0: port 3(netdevsim1) entered disabled state [ 1323.113834][T26989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.456064][T26989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.111359][T26989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1324.200195][T26989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1324.341787][T26989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1324.482390][T26989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1324.941589][T27159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1324.985661][T26989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.062778][T27160] NFSD: Failed to start, no listeners configured. [ 1325.120454][T26989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.211996][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.219191][T18813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.329462][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.336743][T18813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.529082][T26989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1326.414710][T26989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.624043][T26989] veth0_vlan: entered promiscuous mode [ 1327.739422][T26989] veth1_vlan: entered promiscuous mode [ 1327.886921][T26989] veth0_macvtap: entered promiscuous mode [ 1327.954652][T26989] veth1_macvtap: entered promiscuous mode [ 1328.013170][T26989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.133042][T26989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.242208][T18813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.288548][T18813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.379522][T24081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.429043][T24081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.799127][T27200] FAULT_INJECTION: forcing a failure. [ 1328.799127][T27200] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.908349][T27200] CPU: 0 UID: 0 PID: 27200 Comm: syz.4.4201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1328.908377][T27200] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1328.908383][T27200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1328.908392][T27200] Call Trace: [ 1328.908397][T27200] [ 1328.908404][T27200] dump_stack_lvl+0x100/0x190 [ 1328.908429][T27200] should_fail_ex.cold+0x5/0xa [ 1328.908446][T27200] should_failslab+0xc2/0x120 [ 1328.908467][T27200] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1328.908485][T27200] ? taskstats_exit+0x650/0xbd0 [ 1328.908510][T27200] taskstats_exit+0x650/0xbd0 [ 1328.908536][T27200] ? __pfx_acct_update_integrals+0x10/0x10 [ 1328.908558][T27200] ? __pfx_taskstats_exit+0x10/0x10 [ 1328.908582][T27200] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1328.908604][T27200] ? exit_signals+0x395/0xaf0 [ 1328.908632][T27200] do_exit+0x5ca/0x2a30 [ 1328.908652][T27200] ? __pfx_do_exit+0x10/0x10 [ 1328.908671][T27200] ? do_raw_spin_lock+0x128/0x260 [ 1328.908692][T27200] ? find_held_lock+0x2b/0x80 [ 1328.908713][T27200] ? get_signal+0x7e0/0x21e0 [ 1328.908738][T27200] do_group_exit+0xd5/0x2a0 [ 1328.908756][T27200] get_signal+0x1ec7/0x21e0 [ 1328.908784][T27200] ? __pfx_get_signal+0x10/0x10 [ 1328.908806][T27200] ? do_futex+0x192/0x350 [ 1328.908823][T27200] arch_do_signal_or_restart+0x91/0x770 [ 1328.908842][T27200] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1328.908871][T27200] ? __pfx___x64_sys_futex+0x10/0x10 [ 1328.908890][T27200] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1328.908915][T27200] exit_to_user_mode_loop+0x86/0x4a0 [ 1328.908939][T27200] ? rcu_is_watching+0x12/0xc0 [ 1328.908960][T27200] do_syscall_64+0x668/0xf80 [ 1328.908981][T27200] ? clear_bhb_loop+0x40/0x90 [ 1328.909001][T27200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.909016][T27200] RIP: 0033:0x7f6a4b39bf79 [ 1328.909029][T27200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.909043][T27200] RSP: 002b:00007f6a4c2070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1328.909057][T27200] RAX: fffffffffffffe00 RBX: 00007f6a4b615fa8 RCX: 00007f6a4b39bf79 [ 1328.909067][T27200] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a4b615fa8 [ 1328.909075][T27200] RBP: 00007f6a4b615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.909084][T27200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.909093][T27200] R13: 00007f6a4b616038 R14: 00007fffdbcc0240 R15: 00007fffdbcc0328 [ 1328.909112][T27200] [ 1329.693449][T26262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.705810][T18695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.745581][T18695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.787234][T26262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.413338][T27251] FAULT_INJECTION: forcing a failure. [ 1333.413338][T27251] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.451478][T27253] FAULT_INJECTION: forcing a failure. [ 1333.451478][T27253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1333.588669][T27251] CPU: 0 UID: 0 PID: 27251 Comm: syz.4.4213 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1333.588704][T27251] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1333.588712][T27251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1333.588722][T27251] Call Trace: [ 1333.588728][T27251] [ 1333.588735][T27251] dump_stack_lvl+0x100/0x190 [ 1333.588764][T27251] should_fail_ex.cold+0x5/0xa [ 1333.588782][T27251] ? copy_splice_read+0x1a3/0xb90 [ 1333.588800][T27251] should_failslab+0xc2/0x120 [ 1333.588823][T27251] __kmalloc_noprof+0xe0/0x850 [ 1333.588844][T27251] copy_splice_read+0x1a3/0xb90 [ 1333.588861][T27251] ? __pfx_pipe_to_null+0x10/0x10 [ 1333.588882][T27251] ? __pfx_copy_splice_read+0x10/0x10 [ 1333.588903][T27251] ? __pfx_splice_from_pipe+0x10/0x10 [ 1333.588927][T27251] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1333.588946][T27251] ? __pfx_copy_splice_read+0x10/0x10 [ 1333.588965][T27251] do_splice_read+0x285/0x370 [ 1333.588986][T27251] splice_direct_to_actor+0x2a1/0xa30 [ 1333.589006][T27251] ? __pfx_direct_splice_actor+0x10/0x10 [ 1333.589029][T27251] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1333.589052][T27251] do_splice_direct+0x174/0x240 [ 1333.589072][T27251] ? __pfx_do_splice_direct+0x10/0x10 [ 1333.589089][T27251] ? common_file_perm+0x1ab/0x4f0 [ 1333.589111][T27251] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1333.589130][T27251] ? bpf_lsm_file_permission+0x9/0x10 [ 1333.589148][T27251] ? security_file_permission+0x76/0x210 [ 1333.589172][T27251] ? rw_verify_area+0xce/0x6d0 [ 1333.589190][T27251] do_sendfile+0xadc/0xe20 [ 1333.589211][T27251] ? __pfx_do_sendfile+0x10/0x10 [ 1333.589231][T27251] ? __x64_sys_futex+0x34f/0x4d0 [ 1333.589246][T27251] ? __x64_sys_futex+0x358/0x4d0 [ 1333.589263][T27251] __x64_sys_sendfile64+0x1d8/0x220 [ 1333.589284][T27251] ? xfd_validate_state+0x129/0x190 [ 1333.589302][T27251] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1333.589322][T27251] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1333.589341][T27251] ? syscall_user_dispatch+0x76/0x130 [ 1333.589361][T27251] do_syscall_64+0x106/0xf80 [ 1333.589382][T27251] ? clear_bhb_loop+0x40/0x90 [ 1333.589400][T27251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.589415][T27251] RIP: 0033:0x7f6a4b39bf79 [ 1333.589429][T27251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.589445][T27251] RSP: 002b:00007f6a4c1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1333.589464][T27251] RAX: ffffffffffffffda RBX: 00007f6a4b616090 RCX: 00007f6a4b39bf79 [ 1333.589475][T27251] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 1333.589484][T27251] RBP: 00007f6a4b4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.589497][T27251] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1333.589512][T27251] R13: 00007f6a4b616128 R14: 00007f6a4b616090 R15: 00007fffdbcc0328 [ 1333.589533][T27251] [ 1334.344005][T27253] CPU: 0 UID: 0 PID: 27253 Comm: syz.8.4212 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1334.344036][T27253] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1334.344043][T27253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1334.344052][T27253] Call Trace: [ 1334.344059][T27253] [ 1334.344065][T27253] dump_stack_lvl+0x100/0x190 [ 1334.344096][T27253] should_fail_ex.cold+0x5/0xa [ 1334.344114][T27253] get_futex_key+0x1d2/0x1620 [ 1334.344142][T27253] ? __pfx_get_futex_key+0x10/0x10 [ 1334.344166][T27253] ? find_held_lock+0x2b/0x80 [ 1334.344189][T27253] ? __get_unmapped_area+0x255/0x3e0 [ 1334.344214][T27253] futex_wake+0xea/0x530 [ 1334.344234][T27253] ? __pfx_futex_wake+0x10/0x10 [ 1334.344256][T27253] ? up_write+0x290/0x4f0 [ 1334.344276][T27253] do_futex+0x32b/0x350 [ 1334.344292][T27253] ? __pfx_do_futex+0x10/0x10 [ 1334.344313][T27253] __x64_sys_futex+0x34f/0x4d0 [ 1334.344331][T27253] ? __pfx___x64_sys_futex+0x10/0x10 [ 1334.344346][T27253] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1334.344378][T27253] do_syscall_64+0x106/0xf80 [ 1334.344399][T27253] ? clear_bhb_loop+0x40/0x90 [ 1334.344418][T27253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.344434][T27253] RIP: 0033:0x7fd922d9bf79 [ 1334.344448][T27253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.344462][T27253] RSP: 002b:00007fd923c9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1334.344478][T27253] RAX: ffffffffffffffda RBX: 00007fd923015fa8 RCX: 00007fd922d9bf79 [ 1334.344488][T27253] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd923015fac [ 1334.344497][T27253] RBP: 00007fd923015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1334.344506][T27253] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1334.344516][T27253] R13: 00007fd923016038 R14: 00007fff0ebd2620 R15: 00007fff0ebd2708 [ 1334.344535][T27253] [ 1339.892467][T27307] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1342.585566][T27337] futex_wake_op: syz.2.4230 tries to shift op by -2048; fix this program [ 1344.138814][T27354] bond0: option num_grat_arp: invalid value () [ 1344.291384][T27354] bond0: option num_grat_arp: allowed values 0 - 255 [ 1344.916061][T27366] zswap: compressor not available [ 1346.955203][T27406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1347.123412][T27413] openvswitch: HfR: Dropping previously announced user features [ 1347.446563][T27406] i: entered promiscuous mode [ 1348.299124][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4251'. [ 1348.357129][T27430] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1348.426664][T27430] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4252'. [ 1348.528372][T27431] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4252'. [ 1349.164539][T27419] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1349.398032][T27439] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1350.239771][T27446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 1352.432271][T27460] FAULT_INJECTION: forcing a failure. [ 1352.432271][T27460] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1352.536125][T27478] FAULT_INJECTION: forcing a failure. [ 1352.536125][T27478] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.637320][T27478] CPU: 0 UID: 0 PID: 27478 Comm: syz.8.4262 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1352.637350][T27478] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1352.637357][T27478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1352.637367][T27478] Call Trace: [ 1352.637373][T27478] [ 1352.637380][T27478] dump_stack_lvl+0x100/0x190 [ 1352.637407][T27478] should_fail_ex.cold+0x5/0xa [ 1352.637426][T27478] should_failslab+0xc2/0x120 [ 1352.637446][T27478] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1352.637464][T27478] ? alloc_inode+0x183/0x250 [ 1352.637478][T27478] ? alloc_fd+0x476/0x790 [ 1352.637500][T27478] alloc_inode+0x183/0x250 [ 1352.637515][T27478] alloc_anon_inode+0x2a/0x3e0 [ 1352.637540][T27478] anon_inode_make_secure_inode+0x2f/0x140 [ 1352.637566][T27478] __do_sys_memfd_secret+0xd7/0x3d0 [ 1352.637589][T27478] do_syscall_64+0x106/0xf80 [ 1352.637610][T27478] ? clear_bhb_loop+0x40/0x90 [ 1352.637630][T27478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.637646][T27478] RIP: 0033:0x7fd922d9bf79 [ 1352.637661][T27478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.637676][T27478] RSP: 002b:00007fd923c7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1352.637691][T27478] RAX: ffffffffffffffda RBX: 00007fd923016090 RCX: 00007fd922d9bf79 [ 1352.637701][T27478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1352.637710][T27478] RBP: 00007fd922e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.637719][T27478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.637727][T27478] R13: 00007fd923016128 R14: 00007fd923016090 R15: 00007fff0ebd2708 [ 1352.637747][T27478] [ 1353.108729][T27460] CPU: 0 UID: 0 PID: 27460 Comm: syz.4.4258 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1353.108756][T27460] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1353.108762][T27460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1353.108771][T27460] Call Trace: [ 1353.108777][T27460] [ 1353.108782][T27460] dump_stack_lvl+0x100/0x190 [ 1353.108807][T27460] should_fail_ex.cold+0x5/0xa [ 1353.108824][T27460] get_futex_key+0x1d2/0x1620 [ 1353.108850][T27460] ? __pfx_get_futex_key+0x10/0x10 [ 1353.108871][T27460] ? lock_acquire+0x17c/0x330 [ 1353.108893][T27460] futex_wake+0xea/0x530 [ 1353.108912][T27460] ? __pfx_futex_wake+0x10/0x10 [ 1353.108929][T27460] ? exit_mm_release+0x19/0x30 [ 1353.108949][T27460] do_futex+0x32b/0x350 [ 1353.108965][T27460] ? __pfx_do_futex+0x10/0x10 [ 1353.108978][T27460] ? __might_fault+0xc5/0x140 [ 1353.108999][T27460] mm_release+0x24a/0x2f0 [ 1353.109021][T27460] do_exit+0x675/0x2a30 [ 1353.109040][T27460] ? __pfx_do_exit+0x10/0x10 [ 1353.109056][T27460] ? do_raw_spin_lock+0x128/0x260 [ 1353.109074][T27460] ? find_held_lock+0x2b/0x80 [ 1353.109093][T27460] ? get_signal+0x7e0/0x21e0 [ 1353.109116][T27460] do_group_exit+0xd5/0x2a0 [ 1353.109134][T27460] get_signal+0x1ec7/0x21e0 [ 1353.109159][T27460] ? rcu_is_watching+0x12/0xc0 [ 1353.109179][T27460] ? __pfx_get_signal+0x10/0x10 [ 1353.109201][T27460] ? do_futex+0x192/0x350 [ 1353.109217][T27460] arch_do_signal_or_restart+0x91/0x770 [ 1353.109233][T27460] ? __sys_connect+0xe4/0x170 [ 1353.109250][T27460] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1353.109271][T27460] ? __pfx___x64_sys_futex+0x10/0x10 [ 1353.109290][T27460] exit_to_user_mode_loop+0x86/0x4a0 [ 1353.109306][T27460] ? rcu_is_watching+0x12/0xc0 [ 1353.109325][T27460] do_syscall_64+0x668/0xf80 [ 1353.109345][T27460] ? clear_bhb_loop+0x40/0x90 [ 1353.109362][T27460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.109377][T27460] RIP: 0033:0x7f6a4b39bf79 [ 1353.109390][T27460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.109403][T27460] RSP: 002b:00007f6a4c2070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1353.109418][T27460] RAX: fffffffffffffe00 RBX: 00007f6a4b615fa8 RCX: 00007f6a4b39bf79 [ 1353.109427][T27460] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a4b615fa8 [ 1353.109436][T27460] RBP: 00007f6a4b615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.109445][T27460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.109453][T27460] R13: 00007f6a4b616038 R14: 00007fffdbcc0240 R15: 00007fffdbcc0328 [ 1353.109472][T27460] [ 1354.780491][T27497] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1354.822112][T27497] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1357.655635][T27514] netlink: 206 bytes leftover after parsing attributes in process `syz.8.4268'. [ 1359.537938][T27529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1359.650166][T27529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1359.725034][T27529] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1359.731132][T27529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1359.895674][T27529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1359.901623][T27529] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1360.410534][T27529] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1360.594267][T27529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1360.663622][T27529] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1360.840714][T27529] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1361.606419][T18041] Bluetooth: hci1: command 0x0c1a tx timeout [ 1361.692127][T18041] Bluetooth: hci0: command 0x0c1a tx timeout [ 1361.708747][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.715062][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.765216][T18041] Bluetooth: hci2: command 0x0c1a tx timeout [ 1361.771309][T21049] Bluetooth: hci6: command 0x0c1a tx timeout [ 1361.924603][T18041] Bluetooth: hci3: command 0x0c1a tx timeout [ 1362.236995][T27558] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1362.264383][T18041] Bluetooth: hci6: unexpected event 0x32 length: 727 > 9 [ 1362.381400][T27558] FAULT_INJECTION: forcing a failure. [ 1362.381400][T27558] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.571082][T27563] netlink: 'syz.4.4281': attribute type 3 has an invalid length. [ 1362.646299][T18041] Bluetooth: hci4: command 0x0c1a tx timeout [ 1362.692900][T27558] CPU: 0 UID: 0 PID: 27558 Comm: syz.4.4281 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1362.692928][T27558] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1362.692935][T27558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1362.692945][T27558] Call Trace: [ 1362.692951][T27558] [ 1362.692957][T27558] dump_stack_lvl+0x100/0x190 [ 1362.692985][T27558] should_fail_ex.cold+0x5/0xa [ 1362.693003][T27558] should_failslab+0xc2/0x120 [ 1362.693025][T27558] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1362.693084][T27558] ? __d_alloc+0x34/0xa80 [ 1362.693110][T27558] __d_alloc+0x34/0xa80 [ 1362.693132][T27558] d_alloc_parallel+0x111/0x14e0 [ 1362.693150][T27558] ? stack_trace_save+0x8e/0xc0 [ 1362.693174][T27558] ? __lock_acquire+0x4a5/0x2630 [ 1362.693193][T27558] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1362.693212][T27558] ? lockdep_init_map_type+0x5c/0x250 [ 1362.693230][T27558] ? lockdep_init_map_type+0x5c/0x250 [ 1362.693250][T27558] __lookup_slow+0x193/0x460 [ 1362.693273][T27558] ? __pfx___lookup_slow+0x10/0x10 [ 1362.693306][T27558] ? __d_lookup+0x266/0x4a0 [ 1362.693326][T27558] lookup_slow+0x50/0x70 [ 1362.693348][T27558] link_path_walk+0x1377/0x1cc0 [ 1362.693372][T27558] path_openat+0x1be/0x31a0 [ 1362.693391][T27558] ? kasan_save_stack+0x3f/0x50 [ 1362.693408][T27558] ? kasan_save_stack+0x30/0x50 [ 1362.693424][T27558] ? kasan_save_track+0x14/0x30 [ 1362.693440][T27558] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1362.693462][T27558] ? __pfx_path_openat+0x10/0x10 [ 1362.693488][T27558] do_file_open+0x20e/0x430 [ 1362.693509][T27558] ? __pfx_do_file_open+0x10/0x10 [ 1362.693542][T27558] ? alloc_fd+0x476/0x790 [ 1362.693563][T27558] ? do_getname+0x191/0x390 [ 1362.693586][T27558] do_sys_openat2+0x10d/0x1e0 [ 1362.693601][T27558] ? __pfx_do_sys_openat2+0x10/0x10 [ 1362.693641][T27558] __x64_sys_openat+0x12d/0x210 [ 1362.693657][T27558] ? __pfx___x64_sys_openat+0x10/0x10 [ 1362.693675][T27558] ? xfd_validate_state+0x129/0x190 [ 1362.693701][T27558] do_syscall_64+0x106/0xf80 [ 1362.693722][T27558] ? clear_bhb_loop+0x40/0x90 [ 1362.693741][T27558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.693757][T27558] RIP: 0033:0x7f6a4b39bf79 [ 1362.693772][T27558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.693786][T27558] RSP: 002b:00007f6a4c207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1362.693802][T27558] RAX: ffffffffffffffda RBX: 00007f6a4b615fa0 RCX: 00007f6a4b39bf79 [ 1362.693812][T27558] RDX: 0000000000042a81 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 1362.693821][T27558] RBP: 00007f6a4b4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.693830][T27558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.693839][T27558] R13: 00007f6a4b616038 R14: 00007f6a4b615fa0 R15: 00007fffdbcc0328 [ 1362.693861][T27558] [ 1364.089580][T18041] Bluetooth: hci3: command 0x0c1a tx timeout [ 1364.717515][T18041] Bluetooth: hci4: command 0x0c1a tx timeout [ 1366.147549][T18041] Bluetooth: hci3: command 0x0c1a tx timeout [ 1366.782441][T21049] Bluetooth: hci4: command 0x0c1a tx timeout [ 1367.492207][T27617] blktrace: Concurrent blktraces are not allowed on loop2 [ 1367.554786][T27617] FAULT_INJECTION: forcing a failure. [ 1367.554786][T27617] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.669480][T27617] CPU: 0 UID: 0 PID: 27617 Comm: syz.8.4293 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1367.669510][T27617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1367.669517][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1367.669527][T27617] Call Trace: [ 1367.669532][T27617] [ 1367.669539][T27617] dump_stack_lvl+0x100/0x190 [ 1367.669566][T27617] should_fail_ex.cold+0x5/0xa [ 1367.669584][T27617] should_failslab+0xc2/0x120 [ 1367.669604][T27617] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1367.669621][T27617] ? __pmd_alloc+0xbf/0x9c0 [ 1367.669647][T27617] __pmd_alloc+0xbf/0x9c0 [ 1367.669669][T27617] __handle_mm_fault+0xa99/0x2b60 [ 1367.669688][T27617] ? mt_find+0x45e/0x8e0 [ 1367.669711][T27617] ? __pfx___handle_mm_fault+0x10/0x10 [ 1367.669725][T27617] ? __pfx_mt_find+0x10/0x10 [ 1367.669762][T27617] handle_mm_fault+0x36d/0xa20 [ 1367.669781][T27617] __get_user_pages+0xf9c/0x34d0 [ 1367.669810][T27617] ? __pfx___get_user_pages+0x10/0x10 [ 1367.669836][T27617] populate_vma_page_range+0x267/0x3f0 [ 1367.669860][T27617] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1367.669882][T27617] ? __pfx_find_vma_intersection+0x10/0x10 [ 1367.669903][T27617] ? do_mmap+0x93f/0x12f0 [ 1367.669925][T27617] __mm_populate+0x107/0x3a0 [ 1367.669948][T27617] ? __pfx___mm_populate+0x10/0x10 [ 1367.669971][T27617] ? up_write+0x290/0x4f0 [ 1367.669991][T27617] vm_mmap_pgoff+0x37f/0x470 [ 1367.670014][T27617] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1367.670040][T27617] ? __x64_sys_futex+0x34f/0x4d0 [ 1367.670055][T27617] ? __x64_sys_futex+0x358/0x4d0 [ 1367.670073][T27617] ksys_mmap_pgoff+0x7d/0x5b0 [ 1367.670093][T27617] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1367.670113][T27617] __x64_sys_mmap+0x125/0x190 [ 1367.670135][T27617] do_syscall_64+0x106/0xf80 [ 1367.670163][T27617] ? clear_bhb_loop+0x40/0x90 [ 1367.670183][T27617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.670199][T27617] RIP: 0033:0x7fd922d9bf79 [ 1367.670213][T27617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.670228][T27617] RSP: 002b:00007fd923c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1367.670244][T27617] RAX: ffffffffffffffda RBX: 00007fd923015fa0 RCX: 00007fd922d9bf79 [ 1367.670254][T27617] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000 [ 1367.670264][T27617] RBP: 00007fd922e327e0 R08: 8000000000000003 R09: 0000000000008000 [ 1367.670274][T27617] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1367.670283][T27617] R13: 00007fd923016038 R14: 00007fd923015fa0 R15: 00007fff0ebd2708 [ 1367.670304][T27617] [ 1368.660133][T27635] bridge0: port 3(gretap0) entered blocking state [ 1368.701753][T27635] bridge0: port 3(gretap0) entered disabled state [ 1368.708799][T27635] gretap0: entered allmulticast mode [ 1368.756357][T27635] gretap0: entered promiscuous mode [ 1368.801572][T27635] bridge0: port 3(gretap0) entered blocking state [ 1368.808147][T27635] bridge0: port 3(gretap0) entered forwarding state [ 1369.211250][T27645] FAULT_INJECTION: forcing a failure. [ 1369.211250][T27645] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.297135][T27645] CPU: 0 UID: 0 PID: 27645 Comm: syz.8.4299 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1369.297166][T27645] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1369.297172][T27645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1369.297182][T27645] Call Trace: [ 1369.297188][T27645] [ 1369.297194][T27645] dump_stack_lvl+0x100/0x190 [ 1369.297222][T27645] should_fail_ex.cold+0x5/0xa [ 1369.297240][T27645] should_failslab+0xc2/0x120 [ 1369.297262][T27645] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1369.297280][T27645] ? alloc_vmap_area+0x1851/0x2b80 [ 1369.297305][T27645] alloc_vmap_area+0x1851/0x2b80 [ 1369.297333][T27645] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1369.297358][T27645] __get_vm_area_node+0x1ca/0x330 [ 1369.297383][T27645] __vmalloc_node_range_noprof+0x213/0x1530 [ 1369.297406][T27645] ? kernel_clone+0xfc/0x930 [ 1369.297421][T27645] ? local_lock_release+0x99/0x130 [ 1369.297446][T27645] ? kernel_clone+0xfc/0x930 [ 1369.297461][T27645] ? find_held_lock+0x2b/0x80 [ 1369.297481][T27645] ? rcu_read_unlock+0x17/0x60 [ 1369.297501][T27645] ? rcu_read_unlock+0x17/0x60 [ 1369.297521][T27645] ? obj_cgroup_charge_account+0x46d/0x640 [ 1369.297542][T27645] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1369.297566][T27645] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 1369.297594][T27645] ? kernel_clone+0xfc/0x930 [ 1369.297608][T27645] __vmalloc_node_noprof+0xad/0xf0 [ 1369.297630][T27645] ? kernel_clone+0xfc/0x930 [ 1369.297646][T27645] copy_process+0x5ec/0x79b0 [ 1369.297660][T27645] ? futex_unqueue+0x133/0x2c0 [ 1369.297689][T27645] ? __pfx_copy_process+0x10/0x10 [ 1369.297710][T27645] ? _copy_from_user+0x59/0xd0 [ 1369.297736][T27645] kernel_clone+0xfc/0x930 [ 1369.297752][T27645] ? __pfx_kernel_clone+0x10/0x10 [ 1369.297772][T27645] ? __pfx_futex_wait+0x10/0x10 [ 1369.297795][T27645] __do_sys_clone3+0x214/0x290 [ 1369.297810][T27645] ? __pfx___do_sys_clone3+0x10/0x10 [ 1369.297850][T27645] do_syscall_64+0x106/0xf80 [ 1369.297871][T27645] ? clear_bhb_loop+0x40/0x90 [ 1369.297890][T27645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.297906][T27645] RIP: 0033:0x7fd922d9bf79 [ 1369.297920][T27645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.297935][T27645] RSP: 002b:00007fd923c5cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1369.297950][T27645] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd922d9bf79 [ 1369.297961][T27645] RDX: 00007fd923c5cf10 RSI: 0000000000000058 RDI: 00007fd923c5cf10 [ 1369.297977][T27645] RBP: 00007fd922e327e0 R08: 0000000000000000 R09: 0000000000000058 [ 1369.297987][T27645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.297997][T27645] R13: 00007fd923016218 R14: 00007fd923016180 R15: 00007fff0ebd2708 [ 1369.298017][T27645] [ 1371.183283][T27665] netlink: 1732 bytes leftover after parsing attributes in process `syz.2.4303'. [ 1371.218386][T21049] Bluetooth: hci6: unexpected event 0x32 length: 727 > 9 [ 1373.611138][T27686] netlink: 130 bytes leftover after parsing attributes in process `syz.8.4307'. [ 1373.983658][T18041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1373.998422][T18041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1374.007567][T18041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1374.016377][T18041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1374.026150][T18041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1375.359627][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4309'. [ 1376.093022][T18041] Bluetooth: hci5: command tx timeout [ 1376.947617][T27688] chnl_net:caif_netlink_parms(): no params data found [ 1377.477256][T27688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.494715][T27688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.555567][T27688] bridge_slave_0: entered allmulticast mode [ 1377.576949][T27688] bridge_slave_0: entered promiscuous mode [ 1377.637144][T27688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.644243][T27688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.736248][T27688] bridge_slave_1: entered allmulticast mode [ 1377.784383][T27688] bridge_slave_1: entered promiscuous mode [ 1378.164350][T18041] Bluetooth: hci5: command tx timeout [ 1379.745551][T27736] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1379.879156][T24079] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.930183][T27737] Invalid ELF header magic: != ELF [ 1380.232711][T18041] Bluetooth: hci5: command tx timeout [ 1380.374468][T27688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.462744][T27688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.051421][T24079] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.301312][T18041] Bluetooth: hci5: command tx timeout [ 1382.751957][T27728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1382.758047][T27728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1382.982132][T24079] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.035645][T27728] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1383.133460][T27728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1383.182292][T27688] team0: Port device team_slave_0 added [ 1383.315551][T27728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1383.411677][T27688] team0: Port device team_slave_1 added [ 1383.604184][T27728] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1383.693464][T27728] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1384.182043][T27728] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1384.213655][T24079] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.379417][T27688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.419634][T27688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.583643][T27688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.709999][T27688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.716962][T27688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.787791][T21049] Bluetooth: hci0: command 0x0c1a tx timeout [ 1384.793843][T21049] Bluetooth: hci1: command 0x0c1a tx timeout [ 1384.958495][T27688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.096194][T18041] Bluetooth: hci6: command 0x0c1a tx timeout [ 1385.166903][T18041] Bluetooth: hci2: command 0x0c1a tx timeout [ 1385.238317][T27688] hsr_slave_0: entered promiscuous mode [ 1385.286235][T27688] hsr_slave_1: entered promiscuous mode [ 1385.292494][T27688] debugfs: 'hsr0' already exists in 'hsr' [ 1385.327154][T18041] Bluetooth: hci3: command 0x0c1a tx timeout [ 1385.385298][T27688] Cannot create hsr debugfs directory [ 1385.643866][T18041] Bluetooth: hci5: command 0x0c1a tx timeout [ 1386.523620][T24079] bridge_slave_1: left allmulticast mode [ 1386.548715][T24079] bridge_slave_1: left promiscuous mode [ 1386.584977][T24079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.725363][T24079] bridge_slave_0: left allmulticast mode [ 1386.780346][T24079] bridge_slave_0: left promiscuous mode [ 1386.827373][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.153373][T27775] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4323'. [ 1387.714037][T18041] Bluetooth: hci5: command 0x0c1a tx timeout [ 1388.571627][T24079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.621061][T24079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.689946][T24079] bond0 (unregistering): Released all slaves [ 1388.768590][T27775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.064424][ T30] audit: type=1804 audit(4294967319.677:70): pid=27805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4326" name="/newroot/479/file0" dev="tmpfs" ino=2535 res=1 errno=0 [ 1389.784025][T18041] Bluetooth: hci5: command 0x0c1a tx timeout [ 1390.052267][T24079] hsr_slave_0: left promiscuous mode [ 1390.124704][T24079] hsr_slave_1: left promiscuous mode [ 1390.164121][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.214685][T24079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.263414][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.330076][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.444584][T24079] veth1_macvtap: left promiscuous mode [ 1390.501221][T24079] veth0_macvtap: left promiscuous mode [ 1390.541579][T24079] veth1_vlan: left promiscuous mode [ 1390.546883][T24079] veth0_vlan: left promiscuous mode [ 1391.658749][T24079] team0 (unregistering): Port device team_slave_1 removed [ 1391.721024][T24079] team0 (unregistering): Port device team_slave_0 removed [ 1392.925061][T27688] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1393.101736][T27688] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1393.157319][T27688] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1393.386330][T27688] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1393.871455][T27870] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 1393.994460][T27688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.195271][T27688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.399515][T18050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.406616][T18050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.689026][T18050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.696231][T18050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.032049][T27688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.348234][T27688] veth0_vlan: entered promiscuous mode [ 1398.452828][T27688] veth1_vlan: entered promiscuous mode [ 1398.563977][T27688] veth0_macvtap: entered promiscuous mode [ 1398.625996][T27928] perf: Dynamic interrupt throttling disabled, can hang your system! [ 1398.738701][T27688] veth1_macvtap: entered promiscuous mode [ 1398.879514][T27688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.259846][T27688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.426544][T18695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.483073][T18695] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.799672][T18695] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.859115][T18695] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.152821][T18695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.241322][T18695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.460618][T24081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.516490][T24081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.796029][T27955] random: crng reseeded on system resumption [ 1401.222614][T27959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4347'. [ 1403.468201][T27992] Invalid ELF header magic: != ELF [ 1406.007571][T28026] FAULT_INJECTION: forcing a failure. [ 1406.007571][T28026] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.229208][T28026] CPU: 0 UID: 0 PID: 28026 Comm: syz.9.4361 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1406.229234][T28026] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1406.229241][T28026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1406.229250][T28026] Call Trace: [ 1406.229255][T28026] [ 1406.229261][T28026] dump_stack_lvl+0x100/0x190 [ 1406.229287][T28026] should_fail_ex.cold+0x5/0xa [ 1406.229312][T28026] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1406.229328][T28026] should_failslab+0xc2/0x120 [ 1406.229348][T28026] __kmalloc_noprof+0xe0/0x850 [ 1406.229369][T28026] tomoyo_realpath_from_path+0xb6/0x690 [ 1406.229388][T28026] tomoyo_check_open_permission+0x2af/0x3c0 [ 1406.229410][T28026] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1406.229450][T28026] ? do_raw_spin_lock+0x128/0x260 [ 1406.229469][T28026] ? path_get+0x61/0x80 [ 1406.229492][T28026] tomoyo_file_open+0x6b/0x90 [ 1406.229509][T28026] security_file_open+0xb5/0x1e0 [ 1406.229532][T28026] do_dentry_open+0x5aa/0x1660 [ 1406.229552][T28026] ? security_inode_permission+0xbf/0x250 [ 1406.229575][T28026] vfs_open+0x82/0x3f0 [ 1406.229599][T28026] path_openat+0x208c/0x31a0 [ 1406.229624][T28026] ? __pfx_path_openat+0x10/0x10 [ 1406.229650][T28026] do_file_open+0x20e/0x430 [ 1406.229670][T28026] ? __pfx_do_file_open+0x10/0x10 [ 1406.229703][T28026] ? alloc_fd+0x476/0x790 [ 1406.229723][T28026] ? do_getname+0x191/0x390 [ 1406.229746][T28026] do_sys_openat2+0x10d/0x1e0 [ 1406.229760][T28026] ? __pfx_do_sys_openat2+0x10/0x10 [ 1406.229789][T28026] __x64_sys_openat+0x12d/0x210 [ 1406.229803][T28026] ? __pfx___x64_sys_openat+0x10/0x10 [ 1406.229816][T28026] ? xfd_validate_state+0x129/0x190 [ 1406.229840][T28026] do_syscall_64+0x106/0xf80 [ 1406.229861][T28026] ? clear_bhb_loop+0x40/0x90 [ 1406.229879][T28026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.229893][T28026] RIP: 0033:0x7fa42a59bf79 [ 1406.229906][T28026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.229924][T28026] RSP: 002b:00007fa42b47d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1406.229938][T28026] RAX: ffffffffffffffda RBX: 00007fa42a816270 RCX: 00007fa42a59bf79 [ 1406.229948][T28026] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1406.229957][T28026] RBP: 00007fa42a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.229965][T28026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.229974][T28026] R13: 00007fa42a816308 R14: 00007fa42a816270 R15: 00007ffec71440d8 [ 1406.229994][T28026] [ 1406.230027][T28026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1408.366595][T28026] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1409.149208][T28058] netlink: 'syz.8.4366': attribute type 1 has an invalid length. [ 1410.232348][T28074] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 1410.391715][T28074] net nr1: uevent: failed to send synthetic uevent: -22 [ 1411.454999][T28102] Unable to find swap-space signature [ 1411.604300][T28103] FAULT_INJECTION: forcing a failure. [ 1411.604300][T28103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.849264][T28103] CPU: 0 UID: 0 PID: 28103 Comm: syz.8.4373 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1411.849293][T28103] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1411.849299][T28103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1411.849310][T28103] Call Trace: [ 1411.849316][T28103] [ 1411.849322][T28103] dump_stack_lvl+0x100/0x190 [ 1411.849350][T28103] should_fail_ex.cold+0x5/0xa [ 1411.849368][T28103] _copy_from_user+0x2e/0xd0 [ 1411.849393][T28103] copy_msghdr_from_user+0x9f/0x4f0 [ 1411.849412][T28103] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1411.849433][T28103] ? try_to_wake_up+0x644/0x1a80 [ 1411.849459][T28103] ___sys_sendmsg+0x106/0x1e0 [ 1411.849477][T28103] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.849494][T28103] ? futex_private_hash_put+0x107/0x1c0 [ 1411.849538][T28103] __sys_sendmsg+0x170/0x220 [ 1411.849560][T28103] ? __pfx___sys_sendmsg+0x10/0x10 [ 1411.849579][T28103] ? __x64_sys_futex+0x34f/0x4d0 [ 1411.849606][T28103] do_syscall_64+0x106/0xf80 [ 1411.849627][T28103] ? clear_bhb_loop+0x40/0x90 [ 1411.849646][T28103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.849662][T28103] RIP: 0033:0x7fd922d9bf79 [ 1411.849677][T28103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.849692][T28103] RSP: 002b:00007fd923c9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.849707][T28103] RAX: ffffffffffffffda RBX: 00007fd923015fa0 RCX: 00007fd922d9bf79 [ 1411.849717][T28103] RDX: 0000000004048000 RSI: 0000200000000600 RDI: 0000000000000002 [ 1411.849727][T28103] RBP: 00007fd922e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.849736][T28103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1411.849745][T28103] R13: 00007fd923016038 R14: 00007fd923015fa0 R15: 00007fff0ebd2708 [ 1411.849765][T28103] [ 1412.648434][ T30] audit: type=1800 audit(4294967343.299:71): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4372" name="file0" dev="tmpfs" ino=2896 res=0 errno=0 [ 1416.097950][T28143] zswap: compressor not available [ 1416.729941][T28179] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1419.650784][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4391'. [ 1420.609986][T26262] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1369 with max blocks 6 with error 117 [ 1420.751829][T26262] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1420.751829][T26262] [ 1421.659678][ T30] audit: type=1326 audit(4294967352.446:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.8.4398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd922d9bf79 code=0x0 [ 1422.824840][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.831511][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.854827][T28299] Invalid ELF header magic: != ELF [ 1426.355747][T28286] delete_channel: no stack [ 1426.640533][T28305] zswap: compressor not available [ 1427.252774][T28323] bond0: no command found in slaves file - use +ifname or -ifname [ 1427.289355][T28315] netlink: 672 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1428.268481][T28337] bond0: no command found in slaves file - use +ifname or -ifname [ 1429.155421][T28300] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1429.308269][T18041] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 1432.107678][T28411] FAULT_INJECTION: forcing a failure. [ 1432.107678][T28411] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.224991][T28411] CPU: 0 UID: 0 PID: 28411 Comm: syz.4.4430 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1432.225028][T28411] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1432.225035][T28411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1432.225044][T28411] Call Trace: [ 1432.225051][T28411] [ 1432.225057][T28411] dump_stack_lvl+0x100/0x190 [ 1432.225085][T28411] should_fail_ex.cold+0x5/0xa [ 1432.225104][T28411] should_failslab+0xc2/0x120 [ 1432.225126][T28411] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1432.225140][T28411] ? madvise_collapse+0x1b5/0xbe0 [ 1432.225167][T28411] madvise_collapse+0x1b5/0xbe0 [ 1432.225194][T28411] ? lock_acquire+0x17c/0x330 [ 1432.225211][T28411] ? find_held_lock+0x2b/0x80 [ 1432.225231][T28411] ? finish_task_switch.isra.0+0x200/0xb80 [ 1432.225253][T28411] ? finish_task_switch.isra.0+0x200/0xb80 [ 1432.225277][T28411] ? rcu_is_watching+0x12/0xc0 [ 1432.225297][T28411] ? __pfx_madvise_collapse+0x10/0x10 [ 1432.225323][T28411] ? mtree_range_walk+0x6ce/0xcd0 [ 1432.225344][T28411] madvise_vma_behavior+0x172d/0x2ec0 [ 1432.225367][T28411] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1432.225389][T28411] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1432.225411][T28411] ? mas_prev+0x9b/0xf0 [ 1432.225433][T28411] ? __pfx_mas_prev+0x10/0x10 [ 1432.225459][T28411] ? find_vma_prev+0xd8/0x150 [ 1432.225478][T28411] ? futex_unqueue+0x133/0x2c0 [ 1432.225492][T28411] ? __pfx_find_vma_prev+0x10/0x10 [ 1432.225518][T28411] ? __futex_wait+0x256/0x300 [ 1432.225540][T28411] madvise_walk_vmas+0x2fe/0xa90 [ 1432.225565][T28411] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1432.225592][T28411] madvise_do_behavior+0x1ea/0x510 [ 1432.225616][T28411] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1432.225638][T28411] ? down_read+0x13b/0x460 [ 1432.225661][T28411] do_madvise+0x195/0x240 [ 1432.225682][T28411] ? __pfx_do_madvise+0x10/0x10 [ 1432.225703][T28411] ? do_futex+0x192/0x350 [ 1432.225730][T28411] ? xfd_validate_state+0x129/0x190 [ 1432.225753][T28411] __x64_sys_madvise+0xa9/0x110 [ 1432.225773][T28411] ? lockdep_hardirqs_on+0x78/0x100 [ 1432.225794][T28411] do_syscall_64+0x106/0xf80 [ 1432.225814][T28411] ? clear_bhb_loop+0x40/0x90 [ 1432.225832][T28411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.225848][T28411] RIP: 0033:0x7f6a4b39bf79 [ 1432.225862][T28411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.225876][T28411] RSP: 002b:00007f6a4c207028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1432.225892][T28411] RAX: ffffffffffffffda RBX: 00007f6a4b615fa0 RCX: 00007f6a4b39bf79 [ 1432.225903][T28411] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 1432.225913][T28411] RBP: 00007f6a4b4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1432.225923][T28411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.225932][T28411] R13: 00007f6a4b616038 R14: 00007f6a4b615fa0 R15: 00007fffdbcc0328 [ 1432.225953][T28411] [ 1433.172095][T28420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4431'. [ 1435.285908][T28427] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1437.315727][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4444'. [ 1438.145360][T28486] random: crng reseeded on system resumption [ 1438.656584][T28491] Invalid ELF header magic: != ELF [ 1441.610675][T28544] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1444.737700][T28596] random: crng reseeded on system resumption [ 1450.127403][T28674] netlink: 'syz.9.4484': attribute type 27 has an invalid length. [ 1450.256516][T28674] netlink: 334 bytes leftover after parsing attributes in process `syz.9.4484'. [ 1452.882886][T28700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1459.963490][T28782] FAULT_INJECTION: forcing a failure. [ 1459.963490][T28782] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.226185][T28782] CPU: 0 UID: 0 PID: 28782 Comm: syz.4.4506 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1460.226216][T28782] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1460.226222][T28782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1460.226232][T28782] Call Trace: [ 1460.226237][T28782] [ 1460.226244][T28782] dump_stack_lvl+0x100/0x190 [ 1460.226273][T28782] should_fail_ex.cold+0x5/0xa [ 1460.226300][T28782] ? snd_midi_event_new+0xa1/0x210 [ 1460.226324][T28782] should_failslab+0xc2/0x120 [ 1460.226346][T28782] __kmalloc_noprof+0xe0/0x850 [ 1460.226367][T28782] snd_midi_event_new+0xa1/0x210 [ 1460.226390][T28782] snd_virmidi_output_open+0x106/0x670 [ 1460.226408][T28782] open_substream+0x480/0x9e0 [ 1460.226428][T28782] rawmidi_open_priv+0x595/0x6f0 [ 1460.226450][T28782] snd_rawmidi_open+0x4c9/0xba0 [ 1460.226473][T28782] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1460.226494][T28782] ? __pfx_default_wake_function+0x10/0x10 [ 1460.226518][T28782] ? kobject_get_unless_zero+0x156/0x200 [ 1460.226544][T28782] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1460.226563][T28782] snd_open+0x22d/0x4c0 [ 1460.226579][T28782] ? __pfx_snd_open+0x10/0x10 [ 1460.226594][T28782] chrdev_open+0x234/0x6a0 [ 1460.226617][T28782] ? __pfx_apparmor_file_open+0x10/0x10 [ 1460.226636][T28782] ? __pfx_chrdev_open+0x10/0x10 [ 1460.226657][T28782] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1460.226683][T28782] do_dentry_open+0x6d8/0x1660 [ 1460.226701][T28782] ? __pfx_chrdev_open+0x10/0x10 [ 1460.226725][T28782] vfs_open+0x82/0x3f0 [ 1460.226750][T28782] path_openat+0x208c/0x31a0 [ 1460.226776][T28782] ? __pfx_path_openat+0x10/0x10 [ 1460.226802][T28782] do_file_open+0x20e/0x430 [ 1460.226823][T28782] ? __pfx_do_file_open+0x10/0x10 [ 1460.226856][T28782] ? alloc_fd+0x476/0x790 [ 1460.226876][T28782] ? do_getname+0x191/0x390 [ 1460.226900][T28782] do_sys_openat2+0x10d/0x1e0 [ 1460.226914][T28782] ? __pfx_do_sys_openat2+0x10/0x10 [ 1460.226938][T28782] ? __fget_files+0x21f/0x3d0 [ 1460.226960][T28782] __x64_sys_openat+0x12d/0x210 [ 1460.226975][T28782] ? __pfx___x64_sys_openat+0x10/0x10 [ 1460.226988][T28782] ? xfd_validate_state+0x129/0x190 [ 1460.227014][T28782] do_syscall_64+0x106/0xf80 [ 1460.227041][T28782] ? clear_bhb_loop+0x40/0x90 [ 1460.227060][T28782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.227076][T28782] RIP: 0033:0x7f6a4b39bf79 [ 1460.227091][T28782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.227106][T28782] RSP: 002b:00007f6a4c207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1460.227121][T28782] RAX: ffffffffffffffda RBX: 00007f6a4b615fa0 RCX: 00007f6a4b39bf79 [ 1460.227132][T28782] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1460.227142][T28782] RBP: 00007f6a4b4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.227152][T28782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.227161][T28782] R13: 00007f6a4b616038 R14: 00007f6a4b615fa0 R15: 00007fffdbcc0328 [ 1460.227182][T28782] [ 1461.512025][T28791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4510'. [ 1462.564667][T28808] futex_wake_op: syz.8.4514 tries to shift op by -2048; fix this program [ 1462.621858][T28808] futex_wake_op: syz.8.4514 tries to shift op by -2048; fix this program [ 1463.167042][T28800] bridge0: port 3(team0) entered blocking state [ 1463.354955][T28800] bridge0: port 3(team0) entered disabled state [ 1463.504436][T28823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4515'. [ 1463.608560][T28800] team0: entered allmulticast mode [ 1463.707403][T28800] team_slave_0: entered allmulticast mode [ 1463.854513][T28800] team_slave_1: entered allmulticast mode [ 1463.977176][T28800] team0: entered promiscuous mode [ 1463.982228][T28800] team_slave_0: entered promiscuous mode [ 1464.124578][T28800] team_slave_1: entered promiscuous mode [ 1464.175557][T28800] bridge0: port 3(team0) entered blocking state [ 1464.182187][T28800] bridge0: port 3(team0) entered forwarding state [ 1464.392485][T28822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4515'. [ 1464.916877][T28846] random: crng reseeded on system resumption [ 1465.203717][T28846] hub 1-0:1.0: USB hub found [ 1465.275186][T28846] hub 1-0:1.0: 1 port detected [ 1465.887978][T28360] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1465.896177][T28360] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1468.671435][T28885] netlink: 266 bytes leftover after parsing attributes in process `syz.4.4524'. [ 1468.750415][T28885] IPv6: NLM_F_CREATE should be specified when creating new route [ 1469.748747][T28912] misc userio: Invalid payload size [ 1470.477972][T28923] HfR: entered promiscuous mode [ 1470.582591][T28923] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4535'. [ 1470.922163][T28923] HfR: left promiscuous mode [ 1471.338181][T28939] FAULT_INJECTION: forcing a failure. [ 1471.338181][T28939] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.440825][T28939] CPU: 0 UID: 0 PID: 28939 Comm: syz.8.4537 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1471.440855][T28939] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1471.440862][T28939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1471.440871][T28939] Call Trace: [ 1471.440878][T28939] [ 1471.440886][T28939] dump_stack_lvl+0x100/0x190 [ 1471.440913][T28939] should_fail_ex.cold+0x5/0xa [ 1471.440940][T28939] should_failslab+0xc2/0x120 [ 1471.440962][T28939] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1471.440979][T28939] ? __anon_vma_prepare+0xae/0x5e0 [ 1471.441000][T28939] __anon_vma_prepare+0xae/0x5e0 [ 1471.441014][T28939] ? do_raw_spin_lock+0x128/0x260 [ 1471.441035][T28939] __vmf_anon_prepare+0x11f/0x250 [ 1471.441057][T28939] do_huge_pmd_anonymous_page+0x15c/0x1a60 [ 1471.441078][T28939] ? __pmd_alloc+0x6aa/0x9c0 [ 1471.441101][T28939] __handle_mm_fault+0x1e9e/0x2b60 [ 1471.441120][T28939] ? mt_find+0x45e/0x8e0 [ 1471.441143][T28939] ? __pfx___handle_mm_fault+0x10/0x10 [ 1471.441157][T28939] ? __pfx_mt_find+0x10/0x10 [ 1471.441194][T28939] handle_mm_fault+0x36d/0xa20 [ 1471.441214][T28939] __get_user_pages+0xf9c/0x34d0 [ 1471.441244][T28939] ? __pfx___get_user_pages+0x10/0x10 [ 1471.441271][T28939] populate_vma_page_range+0x267/0x3f0 [ 1471.441294][T28939] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1471.441316][T28939] ? __pfx_find_vma_intersection+0x10/0x10 [ 1471.441337][T28939] ? do_mmap+0x93f/0x12f0 [ 1471.441359][T28939] __mm_populate+0x107/0x3a0 [ 1471.441382][T28939] ? __pfx___mm_populate+0x10/0x10 [ 1471.441405][T28939] ? up_write+0x290/0x4f0 [ 1471.441425][T28939] vm_mmap_pgoff+0x37f/0x470 [ 1471.441449][T28939] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1471.441474][T28939] ? __x64_sys_futex+0x34f/0x4d0 [ 1471.441489][T28939] ? __x64_sys_futex+0x358/0x4d0 [ 1471.441507][T28939] ksys_mmap_pgoff+0x7d/0x5b0 [ 1471.441530][T28939] __x64_sys_mmap+0x125/0x190 [ 1471.441559][T28939] do_syscall_64+0x106/0xf80 [ 1471.441580][T28939] ? clear_bhb_loop+0x40/0x90 [ 1471.441600][T28939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.441619][T28939] RIP: 0033:0x7fd922d9bf79 [ 1471.441634][T28939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.441649][T28939] RSP: 002b:00007fd923c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1471.441665][T28939] RAX: ffffffffffffffda RBX: 00007fd923015fa0 RCX: 00007fd922d9bf79 [ 1471.441676][T28939] RDX: 00000000000000db RSI: 0000000000400008 RDI: 0000000000000000 [ 1471.441685][T28939] RBP: 00007fd922e327e0 R08: ffffffffffffffff R09: 0000000000008000 [ 1471.441695][T28939] R10: 0000000000809b72 R11: 0000000000000246 R12: 0000000000000000 [ 1471.441705][T28939] R13: 00007fd923016038 R14: 00007fd923015fa0 R15: 00007fff0ebd2708 [ 1471.441726][T28939] [ 1472.395706][ T30] audit: type=1806 audit(5252044482.417:73): xattr="." res=0 [ 1472.492938][T28943] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1474.045880][T18050] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1333 with max blocks 1 with error 117 [ 1474.262164][T18050] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1474.262164][T18050] [ 1476.278963][T29004] zswap: compressor û not available [ 1476.335696][T29008] Setting dangerous option i915.mitigations - tainting kernel [ 1476.403480][T29009] Setting dangerous option i915.mitigations - tainting kernel [ 1476.482365][T29009] Bad "i915.mitigations=fusebl", 'fusebl' is unknown [ 1477.735068][T29031] FAULT_INJECTION: forcing a failure. [ 1477.735068][T29031] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.824883][T29031] CPU: 0 UID: 0 PID: 29031 Comm: syz.8.4548 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1477.824912][T29031] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1477.824918][T29031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1477.824928][T29031] Call Trace: [ 1477.824935][T29031] [ 1477.824942][T29031] dump_stack_lvl+0x100/0x190 [ 1477.824968][T29031] should_fail_ex.cold+0x5/0xa [ 1477.824987][T29031] should_failslab+0xc2/0x120 [ 1477.825007][T29031] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1477.825023][T29031] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1477.825052][T29031] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1477.825078][T29031] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 1477.825105][T29031] vidtv_mux_init+0x7b1/0xbf0 [ 1477.825130][T29031] vidtv_start_feed+0x33e/0x4c0 [ 1477.825148][T29031] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1477.825166][T29031] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1477.825188][T29031] ? mark_held_locks+0x40/0x70 [ 1477.825208][T29031] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1477.825225][T29031] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1477.825247][T29031] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1477.825266][T29031] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1477.825291][T29031] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1477.825310][T29031] dvb_demux_do_ioctl+0xe64/0x1200 [ 1477.825333][T29031] dvb_usercopy+0x167/0x340 [ 1477.825354][T29031] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1477.825373][T29031] ? __pfx_dvb_usercopy+0x10/0x10 [ 1477.825397][T29031] ? __fget_files+0x21f/0x3d0 [ 1477.825421][T29031] dvb_demux_ioctl+0x29/0x40 [ 1477.825435][T29031] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1477.825450][T29031] __x64_sys_ioctl+0x18e/0x210 [ 1477.825468][T29031] do_syscall_64+0x106/0xf80 [ 1477.825489][T29031] ? clear_bhb_loop+0x40/0x90 [ 1477.825508][T29031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.825525][T29031] RIP: 0033:0x7fd922d9bf79 [ 1477.825538][T29031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.825554][T29031] RSP: 002b:00007fd923c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.825569][T29031] RAX: ffffffffffffffda RBX: 00007fd923015fa0 RCX: 00007fd922d9bf79 [ 1477.825579][T29031] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 1477.825591][T29031] RBP: 00007fd922e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1477.825600][T29031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.825609][T29031] R13: 00007fd923016038 R14: 00007fd923015fa0 R15: 00007fff0ebd2708 [ 1477.825631][T29031] [ 1478.554311][ T30] audit: type=1326 audit(5252044488.629:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.2.4549" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03f2d9bf79 code=0x0 [ 1480.108483][T29058] FAULT_INJECTION: forcing a failure. [ 1480.108483][T29058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1480.196979][T29062] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1480.241774][T29058] CPU: 0 UID: 0 PID: 29058 Comm: syz.8.4554 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1480.241802][T29058] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1480.241809][T29058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1480.241818][T29058] Call Trace: [ 1480.241824][T29058] [ 1480.241830][T29058] dump_stack_lvl+0x100/0x190 [ 1480.241856][T29058] should_fail_ex.cold+0x5/0xa [ 1480.241874][T29058] get_futex_key+0x1d2/0x1620 [ 1480.241902][T29058] ? __pfx_get_futex_key+0x10/0x10 [ 1480.241932][T29058] futex_wait_setup+0x81/0x500 [ 1480.241957][T29058] __futex_wait+0x19f/0x300 [ 1480.241978][T29058] ? __pfx___futex_wait+0x10/0x10 [ 1480.241995][T29058] ? __pfx_pollwake+0x10/0x10 [ 1480.242014][T29058] ? __pfx_futex_wake_mark+0x10/0x10 [ 1480.242035][T29058] ? futex_hash+0x2c5/0x380 [ 1480.242064][T29058] futex_wait+0xed/0x380 [ 1480.242091][T29058] ? __pfx_futex_wait+0x10/0x10 [ 1480.242121][T29058] do_futex+0x1ef/0x350 [ 1480.242137][T29058] ? __pfx_do_futex+0x10/0x10 [ 1480.242158][T29058] __x64_sys_futex+0x34f/0x4d0 [ 1480.242177][T29058] ? __pfx___x64_sys_futex+0x10/0x10 [ 1480.242192][T29058] ? xfd_validate_state+0x129/0x190 [ 1480.242218][T29058] do_syscall_64+0x106/0xf80 [ 1480.242239][T29058] ? clear_bhb_loop+0x40/0x90 [ 1480.242257][T29058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.242273][T29058] RIP: 0033:0x7fd922d9bf79 [ 1480.242287][T29058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.242301][T29058] RSP: 002b:00007fd923c9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1480.242317][T29058] RAX: ffffffffffffffda RBX: 00007fd923015fa8 RCX: 00007fd922d9bf79 [ 1480.242327][T29058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd923015fa8 [ 1480.242336][T29058] RBP: 00007fd923015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.242345][T29058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.242354][T29058] R13: 00007fd923016038 R14: 00007fff0ebd2620 R15: 00007fff0ebd2708 [ 1480.242373][T29058] [ 1481.420637][ T30] audit: type=1804 audit(5252044491.514:75): pid=29078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4560" name="/newroot/539/file0" dev="tmpfs" ino=2850 res=1 errno=0 [ 1483.318207][T29112] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1483.686366][T21049] Bluetooth: hci2: unexpected event 0x3e length: 722 > 260 [ 1483.686395][T21049] Bluetooth: hci2: unexpected subevent 0x03 length: 721 > 9 [ 1483.952906][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.962602][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.034825][T29123] zswap: compressor not available [ 1484.564859][T29139] netlink: 222 bytes leftover after parsing attributes in process `syz.9.4570'. [ 1487.776745][T28360] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1487.801707][T28360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1487.816747][T28360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1487.832421][T28360] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1487.841071][T28360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1489.502625][T29177] chnl_net:caif_netlink_parms(): no params data found [ 1489.911236][T28360] Bluetooth: hci4: command tx timeout [ 1490.231106][T29177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.279397][T29177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.329416][T29177] bridge_slave_0: entered allmulticast mode [ 1490.378863][T29177] bridge_slave_0: entered promiscuous mode [ 1490.431954][T29177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.469342][T29177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.508460][T29177] bridge_slave_1: entered allmulticast mode [ 1490.542644][T29177] bridge_slave_1: entered promiscuous mode [ 1490.752047][T29177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.837727][T29177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.103129][T29177] team0: Port device team_slave_0 added [ 1491.176990][T29177] team0: Port device team_slave_1 added [ 1491.354657][T29177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.362107][T29177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.474323][T29220] Invalid ELF header magic: != ELF [ 1491.592468][T29177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.666455][T29177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.716535][T29177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.898686][T29177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.972890][T28360] Bluetooth: hci4: command tx timeout [ 1492.228594][T29177] hsr_slave_0: entered promiscuous mode [ 1492.323943][T29177] hsr_slave_1: entered promiscuous mode [ 1492.373311][T29177] debugfs: 'hsr0' already exists in 'hsr' [ 1492.408376][T29177] Cannot create hsr debugfs directory [ 1493.272116][T29177] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.896648][T29177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.039689][T28360] Bluetooth: hci4: command tx timeout [ 1494.608008][T29247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4592'. [ 1494.741143][T29177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.107868][T29251] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1495.251154][T29247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.326318][T29247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.504974][T29247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.573472][T29247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.974447][T29177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.111586][T28360] Bluetooth: hci4: command tx timeout [ 1496.302274][T29177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.020105][T29258] zswap: compressor not available [ 1501.890645][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4603'. [ 1508.300456][T29371] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4611'. [ 1508.327217][T29372] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1508.361092][T29371] macsec0: entered promiscuous mode [ 1508.399558][T29371] macsec0: entered allmulticast mode [ 1508.454795][T29371] veth1_macvtap: entered allmulticast mode [ 1509.696449][T21049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1509.715039][T21049] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1509.723911][T21049] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1509.733944][T21049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1509.744056][T21049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1510.477055][T29395] blktrace: Concurrent blktraces are not allowed on loop2 [ 1510.585538][T29383] chnl_net:caif_netlink_parms(): no params data found [ 1510.994805][T29383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.001938][T29383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.002136][T29383] bridge_slave_0: entered allmulticast mode [ 1511.019466][T29383] bridge_slave_0: entered promiscuous mode [ 1511.041326][T29383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.041390][T29383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.041568][T29383] bridge_slave_1: entered allmulticast mode [ 1511.042666][T29383] bridge_slave_1: entered promiscuous mode [ 1511.299417][T29383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.335684][T29383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.452217][T21049] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1511.461105][T29383] team0: Port device team_slave_0 added [ 1511.495194][T29383] team0: Port device team_slave_1 added [ 1511.578248][T29383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.578264][T29383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.578283][T29383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.639137][T29383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.639155][T29383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.639175][T29383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.795664][T29383] hsr_slave_0: entered promiscuous mode [ 1511.796311][T29383] hsr_slave_1: entered promiscuous mode [ 1511.796739][T29383] debugfs: 'hsr0' already exists in 'hsr' [ 1511.796755][T29383] Cannot create hsr debugfs directory [ 1511.872882][T21049] Bluetooth: hci6: command tx timeout [ 1513.788033][T29443] netlink: 'syz.9.4628': attribute type 4 has an invalid length. [ 1513.853489][T29443] netlink: 'syz.9.4628': attribute type 4 has an invalid length. [ 1513.940123][T21049] Bluetooth: hci6: command tx timeout [ 1514.512707][T29456] zswap: compressor not available [ 1515.460639][T29466] random: crng reseeded on system resumption [ 1516.009767][T21049] Bluetooth: hci6: command tx timeout [ 1517.526903][T29490] sd 0:0:1:0: PR command failed: 1026 [ 1517.538969][T29490] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1517.706567][T29490] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1518.080862][T21049] Bluetooth: hci6: command tx timeout [ 1518.599437][T29509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.4642: iget: checksum invalid [ 1518.623490][T29512] netlink: 330 bytes leftover after parsing attributes in process `syz.9.4643'. [ 1518.660630][T29509] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1518.718218][T29509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.4642: iget: checksum invalid [ 1518.763565][T29509] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1518.824058][T29509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.4642: iget: checksum invalid [ 1518.871742][T29509] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1518.913460][T29509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.4642: iget: checksum invalid [ 1518.968350][T29509] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1519.017124][T29509] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1519.067686][T29509] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1524.556478][T29590] FAULT_INJECTION: forcing a failure. [ 1524.556478][T29590] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1524.582570][T29594] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1524.737394][T29590] CPU: 0 UID: 0 PID: 29590 Comm: syz.8.4660 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1524.737424][T29590] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1524.737431][T29590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1524.737441][T29590] Call Trace: [ 1524.737447][T29590] [ 1524.737453][T29590] dump_stack_lvl+0x100/0x190 [ 1524.737480][T29590] should_fail_ex.cold+0x5/0xa [ 1524.737499][T29590] get_futex_key+0x1d2/0x1620 [ 1524.737525][T29590] ? __pfx_get_futex_key+0x10/0x10 [ 1524.737548][T29590] ? do_mremap+0xa96/0x2130 [ 1524.737571][T29590] futex_wake+0xea/0x530 [ 1524.737592][T29590] ? __pfx_futex_wake+0x10/0x10 [ 1524.737613][T29590] ? ksys_write+0x190/0x250 [ 1524.737635][T29590] do_futex+0x32b/0x350 [ 1524.737651][T29590] ? __pfx_do_futex+0x10/0x10 [ 1524.737665][T29590] ? __pfx___do_sys_mremap+0x10/0x10 [ 1524.737686][T29590] __x64_sys_futex+0x34f/0x4d0 [ 1524.737704][T29590] ? __pfx___x64_sys_futex+0x10/0x10 [ 1524.737719][T29590] ? xfd_validate_state+0x129/0x190 [ 1524.737750][T29590] do_syscall_64+0x106/0xf80 [ 1524.737771][T29590] ? clear_bhb_loop+0x40/0x90 [ 1524.737789][T29590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.737804][T29590] RIP: 0033:0x7fd922d9bf79 [ 1524.737818][T29590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.737833][T29590] RSP: 002b:00007fd923c3c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1524.737848][T29590] RAX: ffffffffffffffda RBX: 00007fd923016278 RCX: 00007fd922d9bf79 [ 1524.737857][T29590] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd92301627c [ 1524.737867][T29590] RBP: 00007fd923016270 R08: 0000000000000000 R09: 0000000000000000 [ 1524.737876][T29590] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.737885][T29590] R13: 00007fd923016308 R14: 00007fff0ebd2620 R15: 00007fff0ebd2708 [ 1524.737906][T29590] [ 1534.653438][T29706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1537.534382][T29731] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4692'. [ 1537.595292][T29731] veth1_macvtap: left promiscuous mode [ 1540.217852][T29759] random: crng reseeded on system resumption [ 1540.529206][T29764] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1541.012724][T29770] can: request_module (can-proto-0) failed. [ 1541.572982][T29778] Invalid ELF header magic: != ELF [ 1542.460554][T29784] netlink: 'syz.8.4703': attribute type 1 has an invalid length. [ 1543.761520][T29809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1543.813573][T29809] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1543.911547][T29809] vhci_hcd vhci_hcd.2: default hub control req: ff8f v0009 i0000 l3 [ 1544.107990][T29812] FAULT_INJECTION: forcing a failure. [ 1544.107990][T29812] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.329170][T29812] CPU: 0 UID: 0 PID: 29812 Comm: syz.8.4707 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1544.329198][T29812] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1544.329207][T29812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1544.329216][T29812] Call Trace: [ 1544.329221][T29812] [ 1544.329227][T29812] dump_stack_lvl+0x100/0x190 [ 1544.329252][T29812] should_fail_ex.cold+0x5/0xa [ 1544.329268][T29812] ? sk_prot_alloc+0x10b/0x2a0 [ 1544.329281][T29812] should_failslab+0xc2/0x120 [ 1544.329301][T29812] __kmalloc_noprof+0xe0/0x850 [ 1544.329322][T29812] sk_prot_alloc+0x10b/0x2a0 [ 1544.329337][T29812] sk_alloc+0x36/0xe80 [ 1544.329357][T29812] __netlink_create+0x5e/0x2c0 [ 1544.329374][T29812] ? __wake_up+0x3f/0x60 [ 1544.329397][T29812] netlink_create+0x293/0x610 [ 1544.329415][T29812] ? __pfx_genl_bind+0x10/0x10 [ 1544.329428][T29812] ? __pfx_genl_unbind+0x10/0x10 [ 1544.329448][T29812] ? __pfx_genl_release+0x10/0x10 [ 1544.329464][T29812] __sock_create+0x339/0x860 [ 1544.329483][T29812] __sys_socket+0x14d/0x260 [ 1544.329498][T29812] ? exc_page_fault+0x6f/0xd0 [ 1544.329517][T29812] ? __pfx___sys_socket+0x10/0x10 [ 1544.329534][T29812] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1544.329555][T29812] __x64_sys_socket+0x72/0xb0 [ 1544.329570][T29812] ? lockdep_hardirqs_on+0x78/0x100 [ 1544.329589][T29812] do_syscall_64+0x106/0xf80 [ 1544.329608][T29812] ? clear_bhb_loop+0x40/0x90 [ 1544.329626][T29812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.329640][T29812] RIP: 0033:0x7fd922d9d807 [ 1544.329653][T29812] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.329666][T29812] RSP: 002b:00007fd923c7cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1544.329681][T29812] RAX: ffffffffffffffda RBX: 00007fd923016090 RCX: 00007fd922d9d807 [ 1544.329690][T29812] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1544.329699][T29812] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1544.329707][T29812] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 1544.329716][T29812] R13: 00007fd923016128 R14: 00007fd923016090 R15: 00007fff0ebd2708 [ 1544.329735][T29812] [ 1545.134414][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.140716][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.398573][T28360] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1547.416678][T28360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1547.425727][T28360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1547.435602][T28360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1547.445421][T28360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1548.116555][T29835] chnl_net:caif_netlink_parms(): no params data found [ 1548.566724][T29842] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1548.744168][T29835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.804965][T29835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.812197][T29835] bridge_slave_0: entered allmulticast mode [ 1548.868967][T29835] bridge_slave_0: entered promiscuous mode [ 1548.915908][T29835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.968647][T29835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.021682][T29835] bridge_slave_1: entered allmulticast mode [ 1549.073598][T29835] bridge_slave_1: entered promiscuous mode [ 1549.349617][T29835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.462899][T29835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.511425][T28360] Bluetooth: hci7: command tx timeout [ 1549.616155][T29856] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1549.659262][T29856] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1549.706104][T29835] team0: Port device team_slave_0 added [ 1549.742677][T29835] team0: Port device team_slave_1 added [ 1549.904089][T29835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.948860][T29835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.085245][T29835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.169134][T29835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.182457][T29863] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1550.209165][T29835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.248336][T29866] usb usb25: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1550.337078][T29835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.563804][T29835] hsr_slave_0: entered promiscuous mode [ 1550.601849][T29835] hsr_slave_1: entered promiscuous mode [ 1550.623312][T29835] debugfs: 'hsr0' already exists in 'hsr' [ 1550.654048][T29835] Cannot create hsr debugfs directory [ 1551.585285][T28360] Bluetooth: hci7: command tx timeout [ 1553.351908][T29901] netlink: 62 bytes leftover after parsing attributes in process `syz.9.4723'. [ 1553.650147][T28360] Bluetooth: hci7: command tx timeout [ 1555.719105][T28360] Bluetooth: hci7: command tx timeout [ 1558.402466][T29940] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1558.446879][T29940] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1561.249571][T29970] netlink: 'syz.9.4736': attribute type 1 has an invalid length. [ 1562.010374][T29978] futex_wake_op: syz.9.4738 tries to shift op by -2048; fix this program [ 1562.099076][T29978] futex_wake_op: syz.9.4738 tries to shift op by -2048; fix this program [ 1562.190225][T29979] 0x000000000001-0x000000020000 : "" [ 1562.274404][T29979] ftl_cs: FTL header corrupt! [ 1564.208100][T30000] netlink: 206 bytes leftover after parsing attributes in process `syz.9.4742'. [ 1565.163148][T29296] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1364 with max blocks 11 with error 117 [ 1565.239589][T29296] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1565.239589][T29296] [ 1565.775285][T30013] bond0: invalid ARP target specified [ 1566.467321][T30032] netlink: 'syz.9.4748': attribute type 7 has an invalid length. [ 1566.587951][T30032] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4748'. [ 1567.730375][T27938] ================================================================== [ 1567.730392][T27938] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1567.730415][T27938] Write of size 8 at addr ffffc900037c80a0 by task kworker/0:3/27938 [ 1567.730432][T27938] [ 1567.730442][T27938] CPU: 0 UID: 0 PID: 27938 Comm: kworker/0:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1567.730464][T27938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1567.730469][T27938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1567.730480][T27938] Workqueue: events_power_efficient fb_flashcursor [ 1567.730501][T27938] Call Trace: [ 1567.730507][T27938] [ 1567.730513][T27938] dump_stack_lvl+0x100/0x190 [ 1567.730540][T27938] print_report+0x156/0x4c9 [ 1567.730560][T27938] ? rhashtable_free_and_destroy+0x16c/0x9b0 [ 1567.730585][T27938] ? __virt_addr_valid+0x81/0x620 [ 1567.730602][T27938] ? sys_imageblit+0x19fb/0x1d60 [ 1567.730616][T27938] kasan_report+0xdf/0x1a0 [ 1567.730636][T27938] ? sys_imageblit+0x19fb/0x1d60 [ 1567.730653][T27938] sys_imageblit+0x19fb/0x1d60 [ 1567.730670][T27938] ? __pfx_sys_imageblit+0x10/0x10 [ 1567.730686][T27938] ? update_cfs_rq_load_avg+0x51/0x550 [ 1567.730710][T27938] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1567.730729][T27938] soft_cursor+0x524/0xa10 [ 1567.730751][T27938] ? fb_get_color_depth+0x120/0x250 [ 1567.730772][T27938] bit_cursor+0xe58/0x16f0 [ 1567.730794][T27938] ? __pfx_bit_cursor+0x10/0x10 [ 1567.730817][T27938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1567.730836][T27938] ? get_color+0x1da/0x450 [ 1567.730853][T27938] ? __pfx_bit_cursor+0x10/0x10 [ 1567.730872][T27938] fb_flashcursor+0x338/0x430 [ 1567.730890][T27938] process_one_work+0x9c2/0x1840 [ 1567.730911][T27938] ? __pfx_process_one_work+0x10/0x10 [ 1567.730930][T27938] ? __pfx_fb_flashcursor+0x10/0x10 [ 1567.730948][T27938] worker_thread+0x5da/0xe40 [ 1567.730966][T27938] ? __pfx_worker_thread+0x10/0x10 [ 1567.730983][T27938] ? kthread+0x13a/0x450 [ 1567.730997][T27938] ? __pfx_worker_thread+0x10/0x10 [ 1567.731013][T27938] kthread+0x370/0x450 [ 1567.731027][T27938] ? __pfx_kthread+0x10/0x10 [ 1567.731042][T27938] ret_from_fork+0x754/0xd80 [ 1567.731061][T27938] ? __pfx_ret_from_fork+0x10/0x10 [ 1567.731079][T27938] ? __switch_to+0x7b4/0x10c0 [ 1567.731092][T27938] ? __pfx_kthread+0x10/0x10 [ 1567.731107][T27938] ret_from_fork_asm+0x1a/0x30 [ 1567.731126][T27938] [ 1567.731131][T27938] [ 1567.731135][T27938] The buggy address belongs to a vmalloc virtual mapping [ 1567.731146][T27938] Memory state around the buggy address: [ 1567.731154][T27938] ffffc900037c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1567.731167][T27938] ffffc900037c8000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1567.731176][T27938] >ffffc900037c8080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1567.731184][T27938] ^ [ 1567.731191][T27938] ffffc900037c8100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1567.731201][T27938] ffffc900037c8180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1567.731209][T27938] ================================================================== [ 1567.731222][T27938] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1567.731232][T27938] CPU: 0 UID: 0 PID: 27938 Comm: kworker/0:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1567.731253][T27938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1567.731259][T27938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1567.731268][T27938] Workqueue: events_power_efficient fb_flashcursor [ 1567.731286][T27938] Call Trace: [ 1567.731290][T27938] [ 1567.731296][T27938] dump_stack_lvl+0x100/0x190 [ 1567.731314][T27938] vpanic+0x552/0x970 [ 1567.731328][T27938] ? __pfx_vpanic+0x10/0x10 [ 1567.731341][T27938] ? __pfx_vprintk_emit+0x10/0x10 [ 1567.731362][T27938] ? sys_imageblit+0x19fb/0x1d60 [ 1567.731377][T27938] panic+0xd1/0xe0 [ 1567.731389][T27938] ? __pfx_panic+0x10/0x10 [ 1567.731404][T27938] ? sys_imageblit+0x19fb/0x1d60 [ 1567.731418][T27938] ? check_panic_on_warn+0x1f/0x90 [ 1567.731437][T27938] check_panic_on_warn.cold+0x19/0x34 [ 1567.731452][T27938] end_report.part.0+0x3a/0x90 [ 1567.731470][T27938] kasan_report.cold+0xe/0x18 [ 1567.731489][T27938] ? sys_imageblit+0x19fb/0x1d60 [ 1567.731506][T27938] sys_imageblit+0x19fb/0x1d60 [ 1567.731527][T27938] ? __pfx_sys_imageblit+0x10/0x10 [ 1567.731543][T27938] ? update_cfs_rq_load_avg+0x51/0x550 [ 1567.731566][T27938] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1567.731583][T27938] soft_cursor+0x524/0xa10 [ 1567.731605][T27938] ? fb_get_color_depth+0x120/0x250 [ 1567.731624][T27938] bit_cursor+0xe58/0x16f0 [ 1567.731646][T27938] ? __pfx_bit_cursor+0x10/0x10 [ 1567.731669][T27938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1567.731688][T27938] ? get_color+0x1da/0x450 [ 1567.731705][T27938] ? __pfx_bit_cursor+0x10/0x10 [ 1567.731724][T27938] fb_flashcursor+0x338/0x430 [ 1567.731742][T27938] process_one_work+0x9c2/0x1840 [ 1567.731762][T27938] ? __pfx_process_one_work+0x10/0x10 [ 1567.731781][T27938] ? __pfx_fb_flashcursor+0x10/0x10 [ 1567.731799][T27938] worker_thread+0x5da/0xe40 [ 1567.731818][T27938] ? __pfx_worker_thread+0x10/0x10 [ 1567.731834][T27938] ? kthread+0x13a/0x450 [ 1567.731848][T27938] ? __pfx_worker_thread+0x10/0x10 [ 1567.731864][T27938] kthread+0x370/0x450 [ 1567.731878][T27938] ? __pfx_kthread+0x10/0x10 [ 1567.731894][T27938] ret_from_fork+0x754/0xd80 [ 1567.731911][T27938] ? __pfx_ret_from_fork+0x10/0x10 [ 1567.731929][T27938] ? __switch_to+0x7b4/0x10c0 [ 1567.731941][T27938] ? __pfx_kthread+0x10/0x10 [ 1567.731957][T27938] ret_from_fork_asm+0x1a/0x30 [ 1567.731975][T27938] [ 1567.732029][T27938] Kernel Offset: disabled