last executing test programs: 2m19.439374735s ago: executing program 32 (id=1884): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd13/poll_stat\x00', 0x2, 0x0) pread64$auto(r0, 0x0, 0x3, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140020008003b5258769d60b83ca01008ca97fcc0000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) r2 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r5 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) socket(0x2, 0x1, 0x5) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x200006) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x101000, 0x0) ioctl$auto(0x3, 0xc0585609, r5) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) (async) fcntl$auto(0x3, 0x400, 0x1) execveat$auto(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000200)='-\x00', &(0x7f0000000180)=&(0x7f0000000140)='\xad/]&\\!{\x00', 0x7d) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) (async) madvise$auto(0x0, 0x200007, 0x19) 2m13.332073218s ago: executing program 33 (id=1905): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0xc, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0xd, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 2m6.343977977s ago: executing program 4 (id=1950): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) (async) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200) unshare$auto(0x40000080) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) (async) socket(0x21, 0x807, 0x73) (async) socket(0xf, 0x2, 0x2a) bind$auto(r1, &(0x7f0000000400)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x1) (async) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x4b7}, 0x54) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@query={@target_fd=r1, 0x89e3, 0x0, 0x3, 0xe, @prog_cnt=0x8, 0x0, 0x3, 0x401, 0x1, 0x5cd}, 0x7) (async) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0xa, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f0000000380)="bf067eb3ae31aeda38fc578698890e7c92b6a9b0fd823e4eba350ae2e72d5c93", 0x932, 0x0, 0x10000000007, 0x0, 0x8, 0x5}, 0x2c5}, 0x4000, 0x5) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x4, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3, 0x1, 0x0, 0x1, 0x0) 2m5.785980457s ago: executing program 4 (id=1952): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x1, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0xfffffffffffffffe, 0x3, 0x0) mlockall$auto(0x7) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 2m4.729706668s ago: executing program 4 (id=1956): mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000240)=""/203, 0xcb) r1 = prctl$auto(0x38, 0x634, 0x0, 0x5, 0x7) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/bssid\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) swapon$auto(0x0, 0x2) swapon$auto(&(0x7f0000000140)='.)\x00', 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3b, 0xffffffffffffffff, 0x0, 0x1, 0x0) futex$auto(&(0x7f0000002b80)=0x80000000, 0x0, 0x8, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) mmap$auto(0x0, 0x5, 0xdf, 0x9972, 0xffffffffffffffff, 0x8000) write$auto(r1, &(0x7f0000000340)='/sys\x00\x00odule/damon_recLai\xe8\x1f\x13\xferameters/kdamon\xfe\xffpid\x00\x17E\x9a\xb0\xf3Y\t\xbc\x83?\xe1\xa6\xdeF\xed\xban\x15\xe5]\xb7\xdc\x87-\xf4V\xe3\x84-&\xc1z\xf1\xe6\x8a\xdf`*`\xab\x04\x81h\a(\x11e9\xbc\x06;\xb31\x98\xddf\xa5\x19\x98\xf5\xb5*\xad\x06\x8cZ\\\x85\x85\'\xe8\rq\xebG\xbb', 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r4, 0x4008556c, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty60\x00', 0x24900, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x404, 0x1003, 0x6, 0x7fffffff, 0x2, 0xffffffff7ffffffc, 0x0, 0x7f, 0x5}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/147, 0x93) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r7 = socket(0x28, 0x2, 0x8) bind$auto(r7, &(0x7f0000000080)=@generic={0x1d, "ffffff0b000000000000000700"}, 0x13) 2m3.844142694s ago: executing program 4 (id=1959): syz_clone(0x10110200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xc00000002, 0x400008, 0x2000000, 0x10, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4040044) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1, 0x5, 0x2000008001, &(0x7f0000000280)=0xc9e, 0xcca, 0x1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) munlock$auto(0x10000000000ffff, 0xffffffdffffdfffe) mlockall$auto(0x7) r4 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r4, &(0x7f0000000240)="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", 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)={0xffff, 0xee01, 0x3, 0x3c2}) quotactl_fd$auto(r1, 0x6, r5, &(0x7f0000000340)="048672cfecf8c4aac183a95d74dc3833654717b22e96c4bc8bab3cda743074968b596e736928e9667957ea728bb760291abf4c82d8c18d6a48b3f73f64fa2f714f49") setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x1, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) 2m2.646134917s ago: executing program 4 (id=1963): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) (async) shmctl$auto_IPC_INFO(0x37, 0x3, &(0x7f00000007c0)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x1, 0x6, 0xfffe}, 0x4, 0x3, 0x1, 0x4, @inferred=0xffffffffffffffff, @inferred, 0x40fd, 0x0, 0x0, 0x0}) (async) close_range$auto(0x0, 0xffffeffe, 0x2) r0 = io_uring_setup$auto(0x0, 0x0) mmap$auto(0x4, 0x3, 0x100000001, 0x16, r0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x9, 0x10001, 0x8000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000100)={0x0, 0xc7, {0xfffffffb, 0x7, 0x2, 0x0, 0x0, 0x1, 0x101, 0x7, 0x80000000}}) (async) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) prctl$auto(0x3d, 0x1, r2, 0x1, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)=0x80000000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/mtu\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket$nl_generic(0x11, 0x3, 0x10) (async) r4 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x0, 0x0) fcntl$auto_F_SETPIPE_SZ(r4, 0x407, 0x2) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) (async) r5 = io_uring_setup$auto(0x5, 0x0) (async) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) (async) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) ioctl$auto_BLKTRACESETUP2(r5, 0xc0481273, &(0x7f0000000d40)={"979d3f692ac381cca625573b37ff465779546b404a9de959dbae7a484c51c4c6", 0xe9, 0x0, 0xffffffff, 0xe6, 0x9, 0xffffffffffffffff}) (async) syz_clone3(&(0x7f0000000e00)={0x88000, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000400), {0x5}, &(0x7f0000000440), 0x0, &(0x7f0000000c80)=""/169, &(0x7f0000000dc0), 0x0, {r6}}, 0x58) (async) acct$auto(&(0x7f0000000300)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') 2m1.735203176s ago: executing program 1 (id=1966): socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x1003, 0xf, 0x0) ioctl$auto(r1, 0x4b52, 0x1) getsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff) 2m1.626521008s ago: executing program 4 (id=1967): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0xd, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 2m0.960172992s ago: executing program 1 (id=1968): r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x7c, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x6) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r2, 0x1, 0xd, 0x5) listen$auto(r1, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) recvmmsg$auto(0x3, 0x0, 0x80, 0x0, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c45d446", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000600060009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m0.625958436s ago: executing program 5 (id=1940): mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$auto_SO_PASSSEC(r1, 0x3, 0x22, &(0x7f0000000040)='/sys/devices/system/memory/memory12/power/control\x00', 0x1) ioctl$auto(0x3, 0x4048aec9, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) r3 = socket(0x25, 0x6, 0x7) setsockopt$auto(r3, 0x6, 0x24, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) ioctl$auto(r4, 0x64c9, r4) shutdown$auto(0x200000003, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) read$auto(r5, 0x0, 0x10001) recvfrom$auto(r3, 0x0, 0x0, 0x102, 0x0, 0xfffffffffffffffd) 2m0.104110578s ago: executing program 5 (id=1969): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x64010100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/dax/drivers/device_dax/remove_id\x00', 0xa081, 0x0) write$auto(r3, &(0x7f0000000000)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x33) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) 1m58.004411062s ago: executing program 5 (id=1970): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 1m57.816047749s ago: executing program 1 (id=1971): r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x7c, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x6) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r2, 0x1, 0xd, 0x5) listen$auto(r1, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) recvmmsg$auto(0x3, 0x0, 0x80, 0x0, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c45d446", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000600060009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m56.362923062s ago: executing program 1 (id=1972): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r2, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000003040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003000)={&(0x7f0000001940)={0x1690, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xfffffff8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x302a}, @NL802154_ATTR_PEER={0x1f5, 0x28, 0x0, 0x1, [@generic="79baeae4f2c8a62c9802969807a709312813a9d3a705ba973e38d88a98813dac7b8cf539083454e795b8b9cefc22d80e3939946c7358f864a1f637523571409fb5a1ccb6e3c09adaf4a6768895a83bbc451d56208edb4e2f922007fcd6b64dbb1fddc27059004d043377258cb4eb078495ce6b4391f3f151b1422befa3405aa1cc6606a0164ea822b81f58ed2dbe045cf1d5d3fe12e324a69d3e241deb6677fcc2e1ffcc0da408722a7a9c1e00ad0c37eb52e6ede950b51ecc692cc9910c77d148ce2fd699381ab696a61dabe6bc559a5894a951562b34fd9fbc14cb23825fec0e9eab241c6ba3eb68673c8a4fa5d854ee25539ec2", @generic="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"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1457, 0x2f, 0x0, 0x1, [@nested={0xe5, 0xd0, 0x0, 0x1, [@typed={0xa, 0x80, 0x0, 0x0, @str=',$:\\\'\x00'}, @typed={0xc, 0x15e, 0x0, 0x0, @u64=0x2f}, @nested={0x4, 0xd}, @generic="d2a4870b2c43f00562119487c3f787bf171fa0d2f234a75c9f8b40e17f32ef09dbd789efd5607f23613ed5a68b8b613cae7dd0dcb1e532aea002a10e035a46ee1ff25f7dacd3db9097e3e94f098a6aa8063519ef9c0cb250ed120a45a08b16b737a8aa2337c3b7090b91a2c68c86280a3683d6aba3a4c0dc2bb7b617f643aa0b3e6ccd38b40f0c7a1f4b20f429f49a6884815f2487", @generic="fbc0ceb59be1a203e76af7", @nested={0x4, 0x83}, @typed={0x8, 0x24, 0x0, 0x0, @fd=r2}, @generic="c0503a557bb43342a3ed29de7e", @nested={0x4, 0x3c}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x8}]}, @nested={0x124, 0xed, 0x0, 0x1, [@generic="7187d6ba9330290b6e9df3ee190b24b5ad4398ca909ec48e03ff34bf9168f2421d8c09d832a585bd6c622c6c5ee11261b6087695ceb5dc6b209b75f4b8d7c15ee37872143022cba3debea4c8de509f0f5e9e8812f6ba34bc18ba8b0d65f65f161d556e7e7ec4cdd0efe44d930efc572df757b5c5d5e5ad496c023a543e90e503fb52f4cccc084985220e9d66a13baa235d149847f044810829907a07b2024aa4f26c98b629dbe93706da972e8a3cca366698dfab7474a9770bb83f5508941a26f301826cc2f8d5abdc78029873cc1dfd4b51cb90971bf0a7", @generic="f9a74d7dd6d5a6de5a40b2c4e1e74923367471f2c257ce98293a3e10dc659213136e132601c5e758fef55674702599a588bcda55466ab9507e9771d02927b6651ef0302067ac8e35"]}, @nested={0x11d4, 0x10a, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x1f}, @nested={0x4, 0x2e}, @generic="2aeb46855774940251da38b1311f72579e4f5db2ec018b590d5ad090134c91c777a364b2aece4a629fb355", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@mcast1}, @generic="d511834b4ce472185b088fc3384992528462707f99fa117ff778cefd2f99122bf2c171839e64a32b674219e8cdbd7eba4a02217077fdb3b851e9aa0b8efd64bf62320482391c4a78c0a10c2ef6474d32e6ea30358766758632e6e221fda560a6eed681b2a8b8d4957953a6d993e909f4abbd0796fb7e66f75834e524e167a8e6316bcd56ccfeec1c18a1637816e9554e3d37e7079f736be554aa507c5e6a742d57bb0afdd11b00f7d9dd9f4bd9ec2c", @generic="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", @generic="564f972e04e49bf316c61f8f164577797046f2f925d2cef4836584f91f46c7b3ff373e73629d6b2ab5a3b57f407e4615276eecacbb98b3dffd460b7f4f9f605e6726b919b990d6626acbffa90ac2398728151a956f723ef1bf44e13c0a770783f6ff1a420af4e1d55f746f62e6a94af69e5a75c73572b6702356031ee2fae624b08eb973f08d694a73c1443c7ad631d209ada31554167c445c7bb0d02c15fba521292dc4cd9d3c05a11f51e6559506d0fcdfdb50ee01ca34181e355d1b90ded37045dac6268d67f711cd4446b7e4", @nested={0x4, 0x152}]}, @generic="a1be733fd2f4e0c85d2d383e8ab12ae04220f732381116d9b28a78fd1a6b578c6b51c383d3416862f052aa65dc5b9812357e6a811d5c7f07644bc525ad66d758d8ebcdb0c3e8177ca3ca436e143349a28616f5a9025b3690946c85b9de", @generic="38d58b4caac70ed5ba0febe110289c28256161a0fa19"]}]}, 0x1690}, 0x1, 0x0, 0x0, 0x40005}, 0x80) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r3, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x48030) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_team/rp_filter\x00', 0x141241, 0x0) 1m55.444996014s ago: executing program 1 (id=1973): mmap$auto(0x4, 0x2020008, 0x803, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x6, 0x5, 0x7, 0x12, 0x401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x2, 0x0) mmap$auto(0xffffffffffffffff, 0x2020007, 0x3, 0x110, r0, 0x100) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/default_smp_affinity\x00', 0xaa102, 0x0) mmap$auto(0x0, 0x800006, 0x1, 0x40eb2, r0, 0x308000000000) lsm_set_self_attr$auto(0x4, 0x0, 0x80, 0x0) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, &(0x7f00000004c0)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/netdevsim0/arp_evict_nocarrier\x00', 0xa042, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/netdevsim0/arp_evict_nocarrier\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f0000000180)="81dc397f8a4a88a16cf1b1bc91c5d7fdee5667aaeaa38fe85cf95cb91ae605aef485293987301fedd85c8498656fea0e784d85fcaa712afb13ca47855b9027aab35f9e671e79f0cc6ac39500dfb9fab27a0f61eb1ec684fc0454789a122210605dbd02e7d0f372dc29a9d79b86a6bf2794a04a315cfdcaceae27eaffffff00000000b1ba240fe884fb0a0da7dddb39", 0xffffffffffffffee) (async) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f0000000180)="81dc397f8a4a88a16cf1b1bc91c5d7fdee5667aaeaa38fe85cf95cb91ae605aef485293987301fedd85c8498656fea0e784d85fcaa712afb13ca47855b9027aab35f9e671e79f0cc6ac39500dfb9fab27a0f61eb1ec684fc0454789a122210605dbd02e7d0f372dc29a9d79b86a6bf2794a04a315cfdcaceae27eaffffff00000000b1ba240fe884fb0a0da7dddb39", 0xffffffffffffffee) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="371a0e8ca0f1930100ec05d034142f2dbd7000ffdbdf2504d9db0000e158fde5e360dabb4b6357d584a200"/53], 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x40000) mmap$auto(0x0, 0x7, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x7, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/pcmC0D0p\x00', 0xc0942, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff]) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) mmap$auto(0x1000000007, 0x5, 0x6, 0x18, 0xffffffffffffffff, 0x7fff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc80, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x1ff, r1, 0x8000) mlockall$auto(0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptybb\x00', 0x201, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptybb\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_MM_START_CODE(0x101, 0x1, 0x0, 0x6, 0x34) (async) prctl$auto_PR_SET_MM_START_CODE(0x101, 0x1, 0x0, 0x6, 0x34) write$auto_tty_fops_tty_io(r3, &(0x7f00000009c0)="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", 0xe68) (async) write$auto_tty_fops_tty_io(r3, &(0x7f00000009c0)="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", 0xe68) 1m55.022624184s ago: executing program 1 (id=1974): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 1m48.267192553s ago: executing program 34 (id=1960): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0) socket(0x2, 0x3, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x4, 0x10000000400008, 0x5, 0x979, 0x2, 0x40000008000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0x80000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) setfsuid$auto(0xee00) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000040)={0x0, 0x7}, 0x4, 0x0, 0x3, 0x3}, 0x1000}, 0xfdffffff, 0xffffffff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto_TIOCSTI(r1, 0x5412, &(0x7f0000000180)) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab83, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m46.240731154s ago: executing program 35 (id=1967): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0xd, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 1m42.64606433s ago: executing program 36 (id=1970): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 1m42.62534362s ago: executing program 6 (id=1980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000e40ea14f4a637cdb8bcee60a6a577bf41654b2ae2d205a5431f185978dcbcbddbd21be6a9f6f1bb326", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250c00000008000400ffffff7f"], 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x50) 1m42.501347546s ago: executing program 6 (id=1981): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x1, 0x4005, 0x2, 0x791, r0, 0x300000000000) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x1a9840, 0x0) ioctl$auto(r2, 0x92106405, r2) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fanotify_init$auto(0x5, 0x0) creat$auto(0x0, 0x9) open(0x0, 0x161342, 0x130) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20202, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi7\x00', 0x0, 0x0) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440), 0x0) ioctl$auto_CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, &(0x7f0000000100)={"963645e4f460da234efda2d1850e5c79f8bdc08af4add2bcfa2538cc4558419c", "69db939ac085981fece3e884e0c65a2e8506a29b8de9d9834e1055c2bd32794a", 0x3, 0x0, 0xfffffffb}) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0xfffe, 0xb1, 0x8, 0x0}) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 1m41.876466516s ago: executing program 6 (id=1982): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0) read$auto(r0, 0x0, 0x20) write$auto(r1, &(0x7f0000000000)='*[\'\x00', 0x2) 1m41.756793229s ago: executing program 6 (id=1983): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10020, 0x73f, 0x0) semctl$auto(0x7, 0x6, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) lsm_list_modules$auto(&(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x101, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m41.542041269s ago: executing program 6 (id=1984): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xf, 0x3, 0x2) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x6, 0x2f, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) r2 = fanotify_init$auto(0x5, 0x2000000000002) r3 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r3, 0x0) fanotify_mark$auto(r2, 0x452, 0x800000a, r3, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000280)={0xffffffff, r1}) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m40.589340577s ago: executing program 6 (id=1985): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18300"}, 0x1c) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810007, 0xf4, 0x800000000a011, r1, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x181042, 0x0) socket(0x10, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x80000, 0x2) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0x200001, 0x6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xc0a00, 0x0) pread64$auto(r3, 0x0, 0x800006, 0x40009) 1m40.108957502s ago: executing program 7 (id=1976): r0 = getpgid(0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0x11, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000200)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xff, 0x8, 0x6, 0x100000000000000c, 0x8, 0xd2d, 0x1, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) mmap$auto(0x0, 0x8, 0xdf, 0x40000eb1, 0x0, 0x8000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) pidfd_open$auto(r0, 0x0) 1m39.068598518s ago: executing program 37 (id=1974): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 1m38.855794602s ago: executing program 7 (id=1987): write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0xea703, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4004000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) madvise$auto(0x91, 0xff7fffffffff0001, 0xf) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x20000008) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x400, 0x0) io_uring_setup$auto(0x2800, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/tx_queue_len\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000002, 0x0) syncfs$auto(r1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/029/001\x00', 0x189801, 0x0) 1m37.53503653s ago: executing program 7 (id=1988): socket(0x11, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000140)) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c001b00", @ANYRES16=0x0, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x200}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x21}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8000}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x5}]}, 0x44}}, 0x90) ioctl$auto(0x3, 0x4048aec9, r0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42001, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8202, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)="72f1cd40", 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c00, 0x0) set_mempolicy$auto(0xc000, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44085) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) 1m35.990866719s ago: executing program 7 (id=1989): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0xd, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 1m24.663526788s ago: executing program 38 (id=1985): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18300"}, 0x1c) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810007, 0xf4, 0x800000000a011, r1, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x181042, 0x0) socket(0x10, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x80000, 0x2) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0x200001, 0x6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xc0a00, 0x0) pread64$auto(r3, 0x0, 0x800006, 0x40009) 1m20.84979639s ago: executing program 39 (id=1989): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r1, 0xc0401289, 0x0) mmap$auto(0x800000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0xd, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x2, 0x1ec) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r4, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r5, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) select$auto(0x5, &(0x7f0000000180)={[0x7, 0xfff, 0x6, 0xb, 0x2, 0x5, 0x8, 0x9, 0x3, 0x1, 0x2, 0x2, 0x5, 0x2, 0x5e, 0x3]}, &(0x7f0000000200)={[0x7, 0x3, 0x7fffffff, 0x5, 0x2, 0x6, 0x80000000, 0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8b, 0x6, 0x10000, 0x2]}, &(0x7f0000000280)={[0x5, 0x100000001, 0xb982, 0xb10, 0x3000000000000000, 0x3, 0xfffffffffffffff8, 0x3, 0x10, 0xb, 0x1ff, 0x1, 0xe, 0x2, 0x6, 0x2]}, &(0x7f0000000340)={0xe, 0xcc6}) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r0}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x2) 42.695741213s ago: executing program 0 (id=2118): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCSTI(r0, 0x5412, &(0x7f0000000ac0)="16163272b64d") (async) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="e62fa80c8beb273e079ee09dd5cea3766a1b3138e7bae935cad9c46cf53d6754d592bf355777bbc911d65937a02a06ed6aaa1ee921736d3112cbe22d56bc61e6a4846388a81a4a6f68b14cbf7fe2509e915192634c2b8e5c7f32f75867e91c1be35a2cfd45dbb7b6e5d2deaff8d35db2e2a9461725b25fa5e1e45c14596ab402f955f0fb2721128ee967ec2151323ffb80b957d54e996a8aea530943e14e009172a4b163628bf31fde9cf4fa2e4defc59618e7f6201db532f5b6fe3691195f5d89b0f473cae8e78f967633654bab668e05143cc9c7007a30cdda79c05b991c57f4b044fabbd55891414a3ac7aff924", 0x80000001) (async, rerun: 64) r1 = socket(0x2, 0x1, 0x106) (rerun: 64) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socket(0x1d, 0x3, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = socket(0x2d, 0x2, 0x0) bind$auto(r3, &(0x7f0000000040)=@qipcrtr, 0x8) (async) ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x3, {0xb, 0x2, 0xf, 0x9, 0x6, 0xfffffffe, 0x9, 0xccd, 0x9}}) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0x83e7}, 0x5, 0xb) 42.358732598s ago: executing program 0 (id=2120): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x8, 0xd7d) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8921, 0x24) 41.261171153s ago: executing program 0 (id=2126): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) r1 = dup$auto(r0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r1, &(0x7f00000025c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000002580)={&(0x7f0000000fc0)={0x15b4, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_GOV={0x159f, 0xc, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, @nested={0x100, 0xbc, 0x0, 0x1, [@typed={0xe, 0x159, 0x0, 0x0, @str='/dev/ram5\x00'}, @generic="b515d2219983730e5d3ba7dac194d3f356dd3de6490e04304d09c4756c31378f87f692f4f129092e3a1cc675df4039de", @nested={0x4, 0xc}, @nested={0x4, 0xbc}, @typed={0x8, 0x6c, 0x0, 0x0, @uid=r3}, @generic="03f80709ce02469b52638b1899e600499d9bff5dfc4f", @generic='lhdza\'', @generic="efeb0943f0dbf74bd248d76b885de2de080b377a6613b66d39b9eb5dd1cdf614c0755c372a8d958627b4ce70a86a92b2e53a0ae7af759aac2f0cc077e00dd95e3e9c557a0b1b6bf52c71e4e754f44dcff9b422cc51f2df7df6f3bc08527231ee1f12c5732bf12c637bbdd9c3a7a21146af39c438b6e1390112c05acd86783f741af148d5e5e4b68fa65c580f", @nested={0x4, 0x3e}]}, @nested={0xd8, 0x10d, 0x0, 0x1, [@typed={0xbe, 0xe2, 0x0, 0x0, @binary="95bdaa963e7b40b3de8f8ad557d940c8a17d8104500f693c7ac35cb60ba01b4b6ce222d803fd6346e4f818845fc7e47dc2449ac07ab2c67be833afc9e7bce437ccb94c869b5562ae2cc25df4d61a7ce0bb2d4e3f47679895840f806a17a45914981fc3b87c99d8b0b7d746190485060b7585a20b8b73a4c80846e75959bd1becf5350eb9b78feccf435ca8d1c95bc41386b973b8ae4b70cb2ce91742e7ee514df66b36ccf4db6c094c0378e6a465f8a588795dc9bf2f8d569045"}, @nested={0x4, 0x109}, @nested={0x4, 0xf1}, @nested={0x4, 0x6c}, @nested={0x4, 0x165}, @nested={0x4, 0x33}]}, @generic="cc70d4ee65f7dc827adb2afa7e6067b7f40309839733d5fc715cf054302d05ccc2e21a024ae42a4f6bceced3a803b490c7fb4de0a7e1389fc77d3384e947bd239d2a6f26e505e708dce5a1366a1f907f5a4c1242f40a", @generic="1c7852414e540fd3c00e341911d865142bd501046ba79123145cb17cdaf9773516b94f96b3e43846daf24183823421fd6ca67b2d70c113f3fe03100052e2505a5bf58ed212f95f12e4b5c2e0b052dc339064786af08cdd3ce17479bdcfd3b8db95dae36f0148d7ad94b1d730d2e5fb8f49317fa1e8d25384704ead9f60ff34864d55b937cad6a3d9f3d01679f0987ecdd9af6e7e7683d2e316828ea9b3072a34a837c167ff9e5803e20800fedb3d2a83337a38593c757075df35481a572440fd38b5eea22171ad672ec74139786dd60e31b6bddaa96d79e6b32befe72e9bbaf5c827de544d13c3", @nested={0xc7, 0x95, 0x0, 0x1, [@generic="2918d861d3bc7f15c967f944cd7c33d9263d05e350bd35be809f72f2d02c8216f68d54c45e44834d522971e2e0a21fb6147445ec5fafe020dd704d9b19167a30a67ce09a6df44afe1d55ac358e3811a78ecd40849e6662010e13b750cca84ff2b58d6024fd297946d6ecb4fa7b1dc30425fd009af11395808a8f21aede69750dbd5c509f3d4bd59bee4177a38a3dbdd5c888932a053d8c2f42912e1f1e15fbde5d5c4cac7f61eabbc467e41c975dcfc37a3d1ae3776a15bc542dac8fdc2760a526d161"]}, @generic="6fa502941598007162eb5407b1c9b6bdc745c8153193142a7496f841400b163ac505cf1f674d4ee7a6fa52c38b1c36d20ecfdc332fdd5741a9a36f89f905e0ece8c89ea9e8161e909aedc7c7ca980190a492f3c32ee3ebce2946887b8492312fdc90c623fd314ed9d8a7560f436fd2b921f7458ae457b07d10c1269441e87fe85ba3d18461d49eced1ec068072db52da02f7e29fadc89102dbe08279a80873e82a8c0a911afd5ec5759b953e0f01de5b01c1b6ffe6c555283959b216cc0c0db6a1497144924dae53984f9123c07f", @nested={0x10ca, 0x85, 0x0, 0x1, [@generic="8ba42a571fdd8a9e87bcf2300f5bf042120f8d30b4c6ef55cb5d8787e9ad005bb294a0463dcd98e90890fede6f3753ba8339dc9a1586c118a125a47de8eb85e1b099f467b0fe3d0b1cffffe00836ee1e44ad7131d88ae31474734e96eb1f31fd2989fc7693466b7a45914433cd355b23b2a46d65372f641f6201f7e55d86936fcf35e11eefd9fec8598095e4a09153fcf188c2f3f1684061934da0cc6aaa358c04973e3dde29c88249d599d7f71b1f40b05d7ee7ed1317803b47664c25feb6a633bfc3ff88a4", @generic="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"]}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, 0x15b4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r4, 0x5101, 0x0) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r7, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf4}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xa}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) r10 = setfsuid$auto(0x0) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b40)={0x444, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "65ef1705318ba471185b2396"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_REG_RULES={0x3ee, 0x22, 0x0, 0x1, [@nested={0x35c, 0x24, 0x0, 0x1, [@generic="ae5a9ce9aacc12cefea299f42212ae3810c80339ff9a5b01ae606541fd9e4f99c052333626673f2e5800736b9e94fb652801502ae758ac69c6e303ed5795229ea64975285f19b0f274fc6ed5e5df97b91ed29e30b2770fcebce049089180d95c83dda46bfbc7a0fdcf314b50edc5f840ecfabd24151ad42f53f695033ad3050394f19b8245d40f1f94b90922009e370d28f728eb63e2d55a055330c51194fc43b411daf745", @generic="10ef19ca113b263eee986f979c847faca3fd1e794ea3e5ff362a9ac118320a46e946f4b814cb94bf0ea90245cad48c88a4a3ec6790110b63fc448ccbe51b5a5b44e1016866935ee2e691a38f0127d9290e361b62b0be9b955ebfb9ad4f30dd6eaa418768c6d84eff17f21b5ad72ad49c6cec574649599b7dc58385e974144bbe5a3dc03a1b2dd649ac90e641bd0dce", @generic="19a3a79005fcf33d51b51aff5dddf46a551b48", @generic="9616b6241b765a4da61605bfc1d6c626ff345b56b866c327ef92465ffef4c69e816a7377a6100fcbadca1805d8d210713a76ecaa5c65ca7470f8f60035", @nested={0x1d4, 0x46, 0x0, 0x1, [@generic="2ec282156ac6f4c66cfdb0e79a1b13391ddfc726351fdcd15544c91000d807f03637ed98bced99cfe8d0528ff61246ae64f8df767031eda222b302068720acb7b10ec6102cd84a35e38e7eccc86bf3f218c1576a830dae81cd3466b8451b6f65b7f67617e8ab607939fca6b88562b6eb3248da59397a22f5d639d3acb0133a31e70d5d3ed13c49f76e69389e537b702df7fa20fa6046a36f3fd31753851c1df2a21d7a30af939b71211458f3f8ed7900dc51f94cdcb81644798c3f8eb35f62ccee489fbf20d99832ff61f12d4459f0400a28d26f0fd7ef026e5af01368718854d343fe4e8e86f1b4a099dee63e68cb2036", @generic="3839728aa1d40208cf905774e64d96576b0c7379367b2818e62f189ec714a219cf899893f71e74bfb556fc5d41af5fa083b8fc813c510c690ecf09534123fde6d8a9e757f4fdea26be4908dcb19ecbe47904238825678811261bd9b6dab2acfd1e54d0722047705327cebf23b7295554ad381f89781343b548550b8930c8319c56d643d010d6802564285fd46581ecbf586fa4bdb6ee6cddf2995a2feafbd8f1fee0e54c3c383ec426f81e5c95870b2b5e5d8b2f3b25ef72aecafe1f5b09b1d81295243f00223c311c072394638d0f94e13b77", @nested={0x4, 0x8e}, @typed={0x8, 0x80, 0x0, 0x0, @uid=r10}]}]}, @generic="46c524e795d23b15472baffbe7b987e54b79fa89f1ec3750b0a041a5ff6b3191932500792a74e4aee60c105d75b85f14cc8ee79d74d5c583b746b834caaf0115a122981c4469d1caf18877df461e238680c75ae15060bbf271929a0b66d96528cd4c", @typed={0xc, 0xc, 0x0, 0x0, @u64=0x5}, @typed={0x11, 0x14, 0x0, 0x0, @str='(*$\'*&,..-#@\x00'}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0xd748027}]}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x444}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000340)={0x42, 0x0}, &(0x7f0000000380)={0xe83e, 0x6, 0x9}) move_pages$auto(r11, 0x5, &(0x7f0000000480)=&(0x7f00000003c0)="8ecb432b59cc761ca9c6b8f17ec7a26405f870ce62da6d2af9040456b84daecd62b164116c86e659761a7b252731290df4cb426981202943308b33f10258e6fd002d597ee02bbae38cd7379fd0f4e8f0f3e6d137b15aaa57c148796e2422d4892767d56481dfa1473401301dd7526b4b9b54ce006c9a8ba0886a4eb812103f672c1ac2fe7be88b030769d425dd325cbe741ecaed2479950bed752e2cdeccec2501086aa623a4333ec96e325c1614acc74d869a94144ac2c90efd78", &(0x7f00000004c0)=0x80000001, &(0x7f0000000500), 0x38) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) 37.674392664s ago: executing program 0 (id=2138): ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000240)="1d69bb70b14b0d8adec640f39bcbaa9524c8914906e015779869dcd66a4481c81d797b1cf4f186e92a9cfdc2e82e101c67318f358e04c55cae5644a3a4e961dab6fbd6398c6278030e39fa42374997fb3ccdb51872133298776f7affca4be5418311580ddb0a29b1331d033c2e2db03fb119c960441d14ec222cef89baecb8e410600a87dc730dc75e1d0c7228d401f7565e683de04ef9e3583497a65091bef8e549767ef792ba6be63c1b7c476465089f434e1840d39ce65649fd652f63e0beb255d61c1109a5f9824eb4", 0x4, &(0x7f0000000340)="a4cd8dcec7f9db09c2a0b32d151ef682e219d2f2edba893a81a5526d76f7aaf72ccd43608a75be6bacba42ce369948c5ef8969b1dee7697ce0b1a93ca6ec0746820742c5607f603a5bef7645cefa415adcda78de5f5a9511b0057146f7ab0e58ceb1ce1880f3334f6432116684d8e5d89073b13676dc970c200fcff9239f633cc5349e496da167b58cd7c7eed0036aee033c7cb01910e7836243f53b1d8df7c4a2a429df2d5bcef22f2c88740384c1d84125f2f88c5725e40af83fd88c", 0x5, &(0x7f0000000400)="2cd1e0042509af918426ac6bbe3c0456e58f6b6bb9c110230aa73f03d7181ee0ed7818914a3c8e1d5f57a8a4226c1e102bdbc0f0d701998712113965fbd9b618176b268666aebaa4d9f66768e660522d3af790bf360f1d71b401e8285549338039a355ebc5ef3838bc25bfb27d83251a876728d706", &(0x7f0000000480)=0x158fc258}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000500)={0x5, 0x9, "6fe3e7879560f5fa6cc4ee825fec6aeebcccf736e5ea56f8802ef57f739298652832804c435dc591a8516038ad3abde5aa703fbf991b6516856bf0f114b68420", "77b3f6bee8067c28ae9c293a679615f9a8e4d7a5d4ef3d204ce6da1c21e9387454776a1727e2da34c1db6ff0e8c2143025faea16294cae4e79bc4b0f965abdebcc632e3fc7e31dc78b5474caf54ac605", 0x8000000000000000, 0x8, "c74e9d337c33dae9f3ceb66e0273f9cd71cbc72a12f40f3b27e06c809c212e5ef6cb9b66ed234d7f210375abbf8fae41e4d6e7a4773825ff7d7263ac54e498a8"}) close_range$auto(0x0, 0x5, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xf, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) 35.507084575s ago: executing program 0 (id=2142): r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x1fffffffe000, 0x400005, 0x0, 0x3132, 0x9, 0x0) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) (async) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto(r0, 0x1, 0x0, 0x0, 0xe) (async) setsockopt$auto(r0, 0x1, 0x0, 0x0, 0xe) getsockopt$auto_SO_ERROR(r0, 0x6, 0x4, &(0x7f0000000080)='^\x00', &(0x7f00000000c0)=0x1) 30.22264204s ago: executing program 8 (id=2154): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) r2 = ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x408000, 0x110, 0x8}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x3ff, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) readv$auto(r2, &(0x7f0000001400)={&(0x7f0000000400)="2f4730310a8871fa6229643dd59823578118eefcc17a81b6b778236958b267c0c48dc441c014019df3437fad9668ea5d000106635b2839dffb1b2a92f552339c87f55e90834a14116a0d739beb9bd20bbdf382ec3b2941c180b4db71f9f5ea97234c5be639f86fffc200fbe2ae5f2ad5701a2f52cf01b6f30aab8e047ebae0b5476a6ae356a1bd84c86f5435d83b8fdb1a0cbf70e5dd4ba7ecf014aa22a1cd11e4c114800ff52c8085491a533bc88a75f2805cd142c66ee6d8fb94f08a1bc33e1cf2c2eeb6360ecb248bdc31133cc5458a4668a367e0f4ca474e92408a6cb5bbfa2b60f100b36b271254b5c7b18afe009211a8f044ce59799fd11666212ee8f98a864d4bd265088eb43a0c943979dec4021f13f9c8cfb27eba7f7ff4f44801bb64f450f86775b4546b23093fdb24ea2264fd218e321bb07aab7d9bb1a228388291030d6c1dc82af0c3488858f2fb63f28f775f3f3a6c5d8f7c8ea785021d091b6da0941cacb7b34d094aeaca56e3ccc6a022367f41f8b0e20525ac57aa43d45c0c212c1cc7960f10a07574736764256aa1f529a2fe00ef219f15941f52d8fa7cd4808f458845ecace813988bf8213a4a8d48ef024c16b91c9481ceeb127dc552ec1b1c3120b02fa7750c2e28606054dc38c715d30650ac4f7f7f11e741b6b38fb56279970052f9a6baaaa6bba0e30488e20e92b632f6d41af86cbd14e6460fa5b99dfe3bce85b2ef50fcd0af8d5fb69e4c61bb660bee638a63c3c096ec03af1ae29fcb8b0ecda3a53939af9b91ec0b3bc28583f278ea6981f4d920bf5f8812a58d95c014c008e92e51574c405674c5348fad61191a9aefa211de663529ee07923abfa96ac7ab67c0b8e1cc7d1d26748a345c9d55972e6e6ac62cb4427dbda491546464f7934295a42585d343bf94a0d55d1385874401760a2bcb076ac59a00ad5f0085aded12115a2e12b080bb25e3b76f576dca6fc9076d60c3849180e2b85e96e92f29fabb167b1c90647c4b3d53366d1b6dec33d6a339530411ade340159c46a2ab6c74c3d575bed4b4ea22d092ce9b75d25e744bf9e597cf55c95c6ef4e949f68fa2ac5e76596312bff9dd70bb0126156f41023d6c8bebe5ed5bcb519ed3910f50719d19ba871540f5d3d2b1483a604b42336b0297eaf4cb7a3a0747a80567227783a6e4127bd6aaa1d24a5e89a5b7368605e31a82890068be6d6f3e6d4fbbdcf9347f2328a3dc1e72a0ae07b20ab24eb97239792a213f38d6c0c51fe1d97f845504ca4b83da8ed06b8f6667df098f75f2961344bd4121c036756bf81732d86a80a2506ef13953b423fa66288d8f25be3fc0194aa28ee9d598b39dc441515804731a82221710b74a8ddb754da95881cd687021aa9d1ca1c9e70ebf1f9960579938348242e644aec778791108abb7917045a96c64e4748a53f307c21d4d674e2abb5aa461f8e2f92f5a4dea97b8823239f8dbb9667b0bdb31fed276a2c3a81d42468ff131e5e298190d4ebb202ed69aa6e256c249683a072727368a8640fe9dd9e2438665a852949b871a1d0ccf8a14f9d9a9797afe0ae893be871859034243b671558a950ad385d1184ccd25dcbab176420522e2ad8c669db45ea35e2295a97dd9c73fdd1f635befd367add15aa35f0276cdee33cc78b3af90cb18780d6d9e4f89b39ffc720e996d018dea312da6df3a849a3d3f110217b9ea4ce86ebbc84fce28066b810a5a70b553b6d9114f75adf5590a48f08cdd3c6b8d0a981adefdbde5c5fcb3b74fc3a1740da7a360f5f673dc217c35f84d120fb6323d1311b50ab7171d32bc7ebf13873bd3af2ca6d4bdbebcf52a24abcf58a57dc1db2fa3f54e6b6263f396d0e1989c40ae490fcad930c38a2f7a66956b38e6a9c6f18fd0bd74784513571a97bf270ebb114a061d54dc736f38578e804b4021e965e48812f61980a39c8608f0d4611da78c9cf7d45b2958b2f87393f621f5b8722ce49d6bf86dc902e8df1edd69c3cc5c71860feb9982e1ecb145c9d7c7142fd629dbaf55d6c1c6d6851db100afa2235481da2aa11ec4a325546dce2285737758db71cb5781e883d96e03bd65e2ee20895a98549b786d160840628095a34a92467618d5bbebcef902fa2356ccca1baea8fbf37278236d72af7cd84070f97084d8ea78a0bb92ce61f37f71eb2732a0c733b19866a1a1dbc8f7d7377d5e0da8e91fef71736df72cc131d6784c3bbb86a333593628d9fc761cd3d3859e33ec8362834f6d69a82a30cafbbfb2bc4dd91a005e23d8fa3a884fe5bdef7fbbff0c497a02c3d4675484a2072ecadcb98662446f7b364f7b41952853797f55ec84fcb0931c7a033fbb7c786c9f42e9a578d9b90ec6c0e704cb419314ac59aa29871771ebf492fb0c50ea365cc32f37aa72295cafb6f047e77edfebbba07ffe98b00b9736e1db9a342de4617b157bdf02d8f50b448fa4a897a811335ec6de91e56af2498bd4e8fdf7763121ebf0cf803fa0f9ff3966ae24e92f5e4ad070d0e85723447eca3e74146c7fe5c2bdfc631bd4b37f92de8665d4aacd627208e58dbcb1fd2a495ab1809a062269f0a9f1fe43b887b97d5e3cd6c883c3e2a5221a3c1f69d919f8f2313ef15107d6b95ce1cf863cedf78df86f2bf2cd5f9f9d0dec78f5ab095fe9d1329c37e9b0443f6702f0abfe7a1394844db1ef7b3c11425ffc59ee8788df08c2305666f37190008ab66c1525ce1c98f0426689ce18ec40039b19a87f11b1bf62d5b850b8c240b9d927037342e8ae262cfd3f9919612c5da5951bbdb7f6b24a45149a795add98608f572788ef6c11293fc37ed36e8f573c1373890ed623cdae7d707341139015db3547a5fd6f4f2ebea5fc5bf7e990f9120e9d35995806b528d563415d79c0f12520568d82e906c567d24b199eb68b4489e81269313d5926f6eabaf7302c2cb6e54c77e94a2293eb4ad2b44ad4367e8f80f9ea537fd95bd24bc3d455ab846e91dba81c3e92ec34f4c7a0ee25b06974754969d8b910f7365e7b66e2e8cbae602d00908c5d641cddaa261c82cb02d88a8b0d373e3a6d0a0b23fcb473bf255d7369d2733675a52a420f833b1b677e3fefe8acd45d3c0b4911527e1c3fafcf32f848b73cc24dd5f5582bb21e86aeb28a41112577c8a7bf734f322828efd2a7ed9d04348c7071d4441a3a21c57c6416bbef06ebda0eac140ceb1da545b9c7bd8feb08c4db555d2e87afdddc753e58780c54232a878ff1cf8586c019b338f86848d3c656d63dd4df0b816364dfc6aa28dc59acacc6a0552532f59efc49aee54dcc9aecbf9e63f26c0a33646b868f628ed83d5f15ab2b09ceb514dd761fbab1414b67a07b70c96b931fd25a0cb271f83fdbe3b8624b790595b531b2be06140291304f363346ccf38dc477c93d01cbb7939910d235e61e480e61462604d89c1dd125427b34fe3582f3f5c38881398a3c42e83f198bedb056de7f433b02b47a0db88616a9448da4e478f8409f4aee47327d2ed19655a3b5b8f9df5541fde5bbbd9762ce8178286873a53a87e3b776dadf4de3fedf6331e65ef85d2322fd521ce358884bef90a24724d2e328830de8ab4395d57b2c0b60f4fddc40396f40b22d8e113a4d0efc528b0334b833aced16f3d111c975316cebf1fb8cd6becca8797a3f050674ba3b04ed284492441eddbfc88254dd24d7ff332772c890d7e2e2dbfad0761eee19955c5128781de3d383737bb29ad1447aaf18a562c39ad5fb306ff3ce7200cd08d8b8d9fcef9c7b98850a1fb3b81d74d81e45b0fe31e7ea6eb4f7f8fce3bf4ff61eadcf686aa24c91f9b822705350b5c2741f52b45c4ec70f4c568e35c0b07a1bc1a82b424212730bdcf0d92b762dfc5f121c46b4dcaf57bc052dd612e0dd5bd227e10019d4d68a7c5e7fb0be9522eddbb8b763d57eb05d83982b36ff3cc14cd15399a68c893b6ca65d19b99b234770f7c4eede526ee435a79f4d987b768e1d3268ceaecaf3356ceb8ec660df19524c7286c4f94a7683ea5cd5dde89abeafcda9bedc5cc640a610df9225de90fbf40c60944ab001342fafea649687851140e5e8b2559056f9786db457213472ddcb4119a1244d21aefedefc87bb6ce4fb6e989a50eded856e45fd39daf61a1cabccac79ce790dfe2fe43a77e234f06d7f5309337682371c08654c55f4435a87d5211f64a249b69e1d7f80c3b1b46963bcbbf130323d8ae5d42ea9d3c1bd4fce11a469dc673baec1f873c53211f1f36b5bc6632fa6df10d479537894bdd1e469acf1b091b9452a0f7b1bfd8e54fa9d82e3d89d22daed3a56cb4139dfbd226778e87cdad8be04ef840bcd776e5ad82672213af1b58468d3574bae847f95e68015aa482473d51d86a7aa487769d04983f842e7d3c49bef389f85fe67a1d3afbc367dbd8f31daa43b552363c80e32ae09361946e49d03db6f83e45db2bdd310da1c5a8c6cf048a7536d9633e8ad6785b045ad2bda3e6b2c2882d9e1abcb137a8c7dae709f058641e9795b2c12a6b354361f221f86e87dbba1519074031737aab6444aa32a08669ef400ade0482e31ef13d0a5c43ab4c1f4722fbb015203372c6704350035a149d8a04e7fa92ad943b48cc1cedeac429540379d5d730c4a3c31a4ac88cf9e827456dd42bb63c22c8bb6cdc728fbe7ce3f89ae95b2c7adf646766bf0d3989a12422ca296a5925185354c58282962979b81ea4632977fd8535f33039d9f1d9a03d2cb1daf06a26b8aac6cf961f3051a4b55d6375b7d34c4d5e98107181a30c38b7cfec5b750e281ffcc09aff8f7ca8ee2cb8030c4918f0a2627ec492d7e8a3da88ce22ddd681905510b6b8c50aa78bfd5bff77246a3021e7673c765c997f99d610265779f05c43e81a8fb144b2c7c1a5ee1e20729206c0ca4cc91e531132f801a332ebdd6803f5f68aebf30c785308bdd5ef7f4ee791b95a0506561f19be6dddbd90f15202e9afdd9bfa3116372ce9b858e365d0e937de304d05dd0378d7a587bbba33f678198ebef7e2c9f23ff91031505ac73e6a807b9b76fe53da3e948608918f627cc14338b5eabb0da27abc5c9cd50cc1276c54e661243851a6acc923ffed72fab3ea55cb2ea44529f5f63034c40e3e39f96037e36295b91d5a552a397d49180e6b2777bc218cf8603eaf1b8529e79b65490f889c23f2234829874d1a24de6bb053c9108fe65fe4d5e6b676f3fc2105f39788bec999b388b803698cfec95f3459e1c8e1a6befc0f6bfa7b16abd39503b04fc9d6d66123165329109bcadf4021d382a8de87a3e53d5c7fe77f7cc83f5a2b2a13433fd327889db8a54f221d484b1658a2161c8fc2500aa0e1c762548080291ef02d96510534c21bfd312d321c777b0b93aa6239659067df3571462d6375df4cfdb84b023993571eac72a9a6ab4f9ac20c7f035eba683b5e26723fd217d8a25e3cd6737c38b13b51028e16612a5f01b9220ef28a9c7cf47e84879d4d43f0fcc09b2b1a6ee1be8fe272e0286c196c0265afac5abc1df2959fea13a72d65d3f15997a2471098f3b77d7838ccb94ca1b4cf923490ef88b7a5dabfb0c6d24372ded9cbc6a5b5d9902eafe890173128d2e0f401af776460732ed743cb31a416b2aa11c5053ef5570c80fdad774f63a3715f255df1f6d331be15e295b979e787533e2caba970fa22b9d024689b5a05966237f1abb3985089d04d9860313c7e0ccf7f7088d40d83cc38ac94208bad727ad7fa197b3405b0e0c67974e3bed70b504cfa1d025474aef283e379022d82e9505f534750f3bec5fe2cafcf61a5307f862", 0xc}, 0x100000001) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) r4 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 27.584926597s ago: executing program 8 (id=2161): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffe], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r1 = getpid() msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f00000025c0)={{0x8, 0xee00, 0xee01, 0x40, 0xfffffff8, 0x67, 0x6}, &(0x7f0000002540)=0x8, &(0x7f0000002580)=0xb0, 0x7, 0x2, 0x7, 0x6, 0x3a94, 0xe, 0xdc7, 0x4, @raw=0x5, @inferred=r1}) setreuid$auto(0x0, r2) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async, rerun: 64) socket(0x2, 0x1, 0x106) (rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) (async) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r4, r4, 0x0, 0x1) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) r5 = socket(0x2, 0x801, 0x106) getsockopt$auto(r5, 0x11c, 0x2, 0x0, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) 26.138313541s ago: executing program 8 (id=2163): socket(0x2, 0x5, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) (async) removexattr$auto(0x0, 0x0) (async, rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socket(0xa, 0x2, 0x0) (async) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0xa}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x910b}, @IEEE802154_ATTR_PHY_NAME={0xf, 0x1f, '/dev/ptyaf\x00'}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0xf}]}, 0x48}}, 0x1) prctl$auto_PR_SET_VMA(0x53564d41, 0xfff, 0x7ff, 0x7, 0xa5e7) socket(0xa, 0x801, 0x84) (async) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async) sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) (async) acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00') (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) (async) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) (async) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) (async) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) 25.874542922s ago: executing program 8 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000300), r0) sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r1, 0x4ebf37b1785661fb, 0x70bd27, 0x25dfdc00}, 0x14}}, 0x4821) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000300), r0) (async) sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r1, 0x4ebf37b1785661fb, 0x70bd27, 0x25dfdc00}, 0x14}}, 0x4821) (async) 25.686774367s ago: executing program 8 (id=2166): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x109000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r3, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) 25.523017078s ago: executing program 8 (id=2167): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x8, 0x0, 0x4, 0x200) ioctl$auto(r0, 0x400454ca, 0x38) mmap$auto(0x44, 0x2022006, 0x0, 0xeb1, r0, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r2, 0x80045430, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r3, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x0, 0x0, 0x40003, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) mq_getsetattr$auto(r1, &(0x7f0000000100)={0xc8ab, 0x0, 0x8, 0xdd}, &(0x7f0000000180)={0x7, 0x1, 0x5, 0x100000001}) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000040)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x1, 0x9) 20.285776444s ago: executing program 40 (id=2142): r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x1fffffffe000, 0x400005, 0x0, 0x3132, 0x9, 0x0) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) (async) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto(r0, 0x1, 0x0, 0x0, 0xe) (async) setsockopt$auto(r0, 0x1, 0x0, 0x0, 0xe) getsockopt$auto_SO_ERROR(r0, 0x6, 0x4, &(0x7f0000000080)='^\x00', &(0x7f00000000c0)=0x1) 17.239047477s ago: executing program 9 (id=2189): bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@info={0xffffffffffffffff, 0x7, 0x81}, 0x7fff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x4) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x101080, 0x0) r1 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) r2 = open_by_handle_at$auto(r1, &(0x7f0000005e00)={0x20, 0xf1, "0300"/16}, 0x800000a8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/card1\x00', 0x2200, 0x0) mq_getsetattr$auto(r4, &(0x7f00000000c0)={0x1, 0x9, 0x600000, 0x3}, &(0x7f0000000140)={0x6, 0x4, 0x9, 0x6}) ioctl$auto(r4, 0x64c8, 0xffffffffffffffff) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi0\x00', 0x30000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, r3, 0x8000) preadv$auto(r5, &(0x7f0000000480)={&(0x7f0000000380)="a3e74d464a73ba32f17bf6fb36830102b5cf80367d70c4cf394fb507140347ea08a6ecafc75dedb229b39aa5590eeef7fc27fadde09a58b3847a076a5656c089335ffacc608ef90601fc452f06c8c9b87829f5e28bf548db9ce65e360aac1a4eb1b7f2f6c51410c56253b4f3f1a905f05cec5b05fe0289ab07f3de5fbf08953d739d57e88044e10e35014f92c2e6c91bf0b4efec72dde2f4d8985123e740b558947f7dedc7f59e63d0977bd846ac4e40cc551d26dbcce69d09c5f57c17e2c4b7429ca0dfc7b6", 0x3}, 0x1e7d, 0x4, 0x6) ioctl$auto_FS_IOC_GETFSMAP2(r2, 0xc0c0583b, &(0x7f0000000240)={0xfffffffe, 0xf75, 0x7ae, 0x2, '\x00', [{0x8000, 0x4, 0x10000, 0x5, 0x400000080, 0xda}, {0x1000, 0x8, 0x5, 0x2, 0x100, 0x9}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 16.179820234s ago: executing program 9 (id=2190): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x4004080) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f00000000c0)='\r') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/oom_adj\x00', 0x50402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x80000000009) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r1) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0040, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x60201, 0x0) write$auto(r4, &(0x7f0000000040)='nbd\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0xa8b0, 0x9, 0xd5, 0xeb1, 0xfffffffffffffffa, 0xb46d) socketpair$auto(0xffefffc0, 0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x1fffffe, 0x9) mmap$auto(0x0, 0x2, 0xffb, 0x16, 0x3, 0x7fff) close_range$auto(0x2, r0, 0x0) socket(0x11, 0x3, 0x1) 13.327169811s ago: executing program 9 (id=2193): mlockall$auto(0x7) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0xfffffffffffffffc, 0x9, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8002) sysfs$auto(0x2, 0x100000000000031, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_checksums\x00', 0x40a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/19, 0x13) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x1, 0x10d3, 0x3ff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mkdir$auto(&(0x7f00000000c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x511081, 0x4) rmdir$auto(&(0x7f0000000280)='./file0\x00') sendfile$auto(r1, r1, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1d, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b14, r1) mremap$auto(0x0, 0x4, 0x5, 0x7, 0x100000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400040, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) 12.705702751s ago: executing program 9 (id=2195): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) fcntl$auto_F_GETFD(r0, 0x1, 0xffffffff) socket(0x11, 0x80003, 0x300) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x41240, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x2) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x604142, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video69\x00', 0x101, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4004ae8b, 0x0) io_uring_setup$auto(0x4, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) epoll_create$auto(0x4) mprotect$auto(0x0, 0x8000000000000001, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x4, 0x1}) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) r5 = epoll_create$auto(0x8800001) epoll_ctl$auto(r5, 0x1, r3, 0x0) 12.414099936s ago: executing program 9 (id=2196): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) r0 = pidfd_open$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x14bb00, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r0, 0x60020000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000280)={0x153326100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/version\x00', 0x8240, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/125, 0x7d) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)="fc0bf5b2da3e65c36af3bc2a", 0x419) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) clone3$auto(0x0, 0x1) mmap$auto(0x0, 0x81, 0x5, 0xebf, 0xfffffffffffffffa, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0xff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shutdown$auto(r3, 0x3) madvise$auto(0x0, 0x2003f2, 0x15) fchown$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/9p/caches\x00', 0x103280, 0x0) unshare$auto(0x40000080) 10.34938385s ago: executing program 41 (id=2167): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x8, 0x0, 0x4, 0x200) ioctl$auto(r0, 0x400454ca, 0x38) mmap$auto(0x44, 0x2022006, 0x0, 0xeb1, r0, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r2, 0x80045430, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r3, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x0, 0x0, 0x40003, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) mq_getsetattr$auto(r1, &(0x7f0000000100)={0xc8ab, 0x0, 0x8, 0xdd}, &(0x7f0000000180)={0x7, 0x1, 0x5, 0x100000001}) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000040)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x1, 0x9) 10.320443199s ago: executing program 9 (id=2199): io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2$auto(0x21, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4040ae9e, &(0x7f0000000200)={0xdd, 0x0, [{0x8, 0x1d6, 0xde5}, {0x7fffffff, 0x1, 0xffffffffffff0000}, {0x5, 0x5, 0xffffffff00000001}, {0x6, 0x6, 0x7f}, {0x8, 0x7, 0x3fb}, {0x2, 0x1, 0x4800000000}]}) 4.920114863s ago: executing program 3 (id=2207): mmap$auto(0x0, 0x402000c, 0xdd, 0xcb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x481, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x608d41, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xffa1) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 4.113728469s ago: executing program 3 (id=2208): unshare$auto(0x40000080) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@generic={0x9, "f9cad0d2a5de12f1a224633bf4e8"}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = fanotify_init$auto(0x2, 0x80000) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7111}, 0x3) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) read$auto_bdi_debug_stats_fops_(r3, &(0x7f0000000100)=""/81, 0x51) bind$auto(r2, 0x0, 0x6b) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x2, 0x2005, 0x978f, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) getpid() 3.898631465s ago: executing program 3 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x600401, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x4, 0x5a, 0x1, 0x768c, 0x5, 0x1, 0x775, 0x97, 0xf5a}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(r3, 0x401c5504, r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 3.540969969s ago: executing program 3 (id=2210): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:03/id\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) lsm_list_modules$auto(&(0x7f0000000000)=0x6c, &(0x7f0000000040)=0x7fffffff, 0x1) 3.403843351s ago: executing program 3 (id=2211): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) read$auto_msr_fops_msr(0xffffffffffffffff, &(0x7f0000000ac0)=""/4096, 0x1000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) sendto$auto(0x3, 0x0, 0x2, 0xf035, &(0x7f0000000340)=@hci={0x1f, 0x5865, 0x3}, 0x22) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0) ioctl$auto(r1, 0xc0585611, r1) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4000006) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) socket(0x22, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) 2.397814026s ago: executing program 3 (id=2213): r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x7c, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c45d446", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000600060009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.644943427s ago: executing program 2 (id=2215): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x801c2, 0x0) sysfs$auto(0x2, 0x42, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r0, 0x0, 0x2) 1.424367961s ago: executing program 2 (id=2216): sched_get_priority_max$auto_SCHED_NORMAL(0x0) sched_get_priority_max$auto_SCHED_NORMAL(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r1 = open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)=@bpf_attr_0={0x80000000, 0x13, 0x0, 0x8, 0x400, 0xffffffffffffffff, 0x0, "b937c9b9e496c15a6d95f5796791bff4", r0, 0xffffffffffffffff, 0xa21, 0x5, 0x10000, 0x9, r1, 0xffffffffffffffff}, 0x8) sched_get_priority_max$auto_SCHED_NORMAL(0x0) r6 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=@bpf_attr_1={r4, 0x0, @value=0xffffffff, 0x1}, 0x81) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1000}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040895}, 0x41) sched_get_priority_max$auto_SCHED_NORMAL(0x0) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000340), r6) sendmsg$auto_IEEE802154_SCAN_REQ(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "f7398d55b407199fbd7b42fca4fbe96b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x40844) sched_get_priority_max$auto_SCHED_NORMAL(0x0) sched_get_priority_max$auto_SCHED_NORMAL(0x0) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r4) ioctl$auto_BLKTRACESETUP32(r7, 0xc0401273, &(0x7f00000004c0)={"d6de3acdbcb549e7ea752de6f606c51a7ad89d66840e1bf192dfd4e2affbb89b", 0x7, 0x8, 0xfffffffe, 0x6, 0x8, 0xffffffffffffffff}) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000540)={0x5d8, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xa}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2f}, @NL802154_ATTR_COORDINATOR={0x2d2, 0x1e, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @fd=r7}, @nested={0x15e, 0xba, 0x0, 0x1, [@generic="164706eb9aca55f969f19587d12fe1f041fba446bc4a6390f798df184442f2de0b544714930b6f81df77c2303336c2e9c25e241bbe28866bc3f006bfc67499735acb19d52f8f5bb637f47aa329ceff2d5489bcf154859f60761a4ea7c42172ec373ba30f2fa824955b8c9b32780cab155444b05bc8a8c13ec9a49c6c86f48a1e2443998e2283afec322a3b1116d12c356f752e18c1b139cbd2c6bebfd6b482866d7a2ec6b1d595aa809168f350904b3f3d88547e3f7e4d8b4e09a1ad6cb7b0b2be4bddf933189543a3ae12d44e9f", @generic="62e84a0c7da4eaee2724b5c8e41b16c0aaf4e883717ee75533f8782e6b049982f607c3b702e929dc37717d328a2232a8bf1f64b603118047fbc2b0d1e59f27aa386e486b8462bb966b7496fe626075820fc212ae7223549f6f414a1a29a9d5bdd621e8d157f96e3e356af976d7361646e46441411806f2c40ff7122aea6b182ae94ae117759c51df6ccb9d16"]}, @generic="a24436766921989e8387b9b2fe2460296217285b438f4d360f334dfa4c4d0851ec0bb9304d7c", @nested={0x135, 0x102, 0x0, 0x1, [@generic="1c9639c95414e30a7c760a7ef61335f628f90730b368cd610069766efd443c9feb29876be762fc2894d3212b2434144f46447344fb26b698e6f90c65b9d7ea9a7575153a3f8d19178e004c650f982413b4e5f8024ba5a9be0862731c721f6e4d11a6e44ebcd1cb51fab4c4f62ca7c8f01bc9e8610a95cd7a4399001f9760713b8f1483491d1eb6a9935d14", @generic="f82737bb90da86d659841a66cfc25a3762aa195df660eaccf0bbd15ce9f4208e071916dc010aca335ee13ab7a2f06b61b4f013b4b6653cc46f38dea4b9826031d4e5ac6c6e064374f39dcdf79443d9b25ae3eca8c66d0201b0e2c67997be526c74bd6d86aa3abb517e6945f636bcab712310149125f43e825da1639df588fe7ecf601b784d71becfb70cd87ba35e07b204897bc75a7e4b021092837355ada9a0546c4810bfe2"]}, @typed={0x8, 0x18, 0x0, 0x0, @fd=r4}]}, @NL802154_ATTR_SEC_KEY={0x1c1, 0x30, 0x0, 0x1, [@generic="1e256247657a9e2fe9bb36bbdb", @typed={0x14, 0xd9, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@loopback}, @generic="366aab423931f44bbf6a755aa453255826f730f204488a40a1e3e5f105a4dca67e02aa8b2268357d8f6c4e20e51c97454c94e3451e26d6f56ceb2851bf1b0006de413bb1916c5ce94ab08ac66bf32535fd60ff7440", @nested={0xbc, 0x8f, 0x0, 0x1, [@generic="0bf1ff2d6d16539cc408550ffd66dc434bcb0b6f4e55957454451467f5e870264bf5417c0c7da10fb265281a84ea033595878ccfb61f724960e6d6b7c92cdd896dceb0da59b1722e5549c0f2317b17e985974b36717a0dd3036b94a3544f302d92c8c22f8c367ec1c09b962855ffdbc48697bebba47d2bdade83a457efb75b48851ba6f3392ccf1033d9dfcc1e6433976b66e9e8f9e525d33fd24aaa1138c7dd4e59f00271183693cf6c4de2ad505c214428333d59049755"]}, @nested={0x10, 0xdb, 0x0, 0x1, [@typed={0x4, 0x14d}, @generic, @nested={0x4, 0x155}, @nested={0x4, 0x133}]}, @generic="0fb6f52a6d7b81ab21c65580766e531c16a8089e33feca0ab3f6b1fbfaeaaedccc3c2558cfefc74eb547de664c70e832ccff1d28f5646fe39d8d6b221671c01ccf0885ace36d78de5500c619de80c1ae726e732c45511751462e0c5345be0da1d1263ac5441e3363cd1241f2875f337cc8cc4c"]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xb}, @NL802154_ATTR_SEC_KEY={0x107, 0x30, 0x0, 0x1, [@nested={0x73, 0xb8, 0x0, 0x1, [@nested={0x4, 0xe6}, @nested={0x4, 0x151}, @generic="5241dfd49aafa1394b69664429efda3f96a3867a3f88e2098d08bb5b528398d978e1ecc66fc773d02097e8ef5ed19a4b6f0257fe622ef67cb0c4125241313c3b51ca8deaeebe939b68", @typed={0x8, 0x166, 0x0, 0x0, @pid=r10}, @typed={0x11, 0x137, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @generic="a4c1"]}, @typed={0x14, 0xea, 0x0, 0x0, @ipv6=@mcast2}, @generic="4b30c5acc22668335a71cf28d66851efed3b76c894d8bb60398b383bc8a5d8e8274e36eca4d854cb778d475a07faefb2a51fc916c0f1b9ebd3b6ec5be012b0c51ea736f3e10539f0fbc470341e5aa1d2b56253ecdc75264bb9a47689e5d42b3659be364e2415b32510f7a3ac6205efc9cffc5b6f861d8c3ec99add"]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x10000}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x1}, 0x24000410) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000c00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x188, r11, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2a25}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x64cdf23b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb95}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x8800) sched_get_priority_max$auto_SCHED_NORMAL(0x0) getsockopt$auto_SO_PROTOCOL(r5, 0x5, 0x26, &(0x7f0000000e80)='\xe1]\\.({\x00', &(0x7f0000000ec0)) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f40), r5) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000002100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000020c0)={&(0x7f0000000f80)={0x1108, r12, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x1004, 0x128, "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"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, "aaf9053488029b33e4c646aa2e8f517ab8"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xbd, 0xba, "8ca32fb70d4e1c3280f8fe47b85737482ca7fa886c34dfad8819f22c929946ba89c39e116e3bd5412ad85c58865ae88dccf7abd9b5b19bfda6b5d7ddb3f9af146f667d2da5040bf50fc2d4c00b7ff719b81dd9c28823a1ca341244966f31f032e8cd32c30a9563de8d9eca0bc5de1d2a87b3613b9847bd47639d20fa88dc7715a1730d48d51947ec0535e300e74169d1b7417753d31aa00aa7a386809d4c8b55048c1a0d3db8fa5c1a03990fa8f5d0ddbfe77d21b5fb3c00cc"}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x7f}]}, 0x1108}, 0x1, 0x0, 0x0, 0x44010}, 0x4000800) sched_get_priority_max$auto_SCHED_NORMAL(0x0) getsockopt$auto_SO_TXTIME(r3, 0xfffffffd, 0x3d, &(0x7f0000002140)='[)\x00', &(0x7f0000002180)=0xc07) sched_get_priority_max$auto_SCHED_NORMAL(0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000021c0), 0xffffffffffffffff) sched_get_priority_max$auto_SCHED_NORMAL(0x0) sched_get_priority_max$auto_SCHED_NORMAL(0x0) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002240), r6) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x38, r13, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0x6, 0x2, '\\\x00'}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@typed={0x4, 0x131}, @generic, @nested={0x4, 0x1a, 0x0, 0x1, [@generic]}, @typed={0x8, 0xcd, 0x0, 0x0, @fd=r3}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 1.257942769s ago: executing program 2 (id=2217): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x3, 0x2) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000040)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000002140)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040848}, 0x4000010) r1 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0xc028ae92, 0x0) 1.013628976s ago: executing program 2 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x600401, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x4, 0x5a, 0x1, 0x768c, 0x5, 0x1, 0x775, 0x97, 0xf5a}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(r3, 0x401c5504, r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 639.902861ms ago: executing program 2 (id=2219): socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x30, 0x4, 0x4, 0xfbe, 0xffffffffffffffff, 0xfffffffffffffffa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r2, 0x40046109, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, 0x0, 0x0) socket(0x8, 0x1, 0x33) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r6, 0x400, 0x1) writev$auto(r5, &(0x7f0000000340)={0x0, 0x18}, 0x8) 0s ago: executing program 2 (id=2220): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7fc, 0x46, 0x1, 0x8087, 0x928d, 0xb, 0xa, 0x2, 0xcb3}, 0xaa) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) mount$auto(0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000640)) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) io_uring_setup$auto(0x85, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x200000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) kernel console output (not intermixed with test programs): 467] RIP: 0033:0x7f4c4cb9ce59 [ 650.085200][T14467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.085229][T14467] RSP: 002b:00007f4c4d9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 650.085259][T14467] RAX: ffffffffffffffda RBX: 00007f4c4ce16270 RCX: 00007f4c4cb9ce59 [ 650.085279][T14467] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 650.085298][T14467] RBP: 00007f4c4cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 650.085316][T14467] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 650.085334][T14467] R13: 00007f4c4ce16308 R14: 00007f4c4ce16270 R15: 00007ffe12922fa8 [ 650.085374][T14467] [ 651.498781][T14486] random: crng reseeded on system resumption [ 652.169859][T14453] Process accounting paused [ 652.935536][T14506] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1587'. [ 653.684986][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1588'. [ 653.832027][T14513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.887216][T14513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.095964][T14519] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 654.548508][T12164] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 654.858546][T14486] Process accounting paused [ 655.278974][T12211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.380694][ T29] audit: type=1804 audit(4294967304.940:19): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1596" name="/newroot/406/file0" dev="tmpfs" ino=2136 res=1 errno=0 [ 659.541694][T14603] syz_tun: tun_chr_ioctl cmd 2147767521 [ 659.994986][T14617] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 663.055730][T14659] FAULT_INJECTION: forcing a failure. [ 663.055730][T14659] name failslab, interval 1, probability 0, space 0, times 0 [ 663.187300][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.1.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.187347][T14659] Tainted: [L]=SOFTLOCKUP [ 663.187357][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.187374][T14659] Call Trace: [ 663.187384][T14659] [ 663.187395][T14659] dump_stack_lvl+0x100/0x190 [ 663.187453][T14659] should_fail_ex.cold+0x5/0xa [ 663.187498][T14659] should_failslab+0xc2/0x120 [ 663.187536][T14659] __kmalloc_cache_noprof+0x7a/0x6f0 [ 663.187576][T14659] ? loopback_open+0xa0a/0x13f0 [ 663.187696][T14659] loopback_open+0xa0a/0x13f0 [ 663.187721][T14659] snd_pcm_open_substream+0xa76/0x1850 [ 663.187753][T14659] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 663.187788][T14659] snd_pcm_oss_open+0x735/0x1390 [ 663.187821][T14659] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 663.187845][T14659] ? __lock_acquire+0x4a5/0x2630 [ 663.187875][T14659] ? __pfx_default_wake_function+0x10/0x10 [ 663.187901][T14659] ? __lock_acquire+0x4a5/0x2630 [ 663.187934][T14659] ? do_raw_spin_lock+0x128/0x260 [ 663.187955][T14659] ? soundcore_open+0x231/0x5a0 [ 663.187980][T14659] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 663.188006][T14659] soundcore_open+0x2e3/0x5a0 [ 663.188030][T14659] ? __pfx_soundcore_open+0x10/0x10 [ 663.188052][T14659] chrdev_open+0x234/0x6a0 [ 663.188076][T14659] ? __pfx_apparmor_file_open+0x10/0x10 [ 663.188100][T14659] ? __pfx_chrdev_open+0x10/0x10 [ 663.188124][T14659] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 663.188156][T14659] do_dentry_open+0x6ab/0x14d0 [ 663.188178][T14659] ? __pfx_chrdev_open+0x10/0x10 [ 663.188205][T14659] vfs_open+0x82/0x3f0 [ 663.188233][T14659] path_openat+0x208c/0x31a0 [ 663.188271][T14659] ? __pfx_path_openat+0x10/0x10 [ 663.188322][T14659] do_file_open+0x20e/0x430 [ 663.188362][T14659] ? __pfx_do_file_open+0x10/0x10 [ 663.188427][T14659] ? alloc_fd+0x476/0x790 [ 663.188468][T14659] ? do_getname+0x191/0x390 [ 663.188514][T14659] do_sys_openat2+0x10d/0x1e0 [ 663.188557][T14659] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.188584][T14659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 663.188615][T14659] ? __fget_files+0x21f/0x3d0 [ 663.188639][T14659] __x64_sys_openat+0x12d/0x210 [ 663.188674][T14659] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.188700][T14659] ? ksys_write+0x1ac/0x250 [ 663.188723][T14659] ? rcu_is_watching+0x12/0xc0 [ 663.188746][T14659] do_syscall_64+0x115/0x840 [ 663.188769][T14659] ? clear_bhb_loop+0x40/0x90 [ 663.188791][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.188809][T14659] RIP: 0033:0x7f0b0f39ce59 [ 663.188826][T14659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.188843][T14659] RSP: 002b:00007f0b1019c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.188862][T14659] RAX: ffffffffffffffda RBX: 00007f0b0f616180 RCX: 00007f0b0f39ce59 [ 663.188873][T14659] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 663.188887][T14659] RBP: 00007f0b1019c090 R08: 0000000000000000 R09: 0000000000000000 [ 663.188903][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 663.188920][T14659] R13: 00007f0b0f616218 R14: 00007f0b0f616180 R15: 00007ffc071b0c48 [ 663.188958][T14659] [ 665.940513][T14702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1623'. [ 665.983505][T14702] FAULT_INJECTION: forcing a failure. [ 665.983505][T14702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.983571][T14702] CPU: 1 UID: 0 PID: 14702 Comm: syz.2.1623 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.983612][T14702] Tainted: [L]=SOFTLOCKUP [ 665.983622][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.983639][T14702] Call Trace: [ 665.983648][T14702] [ 665.983658][T14702] dump_stack_lvl+0x100/0x190 [ 665.983712][T14702] should_fail_ex.cold+0x5/0xa [ 665.983742][T14702] ? prepare_alloc_pages+0x16d/0x5f0 [ 665.983782][T14702] should_fail_alloc_page+0xeb/0x140 [ 665.983818][T14702] prepare_alloc_pages+0x1f0/0x5f0 [ 665.983861][T14702] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 665.983907][T14702] ? is_bpf_text_address+0x21/0x1a0 [ 665.983945][T14702] ? is_bpf_text_address+0x8a/0x1a0 [ 665.983984][T14702] ? bpf_ksym_find+0x124/0x1c0 [ 665.984034][T14702] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.984076][T14702] ? is_bpf_text_address+0x94/0x1a0 [ 665.984115][T14702] ? kernel_text_address+0x8d/0x100 [ 665.984145][T14702] ? __kernel_text_address+0xd/0x30 [ 665.984174][T14702] ? unwind_get_return_address+0x59/0xa0 [ 665.984221][T14702] ? arch_stack_walk+0xa6/0xf0 [ 665.984257][T14702] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 665.984324][T14702] ? stack_depot_save_flags+0x27/0x9d0 [ 665.984371][T14702] ? find_held_lock+0x2b/0x80 [ 665.984406][T14702] ? __refill_objects_node+0x7f5/0x8e0 [ 665.984455][T14702] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 665.984499][T14702] ? policy_nodemask+0xed/0x4f0 [ 665.984538][T14702] alloc_pages_mpol+0x1fb/0x540 [ 665.984575][T14702] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 665.984621][T14702] alloc_pages_noprof+0x1a/0x160 [ 665.984662][T14702] kimage_alloc_pages+0x72/0x380 [ 665.984706][T14702] kimage_alloc_control_pages+0x157/0xa20 [ 665.984755][T14702] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 665.984807][T14702] do_kexec_load+0x275/0x810 [ 665.984857][T14702] ? __pfx_do_kexec_load+0x10/0x10 [ 665.984900][T14702] ? _copy_from_user+0x59/0xd0 [ 665.984943][T14702] __x64_sys_kexec_load+0x1bf/0x230 [ 665.984990][T14702] do_syscall_64+0x115/0x840 [ 665.985027][T14702] ? clear_bhb_loop+0x40/0x90 [ 665.985062][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.985089][T14702] RIP: 0033:0x7f4c4cb9ce59 [ 665.985114][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.985142][T14702] RSP: 002b:00007f4c4da40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 665.985168][T14702] RAX: ffffffffffffffda RBX: 00007f4c4ce16090 RCX: 00007f4c4cb9ce59 [ 665.985188][T14702] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 665.985204][T14702] RBP: 00007f4c4cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 665.985228][T14702] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 665.985245][T14702] R13: 00007f4c4ce16128 R14: 00007f4c4ce16090 R15: 00007ffe12922fa8 [ 665.985283][T14702] [ 666.043148][T14702] kexec: Could not allocate control_code_buffer [ 667.594878][T14736] smpboot: CPU 1 is now offline [ 671.170684][T14789] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 672.223631][T12164] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 672.231215][T12164] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 672.357436][ T11] Process accounting resumed [ 674.005375][T14770] Process accounting resumed [ 674.477580][ T29] audit: type=1804 audit(4294967322.040:20): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1646" name="/newroot/sys/kernel/tracing/dynamic_events" dev="tracefs" ino=30 res=1 errno=0 [ 674.711482][T14836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 674.969223][T14850] [U] 0="/ [ 675.054285][T14850] [U] [ 675.113987][T14850] [U] EeQ@ [ 675.358230][T14845] [U]  [ 675.712597][T14843] Process accounting paused [ 675.723653][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 677.652000][T14892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1655'. [ 677.755516][T14892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.825204][T14892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.923089][T14892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.949048][T14889] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 677.980977][T14892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.027011][T14889] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 681.882836][T14945] : Can't lookup blockdev [ 682.178255][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 683.523598][T14959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 683.538073][T14952] Process accounting resumed [ 683.559239][T14959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.611805][T14959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.430265][ T29] audit: type=1800 audit(4294967331.990:21): pid=14982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1677" name="lu_gp_id" dev="configfs" ino=64304 res=0 errno=0 [ 685.190935][T12164] Bluetooth: hci3: command 0x0406 tx timeout [ 685.557512][T14997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1680'. [ 685.590418][T12164] Bluetooth: hci2: command 0x0406 tx timeout [ 685.670424][T12164] Bluetooth: hci1: command 0x0c1a tx timeout [ 685.706859][T15000] FAULT_INJECTION: forcing a failure. [ 685.706859][T15000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.795143][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.2.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.795173][T15000] Tainted: [L]=SOFTLOCKUP [ 685.795179][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.795189][T15000] Call Trace: [ 685.795196][T15000] [ 685.795203][T15000] dump_stack_lvl+0x100/0x190 [ 685.795238][T15000] should_fail_ex.cold+0x5/0xa [ 685.795261][T15000] _copy_from_user+0x2e/0xd0 [ 685.795288][T15000] move_addr_to_kernel+0x65/0x170 [ 685.795316][T15000] __sys_bind+0x11d/0x260 [ 685.795342][T15000] ? __pfx___sys_bind+0x10/0x10 [ 685.795379][T15000] __x64_sys_bind+0x72/0xb0 [ 685.795403][T15000] ? lockdep_hardirqs_on+0x78/0x100 [ 685.795428][T15000] do_syscall_64+0x115/0x840 [ 685.795452][T15000] ? clear_bhb_loop+0x40/0x90 [ 685.795473][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.795492][T15000] RIP: 0033:0x7f4c4cb9ce59 [ 685.795507][T15000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.795524][T15000] RSP: 002b:00007f4c4da61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 685.795542][T15000] RAX: ffffffffffffffda RBX: 00007f4c4ce15fa0 RCX: 00007f4c4cb9ce59 [ 685.795554][T15000] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 685.795564][T15000] RBP: 00007f4c4cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 685.795575][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.795585][T15000] R13: 00007f4c4ce16038 R14: 00007f4c4ce15fa0 R15: 00007ffe12922fa8 [ 685.795606][T15000] [ 686.170754][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.177160][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.839683][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 688.676983][T15053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 688.738700][T15053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.798561][T15053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.997523][T14405] syz.3.1569 (14405) used greatest stack depth: 18592 bytes left [ 689.430176][T15062] FAULT_INJECTION: forcing a failure. [ 689.430176][T15062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 689.525481][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.1.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.525513][T15062] Tainted: [L]=SOFTLOCKUP [ 689.525520][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.525530][T15062] Call Trace: [ 689.525537][T15062] [ 689.525544][T15062] dump_stack_lvl+0x100/0x190 [ 689.525578][T15062] should_fail_ex.cold+0x5/0xa [ 689.525597][T15062] ? prepare_alloc_pages+0x16d/0x5f0 [ 689.525622][T15062] should_fail_alloc_page+0xeb/0x140 [ 689.525645][T15062] prepare_alloc_pages+0x1f0/0x5f0 [ 689.525671][T15062] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 689.525708][T15062] ? __lock_acquire+0x4a5/0x2630 [ 689.525739][T15062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 689.525768][T15062] ? __lock_acquire+0x4a5/0x2630 [ 689.525805][T15062] ? find_held_lock+0x2b/0x80 [ 689.525826][T15062] ? is_bpf_text_address+0x8a/0x1a0 [ 689.525849][T15062] ? is_bpf_text_address+0x8a/0x1a0 [ 689.525871][T15062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 689.525896][T15062] ? policy_nodemask+0xed/0x4f0 [ 689.525919][T15062] alloc_pages_mpol+0x1fb/0x540 [ 689.525942][T15062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 689.525969][T15062] ? arch_stack_walk+0xa6/0xf0 [ 689.526003][T15062] folio_alloc_mpol_noprof+0x36/0x260 [ 689.526029][T15062] shmem_alloc_folio+0x135/0x160 [ 689.526055][T15062] shmem_alloc_and_add_folio+0x371/0xd40 [ 689.526090][T15062] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 689.526121][T15062] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 689.526144][T15062] shmem_get_folio_gfp+0x6ab/0x1900 [ 689.526167][T15062] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 689.526185][T15062] ? filemap_map_pages+0x9c1/0x2140 [ 689.526217][T15062] shmem_fault+0x1f9/0xa20 [ 689.526236][T15062] ? __pfx_shmem_fault+0x10/0x10 [ 689.526253][T15062] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 689.526283][T15062] ? __pfx_filemap_map_pages+0x10/0x10 [ 689.526313][T15062] ? find_held_lock+0x2b/0x80 [ 689.526337][T15062] __do_fault+0x10b/0x440 [ 689.526357][T15062] do_fault+0xa99/0x1750 [ 689.526379][T15062] ? __pmd_alloc+0x3fb/0x950 [ 689.526403][T15062] __handle_mm_fault+0x187d/0x2a00 [ 689.526433][T15062] ? mt_find+0x45e/0x8e0 [ 689.526460][T15062] ? __pfx___handle_mm_fault+0x10/0x10 [ 689.526484][T15062] ? __pfx_mt_find+0x10/0x10 [ 689.526521][T15062] ? find_vma+0xbf/0x140 [ 689.526539][T15062] ? __pfx_find_vma+0x10/0x10 [ 689.526560][T15062] handle_mm_fault+0x37b/0xa30 [ 689.526590][T15062] do_user_addr_fault+0x74c/0x12f0 [ 689.526614][T15062] ? trace_page_fault_kernel+0x7a/0x200 [ 689.526636][T15062] exc_page_fault+0x6f/0xd0 [ 689.526661][T15062] asm_exc_page_fault+0x26/0x30 [ 689.526679][T15062] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 689.526700][T15062] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 689.526716][T15062] RSP: 0018:ffffc900000e7d90 EFLAGS: 00050216 [ 689.526731][T15062] RAX: 0000000000000001 RBX: 0000000000000009 RCX: 0000000000000020 [ 689.526742][T15062] RDX: 0000000000000001 RSI: 0000000000000009 RDI: ffffc900000e7e30 [ 689.526752][T15062] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff5200001cfc9 [ 689.526762][T15062] R10: ffffc900000e7e4f R11: 0000000000000000 R12: 0000000000000000 [ 689.526772][T15062] R13: ffffc900000e7e30 R14: ffffc900000e7e30 R15: dffffc0000000000 [ 689.526798][T15062] _copy_from_user+0x98/0xd0 [ 689.526824][T15062] do_fcntl+0xf0c/0x1670 [ 689.526851][T15062] ? __pfx_do_fcntl+0x10/0x10 [ 689.526875][T15062] ? __fget_files+0x215/0x3d0 [ 689.526903][T15062] ? tomoyo_file_fcntl+0x6c/0xc0 [ 689.526924][T15062] __x64_sys_fcntl+0x163/0x200 [ 689.526954][T15062] do_syscall_64+0x115/0x840 [ 689.526985][T15062] ? clear_bhb_loop+0x40/0x90 [ 689.527006][T15062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.527024][T15062] RIP: 0033:0x7f0b0f39ce59 [ 689.527039][T15062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.527055][T15062] RSP: 002b:00007f0b1019c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 689.527072][T15062] RAX: ffffffffffffffda RBX: 00007f0b0f616180 RCX: 00007f0b0f39ce59 [ 689.527083][T15062] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000005 [ 689.527092][T15062] RBP: 00007f0b0f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 689.527103][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.527113][T15062] R13: 00007f0b0f616218 R14: 00007f0b0f616180 R15: 00007ffc071b0c48 [ 689.527136][T15062] [ 691.105654][T15078] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 692.430116][T15082] Process accounting resumed [ 694.282454][T14407] syz.3.1569 (14407) used greatest stack depth: 18264 bytes left [ 695.647622][T15137] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1705'. [ 696.265248][T15148] FAULT_INJECTION: forcing a failure. [ 696.265248][T15148] name failslab, interval 1, probability 0, space 0, times 0 [ 696.339044][T15148] CPU: 0 UID: 0 PID: 15148 Comm: syz.2.1707 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.339075][T15148] Tainted: [L]=SOFTLOCKUP [ 696.339082][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 696.339093][T15148] Call Trace: [ 696.339099][T15148] [ 696.339106][T15148] dump_stack_lvl+0x100/0x190 [ 696.339140][T15148] should_fail_ex.cold+0x5/0xa [ 696.339163][T15148] should_failslab+0xc2/0x120 [ 696.339184][T15148] __kmalloc_cache_noprof+0x7a/0x6f0 [ 696.339210][T15148] ? tty_open+0x139/0xfa0 [ 696.339291][T15148] ? __pfx_tty_open+0x10/0x10 [ 696.339315][T15148] tty_open+0x139/0xfa0 [ 696.339351][T15148] ? __pfx_tty_open+0x10/0x10 [ 696.339375][T15148] ? chrdev_open+0x589/0x6a0 [ 696.339398][T15148] ? chrdev_open+0x589/0x6a0 [ 696.339423][T15148] ? __pfx_tty_open+0x10/0x10 [ 696.339447][T15148] chrdev_open+0x234/0x6a0 [ 696.339470][T15148] ? __pfx_chrdev_open+0x10/0x10 [ 696.339494][T15148] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 696.339522][T15148] do_dentry_open+0x6ab/0x14d0 [ 696.339546][T15148] ? __pfx_chrdev_open+0x10/0x10 [ 696.339572][T15148] vfs_open+0x82/0x3f0 [ 696.339600][T15148] path_openat+0x208c/0x31a0 [ 696.339629][T15148] ? __pfx_path_openat+0x10/0x10 [ 696.339659][T15148] do_file_open+0x20e/0x430 [ 696.339683][T15148] ? __pfx_do_file_open+0x10/0x10 [ 696.339719][T15148] ? alloc_fd+0x476/0x790 [ 696.339743][T15148] ? do_getname+0x191/0x390 [ 696.339770][T15148] do_sys_openat2+0x10d/0x1e0 [ 696.339799][T15148] ? __pfx_do_sys_openat2+0x10/0x10 [ 696.339833][T15148] __x64_sys_openat+0x12d/0x210 [ 696.339861][T15148] ? __pfx___x64_sys_openat+0x10/0x10 [ 696.339887][T15148] ? exit_to_user_mode_loop+0xf3/0x670 [ 696.339918][T15148] ? rcu_is_watching+0x12/0xc0 [ 696.339944][T15148] do_syscall_64+0x115/0x840 [ 696.339968][T15148] ? clear_bhb_loop+0x40/0x90 [ 696.339990][T15148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.340008][T15148] RIP: 0033:0x7f4c4cb9ce59 [ 696.340024][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.340041][T15148] RSP: 002b:00007f4c4da1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 696.340060][T15148] RAX: ffffffffffffffda RBX: 00007f4c4ce16180 RCX: 00007f4c4cb9ce59 [ 696.340072][T15148] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 696.340083][T15148] RBP: 00007f4c4cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 696.340094][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.340104][T15148] R13: 00007f4c4ce16218 R14: 00007f4c4ce16180 R15: 00007ffe12922fa8 [ 696.340127][T15148] [ 696.678562][ T29] audit: type=1800 audit(4294967344.190:22): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1708" name="members" dev="configfs" ino=65260 res=0 errno=0 [ 696.808211][T15158] vivid-007: ================= START STATUS ================= [ 696.816210][T15158] vivid-007: Generate PTS: true [ 696.821184][T15158] vivid-007: Generate SCR: true [ 696.826097][T15158] tpg source WxH: 320x240 (Y'CbCr) [ 696.831292][T15158] tpg field: 1 [ 696.834763][T15158] tpg crop: (0,0)/320x240 [ 696.839123][T15158] tpg compose: (0,0)/320x240 [ 696.844855][T15158] tpg colorspace: 8 [ 696.848756][T15158] tpg transfer function: 0/0 [ 696.853405][T15158] tpg Y'CbCr encoding: 0/0 [ 696.858030][T15158] tpg quantization: 0/0 [ 696.862228][T15158] tpg RGB range: 0/2 [ 696.866148][T15158] vivid-007: ================== END STATUS ================== [ 699.247835][T15205] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1721'. [ 699.401965][T15214] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.288296][T15238] zswap: compressor not available [ 702.321860][T15286] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 703.340482][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1739'. [ 703.340574][T15299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1739'. [ 703.784326][T15304] bridge0: port 3(dummy0) entered blocking state [ 703.818542][T15304] bridge0: port 3(dummy0) entered disabled state [ 703.860793][T15304] dummy0: entered allmulticast mode [ 703.889353][T15304] dummy0: entered promiscuous mode [ 703.922593][T15304] bridge0: port 3(dummy0) entered blocking state [ 703.929091][T15304] bridge0: port 3(dummy0) entered forwarding state [ 704.482124][T15327] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 704.827969][T15330] random: crng reseeded on system resumption [ 704.889298][T15330] Unrecognized hibernate image header format! [ 704.910071][T15330] PM: hibernation: Image mismatch: architecture specific data [ 706.186471][T15304] Process accounting paused [ 706.600012][T15356] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 706.673194][T15357] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 708.447156][T15397] input: jJǸ-9%vJ86 as /devices/virtual/input/input13 [ 710.581141][T15440] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 711.433417][T15458] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 711.561623][T15449] netlink: 956 bytes leftover after parsing attributes in process `syz.3.1768'. [ 712.804887][T15482] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.898641][T12164] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 714.534095][T15518] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 715.035557][T15526] Process accounting paused [ 716.549441][T15525] kexec: Could not allocate control_code_buffer [ 717.069102][T15574] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 717.601317][ T29] audit: type=1800 audit(4294967367.170:23): pid=15575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1788" name="features" dev="configfs" ino=67851 res=0 errno=0 [ 719.142669][T15613] i2c i2c-0: delete_device: Can't parse I2C address [ 719.199079][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1795'. [ 719.300151][T15613] bridge0: entered promiscuous mode [ 719.336564][T15613] bridge0: entered allmulticast mode [ 720.465852][T15640] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 721.415986][T15661] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 721.495413][T15662] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1805'. [ 723.613967][T15689] Process accounting paused [ 725.398583][T15720] sctp: [Deprecated]: syz.3.1816 (pid 15720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.398583][T15720] Use struct sctp_sack_info instead [ 727.129266][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 728.245183][T15782] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 729.776494][T15807] input: f as /devices/virtual/input/input15 [ 729.989399][T12164] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 732.541783][T15873] random: crng reseeded on system resumption [ 735.033077][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 736.092694][T15948] usb usb22: usbfs: process 15948 (syz.0.1856) did not claim interface 1 before use [ 740.132455][T15999] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 741.397763][T16033] FAULT_INJECTION: forcing a failure. [ 741.397763][T16033] name failslab, interval 1, probability 0, space 0, times 0 [ 741.413212][T16028] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1872'. [ 741.514440][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.2.1873 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.514470][T16033] Tainted: [L]=SOFTLOCKUP [ 741.514477][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.514487][T16033] Call Trace: [ 741.514492][T16033] [ 741.514499][T16033] dump_stack_lvl+0x100/0x190 [ 741.514533][T16033] should_fail_ex.cold+0x5/0xa [ 741.514558][T16033] should_failslab+0xc2/0x120 [ 741.514579][T16033] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 741.514607][T16033] ? do_getname+0x35/0x390 [ 741.514636][T16033] do_getname+0x35/0x390 [ 741.514663][T16033] do_sys_openat2+0xc5/0x1e0 [ 741.514690][T16033] ? __pfx_do_sys_openat2+0x10/0x10 [ 741.514724][T16033] __x64_sys_openat+0x12d/0x210 [ 741.514751][T16033] ? __pfx___x64_sys_openat+0x10/0x10 [ 741.514786][T16033] ? rcu_is_watching+0x12/0xc0 [ 741.514809][T16033] do_syscall_64+0x115/0x840 [ 741.514832][T16033] ? clear_bhb_loop+0x40/0x90 [ 741.514853][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.514871][T16033] RIP: 0033:0x7f4c4cb5d68e [ 741.514886][T16033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.514903][T16033] RSP: 002b:00007f4c4da3fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 741.514920][T16033] RAX: ffffffffffffffda RBX: 00007f4c4da406c0 RCX: 00007f4c4cb5d68e [ 741.514931][T16033] RDX: 0000000000000000 RSI: 00007f4c4da3ff90 RDI: ffffffffffffff9c [ 741.514941][T16033] RBP: 00007f4c4cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 741.514959][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.514969][T16033] R13: 00007f4c4ce16128 R14: 00007f4c4ce16090 R15: 00007ffe12922fa8 [ 741.514991][T16033] [ 742.818928][T16045] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 743.000102][T16053] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 744.082097][T16068] blktrace: Concurrent blktraces are not allowed on nbd5 [ 746.071667][T16094] Line length is too long: Should be less than 4094 [ 746.999534][T16090] Process accounting resumed [ 747.177472][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1886'. [ 747.341042][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.341117][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.841245][T16148] sysfs_service_op_store: Client not running :-5: [ 754.470254][T16228] Process accounting resumed [ 754.717976][T16236] futex_wake_op: syz.2.1914 tries to shift op by -2048; fix this program [ 755.666748][T16244] FAULT_INJECTION: forcing a failure. [ 755.666748][T16244] name fail_futex, interval 1, probability 0, space 0, times 0 [ 755.737566][T16244] CPU: 0 UID: 0 PID: 16244 Comm: syz.2.1916 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.737597][T16244] Tainted: [L]=SOFTLOCKUP [ 755.737604][T16244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.737615][T16244] Call Trace: [ 755.737621][T16244] [ 755.737628][T16244] dump_stack_lvl+0x100/0x190 [ 755.737664][T16244] should_fail_ex.cold+0x5/0xa [ 755.737687][T16244] get_futex_key+0x1d2/0x1510 [ 755.737717][T16244] ? __pfx_get_futex_key+0x10/0x10 [ 755.737746][T16244] ? find_held_lock+0x2b/0x80 [ 755.737767][T16244] ? futex_wake+0x456/0x530 [ 755.737793][T16244] futex_wake+0xea/0x530 [ 755.737816][T16244] ? __pfx_futex_wake+0x10/0x10 [ 755.737839][T16244] ? find_held_lock+0x2b/0x80 [ 755.737859][T16244] ? do_sys_openat2+0x1b4/0x1e0 [ 755.737891][T16244] do_futex+0x32b/0x350 [ 755.737909][T16244] ? __pfx_do_futex+0x10/0x10 [ 755.737933][T16244] __x64_sys_futex+0x34f/0x4d0 [ 755.737953][T16244] ? fdget_pos+0x2c0/0x380 [ 755.737975][T16244] ? __pfx___x64_sys_futex+0x10/0x10 [ 755.737993][T16244] ? ksys_write+0x1ac/0x250 [ 755.738012][T16244] ? __pfx_ksys_write+0x10/0x10 [ 755.738034][T16244] ? rcu_is_watching+0x12/0xc0 [ 755.738058][T16244] do_syscall_64+0x115/0x840 [ 755.738082][T16244] ? clear_bhb_loop+0x40/0x90 [ 755.738103][T16244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.738122][T16244] RIP: 0033:0x7f4c4cb9ce59 [ 755.738138][T16244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.738156][T16244] RSP: 002b:00007f4c4da1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 755.738173][T16244] RAX: ffffffffffffffda RBX: 00007f4c4ce16188 RCX: 00007f4c4cb9ce59 [ 755.738185][T16244] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c4ce1618c [ 755.738196][T16244] RBP: 00007f4c4ce16180 R08: 0000000000000001 R09: 0000000000000000 [ 755.738206][T16244] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 755.738217][T16244] R13: 00007f4c4ce16218 R14: 00007ffe12922ec0 R15: 00007ffe12922fa8 [ 755.738238][T16244] [ 757.640123][T16266] FAULT_INJECTION: forcing a failure. [ 757.640123][T16266] name fail_futex, interval 1, probability 0, space 0, times 0 [ 757.693021][T16266] CPU: 0 UID: 0 PID: 16266 Comm: syz.2.1921 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.693051][T16266] Tainted: [L]=SOFTLOCKUP [ 757.693057][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.693067][T16266] Call Trace: [ 757.693073][T16266] [ 757.693079][T16266] dump_stack_lvl+0x100/0x190 [ 757.693114][T16266] should_fail_ex.cold+0x5/0xa [ 757.693136][T16266] get_futex_key+0x1d2/0x1510 [ 757.693167][T16266] ? __pfx_get_futex_key+0x10/0x10 [ 757.693194][T16266] ? fault_signal_pending+0x28/0x1d0 [ 757.693215][T16266] ? rcu_is_watching+0x12/0xc0 [ 757.693237][T16266] futex_wake+0xea/0x530 [ 757.693269][T16266] ? __pfx_futex_wake+0x10/0x10 [ 757.693298][T16266] do_futex+0x32b/0x350 [ 757.693317][T16266] ? __pfx_do_futex+0x10/0x10 [ 757.693332][T16266] ? ksys_msgctl.constprop.0+0x1a8/0x340 [ 757.693362][T16266] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 757.693392][T16266] __x64_sys_futex+0x34f/0x4d0 [ 757.693413][T16266] ? __pfx___x64_sys_futex+0x10/0x10 [ 757.693435][T16266] ? rcu_is_watching+0x12/0xc0 [ 757.693457][T16266] do_syscall_64+0x115/0x840 [ 757.693481][T16266] ? clear_bhb_loop+0x40/0x90 [ 757.693502][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.693519][T16266] RIP: 0033:0x7f4c4cb9ce59 [ 757.693534][T16266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.693551][T16266] RSP: 002b:00007f4c4da610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.693569][T16266] RAX: ffffffffffffffda RBX: 00007f4c4ce15fa8 RCX: 00007f4c4cb9ce59 [ 757.693580][T16266] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c4ce15fac [ 757.693590][T16266] RBP: 00007f4c4ce15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 757.693601][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.693610][T16266] R13: 00007f4c4ce16038 R14: 00007ffe12922ec0 R15: 00007ffe12922fa8 [ 757.693631][T16266] [ 757.920208][ T5738] Process accounting resumed [ 758.435422][T16282] FAULT_INJECTION: forcing a failure. [ 758.435422][T16282] name failslab, interval 1, probability 0, space 0, times 0 [ 758.464293][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.1.1923 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.464325][T16282] Tainted: [L]=SOFTLOCKUP [ 758.464332][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.464343][T16282] Call Trace: [ 758.464349][T16282] [ 758.464357][T16282] dump_stack_lvl+0x100/0x190 [ 758.464391][T16282] should_fail_ex.cold+0x5/0xa [ 758.464414][T16282] should_failslab+0xc2/0x120 [ 758.464437][T16282] __kmalloc_cache_noprof+0x7a/0x6f0 [ 758.464463][T16282] ? watch_queue_init+0x45/0x170 [ 758.464479][T16282] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 758.464503][T16282] watch_queue_init+0x45/0x170 [ 758.464521][T16282] create_pipe_files+0x672/0x970 [ 758.464547][T16282] do_pipe2+0xbd/0x1e0 [ 758.464568][T16282] ? __pfx_do_pipe2+0x10/0x10 [ 758.464591][T16282] ? set_cred_ucounts+0x10f/0x200 [ 758.464615][T16282] __x64_sys_pipe2+0x54/0x80 [ 758.464638][T16282] do_syscall_64+0x115/0x840 [ 758.464664][T16282] ? clear_bhb_loop+0x40/0x90 [ 758.464685][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.464703][T16282] RIP: 0033:0x7f0b0f39ce59 [ 758.464718][T16282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.464736][T16282] RSP: 002b:00007f0b101de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 758.464755][T16282] RAX: ffffffffffffffda RBX: 00007f0b0f615fa0 RCX: 00007f0b0f39ce59 [ 758.464766][T16282] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 758.464785][T16282] RBP: 00007f0b0f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 758.464796][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.464807][T16282] R13: 00007f0b0f616038 R14: 00007f0b0f615fa0 R15: 00007ffc071b0c48 [ 758.464830][T16282] [ 758.727735][T16265] Process accounting resumed [ 760.635858][T16305] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 760.712257][T16305] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 760.761088][T16305] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 761.199346][T16312] zswap: compressor not available [ 761.245705][T16317] skbuff: bad partial csum: csum=65535/1 headroom=4 headlen=65543 [ 761.285761][T11039] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 761.301406][T11039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 761.310142][T11039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 761.323000][T11039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.336630][T11039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 763.198229][T16357] vivid-011: ================= START STATUS ================= [ 763.248901][T16357] vivid-011: Radio HW Seek Mode: Bounded [ 763.276822][T16357] vivid-011: Radio Programmable HW Seek: false [ 763.344668][T16357] vivid-011: RDS Rx I/O Mode: Block I/O [ 763.354642][T16319] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.382472][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.398350][T16357] vivid-011: Generate RBDS Instead of RDS: false [ 763.413344][T11039] Bluetooth: hci1: command tx timeout [ 763.426407][T16319] bridge_slave_0: entered allmulticast mode [ 763.456884][T16357] vivid-011: RDS Reception: true [ 763.464297][T16319] bridge_slave_0: entered promiscuous mode [ 763.535653][T16357] vivid-011: RDS Program Type: 0 inactive [ 763.593833][T16319] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.612772][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.621446][T16357] vivid-011: RDS PS Name: inactive [ 763.643318][T16319] bridge_slave_1: entered allmulticast mode [ 763.653774][T16357] vivid-011: RDS Radio Text: inactive [ 763.661081][T16319] bridge_slave_1: entered promiscuous mode [ 763.682470][T16357] vivid-011: RDS Traffic Announcement: false inactive [ 763.725090][T16357] vivid-011: RDS Traffic Program: false inactive [ 763.771939][T16357] vivid-011: RDS Music: false inactive [ 763.823111][T16357] vivid-011: ================== END STATUS ================== [ 763.878674][T16319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.970191][T16319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.094340][T16365] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 764.148782][T16365] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 764.186825][T16319] team0: Port device team_slave_0 added [ 764.223439][T16366] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 764.235143][T16319] team0: Port device team_slave_1 added [ 764.284579][T16365] snd_virmidi snd_virmidi.0: control 53842:9:2:y:0 is already present [ 764.313223][T16319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.325394][T16366] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 764.334284][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.410416][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.452838][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.486803][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.555628][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 764.575381][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.594862][T16369] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 764.621364][T16369] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1935'. [ 764.730433][T16319] hsr_slave_0: entered promiscuous mode [ 764.753624][T16319] hsr_slave_1: entered promiscuous mode [ 764.780408][T16319] debugfs: 'hsr0' already exists in 'hsr' [ 764.798668][T16319] Cannot create hsr debugfs directory [ 765.491332][T11039] Bluetooth: hci1: command tx timeout [ 765.659614][T16319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 765.678964][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 765.693423][T16319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 765.712298][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.725777][T16319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 765.747507][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.770342][T16319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 765.797429][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.935589][T16319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.962278][T16319] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.977170][T12216] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.984415][T12216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.012196][T12216] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.019418][T12216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.329460][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1938'. [ 766.359122][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1938'. [ 766.996861][T12164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 767.008099][T12164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 767.021674][T12164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 767.031880][T12164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 767.048378][T12164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.570406][T11039] Bluetooth: hci1: command tx timeout [ 767.602899][T16319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.681811][T16319] veth0_vlan: entered promiscuous mode [ 768.747439][T16319] veth1_vlan: entered promiscuous mode [ 768.934540][T16319] veth0_macvtap: entered promiscuous mode [ 769.011799][T16319] veth1_macvtap: entered promiscuous mode [ 769.091644][T11039] Bluetooth: hci4: command tx timeout [ 769.328187][T16454] nbd: must specify at least one socket [ 769.471500][T16319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.650417][T11039] Bluetooth: hci1: command tx timeout [ 769.704041][T16319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.191876][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.213918][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.238587][T16409] bridge_slave_0: entered allmulticast mode [ 770.261614][T16409] bridge_slave_0: entered promiscuous mode [ 770.301038][T11008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.326712][T11008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.384842][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.398445][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.415875][T16409] bridge_slave_1: entered allmulticast mode [ 770.429831][T16409] bridge_slave_1: entered promiscuous mode [ 770.460337][T11008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.600356][T11008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.861826][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.985520][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.169229][T11039] Bluetooth: hci4: command tx timeout [ 771.191889][T16409] team0: Port device team_slave_0 added [ 771.225625][T16409] team0: Port device team_slave_1 added [ 771.264501][T12216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.320970][T12216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.424389][T16409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.449238][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.541842][T16409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.606997][T16409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.638571][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.742332][T16409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.772240][T12215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.803279][T12215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.972076][T16462] FAULT_INJECTION: forcing a failure. [ 771.972076][T16462] name failslab, interval 1, probability 0, space 0, times 0 [ 772.071221][T16462] CPU: 0 UID: 0 PID: 16462 Comm: syz.1.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.071252][T16462] Tainted: [L]=SOFTLOCKUP [ 772.071259][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.071269][T16462] Call Trace: [ 772.071276][T16462] [ 772.071283][T16462] dump_stack_lvl+0x100/0x190 [ 772.071323][T16462] should_fail_ex.cold+0x5/0xa [ 772.071346][T16462] should_failslab+0xc2/0x120 [ 772.071370][T16462] __kmalloc_cache_noprof+0x7a/0x6f0 [ 772.071397][T16462] ? device_add+0xd3a/0x1950 [ 772.071423][T16462] device_add+0xd3a/0x1950 [ 772.071440][T16462] ? dev_set_name+0xc7/0x100 [ 772.071463][T16462] ? __pfx_dev_set_name+0x10/0x10 [ 772.071485][T16462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.071511][T16462] ? __pfx_device_add+0x10/0x10 [ 772.071529][T16462] ? lockdep_init_map_type+0x5c/0x250 [ 772.071560][T16462] ? __init_waitqueue_head+0xca/0x150 [ 772.071585][T16462] netdev_register_kobject+0x1a9/0x3d0 [ 772.071614][T16462] register_netdevice+0x151c/0x24b0 [ 772.071640][T16462] ? __pfx_register_netdevice+0x10/0x10 [ 772.071659][T16462] ? net_generic+0xea/0x2a0 [ 772.071683][T16462] ppp_dev_configure+0x986/0xcb0 [ 772.071706][T16462] ppp_ioctl+0x9d7/0x27c0 [ 772.071726][T16462] ? find_held_lock+0x2b/0x80 [ 772.071748][T16462] ? __pfx_ppp_ioctl+0x10/0x10 [ 772.071774][T16462] ? __fget_files+0x21f/0x3d0 [ 772.071800][T16462] ? __pfx_ppp_ioctl+0x10/0x10 [ 772.071819][T16462] __x64_sys_ioctl+0x18e/0x210 [ 772.071839][T16462] do_syscall_64+0x115/0x840 [ 772.071866][T16462] ? clear_bhb_loop+0x40/0x90 [ 772.071888][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.071906][T16462] RIP: 0033:0x7f0b0f39ce59 [ 772.071922][T16462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.071940][T16462] RSP: 002b:00007f0b101de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.071958][T16462] RAX: ffffffffffffffda RBX: 00007f0b0f615fa0 RCX: 00007f0b0f39ce59 [ 772.071970][T16462] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000011 [ 772.071981][T16462] RBP: 00007f0b0f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 772.071992][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.072003][T16462] R13: 00007f0b0f616038 R14: 00007f0b0f615fa0 R15: 00007ffc071b0c48 [ 772.072026][T16462] [ 773.154855][T16409] hsr_slave_0: entered promiscuous mode [ 773.175287][T16409] hsr_slave_1: entered promiscuous mode [ 773.196440][T16409] debugfs: 'hsr0' already exists in 'hsr' [ 773.219767][T16409] Cannot create hsr debugfs directory [ 773.247121][T11039] Bluetooth: hci4: command tx timeout [ 773.268911][T16476] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1948'. [ 774.590000][T16409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 774.622372][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 774.708796][T16409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 774.731647][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 774.798376][T16409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 774.817187][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.863545][T16409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 774.887771][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 775.326244][T11039] Bluetooth: hci4: command tx timeout [ 775.582159][T16504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 775.643300][T16504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 775.681131][T16504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 775.735788][T16504] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 775.748252][T16519] bridge0: port 3(team0) entered blocking state [ 775.772728][T16519] bridge0: port 3(team0) entered disabled state [ 775.783578][T16504] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 775.793587][T16519] team0: entered allmulticast mode [ 775.813864][T16504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 775.821186][T16519] team_slave_0: entered allmulticast mode [ 775.827616][T16504] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 775.834034][T16519] team_slave_1: entered allmulticast mode [ 775.851385][T16519] team0: entered promiscuous mode [ 775.860802][T16504] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 775.867075][T16519] team_slave_0: entered promiscuous mode [ 775.891250][T16519] team_slave_1: entered promiscuous mode [ 775.914124][T16519] bridge0: port 3(team0) entered blocking state [ 775.920543][T16519] bridge0: port 3(team0) entered forwarding state [ 776.099695][T16409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.323403][T16409] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.372606][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.379763][T10989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.468129][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.475529][T10989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.582176][T16409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.626797][T16409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.013753][T16532] Process accounting paused [ 777.165497][T11039] Bluetooth: hci3: command 0x0406 tx timeout [ 777.476967][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.644876][T11039] Bluetooth: hci2: command 0x0406 tx timeout [ 777.725188][T11039] Bluetooth: hci1: command 0x0c1a tx timeout [ 777.752101][T16565] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5638] was attempted by ""[16565] [ 777.885424][T11039] Bluetooth: hci4: command 0x0c1a tx timeout [ 777.989468][T16409] veth0_vlan: entered promiscuous mode [ 778.020130][T16409] veth1_vlan: entered promiscuous mode [ 778.117965][T16409] veth0_macvtap: entered promiscuous mode [ 778.152716][T16409] veth1_macvtap: entered promiscuous mode [ 778.183751][T16409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.380600][T16409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.452283][T12223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.475816][T12223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.528153][T12223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.598617][T12223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.898593][T10989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.930428][T10989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.109009][T10989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.145312][T10989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.803763][T11039] Bluetooth: hci1: command 0x0c1a tx timeout [ 779.966610][T11039] Bluetooth: hci4: command 0x0c1a tx timeout [ 781.884448][T11039] Bluetooth: hci1: command 0x0c1a tx timeout [ 782.042484][T11039] Bluetooth: hci4: command 0x0c1a tx timeout [ 791.817919][T12164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.834676][T12164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.848380][T12164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.856272][T12164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 791.868908][T12164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.391048][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.398789][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.406449][T16630] bridge_slave_0: entered allmulticast mode [ 792.415955][T16630] bridge_slave_0: entered promiscuous mode [ 792.423967][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.431582][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.439974][T16630] bridge_slave_1: entered allmulticast mode [ 792.447515][T16630] bridge_slave_1: entered promiscuous mode [ 792.482956][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.496446][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.529836][T16630] team0: Port device team_slave_0 added [ 792.537972][T16630] team0: Port device team_slave_1 added [ 792.564790][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.572362][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.602107][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.615580][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.622970][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.651765][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.701660][T16630] hsr_slave_0: entered promiscuous mode [ 792.711436][T16630] hsr_slave_1: entered promiscuous mode [ 792.718654][T16630] debugfs: 'hsr0' already exists in 'hsr' [ 792.724422][T16630] Cannot create hsr debugfs directory [ 792.914740][T16630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 792.925807][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.936241][T16630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 792.949589][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.958004][T16630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 792.971347][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.981081][T16630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 792.992448][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.022712][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.029880][T16630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.037352][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.044552][T16630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.106139][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.122523][T10989] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.131152][T10989] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.145734][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.162706][T12211] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.169884][T12211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.210120][T12211] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.217311][T12211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.588135][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.960101][T12164] Bluetooth: hci5: command tx timeout [ 793.987089][T11039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 794.005841][T11039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 794.017283][T11039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 794.031550][T11039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 794.044857][T11039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 794.114075][T16630] veth0_vlan: entered promiscuous mode [ 794.148605][T16630] veth1_vlan: entered promiscuous mode [ 794.210006][T16630] veth0_macvtap: entered promiscuous mode [ 794.230180][T16630] veth1_macvtap: entered promiscuous mode [ 794.272196][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.300025][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.334700][T11008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.359098][T11008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.399786][T11008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.422588][T11008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.661321][T10989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.700821][T10989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.781936][T12215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.802095][T12215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.450340][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.458092][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.465382][T16673] bridge_slave_0: entered allmulticast mode [ 795.475090][T16673] bridge_slave_0: entered promiscuous mode [ 795.486592][T16673] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.493945][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.504038][T16673] bridge_slave_1: entered allmulticast mode [ 795.511773][T16673] bridge_slave_1: entered promiscuous mode [ 795.552386][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.569951][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.603912][T16673] team0: Port device team_slave_0 added [ 795.613291][T16673] team0: Port device team_slave_1 added [ 795.654138][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.661613][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.690281][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.704305][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.711761][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.743756][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.794212][T16673] hsr_slave_0: entered promiscuous mode [ 795.810990][T16673] hsr_slave_1: entered promiscuous mode [ 795.817981][T16673] debugfs: 'hsr0' already exists in 'hsr' [ 795.823822][T16673] Cannot create hsr debugfs directory [ 796.036880][T11039] Bluetooth: hci5: command tx timeout [ 796.128718][T11039] Bluetooth: hci6: command tx timeout [ 796.430478][T16673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 796.451567][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.472309][T16673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 796.501177][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.516615][T16673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 796.539968][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.558791][T16673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 796.578607][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.677438][T16673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.700039][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.717101][T12216] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.724343][T12216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.739325][T12216] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.746574][T12216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.248122][T16673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.591682][T16728] FAULT_INJECTION: forcing a failure. [ 797.591682][T16728] name failslab, interval 1, probability 0, space 0, times 0 [ 797.648458][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.6.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.648487][T16728] Tainted: [L]=SOFTLOCKUP [ 797.648494][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.648504][T16728] Call Trace: [ 797.648511][T16728] [ 797.648518][T16728] dump_stack_lvl+0x100/0x190 [ 797.648553][T16728] should_fail_ex.cold+0x5/0xa [ 797.648576][T16728] should_failslab+0xc2/0x120 [ 797.648598][T16728] __kmalloc_cache_noprof+0x7a/0x6f0 [ 797.648626][T16728] ? crtc_or_fake_commit.part.0+0x7f/0x110 [ 797.648702][T16728] crtc_or_fake_commit.part.0+0x7f/0x110 [ 797.648724][T16728] drm_atomic_helper_setup_commit+0xfae/0x14f0 [ 797.648774][T16728] drm_atomic_helper_commit+0xa9/0x380 [ 797.648798][T16728] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 797.648823][T16728] drm_atomic_commit+0x230/0x300 [ 797.648846][T16728] ? __pfx_drm_atomic_commit+0x10/0x10 [ 797.648867][T16728] ? __pfx___drm_printfn_info+0x10/0x10 [ 797.648913][T16728] ? drm_client_rotation+0x451/0x6a0 [ 797.648970][T16728] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 797.649013][T16728] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 797.649064][T16728] drm_client_modeset_commit_locked+0x14d/0x580 [ 797.649095][T16728] drm_client_modeset_commit+0x4f/0x80 [ 797.649121][T16728] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 797.649178][T16728] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 797.649206][T16728] drm_fbdev_client_restore+0x1b/0x30 [ 797.649240][T16728] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 797.649258][T16728] drm_client_dev_restore+0x205/0x2a0 [ 797.649290][T16728] drm_release+0x2c6/0x360 [ 797.649314][T16728] ? __pfx_drm_release+0x10/0x10 [ 797.649337][T16728] __fput+0x3ff/0xb50 [ 797.649369][T16728] task_work_run+0x150/0x240 [ 797.649389][T16728] ? __pfx_task_work_run+0x10/0x10 [ 797.649408][T16728] ? rcu_is_watching+0x12/0xc0 [ 797.649431][T16728] exit_to_user_mode_loop+0x157/0x670 [ 797.649460][T16728] ? rcu_is_watching+0x12/0xc0 [ 797.649482][T16728] do_syscall_64+0x652/0x840 [ 797.649507][T16728] ? clear_bhb_loop+0x40/0x90 [ 797.649530][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.649557][T16728] RIP: 0033:0x7ff249b9ce59 [ 797.649573][T16728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.649591][T16728] RSP: 002b:00007ff24a9f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 797.649610][T16728] RAX: 0000000000000000 RBX: 00007ff249e15fa0 RCX: 00007ff249b9ce59 [ 797.649623][T16728] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 797.649634][T16728] RBP: 00007ff249c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 797.649645][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.649656][T16728] R13: 00007ff249e16038 R14: 00007ff249e15fa0 R15: 00007ffe4eabea48 [ 797.649681][T16728] [ 798.167465][T12164] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 798.178674][T12164] Bluetooth: hci5: command tx timeout [ 798.257636][T10988] Bluetooth: hci6: command tx timeout [ 798.264869][T12164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 798.316428][T10988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 798.460121][T12164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 798.490092][T12164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 798.545501][T16743] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1984'. [ 798.888355][T16673] veth0_vlan: entered promiscuous mode [ 798.933004][T16673] veth1_vlan: entered promiscuous mode [ 798.999146][T16673] veth0_macvtap: entered promiscuous mode [ 799.023095][T16673] veth1_macvtap: entered promiscuous mode [ 799.098701][T16673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.150751][T16673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.185680][T12216] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.199055][T12216] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.259035][T12216] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.280354][T12216] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.578703][T12216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.608433][T12216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.678638][T12216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.699909][T12216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.990202][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.007616][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.025685][T16731] bridge_slave_0: entered allmulticast mode [ 800.049107][T16731] bridge_slave_0: entered promiscuous mode [ 800.069069][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.085135][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.102560][T16731] bridge_slave_1: entered allmulticast mode [ 800.124021][T16731] bridge_slave_1: entered promiscuous mode [ 800.174572][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.186601][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.196748][T12164] Bluetooth: hci5: command tx timeout [ 800.226689][T16731] team0: Port device team_slave_0 added [ 800.236721][T16731] team0: Port device team_slave_1 added [ 800.274231][T12164] Bluetooth: hci6: command tx timeout [ 800.302009][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.319247][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.392647][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.417348][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.432979][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.505465][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.593671][T12164] Bluetooth: hci7: command tx timeout [ 800.634927][T16731] hsr_slave_0: entered promiscuous mode [ 800.655344][T16731] hsr_slave_1: entered promiscuous mode [ 800.669780][T16731] debugfs: 'hsr0' already exists in 'hsr' [ 800.683860][T16731] Cannot create hsr debugfs directory [ 801.214872][T12164] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 801.367819][T10988] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 801.391044][T10988] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 801.401040][T10988] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 801.415428][T10988] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 801.425728][T10988] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 801.568759][T16731] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 801.628848][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.662387][T16731] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 801.717406][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.747187][T16731] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 801.778917][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.899483][T16731] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 801.940256][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.353030][T10988] Bluetooth: hci6: command tx timeout [ 802.673188][T10988] Bluetooth: hci7: command tx timeout [ 802.694502][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.794501][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.865452][T12211] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.872648][T12211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.920380][T13622] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.927601][T13622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.473401][T10988] Bluetooth: hci8: command tx timeout [ 803.565858][T16772] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.585911][T16772] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.605663][T16772] bridge_slave_0: entered allmulticast mode [ 803.623571][T16772] bridge_slave_0: entered promiscuous mode [ 803.657480][T16772] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.683057][T16772] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.700481][T16772] bridge_slave_1: entered allmulticast mode [ 803.720250][T16772] bridge_slave_1: entered promiscuous mode [ 803.821242][T16772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.865880][T16772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.995116][T16772] team0: Port device team_slave_0 added [ 804.029204][T16772] team0: Port device team_slave_1 added [ 804.131867][T16772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.150350][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.182717][T16772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.204381][T16772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.221343][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.304050][T16772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.387218][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.432713][T10988] Bluetooth: hci6: command 0x2016 tx timeout [ 804.522752][T16772] hsr_slave_0: entered promiscuous mode [ 804.539472][T16772] hsr_slave_1: entered promiscuous mode [ 804.552725][T16772] debugfs: 'hsr0' already exists in 'hsr' [ 804.569778][T16772] Cannot create hsr debugfs directory [ 804.751632][T11039] Bluetooth: hci7: command tx timeout [ 804.949857][T16731] veth0_vlan: entered promiscuous mode [ 805.025690][T16731] veth1_vlan: entered promiscuous mode [ 805.089665][T16772] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 805.099855][T16772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.115092][T16772] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 805.127166][T16772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.146074][T16772] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 805.159865][T16772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.178295][T16731] veth0_macvtap: entered promiscuous mode [ 805.186749][T16772] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 805.199772][T16772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.212978][T16731] veth1_macvtap: entered promiscuous mode [ 805.249055][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.269480][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.296960][T12211] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.328398][T12211] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.354811][T12211] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.390015][T12211] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.553677][T11039] Bluetooth: hci8: command tx timeout [ 805.590220][T11008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.620403][T11008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.671613][T16772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.679618][T12223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.706532][T12223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.719033][T16772] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.744021][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.751199][T12223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.799424][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.806657][T12223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.914456][T16772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.325538][T16845] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 806.511171][T11039] Bluetooth: hci6: command 0x2016 tx timeout [ 806.665410][T16772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.834690][T11039] Bluetooth: hci7: command tx timeout [ 807.189130][T16772] veth0_vlan: entered promiscuous mode [ 807.223523][T16772] veth1_vlan: entered promiscuous mode [ 807.281636][T16772] veth0_macvtap: entered promiscuous mode [ 807.307784][T16772] veth1_macvtap: entered promiscuous mode [ 807.351541][T16772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.380271][T16772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.432373][T11008] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.454481][T11008] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.512768][T11008] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.555475][T11008] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.632751][T11039] Bluetooth: hci8: command tx timeout [ 807.758921][T11008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.804051][T11008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.868084][T12215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.897247][T12215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.760245][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.766672][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.097083][T16882] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 809.171629][T16882] CIFS mount error: No usable UNC path provided in device string! [ 809.171629][T16882] [ 809.199937][T16882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 809.708911][T11039] Bluetooth: hci8: command tx timeout [ 809.962079][T11039] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 810.270810][T16894] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 810.317949][T16894] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 810.335148][T16894] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 810.371634][T16894] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 810.396808][T16894] page dumped because: unmovable page [ 810.411043][T16894] page_owner tracks the page as allocated [ 810.439910][T16894] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1609528375, free_ts 0 [ 810.476990][T16894] register_early_stack+0x74/0xaf [ 810.493053][T16894] init_page_owner+0x4c/0xa10 [ 810.504185][T16894] page_ext_init+0x71d/0x780 [ 810.526372][T16894] mm_core_init+0x229/0x270 [ 810.536475][T16894] page_owner free stack trace missing [ 814.679429][ T5365] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 815.733764][T10988] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 815.748741][T10988] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 815.762566][T10988] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 815.772140][T10988] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 815.794320][T10988] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 817.867008][T16959] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.874555][T11039] Bluetooth: hci9: command tx timeout [ 817.892193][T16959] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.899794][T16959] bridge_slave_0: entered allmulticast mode [ 817.907179][T16959] bridge_slave_0: entered promiscuous mode [ 817.916871][T16959] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.924411][T16959] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.932016][T16959] bridge_slave_1: entered allmulticast mode [ 817.942295][T16959] bridge_slave_1: entered promiscuous mode [ 817.993904][T16959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.009711][T16959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.053325][T16959] team0: Port device team_slave_0 added [ 818.075365][T16959] team0: Port device team_slave_1 added [ 818.182108][T16959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.207288][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.254482][T17004] input: f as /devices/virtual/input/input16 [ 818.280775][T16959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.313246][T16959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.336849][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.438310][T16959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.630045][T16959] hsr_slave_0: entered promiscuous mode [ 818.646239][T16959] hsr_slave_1: entered promiscuous mode [ 818.660783][T16959] debugfs: 'hsr0' already exists in 'hsr' [ 818.676781][T16959] Cannot create hsr debugfs directory [ 818.703877][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2017'. [ 818.746762][T17009] unsupported nlmsg_type 40 [ 819.546188][T10988] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 819.563331][T10988] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 819.571611][T10988] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 819.592030][T10988] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 819.615180][T10988] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 819.732172][T16959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.949386][T10988] Bluetooth: hci9: command tx timeout [ 820.281180][T16959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.572756][T16959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.661733][T17040] bridge0: port 3(veth1) entered blocking state [ 820.689999][T17040] bridge0: port 3(veth1) entered disabled state [ 820.728751][T17040] veth1: entered allmulticast mode [ 820.767253][T17040] veth1: entered promiscuous mode [ 820.804949][T17040] bridge0: port 3(veth1) entered blocking state [ 820.811351][T17040] bridge0: port 3(veth1) entered forwarding state [ 820.997335][T16959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.710005][T10988] Bluetooth: hci10: command tx timeout [ 822.030233][T10988] Bluetooth: hci9: command tx timeout [ 822.251663][T17059] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 822.541613][T16959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.582951][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.614559][T16959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.766202][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.907989][T16959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.939687][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.968306][T16959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 823.031818][T16959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.103770][T17073] FAULT_INJECTION: forcing a failure. [ 823.103770][T17073] name failslab, interval 1, probability 0, space 0, times 0 [ 823.245915][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.9.2028 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.245947][T17073] Tainted: [L]=SOFTLOCKUP [ 823.245953][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.245964][T17073] Call Trace: [ 823.245970][T17073] [ 823.245977][T17073] dump_stack_lvl+0x100/0x190 [ 823.246015][T17073] should_fail_ex.cold+0x5/0xa [ 823.246037][T17073] ? memcg_list_lru_alloc+0x4ec/0x740 [ 823.246055][T17073] should_failslab+0xc2/0x120 [ 823.246077][T17073] __kmalloc_noprof+0xe0/0x850 [ 823.246104][T17073] ? __lock_acquire+0x4a5/0x2630 [ 823.246134][T17073] memcg_list_lru_alloc+0x4ec/0x740 [ 823.246157][T17073] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 823.246196][T17073] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 823.246227][T17073] ? kasan_save_track+0x14/0x30 [ 823.246247][T17073] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 823.246276][T17073] ? aio_alloc_inode+0x25/0x70 [ 823.246300][T17073] ? pcpu_alloc_noprof+0xde1/0x1cc0 [ 823.246318][T17073] ? __pfx_aio_alloc_inode+0x10/0x10 [ 823.246342][T17073] aio_alloc_inode+0x25/0x70 [ 823.246364][T17073] alloc_inode+0x68/0x250 [ 823.246391][T17073] alloc_anon_inode+0x2a/0x3e0 [ 823.246416][T17073] ioctx_alloc+0x4dc/0x21a0 [ 823.246447][T17073] ? find_held_lock+0x2b/0x80 [ 823.246469][T17073] ? __pfx_ioctx_alloc+0x10/0x10 [ 823.246499][T17073] __x64_sys_io_setup+0xc9/0x220 [ 823.246526][T17073] do_syscall_64+0x115/0x840 [ 823.246554][T17073] ? clear_bhb_loop+0x40/0x90 [ 823.246577][T17073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.246595][T17073] RIP: 0033:0x7f2d0139ce59 [ 823.246611][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.246628][T17073] RSP: 002b:00007f2d0227b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 823.246646][T17073] RAX: ffffffffffffffda RBX: 00007f2d01616180 RCX: 00007f2d0139ce59 [ 823.246658][T17073] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 823.246669][T17073] RBP: 00007f2d01432d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.246680][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.246693][T17073] R13: 00007f2d01616218 R14: 00007f2d01616180 R15: 00007ffe365d3458 [ 823.246719][T17073] [ 823.658286][T16959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.674264][T16959] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.708536][T16959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 823.719506][T16959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.757853][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.765236][T12215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.795946][T10988] Bluetooth: hci10: command tx timeout [ 823.860169][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.867434][T12215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.040744][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.070277][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.104570][T17022] bridge_slave_0: entered allmulticast mode [ 824.115720][T10988] Bluetooth: hci9: command tx timeout [ 824.157576][T17022] bridge_slave_0: entered promiscuous mode [ 824.376974][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.435159][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.479679][T17022] bridge_slave_1: entered allmulticast mode [ 824.532419][T17022] bridge_slave_1: entered promiscuous mode [ 824.783585][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.868176][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.077470][T17022] team0: Port device team_slave_0 added [ 825.119832][T17022] team0: Port device team_slave_1 added [ 825.242733][T17105] netlink: 326 bytes leftover after parsing attributes in process `syz.8.2031'. [ 825.333900][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.383289][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.549912][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.607043][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.641997][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.756914][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.872279][T10988] Bluetooth: hci10: command tx timeout [ 825.995374][T17022] hsr_slave_0: entered promiscuous mode [ 826.027528][T17022] hsr_slave_1: entered promiscuous mode [ 826.068637][T17022] debugfs: 'hsr0' already exists in 'hsr' [ 826.098469][T17022] Cannot create hsr debugfs directory [ 826.159992][T16959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.771108][T16959] veth0_vlan: entered promiscuous mode [ 826.840932][T16959] veth1_vlan: entered promiscuous mode [ 827.101249][T17022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.308895][T16959] veth0_macvtap: entered promiscuous mode [ 827.445374][T17022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.538822][T16959] veth1_macvtap: entered promiscuous mode [ 827.625636][T17123] kexec: Could not allocate control_code_buffer [ 827.645519][T17022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.761098][T16959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.827463][T16959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.872466][T13622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.930987][T13622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.957407][T10988] Bluetooth: hci10: command tx timeout [ 828.008135][T13622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.130372][T13622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.683164][ T29] audit: type=1804 audit(4294968417.465:24): pid=17143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2037" name="/newroot/21/file0" dev="tmpfs" ino=129 res=1 errno=0 [ 828.912134][T11007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.959412][T11007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.060897][T13622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.069472][T17022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 829.090031][T13622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.111235][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.163106][T17022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 829.221785][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.277695][T17022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 829.327811][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.355655][T17022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 829.391461][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.458876][T17148] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 829.628490][T17160] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 829.827379][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.951229][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.001513][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.008762][T11007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.147047][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.154264][T11007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.337774][T17183] netlink: 326 bytes leftover after parsing attributes in process `syz.8.2043'. [ 832.640110][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.138476][T17022] veth0_vlan: entered promiscuous mode [ 833.277558][T17022] veth1_vlan: entered promiscuous mode [ 833.462961][T17022] veth0_macvtap: entered promiscuous mode [ 833.534826][T17022] veth1_macvtap: entered promiscuous mode [ 833.762100][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.830065][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.970426][T11007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.009263][T11007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.101329][T11008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.340672][T11008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.985513][T12216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.065650][T12216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.344396][T12215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.412858][T12215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.872304][T17246] random: crng reseeded on system resumption [ 836.185205][T17242] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2052'. [ 837.166361][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2056'. [ 837.442966][T17269] futex_wake_op: syz.8.2058 tries to shift op by -2048; fix this program [ 837.499900][T17269] futex_wake_op: syz.8.2058 tries to shift op by -2048; fix this program [ 837.548629][T17273] 0x000000000001-0x000000020000 : "" [ 837.595882][T17273] ftl_cs: FTL header corrupt! [ 839.210778][T17280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.528131][T17295] bridge0: port 3(veth1) entered blocking state [ 839.600516][T17295] bridge0: port 3(veth1) entered disabled state [ 839.632578][T17295] veth1: entered allmulticast mode [ 839.662350][T17295] veth1: entered promiscuous mode [ 839.673995][T17295] bridge0: port 3(veth1) entered blocking state [ 839.680437][T17295] bridge0: port 3(veth1) entered forwarding state [ 843.817764][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 844.205663][T10988] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 844.812578][T10988] Bluetooth: hci9: unexpected event 0x05 length: 6 > 4 [ 844.936394][T17385] netlink: 326 bytes leftover after parsing attributes in process `syz.8.2079'. [ 845.510359][T17387] FAULT_INJECTION: forcing a failure. [ 845.510359][T17387] name failslab, interval 1, probability 0, space 0, times 0 [ 845.576562][T17387] CPU: 0 UID: 0 PID: 17387 Comm: syz.3.2080 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.576593][T17387] Tainted: [L]=SOFTLOCKUP [ 845.576600][T17387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.576610][T17387] Call Trace: [ 845.576616][T17387] [ 845.576624][T17387] dump_stack_lvl+0x100/0x190 [ 845.576659][T17387] should_fail_ex.cold+0x5/0xa [ 845.576685][T17387] should_failslab+0xc2/0x120 [ 845.576708][T17387] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 845.576736][T17387] ? __kernfs_new_node+0xd2/0x9f0 [ 845.576762][T17387] __kernfs_new_node+0xd2/0x9f0 [ 845.576782][T17387] ? kernfs_add_one+0x583/0x850 [ 845.576807][T17387] ? __pfx___kernfs_new_node+0x10/0x10 [ 845.576834][T17387] ? find_held_lock+0x2b/0x80 [ 845.576856][T17387] ? kernfs_root+0xee/0x2a0 [ 845.576875][T17387] ? kernfs_root+0xee/0x2a0 [ 845.576900][T17387] kernfs_new_node+0x11b/0x1a0 [ 845.576927][T17387] __kernfs_create_file+0x53/0x350 [ 845.576958][T17387] sysfs_add_file_mode_ns+0x207/0x3c0 [ 845.576983][T17387] sysfs_create_file_ns+0x145/0x1e0 [ 845.577003][T17387] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 845.577023][T17387] ? __pfx___up_read+0x10/0x10 [ 845.577042][T17387] ? acpi_device_notify+0x464/0x500 [ 845.577143][T17387] ? kobject_put+0xb9/0x640 [ 845.577176][T17387] device_create_file+0xf2/0x1d0 [ 845.577201][T17387] device_add+0x2cb/0x1950 [ 845.577221][T17387] ? __pfx_dev_set_name+0x10/0x10 [ 845.577242][T17387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 845.577267][T17387] ? __pfx_device_add+0x10/0x10 [ 845.577287][T17387] ? lockdep_init_map_type+0x5c/0x250 [ 845.577317][T17387] ? __init_waitqueue_head+0xca/0x150 [ 845.577342][T17387] netdev_register_kobject+0x1a9/0x3d0 [ 845.577370][T17387] register_netdevice+0x151c/0x24b0 [ 845.577403][T17387] ? __pfx_register_netdevice+0x10/0x10 [ 845.577421][T17387] ? net_generic+0xea/0x2a0 [ 845.577445][T17387] ppp_dev_configure+0x986/0xcb0 [ 845.577469][T17387] ppp_ioctl+0x9d7/0x27c0 [ 845.577492][T17387] ? find_held_lock+0x2b/0x80 [ 845.577513][T17387] ? __pfx_ppp_ioctl+0x10/0x10 [ 845.577536][T17387] ? __fget_files+0x21f/0x3d0 [ 845.577560][T17387] ? __pfx_ppp_ioctl+0x10/0x10 [ 845.577579][T17387] __x64_sys_ioctl+0x18e/0x210 [ 845.577599][T17387] do_syscall_64+0x115/0x840 [ 845.577623][T17387] ? clear_bhb_loop+0x40/0x90 [ 845.577645][T17387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.577664][T17387] RIP: 0033:0x7f61d299ce59 [ 845.577680][T17387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.577697][T17387] RSP: 002b:00007f61d3779028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.577715][T17387] RAX: ffffffffffffffda RBX: 00007f61d2c15fa0 RCX: 00007f61d299ce59 [ 845.577727][T17387] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 845.577737][T17387] RBP: 00007f61d2a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 845.577747][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.577757][T17387] R13: 00007f61d2c16038 R14: 00007f61d2c15fa0 R15: 00007ffe0b72e8c8 [ 845.577780][T17387] [ 846.442628][T11039] Bluetooth: hci9: command 0x2016 tx timeout [ 847.653530][T17411] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 848.268165][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 848.489422][T17425] bridge0: port 3(syz_tun) entered blocking state [ 848.533221][T17425] bridge0: port 3(syz_tun) entered disabled state [ 848.566163][T17425] syz_tun: entered allmulticast mode [ 848.604955][T17425] syz_tun: entered promiscuous mode [ 848.632615][T17425] bridge0: port 3(syz_tun) entered blocking state [ 848.639251][T17425] bridge0: port 3(syz_tun) entered forwarding state [ 848.981212][T17438] FAULT_INJECTION: forcing a failure. [ 848.981212][T17438] name failslab, interval 1, probability 0, space 0, times 0 [ 849.037045][T17438] CPU: 0 UID: 0 PID: 17438 Comm: syz.8.2091 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.037075][T17438] Tainted: [L]=SOFTLOCKUP [ 849.037081][T17438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.037092][T17438] Call Trace: [ 849.037099][T17438] [ 849.037106][T17438] dump_stack_lvl+0x100/0x190 [ 849.037144][T17438] should_fail_ex.cold+0x5/0xa [ 849.037167][T17438] should_failslab+0xc2/0x120 [ 849.037189][T17438] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 849.037217][T17438] ? __d_alloc+0x34/0xa40 [ 849.037240][T17438] ? lockdep_init_map_type+0x5c/0x250 [ 849.037272][T17438] __d_alloc+0x34/0xa40 [ 849.037299][T17438] d_alloc_pseudo+0x1c/0xc0 [ 849.037317][T17438] alloc_file_pseudo+0xcf/0x230 [ 849.037345][T17438] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 849.037372][T17438] ? alloc_fd+0x476/0x790 [ 849.037397][T17438] sock_alloc_file+0x50/0x210 [ 849.037418][T17438] __sys_socket+0x1c0/0x260 [ 849.037442][T17438] ? __pfx___sys_socket+0x10/0x10 [ 849.037465][T17438] ? ksys_write+0x1ac/0x250 [ 849.037498][T17438] __x64_sys_socket+0x72/0xb0 [ 849.037522][T17438] ? lockdep_hardirqs_on+0x78/0x100 [ 849.037548][T17438] do_syscall_64+0x115/0x840 [ 849.037572][T17438] ? clear_bhb_loop+0x40/0x90 [ 849.037594][T17438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.037613][T17438] RIP: 0033:0x7f915d19ce59 [ 849.037629][T17438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.037647][T17438] RSP: 002b:00007f915e035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 849.037666][T17438] RAX: ffffffffffffffda RBX: 00007f915d416090 RCX: 00007f915d19ce59 [ 849.037677][T17438] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 849.037687][T17438] RBP: 00007f915d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 849.037697][T17438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.037708][T17438] R13: 00007f915d416128 R14: 00007f915d416090 R15: 00007ffd5fd5e7d8 [ 849.037730][T17438] [ 851.712313][T17471] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2098'. [ 852.038783][T17478] ubi0: attaching mtd0 [ 852.101507][T17478] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 852.147102][T17478] eraseblock attaching information dump: [ 852.187516][T17478] ec 1 [ 852.201657][T17478] pnum 0 [ 852.220004][T17478] lnum 0 [ 852.235277][T17478] scrub 0 [ 852.251257][T17478] sqnum 1 [ 852.270234][T17478] Volume identifier header dump: [ 852.311923][T17478] magic 55424921 [ 852.333773][T17478] version 1 [ 852.358237][T17478] vol_type 1 [ 852.381823][T17478] copy_flag 0 [ 852.409329][T17478] compat 5 [ 852.423859][T17478] vol_id 2147479551 [ 852.444342][T17478] lnum 0 [ 852.460037][T17478] data_size 0 [ 852.476774][T17478] used_ebs 0 [ 852.490489][T17478] data_pad 0 [ 852.513566][T17478] sqnum 1 [ 852.529985][T17478] hdr_crc 65b3bd2d [ 852.547184][T17478] Volume identifier header hexdump: [ 852.633857][T17478] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 852.698526][T17485] netlink: 330 bytes leftover after parsing attributes in process `syz.8.2101'. [ 852.749268][T17485] \: renamed from lo (while UP) [ 854.030051][T17509] netlink: 'syz.9.2106': attribute type 1 has an invalid length. [ 854.467456][T17512] netlink: 'syz.8.2107': attribute type 1 has an invalid length. [ 856.725437][T17567] Invalid ELF header magic: != ELF [ 856.800774][T17544] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 857.289886][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2116'. [ 857.452521][T17572] netlink: 'syz.8.2116': attribute type 33 has an invalid length. [ 858.256934][T17599] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2122'. [ 858.608886][T17615] futex_wake_op: syz.8.2124 tries to shift op by -2048; fix this program [ 858.780713][T17615] futex_wake_op: syz.8.2124 tries to shift op by -2048; fix this program [ 860.080562][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 863.318008][T11039] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 863.568455][T11039] Bluetooth: hci7: unexpected event 0x05 length: 6 > 4 [ 863.933473][T17697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2140'. [ 864.025184][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2140'. [ 864.182342][T17695] bridge0: entered promiscuous mode [ 864.212119][T17695] bridge0: entered allmulticast mode [ 864.932572][T17712] netlink: 326 bytes leftover after parsing attributes in process `syz.8.2144'. [ 865.411803][T10988] Bluetooth: hci7: command 0x2016 tx timeout [ 866.559090][T17726] netlink: 29 bytes leftover after parsing attributes in process `syz.9.2147'. [ 869.719738][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2152'. [ 870.183913][T17759] FAULT_INJECTION: forcing a failure. [ 870.183913][T17759] name failslab, interval 1, probability 0, space 0, times 0 [ 870.224771][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.232505][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.279527][T17759] CPU: 0 UID: 0 PID: 17759 Comm: syz.9.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.279557][T17759] Tainted: [L]=SOFTLOCKUP [ 870.279563][T17759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 870.279573][T17759] Call Trace: [ 870.279580][T17759] [ 870.279587][T17759] dump_stack_lvl+0x100/0x190 [ 870.279621][T17759] should_fail_ex.cold+0x5/0xa [ 870.279643][T17759] ? tomoyo_realpath_from_path+0xb6/0x690 [ 870.279670][T17759] should_failslab+0xc2/0x120 [ 870.279692][T17759] __kmalloc_noprof+0xe0/0x850 [ 870.279719][T17759] ? kfree+0x1dd/0x6c0 [ 870.279747][T17759] tomoyo_realpath_from_path+0xb6/0x690 [ 870.279777][T17759] tomoyo_check_open_permission+0x2af/0x3c0 [ 870.279800][T17759] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 870.279830][T17759] ? hook_file_open+0x24e/0x7a0 [ 870.279872][T17759] ? path_get+0x61/0x80 [ 870.279898][T17759] tomoyo_file_open+0x6b/0x90 [ 870.279916][T17759] security_file_open+0xb5/0x1e0 [ 870.279940][T17759] do_dentry_open+0x588/0x14d0 [ 870.279968][T17759] vfs_open+0x82/0x3f0 [ 870.279996][T17759] path_openat+0x208c/0x31a0 [ 870.280026][T17759] ? __pfx_path_openat+0x10/0x10 [ 870.280056][T17759] do_file_open+0x20e/0x430 [ 870.280080][T17759] ? __pfx_do_file_open+0x10/0x10 [ 870.280153][T17759] ? alloc_fd+0x476/0x790 [ 870.280177][T17759] ? do_getname+0x191/0x390 [ 870.280204][T17759] do_sys_openat2+0x10d/0x1e0 [ 870.280231][T17759] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.280266][T17759] __x64_sys_openat+0x12d/0x210 [ 870.280293][T17759] ? __pfx___x64_sys_openat+0x10/0x10 [ 870.280319][T17759] ? ksys_write+0x1ac/0x250 [ 870.280343][T17759] ? rcu_is_watching+0x12/0xc0 [ 870.280365][T17759] do_syscall_64+0x115/0x840 [ 870.280389][T17759] ? clear_bhb_loop+0x40/0x90 [ 870.280410][T17759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.280428][T17759] RIP: 0033:0x7f2d0139ce59 [ 870.280443][T17759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.280460][T17759] RSP: 002b:00007f2d0227b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 870.280478][T17759] RAX: ffffffffffffffda RBX: 00007f2d01616180 RCX: 00007f2d0139ce59 [ 870.280489][T17759] RDX: 0000000000004200 RSI: 0000200000002e40 RDI: ffffffffffffff9c [ 870.280499][T17759] RBP: 00007f2d01432d6f R08: 0000000000000000 R09: 0000000000000000 [ 870.280509][T17759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.280519][T17759] R13: 00007f2d01616218 R14: 00007f2d01616180 R15: 00007ffe365d3458 [ 870.280542][T17759] [ 870.541612][T17759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 871.760968][T17778] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2158'. [ 873.914265][T17802] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 873.922067][T17802] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 875.382092][T17838] kafs: addr_prefs: Invalid Command [ 875.970586][T17848] random: crng reseeded on system resumption [ 877.115983][T17870] FAULT_INJECTION: forcing a failure. [ 877.115983][T17870] name failslab, interval 1, probability 0, space 0, times 0 [ 877.147493][T17870] CPU: 0 UID: 0 PID: 17870 Comm: syz.3.2176 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.147526][T17870] Tainted: [L]=SOFTLOCKUP [ 877.147533][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.147543][T17870] Call Trace: [ 877.147550][T17870] [ 877.147557][T17870] dump_stack_lvl+0x100/0x190 [ 877.147592][T17870] should_fail_ex.cold+0x5/0xa [ 877.147616][T17870] should_failslab+0xc2/0x120 [ 877.147638][T17870] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 877.147666][T17870] ? do_epoll_ctl+0xc6c/0x36a0 [ 877.147689][T17870] ? bpf_lsm_capable+0x9/0x10 [ 877.147709][T17870] ? percpu_counter_add_batch+0xb9/0x230 [ 877.147740][T17870] do_epoll_ctl+0xc6c/0x36a0 [ 877.147763][T17870] ? ksys_write+0x190/0x250 [ 877.147782][T17870] ? ksys_write+0x190/0x250 [ 877.147808][T17870] ? __pfx_do_epoll_ctl+0x10/0x10 [ 877.147830][T17870] ? find_held_lock+0x2b/0x80 [ 877.147852][T17870] ? __might_fault+0xc5/0x140 [ 877.147877][T17870] ? __might_fault+0xc5/0x140 [ 877.147911][T17870] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 877.147934][T17870] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 877.147958][T17870] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 877.147984][T17870] ? rcu_is_watching+0x12/0xc0 [ 877.148007][T17870] do_syscall_64+0x115/0x840 [ 877.148032][T17870] ? clear_bhb_loop+0x40/0x90 [ 877.148053][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.148071][T17870] RIP: 0033:0x7f61d299ce59 [ 877.148087][T17870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.148104][T17870] RSP: 002b:00007f61d3779028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 877.148122][T17870] RAX: ffffffffffffffda RBX: 00007f61d2c15fa0 RCX: 00007f61d299ce59 [ 877.148133][T17870] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 877.148143][T17870] RBP: 00007f61d2a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 877.148153][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.148163][T17870] R13: 00007f61d2c16038 R14: 00007f61d2c15fa0 R15: 00007ffe0b72e8c8 [ 877.148185][T17870] [ 877.946885][T17880] random: crng reseeded on system resumption [ 878.127023][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2180'. [ 878.578576][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2181'. [ 879.204433][T17894] random: crng reseeded on system resumption [ 879.928939][T10988] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 879.944964][T10988] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 879.958665][T10988] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 879.966978][T10988] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 879.975691][T10988] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 881.721023][T17910] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.751228][T17910] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.779268][T17910] bridge_slave_0: entered allmulticast mode [ 881.807385][T17910] bridge_slave_0: entered promiscuous mode [ 881.834988][T17910] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.861819][T17910] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.892726][T17910] bridge_slave_1: entered allmulticast mode [ 881.921928][T17910] bridge_slave_1: entered promiscuous mode [ 882.034817][T17910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.060054][T10988] Bluetooth: hci11: command tx timeout [ 882.108321][T17910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.213853][T17910] team0: Port device team_slave_0 added [ 882.261590][T17910] team0: Port device team_slave_1 added [ 882.391859][T17910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.417855][T17910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.503497][T17910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.542167][T17910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.564731][T17910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.670023][T17910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.856385][T17910] hsr_slave_0: entered promiscuous mode [ 882.876635][T17910] hsr_slave_1: entered promiscuous mode [ 882.889567][T17910] debugfs: 'hsr0' already exists in 'hsr' [ 882.905415][T17910] Cannot create hsr debugfs directory [ 882.936082][T17945] FAULT_INJECTION: forcing a failure. [ 882.936082][T17945] name failslab, interval 1, probability 0, space 0, times 0 [ 882.980421][T17945] CPU: 0 UID: 0 PID: 17945 Comm: syz.9.2189 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.980451][T17945] Tainted: [L]=SOFTLOCKUP [ 882.980458][T17945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 882.980468][T17945] Call Trace: [ 882.980475][T17945] [ 882.980482][T17945] dump_stack_lvl+0x100/0x190 [ 882.980517][T17945] should_fail_ex.cold+0x5/0xa [ 882.980541][T17945] should_failslab+0xc2/0x120 [ 882.980563][T17945] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 882.980590][T17945] ? __proc_create+0x2cb/0x8c0 [ 882.980626][T17945] __proc_create+0x2cb/0x8c0 [ 882.980649][T17945] ? __pfx___proc_create+0x10/0x10 [ 882.980670][T17945] ? copy_net_ns+0x46f/0x7c0 [ 882.980691][T17945] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 882.980713][T17945] ? ksys_unshare+0x438/0xab0 [ 882.980738][T17945] ? __x64_sys_unshare+0x31/0x40 [ 882.980769][T17945] proc_create_reg+0x75/0x170 [ 882.980794][T17945] proc_create_net_data+0x8e/0x1c0 [ 882.980818][T17945] ? __pfx_proc_create_net_data+0x10/0x10 [ 882.980848][T17945] xt_proto_init+0x24e/0xb80 [ 882.980949][T17945] ? __pfx_xt_proto_init+0x10/0x10 [ 882.980974][T17945] ? kasan_save_track+0x14/0x30 [ 882.980993][T17945] ? __kasan_kmalloc+0xaa/0xb0 [ 882.981014][T17945] ? __pfx_ip_tables_net_init+0x10/0x10 [ 882.981077][T17945] ops_init+0x1e2/0x5f0 [ 882.981099][T17945] setup_net+0x118/0x3a0 [ 882.981118][T17945] ? __pfx_setup_net+0x10/0x10 [ 882.981138][T17945] ? mutex_init_lockdep+0xf1/0x120 [ 882.981160][T17945] copy_net_ns+0x46f/0x7c0 [ 882.981184][T17945] create_new_namespaces+0x3ea/0xac0 [ 882.981211][T17945] unshare_nsproxy_namespaces+0xf2/0x220 [ 882.981235][T17945] ksys_unshare+0x438/0xab0 [ 882.981261][T17945] ? __pfx_ksys_unshare+0x10/0x10 [ 882.981285][T17945] ? xfd_validate_state+0x129/0x190 [ 882.981302][T17945] ? exit_to_user_mode_loop+0xf3/0x670 [ 882.981337][T17945] __x64_sys_unshare+0x31/0x40 [ 882.981362][T17945] do_syscall_64+0x115/0x840 [ 882.981387][T17945] ? clear_bhb_loop+0x40/0x90 [ 882.981408][T17945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.981430][T17945] RIP: 0033:0x7f2d0139ce59 [ 882.981447][T17945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.981464][T17945] RSP: 002b:00007f2d022bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 882.981483][T17945] RAX: ffffffffffffffda RBX: 00007f2d01615fa0 RCX: 00007f2d0139ce59 [ 882.981494][T17945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 882.981505][T17945] RBP: 00007f2d01432d6f R08: 0000000000000000 R09: 0000000000000000 [ 882.981516][T17945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.981527][T17945] R13: 00007f2d01616038 R14: 00007f2d01615fa0 R15: 00007ffe365d3458 [ 882.981551][T17945] [ 883.607428][T17910] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.062928][T17910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.143028][T10988] Bluetooth: hci11: command tx timeout [ 884.273359][T17910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.450260][T17910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.619927][T17910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.416452][T17910] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 885.447095][T17910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.466301][T17910] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.492664][T17910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.512721][T17910] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.536132][T17910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.597467][T17910] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.629146][T17910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.898212][T17910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.951085][T17910] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.007013][T12209] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.014249][T12209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.084568][T12209] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.091855][T12209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.222601][T10988] Bluetooth: hci11: command tx timeout [ 887.894907][T17910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.250763][T17910] veth0_vlan: entered promiscuous mode [ 888.303392][T10988] Bluetooth: hci11: command tx timeout [ 888.312499][T17910] veth1_vlan: entered promiscuous mode [ 888.418933][T17910] veth0_macvtap: entered promiscuous mode [ 888.588666][T17910] veth1_macvtap: entered promiscuous mode [ 888.723248][T17910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.789498][T17910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.852308][T13625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.895374][T13625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.930323][T13625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.016944][T13625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.378728][T13626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.405061][T13626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.519407][T12209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.552687][T12209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.006982][T11039] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 890.026437][T11039] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 890.036930][T11039] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 890.051906][T11039] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 890.075502][T11039] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 892.095160][T18035] vivid-014: ================= START STATUS ================= [ 892.130748][T18035] vivid-014: ================== END STATUS ================== [ 892.147919][T11039] Bluetooth: hci12: command tx timeout [ 893.119874][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.156510][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.202736][T18011] bridge_slave_0: entered allmulticast mode [ 893.224631][T18011] bridge_slave_0: entered promiscuous mode [ 893.297851][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.329963][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.381775][T18011] bridge_slave_1: entered allmulticast mode [ 893.422918][T18011] bridge_slave_1: entered promiscuous mode [ 893.617216][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.753286][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.077395][T18011] team0: Port device team_slave_0 added [ 894.120256][T18011] team0: Port device team_slave_1 added [ 894.227193][T11039] Bluetooth: hci12: command tx timeout [ 894.283081][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.304466][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.367046][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.493665][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.515418][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.603168][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.783052][T18011] hsr_slave_0: entered promiscuous mode [ 894.808713][T18011] hsr_slave_1: entered promiscuous mode [ 894.824204][T18011] debugfs: 'hsr0' already exists in 'hsr' [ 894.852053][T18011] Cannot create hsr debugfs directory [ 895.289889][T18059] FAULT_INJECTION: forcing a failure. [ 895.289889][T18059] name failslab, interval 1, probability 0, space 0, times 0 [ 895.345799][T18059] CPU: 0 UID: 0 PID: 18059 Comm: syz.2.2205 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.345831][T18059] Tainted: [L]=SOFTLOCKUP [ 895.345838][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.345849][T18059] Call Trace: [ 895.345856][T18059] [ 895.345864][T18059] dump_stack_lvl+0x100/0x190 [ 895.345903][T18059] should_fail_ex.cold+0x5/0xa [ 895.345927][T18059] should_failslab+0xc2/0x120 [ 895.345958][T18059] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 895.345987][T18059] ? xas_split_alloc+0x11c/0x4a0 [ 895.346024][T18059] xas_split_alloc+0x11c/0x4a0 [ 895.346055][T18059] __folio_split+0x5e5/0x1690 [ 895.346092][T18059] ? __pfx___folio_split+0x10/0x10 [ 895.346126][T18059] ? __pfx___might_resched+0x10/0x10 [ 895.346153][T18059] madvise_cold_or_pageout_pte_range+0xf8c/0x2620 [ 895.346189][T18059] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 895.346215][T18059] ? __lock_acquire+0x4a5/0x2630 [ 895.346243][T18059] ? __css_rstat_updated+0x1ce/0x5a0 [ 895.346272][T18059] ? __pfx___css_rstat_updated+0x10/0x10 [ 895.346299][T18059] ? register_lock_class+0x40/0x560 [ 895.346328][T18059] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 895.346354][T18059] walk_pgd_range+0xc1a/0x1dd0 [ 895.346378][T18059] ? rcu_read_unlock+0x17/0x60 [ 895.346409][T18059] ? __pfx_walk_pgd_range+0x10/0x10 [ 895.346428][T18059] ? folios_put_refs+0x716/0xa90 [ 895.346450][T18059] __walk_page_range+0x171/0x850 [ 895.346470][T18059] ? find_held_lock+0x2b/0x80 [ 895.346499][T18059] walk_page_range_vma_unsafe+0x209/0x8f0 [ 895.346523][T18059] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 895.346547][T18059] ? find_held_lock+0x2b/0x80 [ 895.346568][T18059] ? mlock_drain_local+0x254/0x4e0 [ 895.346584][T18059] ? mlock_drain_local+0x254/0x4e0 [ 895.346605][T18059] walk_page_range_vma+0x63/0x90 [ 895.346626][T18059] madvise_pageout+0x259/0x540 [ 895.346649][T18059] ? __pfx_madvise_pageout+0x10/0x10 [ 895.346671][T18059] ? rcu_is_watching+0x12/0xc0 [ 895.346702][T18059] ? mtree_range_walk+0x72b/0xb70 [ 895.346728][T18059] madvise_vma_behavior+0x452/0x2240 [ 895.346755][T18059] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 895.346786][T18059] ? find_vma_prev+0xd8/0x150 [ 895.346807][T18059] ? futex_unqueue+0x133/0x2c0 [ 895.346824][T18059] ? __pfx_find_vma_prev+0x10/0x10 [ 895.346852][T18059] ? __futex_wait+0x256/0x300 [ 895.346880][T18059] madvise_walk_vmas+0x2fe/0xa90 [ 895.346907][T18059] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 895.346938][T18059] madvise_do_behavior+0x1ea/0x510 [ 895.346970][T18059] ? __pfx_madvise_do_behavior+0x10/0x10 [ 895.346995][T18059] ? down_read+0x13b/0x450 [ 895.347022][T18059] do_madvise+0x195/0x240 [ 895.347046][T18059] ? __pfx_do_madvise+0x10/0x10 [ 895.347069][T18059] ? do_futex+0x192/0x350 [ 895.347092][T18059] ? __sys_sendmsg+0x18f/0x220 [ 895.347130][T18059] __x64_sys_madvise+0xa9/0x110 [ 895.347155][T18059] ? lockdep_hardirqs_on+0x78/0x100 [ 895.347181][T18059] do_syscall_64+0x115/0x840 [ 895.347205][T18059] ? clear_bhb_loop+0x40/0x90 [ 895.347228][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.347247][T18059] RIP: 0033:0x7fbb4639ce59 [ 895.347266][T18059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.347284][T18059] RSP: 002b:00007fbb4718f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 895.347302][T18059] RAX: ffffffffffffffda RBX: 00007fbb46616180 RCX: 00007fbb4639ce59 [ 895.347314][T18059] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 895.347326][T18059] RBP: 00007fbb46432d6f R08: 0000000000000000 R09: 0000000000000000 [ 895.347336][T18059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.347347][T18059] R13: 00007fbb46616218 R14: 00007fbb46616180 R15: 00007ffc95a5c468 [ 895.347371][T18059] [ 896.307145][T11039] Bluetooth: hci12: command tx timeout [ 896.679197][T18011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.200858][T18011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.477232][T18011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.612386][T18011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.731208][T18094] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2213'. [ 898.174966][T18011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 898.216336][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 898.250755][T18011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 898.279682][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 898.318281][T18011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 898.361654][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 898.390737][T11039] Bluetooth: hci12: command tx timeout [ 898.406153][T18011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 898.441055][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.691947][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.762073][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.807342][T13622] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.814570][T13622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.883945][T12209] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.891135][T12209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.636245][T18117] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 900.195920][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.313823][ T30] INFO: task syz.0.1905:16191 blocked for more than 143 seconds. [ 900.323628][ T30] Tainted: G L syzkaller #0 [ 900.348130][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 900.378113][ T30] task:syz.0.1905 state:D stack:25104 pid:16191 tgid:16190 ppid:5637 task_flags:0x400140 flags:0x00080006 [ 900.442663][ T30] Call Trace: [ 900.461693][ T30] [ 900.476170][ T30] __schedule+0x1295/0x67a0 [ 900.496181][ T30] ? __pfx___schedule+0x10/0x10 [ 900.526472][ T30] ? find_held_lock+0x2b/0x80 [ 900.551521][ T30] ? schedule+0x2bf/0x390 [ 900.571970][ T30] schedule+0xdd/0x390 [ 900.591594][ T30] schedule_preempt_disabled+0x13/0x30 [ 900.622437][ T30] __mutex_lock+0xced/0x1b10 [ 900.646842][ T30] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 900.673152][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 900.694238][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 900.726253][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 900.756187][ T30] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 900.785116][ T30] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 900.812368][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 900.843458][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 900.887294][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 900.932116][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 900.979412][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 901.008052][ T30] ? genl_get_cmd+0x3e7/0x760 [ 901.037782][ T30] ? bpf_lsm_capable+0x9/0x10 [ 901.063408][ T30] ? security_capable+0x80/0x260 [ 901.087467][ T30] genl_rcv_msg+0x560/0x800 [ 901.110411][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 901.121893][T18011] veth0_vlan: entered promiscuous mode [ 901.141075][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 901.153666][ T30] netlink_rcv_skb+0x159/0x420 [ 901.167758][T18011] veth1_vlan: entered promiscuous mode [ 901.181593][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 901.193568][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 901.213371][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 901.232760][ T30] genl_rcv+0x28/0x40 [ 901.252010][ T30] netlink_unicast+0x585/0x850 [ 901.266251][T18011] veth0_macvtap: entered promiscuous mode [ 901.281364][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 901.295951][ T30] netlink_sendmsg+0x8b0/0xda0 [ 901.303775][T18011] veth1_macvtap: entered promiscuous mode [ 901.320400][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.330991][ T30] ? __import_iovec+0x1d2/0x640 [ 901.354124][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 901.377358][T18011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.386332][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 901.397646][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.421952][T18011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.441201][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.479921][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 901.537651][ T30] ___sys_sendmsg+0x190/0x1e0 [ 901.576700][T12209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.585807][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.651004][ T30] ? __lock_acquire+0x4a5/0x2630 [ 901.656060][T12209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.680246][ T30] __sys_sendmsg+0x170/0x220 [ 901.699020][T12209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.708060][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 901.735680][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 901.748003][T12209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.762782][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 901.781519][ T30] ? rcu_is_watching+0x12/0xc0 [ 901.809584][ T30] do_syscall_64+0x115/0x840 [ 901.815746][ T30] ? clear_bhb_loop+0x40/0x90 [ 901.832240][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.859866][ T30] RIP: 0033:0x7fd9a999ce59 [ 901.883870][ T30] RSP: 002b:00007fd9aa8d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.917977][ T30] RAX: ffffffffffffffda RBX: 00007fd9a9c15fa0 RCX: 00007fd9a999ce59 [ 901.946797][ T30] RDX: 0000000004004840 RSI: 00002000000004c0 RDI: 0000000000000005 [ 901.993258][ T30] RBP: 00007fd9a9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 902.011032][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.044657][ T30] R13: 00007fd9a9c16038 R14: 00007fd9a9c15fa0 R15: 00007ffdb0dba708 [ 902.098025][ T30] [ 902.105090][ T30] [ 902.105090][ T30] Showing all locks held in the system: [ 902.195883][ T30] 1 lock held by khungtaskd/30: [ 902.220960][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 902.259015][ T30] 2 locks held by getty/5389: [ 902.266545][ T30] #0: ffff888037c060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 902.292304][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 902.320988][ T30] 2 locks held by syz-executor/5632: [ 902.327858][ T30] #0: ffff888079eb40d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 902.359884][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 902.378646][ T30] 3 locks held by kworker/0:8/5739: [ 902.409875][ T30] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 902.439755][ T30] #1: ffffc900043c7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 902.465980][ T30] #2: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 902.491977][ T30] 2 locks held by syz.3.1884/16080: [ 902.519301][ T30] #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 902.529670][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 902.543795][ T30] 2 locks held by syz.0.1905/16191: [ 902.549050][ T30] #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 902.562827][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 902.575044][ T30] 2 locks held by syz.4.1967/16577: [ 902.580576][ T30] #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 902.588828][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 902.603214][ T30] 2 locks held by syz.5.1970/16602: [ 902.608540][ T30] #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 902.617716][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 902.628007][ T30] 2 locks held by syz.1.1974/16623: [ 902.637011][ T30] #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 902.646498][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 902.661017][ T30] 2 locks held by syz-executor/16630: [ 902.666432][ T30] #0: ffff88807d3a00d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 902.679668][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 902.689645][ T30] 2 locks held by syz-executor/16731: [ 902.698162][ T30] #0: ffff88805a3400d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 902.708735][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 902.719231][ T30] 2 locks held by syz-executor/16772: [ 902.725481][ T30] #0: ffff88805afd60d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 902.736065][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 902.748439][ T30] 2 locks held by syz.7.1989/16812: [ 902.754004][ T30] #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 902.765676][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 902.779043][ T30] 2 locks held by syz-executor/16959: [ 902.785340][ T30] #0: ffff888057334ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 902.800403][ T30] #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 902.810733][ T30] 2 locks held by syz-executor/17022: [ 902.816137][ T30] #0: ffff8880415fa0d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 902.826881][ T30] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 902.837957][ T30] 1 lock held by syz-executor/17910: [ 902.843503][ T30] #0: ffff88807b488ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 902.855502][ T30] 1 lock held by syz-executor/18011: [ 902.861110][ T30] #0: ffff888088980ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 902.920438][ T30] [ 902.928832][ T30] ============================================= [ 902.928832][ T30] [ 902.953997][ T30] NMI backtrace for cpu 0 [ 902.954020][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 902.954045][ T30] Tainted: [L]=SOFTLOCKUP [ 902.954052][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 902.954063][ T30] Call Trace: [ 902.954069][ T30] [ 902.954077][ T30] dump_stack_lvl+0x100/0x190 [ 902.954112][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 902.954133][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 902.954153][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 902.954176][ T30] sys_info+0x141/0x190 [ 902.954203][ T30] watchdog+0xcb1/0x1030 [ 902.954232][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 902.954258][ T30] ? __pfx_watchdog+0x10/0x10 [ 902.954283][ T30] ? __kthread_parkme+0x18c/0x230 [ 902.954308][ T30] ? kthread+0x13a/0x450 [ 902.954341][ T30] ? __pfx_watchdog+0x10/0x10 [ 902.954363][ T30] kthread+0x370/0x450 [ 902.954388][ T30] ? __pfx_kthread+0x10/0x10 [ 902.954416][ T30] ret_from_fork+0x72b/0xd50 [ 902.954436][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 902.954456][ T30] ? __switch_to+0x800/0x1100 [ 902.954481][ T30] ? __switch_to_asm+0x39/0x70 [ 902.954503][ T30] ? __pfx_kthread+0x10/0x10 [ 902.954532][ T30] ret_from_fork_asm+0x1a/0x30 [ 902.954563][ T30] [ 903.296989][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 903.303885][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 903.314567][ T30] Tainted: [L]=SOFTLOCKUP [ 903.318890][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 903.328940][ T30] Call Trace: [ 903.332234][ T30] [ 903.335171][ T30] dump_stack_lvl+0x100/0x190 [ 903.339957][ T30] vpanic+0x552/0x970 [ 903.343942][ T30] ? __pfx_vpanic+0x10/0x10 [ 903.348447][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 903.354619][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 903.360787][ T30] panic+0xd1/0xe0 [ 903.364517][ T30] ? __pfx_panic+0x10/0x10 [ 903.368941][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 903.375110][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 903.381283][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 903.387448][ T30] ? watchdog.cold+0x1ec/0x234 [ 903.392234][ T30] ? watchdog+0xcc1/0x1030 [ 903.396674][ T30] watchdog.cold+0x1fd/0x234 [ 903.401283][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 903.407112][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.411800][ T30] ? __kthread_parkme+0x18c/0x230 [ 903.416928][ T30] ? kthread+0x13a/0x450 [ 903.421179][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.425856][ T30] kthread+0x370/0x450 [ 903.430040][ T30] ? __pfx_kthread+0x10/0x10 [ 903.434657][ T30] ret_from_fork+0x72b/0xd50 [ 903.439248][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 903.444369][ T30] ? __switch_to+0x800/0x1100 [ 903.449063][ T30] ? __switch_to_asm+0x39/0x70 [ 903.453841][ T30] ? __pfx_kthread+0x10/0x10 [ 903.458520][ T30] ret_from_fork_asm+0x1a/0x30 [ 903.463489][ T30] [ 903.466594][ T30] Kernel Offset: disabled [ 903.470934][ T30] Rebooting in 86400 seconds..