last executing test programs: 10m21.410309553s ago: executing program 1 (id=104): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000884) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/maps\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, r1, &(0x7f0000000000)='&&\x00', 0x6) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, &(0x7f00000000c0)) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x1000200) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) prctl$auto(0x4, 0x1, 0x0, 0x9, 0x0) 10m20.506838508s ago: executing program 1 (id=107): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) (async, rerun: 64) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) (rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = socket(0x11, 0x3, 0x2) (rerun: 64) getsockopt$auto(r0, 0x107, 0x11, 0x0, 0x0) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (rerun: 64) socket(0x11, 0x3, 0x9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x7}, 0x3) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r3 = socket(0x2, 0x1, 0x106) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) socket(0x15, 0x5, 0x0) (async, rerun: 64) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0x6a) (async, rerun: 32) ioctl$auto(0x3, 0x89e0, 0x91) (async, rerun: 32) r4 = socket(0x15, 0x5, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async, rerun: 32) socket(0x1d, 0x2, 0x7) (async, rerun: 32) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r5, 0x92106405, r5) 10m17.973386493s ago: executing program 1 (id=115): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd7\x00', 0x16b302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) splice$auto(r0, 0x0, r0, 0x0, 0xb, 0x13) (async) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c05, 0x0) (async, rerun: 64) mmap$auto(0x4, 0x2020009, 0x3, 0x200000000011, 0xffffffffffffffff, 0x8000) (rerun: 64) madvise$auto(0x0, 0x0, 0x4) (async) madvise$auto(0x67f, 0x1000000000792, 0x4) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x0, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) (async) mmap$auto(0xfffffffffffffffe, 0x4045, 0x9, 0x110, 0xffffffffffffffff, 0x0) mremap$auto(0x1000, 0x1, 0x4, 0x3, 0x10ffffffff) write$auto(r2, &(0x7f0000000300)='N\x00\x1c\x84\x04Y\x03\b\xc7k\x00\x00\x00\x00|x\xc8\v\xa3\"\xd7kp\\\xb8\xe1\x81\xdaR\xbc\xd0\xa0\xa1;l\x7f\x85D\r\x893_\xd4\xdf\xa5\xe6Vg\x8c\xce\f\xfa\xf3;\xed\xbd\xf8y\xb8\x92\xac\x97\xcb#\xd0R\x9a{\x02wCJ\r8\x11\v7\r\x82#\xd1\xc1\x9djK\x7f\xd7y@\v#\xfc)\x06\x9a\x81\x7fIz\x825\v \xdd\xb2<\xa9\xd1\x7f\xbfw\xfeq\xc9\xce\x86\x04\xe2j\x86\xf3\xd1\x85\xd9\x9e\x19\x1c\x9a\xa4\xcd\xbb\xd3\x99\xeb\x16\x0e\xde>\x10\x88{\xb1\xc4\xe0\x97\x92\xabd \xfdGsxA\x84\xfco\a\x1a\x94u\xe5\xe0%>\a\xaa\xf9kwwdb\xd0\xa0', 0x7ff) (async) mmap$auto(0x0, 0x420009, 0xeec, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x282282, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) r4 = socket(0x21, 0xa, 0xfffffffe) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x52dc01, 0x0) (async, rerun: 32) close_range$auto(0x2, r3, 0x0) (async, rerun: 32) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0x40a0ae49, r4) (async, rerun: 32) madvise$auto(0x0, 0xfffffffffffffffd, 0x1d) (async) open(&(0x7f0000000100)='.\x00', 0xa800, 0x419) timer_create$auto(0x0, 0x0, 0x0) (async) socket(0xa, 0x1, 0x84) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r1) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 10m17.840998043s ago: executing program 1 (id=116): msgrcv$auto(0x31, &(0x7f0000000000)={0x7, 0x2}, 0xaa, 0x1, 0xe) msgrcv$auto(0x54c, &(0x7f0000000040)={0xaa, 0x6}, 0x5, 0x4000000000, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = bpf$auto(0xd5e, &(0x7f00000000c0)=@prog_bind_map={r0, r0, 0x3}, 0x1e2c56a8) setsockopt$auto_SO_RESERVE_MEM(r2, 0x7ff, 0x49, &(0x7f0000000180)='#,\x00', 0x8001) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/62, 0x3e) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f0000000240)={&(0x7f0000000200)='\xcd\x00', 0x101, 0xf}) r4 = fanotify_init$auto(0x7a6322cd, 0x401) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000002c0), r3) sendmsg$auto_OVS_VPORT_CMD_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x65, 0x5, "3f60b6b0c32a4701e8dd08a319ad4d055293b66f93a8145004abc80a45f07548cf459921d7bfdef9e87d385d50144417f25cd282a2a0fbe2c57de7e4cdd233a86e5d189a46fe938e5848dbc56c07b87b7ee625985a01aca2be143c46a6fbc9d50a"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) msgrcv$auto(0x1, &(0x7f0000000400)={0x10001, 0xf0}, 0xfe, 0xc, 0x120000) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000440), 0xff, &(0x7f0000000580)={&(0x7f0000000480)="d2a5f2dfb5ed62d0e9dfa7251a3eb7b286d53df89d502636802d975ca6d6e53a6a0bdc4bbc45e2bb23707d9067aec7a88af578af20f672a7b2cc4253fb3f4bbbab9174fff0f77e64f45ab1723822ae1559a40116086e79551be89d8c3923069c4868c178db9026ff28dac95616b72b4b16f7e44108701bc612e2cfbcdc94dbab952bbbe3d2cf5289239cde2643e73ee6465103142e8786a581e7974eb94f514285033de49f427ceb303cdad21d03264d54e8113943cbc95ed252045aab2cba6981dc65df759461328d07fbcd", 0xfffffffffffffffb}, 0x1, &(0x7f00000005c0)="139abba1e622b8b29eb47d5e50f1e08fddd5dc153eb9567d37ba99619b0f92722d5d99b600abffca69bc1f44298167adc23515266a10c2b4bc4081d8d9a659be9cc70be62fb3ae472a17911c0b6a404de11257ee56f1a9937a40bb1cf145033d86", 0xffffffff, 0xfffffffd}, 0x4}, 0x0, 0x7) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000006c0), r2) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x69, 0x1f, "131fffffa746744e377f0835332425138836bc7f5ca58322b1c4dd145543b581357a940f1a8eb2f935c6682ba02a59f4d455881f2355b904c37cb94d94d07427dd97f5cff4fb0002a3b424bd6e7cdf6aea570f127d94175783274aad50835949f7688dd58f"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x140}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xdb10}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$auto_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000840)='-+@\x00', &(0x7f0000000880)) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/devices/virtual/block/nbd8/queue/max_sectors_kb\x00', 0x8000, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x40}, 0x2008c000) write$auto_severities_coverage_fops_severity(r3, &(0x7f00000009c0)="9e20068e72e6a69209d6654dee00c97c8ea8661a3f4a62f106c2376f00b4971880c5fa6fdf2e71fe2723c8cc4b8eaa5f9d1ec1b3b715b7d61abaada1f852a05334bd2a6c404a6e6cb1e8058529695ae257f699748aaba0912bbe8687f310f8a07c49119bf75063da685a9755d133f50440e14621dd26d11618071d9abe6eca7a64457460e6f5078c25b4095767d79ca1f8b4ceb0c13b3f389c73c40e0617ff2c204f8ee7b563b83b1796b18e111eb26c4f47b02811d2e7233f95c7bfeaab3b531ddca40f8b841ddc59734db901e76e0fe63c8a36e84b3db2f0ff29dd456e7aa1b82d26bcfd54d5922af1c46c", 0xec) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/fail-nth\x00', 0x1c1200, 0x0) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000b40), r2) r8 = semctl$auto(0x9, 0x5, 0x5, 0xe409) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r8}]}, 0x1c}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000c40), r9) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x40400, 0x0) r10 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) mmap$auto(0xd5, 0x8000000000000001, 0x200, 0x1f, r10, 0x2) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r4, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x200}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x3}]}, 0x44}}, 0x1) 10m17.62364362s ago: executing program 1 (id=117): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000001c0)=""/218, 0xda) write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xca, &(0x7f00000002c0)='\x04\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc\x04\x7f\x9f\xb1\xb6\x17\x80f\xf2P\xe1/?\xec z\xcbM\x05\xc84\xfc .\xf8\xc2\f9(\xd5\x02\"\x05\xcd\xeb\xa5\xd6\xe0\x9f\xbb]W\xc1\xbc;\n\xc8\xb3\xa6\xb7+\xcc\xf2/\x96H\xee$=\xe8-\bpV\xd4a\x91\x8f\xb9\xe4L[\x99g\xe1\x95-{\xf8\x8d\xb6\x82\x85Y.}lg\xbb/\xdf\xd3zJ\xf2', 0x7f) statmount$auto(0x0, 0x0, 0x9, 0xd) read$auto(0xffffffffffffffff, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r1) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x143e02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) poll$auto(&(0x7f0000000140)={r5, 0x16b, 0x5}, 0x3, 0x4) sendmsg$auto_WG_CMD_SET_DEVICE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x33}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) 10m16.155289184s ago: executing program 1 (id=123): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000040)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x2fc) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r3 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x1, 0x4) getsockopt$auto(r3, 0x29, 0xcf, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xbb, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x69}}, 0x92) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x108000) r4 = socket(0xa, 0x801, 0x106) setsockopt$auto(r4, 0x6, 0x24, 0x0, 0x9) 10m0.951968436s ago: executing program 32 (id=123): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000040)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x2fc) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r3 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x1, 0x4) getsockopt$auto(r3, 0x29, 0xcf, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xbb, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x69}}, 0x92) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x108000) r4 = socket(0xa, 0x801, 0x106) setsockopt$auto(r4, 0x6, 0x24, 0x0, 0x9) 7m46.867031936s ago: executing program 3 (id=614): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio0/extra\x00', 0x10b542, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0x9, r0, 0x200004000009, 0xfffffffffffff6da) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001080)=""/4092, 0xffc) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='5', 0x1) write$auto(r2, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x10000, 0xfffffffa, 0xfffffffa, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x5) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 7m45.920094066s ago: executing program 3 (id=619): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/dummy0\x00', 0x109800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x129141, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_HAS_DEVICE_ATTR(r0, 0xc048aeca, &(0x7f0000000440)={0x3, 0x0, 0x9, 0xe8b}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x200002, 0x4000000080000001, 0x8627, 0x9, 0x5a6, 0x7, 0x4, 0x7, 0x6, 0x7, 0x0, 0xd, 0x2a17, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0xe]}, 0x9, 0x81) r3 = socket(0xa, 0x1, 0x0) getsockopt$auto(r3, 0x6, 0xa, &(0x7f0000000080)='$\xfe\x88\xc8\x91\x8bo\xc6#\x93\x91^\x01<\xc81\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xb1\xb7\xd3\xe4\x00'/60, &(0x7f0000000040)=0xaa) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) write$auto(r4, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) socket(0x11, 0x3, 0x9) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 7m45.56586179s ago: executing program 3 (id=620): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0x8, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/memory/memory0/valid_zones\x00', 0x20200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)=""/57, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000005155c11b82c32522b8b063d875babd87e4760b9d6a63c32503e770000000310b991474e8c94f7ae600558d1be3041391ef532140e3e6922c4c8a8ff7326aa07fd6dc8790f3cbe73acdc4300b27b68d0e62bbf39528baf41fcc8ab775eb1f6a460b3674ceaee1abf2cca89e7f4f49b8044a97d0814222b59100082b9c137e9235e8ba40d39475be952b41e59b24370433c3496e3", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087002500430031924ebda1caf5c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63f0b7b3273f00"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x17, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50xffffffffffffffff, 0xee00, 0x0, 0x81, 0x96ae, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x8, 0x4, 0x30000000000, 0x2}) setresuid$auto(r5, r5, 0x0) 7m20.217718701s ago: executing program 33 (id=659): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback_charge\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r1, 0x400454ca, 0x38) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, r1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) fallocate$auto(0xffffffffffffffff, 0x7, 0xd, 0x4cbd5d) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r3 = socket(0x1e, 0x1, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x29, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r4, 0xc0045627, r3) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x33) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(r1, &(0x7f0000000080)={0x7fffffffffffffff, 0x2, 0x6, 0x200, 0xffffffffffffffff, 0xee00, 0x0, 0x81, 0x96ae, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x8, 0x4, 0x30000000000, 0x2}) setresuid$auto(r5, r5, 0x0) 6m47.104746877s ago: executing program 2 (id=810): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) write$auto(0x4, 0x0, 0x100082) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x10280, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) (async, rerun: 32) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c00}, 0x4000000) 6m46.494101129s ago: executing program 2 (id=812): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) socket(0x25, 0x4, 0x6) socket(0x10, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x74bd2e, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4028af11, r1) 6m45.677592966s ago: executing program 2 (id=817): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) time$auto(0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) 6m44.716419176s ago: executing program 2 (id=820): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800008c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x141702, 0x0) write$auto(r1, 0x0, 0x7ffffffd) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram12\x00', 0x50f342, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000080)="48db6bd805b269c38eeeaf125665d3e3e0a357eb282c50596d0fbcd0f63275c65e718c37084046a2316b60365c4569ad187e1e019c2c3263a5fc1ae5c5acd878f24a0463aedaea6d29df21ce592abd16430819a25aedce6499488f70ea81838c7b4eb72ab5a5b74fb8167351c360d0326e3ef797e50755a49f4b2209a04f86b702000000000000008f372ed5befd288523ecac14993b0143d2a4ae44da89680cde759b4bfaf8575f2d1a9b052ec6e1306477", 0x12, 0x0, 0x5, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) msync$auto(0x0, 0x2000000005, 0x6) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = landlock_create_ruleset$auto(0x0, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x8) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bdi/7:4/read_ahead_kb\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000003440)={@raw=0x90, "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"}) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000004640), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r4, &(0x7f0000004740)={&(0x7f0000004600), 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x3}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async) pread64$auto(r3, 0x0, 0x7, 0x9) (async) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000000c0)="eff845967b5df7faec33b73a2c10757a3ead77d50e305b42393252", 0x1b) (async) r6 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x20a241, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)={0x1, 0xffffffff, [{r6, 0x0, 0x682, 0x9}]}) r7 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r7, &(0x7f0000000000)=@generic={0x11, "bc340f000700"}, 0x80) (async) r8 = fcntl$getown(r0, 0x9) sched_setaffinity$auto(r8, 0x6, &(0x7f00000001c0)=0x4) 6m44.234131267s ago: executing program 2 (id=823): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/auto_msgmni\x00', 0x101000, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6a982, 0x0) socket(0xa, 0x3, 0x3b) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x163b40, 0x175) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x7, 0x800}, 0x5}, 0x2, 0x100) 6m43.996806673s ago: executing program 2 (id=825): mmap$auto(0x0, 0x80000002020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4000000000a00006, 0x3ffffe, 0x40eb0, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) read$auto(0xffffffffffffffff, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRES32=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4c091}, 0x4800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x11) prctl$auto_PR_SET_MM_ENV_START(0x100, 0xa, 0x0, 0x6, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r3 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r3, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0xb, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 6m28.911199287s ago: executing program 34 (id=825): mmap$auto(0x0, 0x80000002020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4000000000a00006, 0x3ffffe, 0x40eb0, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) read$auto(0xffffffffffffffff, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRES32=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4c091}, 0x4800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x11) prctl$auto_PR_SET_MM_ENV_START(0x100, 0xa, 0x0, 0x6, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r3 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r3, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0xb, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 3m21.137772477s ago: executing program 0 (id=1473): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000003c0), 0x68e800, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) writev$auto(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0x2698}, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001e80)=@raw_tracepoint={0xf7c, 0xffffffffffffffff, 0x0, 0x5}, 0x7) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) lremovexattr$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f') open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYRESOCT], 0x44}}, 0x4044000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x2041, 0x32) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/netstat\x00', 0xa0001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r1, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xadR\\\xcc\x8b\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y', 0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mprotect$auto(0x200000000000, 0x5, 0x4) 3m20.184091166s ago: executing program 0 (id=1474): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0xa) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(r0, 0x0, 0x6, 0x0, 0x10021) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x2, 0x0) socket(0x2, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @rand_addr=0x640100ff}, 0x55) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) connect$auto(0x3, 0x0, 0x54) 3m19.107232844s ago: executing program 0 (id=1479): gettimeofday$auto(&(0x7f00000015c0)={0x0, 0x8}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x2000d, 0x5b, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1e, 0x805, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/default_smp_affinity\x00', 0xaa102, 0x0) write$auto(r1, 0x0, 0x7ef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, r0) 3m18.848075332s ago: executing program 0 (id=1480): r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0) r3 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) write$auto(r3, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/bdi/252:0/power/runtime_status\x00', 0x43102, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop8/queue/logical_block_size\x00', 0x80800, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000000000001) write$auto(0xffffffffffffffff, &(0x7f0000003000)='/sys/kernel/debug/split_huge_pages\x00', 0x9) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x6, 0x1, 0x5, 0x5, 0x77}) sendfile$auto(r2, r2, 0x0, 0x4f64a1d5) r7 = waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@siginfo_0_0={0x0, 0x9, 0x7}}, 0x9, &(0x7f0000000340)={{0x0, 0x3935}, {0x4, 0x80000001}, 0x648, 0x0, 0x10001, 0x9aa, 0xffffffffffffffff, 0x2, 0x8, 0xd3f, 0x5, 0xc, 0x7, 0x6, 0x8001, 0xffffffffffffffff}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x182b02, 0x0) sendfile$auto(r8, r8, 0x0, 0x3) ptrace$auto(0x7fffffffffffffff, r7, 0x1, 0x800000009) mmap$auto(0x4, 0x400007, 0xdf, 0x17, 0xffffffffffffffff, 0x400) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyt5/power/runtime_status\x00', 0x4240, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb0, 0x404, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getpid() 3m15.247664114s ago: executing program 0 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) (async, rerun: 64) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async, rerun: 32) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async, rerun: 64) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) (async, rerun: 64) mmap$auto(0x46d0, 0x202000d, 0xe, 0x16, r1, 0x7ffe) (async) mmap$auto(0x200000003, 0x3, 0x7ffffdffffffffff, 0xeb1, r1, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x3a100, 0x16f) (async, rerun: 32) socket(0x2, 0x80802, 0x0) (rerun: 32) setsockopt$auto(0x3, 0x400, 0x3e, 0x0, 0x9) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) fcntl$auto(r2, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40811}, 0x400c884) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x17, 0x2, 0x8000) prctl$auto(0x1, 0xff, 0x0, 0x8, 0x3) (async) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r2, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r5, 0x0, 0x3) 2m59.334853823s ago: executing program 35 (id=1488): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_gettime$auto(r0, 0x0) listen$auto(0x3, 0x83) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) unshare$auto(0x40000080) mmap$auto(0x7e, 0x20000003fe, 0x7, 0x94, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004) lseek$auto(r1, 0x2, 0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x5bbc00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) pread64$auto(r4, 0x0, 0x20000002, 0x9) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r5, 0x0, 0x3) 50.854364895s ago: executing program 6 (id=1783): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x7, 0x7, 0x7, 0x3e, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x40f7fc, 0x100080, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x5, 0x0, 0x8bb, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000380)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async) socket(0xa, 0x1, 0x84) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffff004, 0x2) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x20, 0x1}, 0x4) 50.208410702s ago: executing program 6 (id=1787): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) move_mount$auto(r0, 0x0, r0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r1) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000003200)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) r3 = socket(0x10, 0x2, 0x4) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0xc, 0x100000000, 0x7ff, 0xff, 0xee01, 0xffffffffffffffff, 0x0, 0x2, 0x63ea, 0xa0d0, 0x2, 0x2, 0x9, 0x0, 0x4, 0x0, 0xfff}) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0x1}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x7fff) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r7, 0x0, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000002e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000002e00)={&(0x7f0000000480)={0x294c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x138, 0x3, 0x0, 0x1, [@typed={0xe0, 0x72, 0x0, 0x0, @binary="a29d5a9d5771bef8dd0b0f908e4d5b0f122e7c3ecd238e05cdd06acf446d24413e898268f1edd36032774e8c369bafdb6bcd5d10f85c4d0983f01ab6056641b66eddb2781c47cb260d6452fe36fdad867686a076c934964c4f5624d11d92f24c0d087f0a28a6c2740ec59bfe9e5247e61088a2258b6dba6a09e00588f1ec4a58172f6fbff2c64fc38e00c7de954efb90fe8f7e1998a6f861dc11c278f033bfc845364fee9336850ae5786074f76d59bf7e0fc7d17bf0e3cdb783dffa48809459715b08a6bd02ac80a19f4e3721c6b92d64ad0a2143b406adb1d29f77"}, @typed={0x14, 0xd4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x2c, 0x135, 0x0, 0x1, [@typed={0x13, 0x34, 0x0, 0x0, @binary="49d24fcaa32862a5a0f5e999509644"}, @typed={0x8, 0xea, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x165}, @typed={0x8, 0x4f, 0x0, 0x0, @str='ila\x00'}]}, @nested={0xc, 0xcd, 0x0, 0x1, [@nested={0x4, 0xf8}, @nested={0x4, 0x115}]}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r3}]}, @TIPC_NLA_LINK={0x12c0, 0x4, 0x0, 0x1, [@generic="8cc1c314", @nested={0x1e2, 0x93, 0x0, 0x1, [@generic="330c561036f85b033641d82bed93807339f9170dd9f01aaa8ccd739b435dc8eed18ee12348236a5a383cac600e96f1123a78fa07d33452c21b4f508cddd10a62b16ffba26533c050add16d5a9bc575345e68ec24406d33a3baf6fd60bb906135951e3bc3b89932bd32", @nested={0x4, 0x59}, @generic="d5ebefb2a82eb4097f7cf8f80411fb88d7be23c8a3217ba23f773ec9d5cc7e4000363bd602ca488971389016988ee47f61da9d19b84ca3df59ae194440992b839f92c8878250929152cb6b6836b3da834150567ea4956767d77de7e05cda2cc47f0238adb10c5aff4ed49fc30344ad52710f12be1f2c4796118543ef22cc746c6ef06a5f5e13adecb2c9766ebeb28e9af007837256ca98f2eb0d425ae96247c08281390b0bfdd28bee935ba9230e845c895a745b4b003e0b0d6d", @generic="84ffa149243b91dad11fddc209c6808603dd9acc859c51ed8fb7a29d20e038412c0b394ed9f12fe5ddb7e8ab488fa30de54c8f4b9e0c6cd12bdb0f6e06ba05fc3fa815291647cc529bcd81767852c82ced24b6643519161e671feb3d59bcea0510706680cd2dae34bcf9468e41d7edfe6f64c95c72c64d61a62a892264ca3f094a9269795cb398e0e647b0aa3e37ce066c5965744472db", @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x124}, @typed={0x8, 0x35, 0x0, 0x0, @u32=0x7}]}, @generic="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", @generic, @generic, @typed={0x8, 0x14e, 0x0, 0x0, @uid=r4}, @generic="756412678c5cac3e0e8b339ecc0f73a81f4111e57e31b18b4d986770b1e02b6685f0ae1aec873329b739df7a2257dae530657ac6f17234bb8ec10540504ac756d22eac0c0b62735e970a9aef4b6cc44b3f146ad2adbf5724a7107c9522780b740b66f2093c145266cc4ec47e7badb8384ffa1eef37fef84fd0cdf6e24522aba2e1b357fd42f6c169e209ef56329ca6824e0013728585070ba7da0f72b634f0766add6e54e9a01b03d66f1b08cfdcc41f85b1af2bb5e0d80e713ac5a762cd1e529fb89681221a7e765903aa41"]}, @TIPC_NLA_NODE={0xd5, 0x6, 0x0, 0x1, [@nested={0x5d, 0xa6, 0x0, 0x1, [@generic="9231601103ae23c150ebffedef00dbc5ea2f52c54a46b010263a822e4185823004ff8940307ced43d959fca2e1400220ce61883857caaf1b406be50c4ebb54f4f676a89c114f7429f80c14ee1935a1ef4e0ad57b57e5f62943"]}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r5}, @generic="1e5c2472592178374b8a87c02c1f9de0183dd8d12ac9c2e11468939d9af98b3acdf0ce339cca2cf66e5cdb230f5dfd4729e8ab63ad9364baa7c1080cf6060901442a04898b02dffaeb0b0089c8b0a1ae4a4799c83c47bc5f2a8068cba84cc0d95b", @typed={0x8, 0xd7, 0x0, 0x0, @u32=0x87}]}, @TIPC_NLA_PUBL={0x322, 0x3, 0x0, 0x1, [@nested={0x170, 0x9, 0x0, 0x1, [@typed={0x2a, 0x158, 0x0, 0x0, @binary="245732711319f1a0e9a692419e54aec6febe1526acd387dba3515fd40ee7da6f30572f95e37b"}, @typed={0x8, 0x69, 0x0, 0x0, @u32=0xfc}, @generic="f8eb9142abd858a4db36e6a1dc8a4c62f7bac2895604eaf9fc51b519e2d7507d1467d7fe10eb9fb6f03699c58e4cce32bee2913998b9f3e23d399da2a17cf45d71a4cd8c8369c5912fd89e31c0f440038c3650ee07f1ff3c97b494978c9bc91ef6c02ab02c246194ac66406d621a7bd4f551812e5af0ad55025f60bc5e2bb89cfbb4017090800722e39504a5a08abcec6eac12379bac394dd5e71a40c73ee6b0576baed7c6e73c198dd2d1f3", @typed={0x7e, 0x8c, 0x0, 0x0, @binary="fe2b2be2c56582f2cb30db1a41c98b082988bdffd476674bbd9ac95af454a8fa1c7b49a186c76337c6f0a0267fbc48ee8bede89a759ba96c6a61d2440b9dc091dd8f51e08fb432ff122c450d4bfa28aedf56703f7c3e9c9b7657a8e4c23fa6354953e71c3184fe29f2cc9cdee9aeeb68593a95783a93cf9214cc"}, @nested={0x4, 0x32}, @typed={0x8, 0x18, 0x0, 0x0, @fd=r6}]}, @nested={0x8, 0x11b, 0x0, 0x1, [@nested={0x4, 0xeb}]}, @nested={0x70, 0x84, 0x0, 0x1, [@nested={0x4, 0x18}, @generic="bdbc9632dec2acbb90f885d8b7be450019ba1090b5b7c082b88a43159dd5d3a9fefcf9ae461d670b5601d90095ec2072c98d8945fb9a11f4b08929f81b06d32e46b48813792bb1c941076b3e581194b44614e4301028d753cd2ce42f67177f43286da7c8f1feb82d"]}, @generic="d7bc04283c310fba8da4aa6ca2ef3dd94162dc0c236c4b43e18a8a275ba67f76c4b20211aef1fbe70ad8516fa4ec2977ec689cd54955e061ffb01006fcb5e8c741bd87851de5e18d7ad3f96c62fc75086d9a3ae277e349cb8131eb75ebad7167faa6104cf88445f3d267baf07875539cce91b2d444daebf40122be135cb2e5c3045f0f9a9d7d12961947d1cd044542f1b4c5d5c2c8f646b3349e43beca905d59afb2eff45537b5b0679510dde013a5aa9617556c26", @generic="5477949f070be641c282bd55f5368c056722dc51559d99f9f2cecd6a4417039ddbc175352617e32b9011c71f04131f60cd0efc4e84d57018bc02c139917cfbfc9b369bbcbde6987c672471c3829170332ca99ba36da0d2a210b0ddc681fd9ad48cc4618ace5bc37253e3fd228c9288939829ee964e8636746c0c250dc85f0ac92b"]}, @TIPC_NLA_MEDIA={0x111c, 0x5, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x100, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x1f, 0x121, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r7}, @generic="0c8fcf15d054c28af08836199c18a85c21a958"]}, @generic="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", @nested={0xc, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb4}, @nested={0x4, 0x35}]}, @nested={0x4, 0x22}, @generic="86777776cdbe01e12f6efc4c189a7b5445346988cda16bfe53cd3cc6f59ec4a3cf01741b9a0fc836f459ad6cd23aae8ca404f28f9f81bde0f1116b78a5b1045579ef22255c3ab00e257ef7918b31e05b72fdb9b2c378c8768ce63fb68aa7ca320d776ccb80e815d3b99346830952c433b7eac1cfaf3f6347d373c32707eb9974cfa04f0d8fa6e78567c90855884333c767ad5a3ae0bb4b5c6c4ffce9790f6e2c4d29dcc26d3f5b2bf4e1ec5178637bc3ab29d14d0defb6f99d98281aae2bf67208ab2280f69e5c5d93d69ec6b45d0fe222b3b7c5"]}, @TIPC_NLA_BEARER={0x26, 0x1, 0x0, 0x1, [@nested={0xc, 0x149, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @u32=0xfff}]}, @generic="a714873d958843ec62f379d229bb33c0d473ece30b88"]}]}, 0x294c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) socket(0x11, 0x80000, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf250100000031208be8a5b4f52d83483e5c2d79da46e337d98473588f99774c7eb4868b973c1cef8187525db7b5b4e78678eb59512dbc7b11f4e29c29e3273c870a9555cf469e67e8886341e84d38edd658cf267f92e1e785a50fe500fbc125a65f8a4e5aa458a90f3d87fc71eca6309fc0ee1724cea121a7c96dbba43270448ec20cd22915c1cfa658b316e773d1eff747e371aace10d66450a3666b7be9754bde44d1"], 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0x9, 0x401, 0x0, 0x20000006, 0xe}, 0x8002, 0x1, 0x7fffffff) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 49.700430273s ago: executing program 6 (id=1788): mmap$auto(0x0, 0xe983, 0xdf, 0x1000000eb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0xfffffffd, 0x3e, 0x0, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0) unshare$auto(0x2000007f) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = open(&(0x7f0000000100)='.\x00', 0x10000, 0x408) getdents64$auto(r0, 0x0, 0x40002) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) lseek$auto(0x3, 0x1, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000000)) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2a}, 0x1, 0x0, 0x0, 0xa000}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6e) sendto$auto(0x3, 0x0, 0xfffffffffffffdf2, 0x101, 0x0, 0x1c) getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 46.692205586s ago: executing program 6 (id=1800): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/set_event\x00', 0x48382, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x7, 0x3, 0x40000000000000, 0x3, 0xfffffffffffffffe, 0x7, 0x9, 0x62, 0x3, 0x400000000000005, 0x410, 0x6, 0x6, 0x5]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffd6e, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbdaf960ce9dd250100000004000a8008000200000e0000080003007d295b000400050008000800", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4040ae79, &(0x7f0000000040)={0x4}) userfaultfd$auto(0x1) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x205ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x3, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/personality\x00', 0x40002, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r6, 0x5646, r6) r7 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0xfb}, 0x9, 0x0) landlock_restrict_self$auto(r7, 0xb) read$auto_proc_single_file_operations_base(r5, &(0x7f00000001c0)=""/163, 0xa3) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 45.958655626s ago: executing program 6 (id=1803): close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0040, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x9b2, 0x400007, 0xdd, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000e40)='/dev/snd/seq\x00') ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c05, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x201000, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) setrlimit$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004844) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 44.396408014s ago: executing program 6 (id=1809): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 32) socket(0xa, 0x801, 0x100) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @bcast, 0x6}, 0x5b) (async, rerun: 32) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop5/hctx0/tags\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000100)=""/169, 0xa9) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/input/event0\x00', 0x200, 0x0) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000002f40)=0x7e) (async, rerun: 32) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) (rerun: 32) write$auto(r3, 0x0, 0x37a4) (async, rerun: 32) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) (async, rerun: 32) ioctl$auto_USB_RAW_IOCTL_RUN(r1, 0x5501, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, r5, 0x8) (async, rerun: 32) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r6, 0x400454ca, 0x38) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x0) (async) close_range$auto(0x2, r6, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) (async) fallocate$auto(r4, 0x4, 0xd, 0x4cbd5d) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r7 = getpid() process_vm_readv$auto(r7, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x44) socket(0x1e, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) 29.222067646s ago: executing program 36 (id=1809): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 32) socket(0xa, 0x801, 0x100) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @bcast, 0x6}, 0x5b) (async, rerun: 32) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop5/hctx0/tags\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000100)=""/169, 0xa9) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/input/event0\x00', 0x200, 0x0) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000002f40)=0x7e) (async, rerun: 32) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) (rerun: 32) write$auto(r3, 0x0, 0x37a4) (async, rerun: 32) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) (async, rerun: 32) ioctl$auto_USB_RAW_IOCTL_RUN(r1, 0x5501, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, r5, 0x8) (async, rerun: 32) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r6, 0x400454ca, 0x38) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x0) (async) close_range$auto(0x2, r6, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) (async) fallocate$auto(r4, 0x4, 0xd, 0x4cbd5d) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r7 = getpid() process_vm_readv$auto(r7, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x44) socket(0x1e, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) 7.717642172s ago: executing program 5 (id=1880): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0x7, 0xa6ad, 0x6, 0xca4b, @prog_cnt=0x40, 0x0, 0x4, 0x1, 0x644f, 0x2}, 0x122) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80082, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x0) sysfs$auto(0x2, 0x2000000000000006, 0x7) r3 = fsopen$auto(0x0, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x200, 0x0) r4 = epoll_create$auto(0x8800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex_wake$auto(0x0, 0x5, 0x8, 0x8a) epoll_ctl$auto(r4, 0x1, r1, 0x0) r5 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/hwsim/dfs_simulate_radar\x00', 0x8346, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, &(0x7f0000000040)={0xb, 0x401}, &(0x7f0000000080)=0x6f5, 0x4) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), r2) sendmsg$auto_OVS_METER_CMD_FEATURES(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x401}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop15\x00', 0x8000, 0x0) 7.168106766s ago: executing program 4 (id=1881): r0 = socket(0x10, 0x3, 0xc) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd14/sched/write2_fifo_list\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x1, 0x1fcfd) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo$auto(r4, r3, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x5, @_sigchld={0x0, 0x0, 0xceb, 0x8, 0x4}}}) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28180000", @ANYRES16=r1, @ANYRES16=r2, @ANYRES32=r3, @ANYRES64=r1], 0x1828}, 0x1, 0x0, 0x0, 0x40}, 0x849) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) r5 = socket(0x23, 0x3, 0x1) setsockopt$auto(r5, 0xffffa203, 0x8e, 0x0, 0x3) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x0, 0x0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x63102, 0x0) sendfile$auto(r8, r8, 0x0, 0x2) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) r9 = epoll_create$auto(0x70c) io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000180)="97fdb200771cb2e6b7373a9a13fafba0cf40770e9a4aa9c0a5429f2e435a87dc23deba0b6a57d194226d2553f40f1f9a872e715640e61a679d7ba38cf252143a", 0xfffffff9) epoll_ctl$auto(r9, 0x1, r6, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r10 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r10, 0x0, 0xfffffdf2) 6.817508817s ago: executing program 5 (id=1882): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d000000200001801400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4dcd, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x22, 0xb}, 0x800009}, 0x8, 0x20000000) recvmmsg$auto(r1, 0x0, 0x10000, 0x700, 0x0) r3 = socketpair$auto(0x1e, 0x9, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0x1) setsockopt$auto(r3, 0x1, 0x1, 0x0, 0x4) write$auto(0x3, 0x0, 0x7fffffff) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0xfffffffffffffff0, 0xf, 0x2, 0x1e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x11, 0x3, 0x9) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x48, &(0x7f0000000180)='\x0ez1\xf02\xc6\n\xf2\x87\x1d\xfeD!\xa8^J9\xaab\x84\xf6\xf7\x93\xa2\x8f\x0e\x1b\xa4\x0fwG]\t\xcd7\f\t\x87\'%\xaf\x80\xdc\x90\x8c\x9cU\a\x00\x00\x00\x00\x00\x80\x00\x0f\x88P\xebJ\xfdlS!\xc8\x1c\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92\xed/\"\x92\xf7#{\xa3\xf0\xbe\xc2\xe5\xb5\xc4($\xa4\xfb\a\xe0;b\x16\xfb\xaa\xbf\xc9\xc3DfG\xe5', 0x8) socket(0x11, 0x80003, 0x300) 6.283227297s ago: executing program 5 (id=1883): r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x4) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000080)=@info={r0, 0x5, 0x8}, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xd1a9, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x0, 0x806121, 0x6) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x200800, 0xffffff00, 0x8000}, "290000000000000000000000008000"}) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r1, 0x6, &(0x7f0000000000)={@siginfo_0_0={0xfffffffa, 0x9, 0x8, @_sigpoll={0x1, r1}}}, 0x4) syz_open_procfs$namespace(0x0, 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket(0xa, 0xa, 0x84) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x202d01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x20103, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x101, 0x0) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x100073) socket(0x2, 0x0, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6c) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 5.96082997s ago: executing program 7 (id=1884): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000780), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x10000, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x20007, 0x2}, 0x10) bpf$auto(0x2, 0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) bpf$auto(0x1, 0x0, 0xf) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketcall$auto(0xffff5bbc, &(0x7f0000000100)=0x1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, r0, 0x99) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x2, 0x5, 0x80000002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x2000000000, 0x8, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x0, 0x4, 0x1, 0xffffffffffffffff, [], {0x9, 0x6, 0x16ea0, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x2001, 0x1, 0x7, 0x1, 0x7, 0x104, 0x8, 0x100000000}}) madvise$auto(0x0, 0x2003f0, 0x15) mlockall$auto(0x7) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 4.967421327s ago: executing program 4 (id=1885): futex_wake$auto(0x0, 0x5, 0x8, 0x8a) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/sctp/cookie_hmac_alg\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2) ioctl$auto_SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x2, 0x40000000) bind$auto(0x3, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) io_uring_setup$auto(0x6, 0x0) memfd_create$auto(&(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/sit0/accept_ra_rt_info_min_plen\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x15, 0x800, 0x0) pipe$auto(&(0x7f0000000000)) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 4.740347341s ago: executing program 5 (id=1886): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x149041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES32=0x0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) syz_clone(0x44129400, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x1ff) r3 = syz_clone3(&(0x7f0000000140)={0x11045000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r4, @ANYBLOB="040025bd7000fbdbdf252c0000001c004e017fae6fda1c7f8ccda6a86002df0e4020a6043564f756c18b0400bf00"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008151) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x1242, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) r5 = pipe2$auto(0x0, 0x80) socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) keyctl$auto(0x7fff, 0x0, 0x0, 0x5, 0x408) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r5) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r7, 0x4141, 0x0) mmap$auto(0x3, 0x200002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004) 4.231796614s ago: executing program 5 (id=1887): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptysb\x00', 0x42940, 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, r1, 0x8000) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7c9, 0xeb1, 0xfffffffffffffffa, 0x1000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r2, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 3.983526862s ago: executing program 4 (id=1888): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket$nl_generic(0x10, 0x3, 0x10) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) dup$auto(r2) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r1, 0x4000) 3.878325138s ago: executing program 8 (id=1889): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0xfffffffffffffff7, 0xdf, 0x1a, 0x2, 0x800000000008000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x8020000) unshare$auto(0xc) msgctl$auto_MSG_INFO(0xfe0, 0xc, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x40, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r0, &(0x7f0000000380)='1Eer/aud\xe9o1\x00/\xa66\x10\xabVI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec@\xd3\x9ce\xffGP\x97)\xcf\a\xfb\xdf\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x01\x00\x00\x00\x00\x00\x00\x003.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9', 0xa) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r2 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r2, 0xffffffffffffffff) waitid$auto_P_ALL(0x0, 0x9, &(0x7f00000008c0)={@siginfo_0_0={0x3, 0xca6, 0x8, @_kill={0x0, r2}}}, 0x1000, &(0x7f0000000940)={{0x0, 0x6}, {0x0, 0x7}, 0x8, 0xd, 0x3ff, 0x3ff, 0x5, 0x8000000000000000, 0x8, 0x1a, 0x2, 0x9, 0x4, 0x4, 0xf, 0x4}) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8608d100}, 0xc, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf251100000048012880289f9b91e208441f416a9bc5dc19ae888dd21d0f0bd3f9ea8370762465ce50ace5105bc712985898b57196", @ANYRES32, @ANYBLOB="08008800", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="d78bbc9ac135d291f48121175d2538067dc8d99011f28969b645ce78f81a066342a01f2f4bb0e764c28e5712f84cbed8bd77", @ANYRES32=r1, @ANYBLOB="0005001300070000000400188008000b0064fdffff"], 0x170}}, 0xc094) shmctl$auto_SHM_UNLOCK(0xfffffff9, 0xc, &(0x7f0000000180)={{0x2, 0x0, 0xffffffffffffffff, 0x80000001, 0x6e64, 0x7fffffff, 0xb}, 0x200, 0x8, 0x400, 0x8, @raw=0xf, @inferred, 0xf, 0x0, &(0x7f0000000000)="7cabca42fe0b2fa7b0b88a40c27ed747a4a083826ea36f2b9a67eefe86db52c890be26171ee44415415f65f496ad1c3c5c0d831cb702d6e6b61dae24616fef52c840b424c39e3cb7bde78bcbabb937ce35c7e46493fe6b7fecfbf126ee26d2847dfd614357dff7983b853c2647742319ad37ee22f3446ec0a5f1bbdb00849d42b9ad3b9bea2f7837a410809635b7bf347e82b4ae5f0095e16ac453cd61f386801d8a11a698fbdd8ed31a34cc", &(0x7f00000000c0)="052f34af9cff8c3571b9dc3a4bd69c13e200c0595d774671346fc4f8696ad3aa185e3b"}) r4 = getpid() madvise$auto(0xe, 0x802, 0x6fd8f843) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) msgctl$auto_MSG_STAT(0x3ff, 0xb, &(0x7f0000000280)={{0xe, r2, r3, 0x1, 0x7, 0x4, 0x4}, &(0x7f0000000200)=0x3, &(0x7f0000000240)=0xb, 0x2, 0x8, 0x5, 0x80, 0xb, 0xffff, 0x81, 0x94, @raw=0xfffff001, @inferred=r4}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r5, 0x402c542b, &(0x7f0000000440)) 3.750437624s ago: executing program 7 (id=1890): mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1a, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29e, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) (async) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x40000000029, 0x48, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(r0, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x1}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10003, 0x700, 0x0) r4 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x40002, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r4, &(0x7f0000003540)='\a', 0x1) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x40000000000006, 0x2, 0x40eb2, 0xffffffffffffffff, 0x20318000000001) (async, rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) (async) socket(0x10, 0x1, 0xffffffff) (async) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) (async) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000003580)=ANY=[@ANYBLOB="081c0000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf250c000000f102088004003e800c00ed009334000000000000c301238008000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080033006401010000003100000000000000000000000000f30000012018228008001e000000000008005100", @ANYRES32=0x0, @ANYBLOB="f89ab87a0288038bd7e64ee00800e38004004580bfbb95458d61234a5124a3274ab9e3f1ecb1ed0c58e336d216963f983ba582e1a1d04597968b7353d7c8a65187fdb058adca6e2b4eea82cb43705cc490466101e1f000a371a5ff0acdd09db044be803d6eca8293d5fc7787fdb1eec699cf201b0334251a3a5c56e9ef6ef9bcfa655401358eac89b9b8d4b7cb9187dd603184a336f93e060b265c00"], 0x1c08}, 0x1, 0x0, 0x0, 0x48c4}, 0x40) (async) io_uring_setup$auto(0x406, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) 2.920818128s ago: executing program 8 (id=1891): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) socket(0x18, 0x80000, 0x2) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x1) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) prctl$auto(0x32, 0x4, 0x0, 0x7f, 0x7) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r2, 0x4000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/179, 0xb3) madvise$auto(0x0, 0x1010001, 0x100000003) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) r3 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x9) write$auto(r4, 0x0, 0xb) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x66) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) 2.574356228s ago: executing program 7 (id=1892): r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x440002, 0x0) r1 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000002c0), 0x501200, 0x0) dup2$auto(r0, r1) timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x8, 0x5}, {0x9, 0x7}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, r0, 0xd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = pipe2$auto(0x0, 0x0) socketpair$auto(0x6, 0x4, 0x0, 0x0) close_range$auto(r3, r1, 0x208) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0x1a9902, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) close_range$auto(r2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) socketcall$auto(0xa, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ptype\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000140)=""/103, 0x67) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2.06362185s ago: executing program 8 (id=1893): prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0xc) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x97253d5c24a95d78, 0x0) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d0, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x194, 0x2, 0x0, 0x1, [@generic="bd9a0a0f4ac9b35af365d49c6ea93620542bb58cdda564b02439fd6fa5002237bbad6adce290c7a31fcc16cc6a4b3554a20037f63efda26e12b64d7c38c5b25f715bf441dc591bdf4e52b3c41908cc51a90a954776cda3e8212afa103df91751e2242aafaa3425af0b1ca66dc0487685343751923aebec271517c6df", @generic="f5c6cab1ae438fdc6a37f4abfe5680e29693472bc7bc407a5be62a16a9cad8adc209e5b8a147569edf3b17d59dc3", @nested={0x79, 0xe8, 0x0, 0x1, [@generic="6608d50e66cd9b0e346f7934c30bc482ed2ec310f60d72d03a6e95c7eac123a12def562e8ff0545f794db2abc7ff525b0af84e5fdaba66e12a8d6d5b891e336a378c1b5391a42ec16dec88c75df10a1d131555a960b29f8f7f95e1c9ece30ba01e0eb73c02a6a7984e7be9fcadca7c6c8231640cdc"]}, @typed={0x8, 0x78, 0x0, 0x0, @uid}, @nested={0x3c, 0x50, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x13c}, @nested={0x4, 0x133}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x17, 0xde, 0x0, 0x0, @binary="82f15b61f6173adc9df0892bef2310d06a3cbe"}]}, @generic="efd6264929922face163cbae0c36dedf56bf", @typed={0xc, 0x92, 0x0, 0x0, @u64}, @typed={0x8, 0x38, 0x0, 0x0, @pid}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) chmod$auto(&(0x7f0000000000)='.\x00', 0xfffb) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000200)={@sival_int=0x6, @raw=0x7, 0x2, @_sigev_thread={0x0, 0x0}}, &(0x7f0000000240)=0x2) timer_settime$auto(0x0, 0x519a, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) r5 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) pread64$auto(r5, &(0x7f00000001c0)='\x00', 0xca31, 0x4) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000340)="0b82971e21e04f5cc14f84aab5c40fd37108a7a4b5c06592cb45f0f8594fe3bed2cca9713d91767c69bd89306659facc8524696887b0931797b1f6d6d317418a84603851e688a4560c6bb08defbfd8431d1eb9ad8426", 0xc) write$auto(r3, 0x0, 0xe) 1.580059006s ago: executing program 7 (id=1894): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffa6, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c495}, 0x4000804) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101601, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7, 0x4, 0x4000000000df, 0x10, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1003, 0x400, 0x7ffffffb, 0x2, 0x80000005, 0x800a, 0xe, 0x200000100106}) mmap$auto(0x800000, 0xe983, 0x7fffffff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x86b8, 0xffffffffffffffff, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x80000001, 0x200, 0x80000003, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, r0, 0x80000009, 0x7, 0x0, 0x6, r0}, 0x10) bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)=@raw_tracepoint={0x200000000000000, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x40) unshare$auto(0x80040000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x3ff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x459, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x1, 0x2800], {0x6, 0x41e, 0xe, 0x4297, 0x101, 0x3, 0x20101, 0x9}, {0xfff80002, 0x2, 0x53, 0xfff, 0x10001, 0x400, 0x76c5, 0x8, 0x8000000000000000}}) process_vm_readv$auto(0x0, &(0x7f00000001c0)={0x0, 0x100fff}, 0x3, &(0x7f0000000180)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) prctl$auto(0x0, 0x1, 0x0, 0x0, 0x10000003) write$auto(r1, &(0x7f00000004c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccfr\xab\n\x97\x1d\x96w\x17\x8eV\xe1/\xc6#\xc1\xf3&\xedx\x7f]E\xef\x90\xb9\x01#F\xe3\r\b\x18\xf2Xc-\xabF\x19g\x88g\xd1X\xd3\x91', 0x45) socket(0x27, 0x1, 0xf) socket(0x27, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dvmrp1\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x400c804}, 0x4040000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x0, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 1.303587708s ago: executing program 7 (id=1895): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r1, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x3) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x115002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = gettid() process_vm_writev$auto(r3, 0x0, 0x3, &(0x7f0000002a40)={0x0, 0x100000004027}, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000) 935.599358ms ago: executing program 4 (id=1896): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) r1 = accept4$auto(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none, 0x9}, 0x0, 0x243) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000340)=""/179, 0xb3) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x4) close_range$auto(r3, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x6000c000}, 0x80) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x7f000000, 0x40eb2, r1, 0x300000000000) r5 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r5, 0x8000) mprotect$auto(0x8000, 0x8, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), r6) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r4, 0x0, 0x4c800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/memmap/2/type\x00', 0x18b740, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000200), r0) sendmsg$auto_VDPA_CMD_DEV_DEL(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x16c, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@VDPA_ATTR_DEV_NET_CFG_MACADDR={0xc7, 0xa, "7cb83f668426c972ba04068410d772ed1a8ed4ac9c48f22f9982b93f1bc925998c417136ae62133501b1a7bf6f4c4b4c20a8ada5b1050de4c26f159b9b3d6438ee308206b4975f0d1ddb7ac733b26f9ed64397af17cacd288d2f7a9b8e3091653d02486e0100ef1bf91e5fde15336e841fed15044669188a2b5fbed9b9fb5d785d2b2d4282872d0d4ad13e86c7476d858db8500b7e794eec52520be51fcb29412f25708cc27bf9c014746eaee06ffed4238ede019f2b1cec92ef09008b328c0ff8c5ae"}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x69, 0xa, "699534ce2b231186d02a934454a8f3ace5f35f40049e915a86f46695107826448a457a7289673fec79319189c75366ac76343241fcd669f8546b8aa054dbe85c2c61f75320dcb07cf4e22f8ad047491941997bfe6cc05870e009e6fb9e00da67c4cbc5fdfd"}, @VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0xb}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x6, 0x1, '\xd7\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4005}, 0x48840) 672.173705ms ago: executing program 7 (id=1897): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xd0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_MEMERASE64(0xffffffffffffffff, 0x40104d14, &(0x7f0000000000)={0x20000}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyr2/power/runtime_active_time\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0xa, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr14/addr_len\x00', 0x0, 0x0) write$auto(r4, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\xfd\xffE\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x464002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) 662.824945ms ago: executing program 8 (id=1898): alarm$auto(0x8) alarm$auto(0x5) alarm$auto(0x0) alarm$auto(0x7fff) alarm$auto(0x8001) alarm$auto(0xe) alarm$auto(0x6e2) alarm$auto(0x9) alarm$auto(0x80000001) alarm$auto(0xffffffff) alarm$auto(0x3e) alarm$auto(0xfd83) alarm$auto(0x7fff) alarm$auto(0xe) alarm$auto(0x2) alarm$auto(0x1) alarm$auto(0x1) alarm$auto(0x3) alarm$auto(0xd769) alarm$auto(0x9) alarm$auto(0x1) alarm$auto(0x86b) alarm$auto(0x7) alarm$auto(0x2ca3) alarm$auto(0x6) alarm$auto(0x3) alarm$auto(0x87) alarm$auto(0x5) alarm$auto(0x5) alarm$auto(0xdbe7) 631.585368ms ago: executing program 5 (id=1899): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/admmidi2\x00', 0x80c0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x80, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mprotect$auto(0x1000, 0x200000, 0x4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_dvb_dvr_fops_dmxdev(r2, &(0x7f0000000380)="3527db99886e55df618becd3f0a0076f33ac0a27674fa267f2341608f1f94b4f477ce9e510da7d224fbea5994468423ac4bfb7b2a9bb8fd4688f67c97b664106d25878caa3601fbdf6ad6710750130c2c70d062f39415b63718c568645344f0a4dca5ef867f7d780012070104b2c992bb4", 0x71) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x2284, r2) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) 310.601278ms ago: executing program 8 (id=1900): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x58400, 0x124) 163.001701ms ago: executing program 4 (id=1901): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket(0xa, 0x3, 0x3a) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x0, 0x8, 0x1, @relative_fd, 0xd}, 0x92) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d010000ff6118f3ffffff00"}, 0x66) socket(0x2d, 0x2, 0x0) setreuid$auto(0x9, 0x1) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) 13.040179ms ago: executing program 8 (id=1902): write$auto(0xffffffffffffffff, 0x0, 0x81) r0 = creat$auto(&(0x7f0000000040)='./file0\x00', 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) prctl$auto(0xe3, 0x2, 0x0, 0xfff, 0x74d) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.7/usb8/bDeviceSubClass\x00', 0xc440, 0x0) r2 = io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) r3 = getpid() mmap$auto(0x0, 0xfffffffffffffff8, 0x4, 0x40eb2, r1, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttydd/power/control\x00', 0x20102, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0xa, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae93, 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x8001}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r7 = io_uring_setup$auto(0x59, 0x0) io_uring_enter$auto(r7, 0x9, 0x200, 0x6cff, 0x0, 0x1b) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@prog_bind_map={r2, r0, 0x4}, 0xf) 0s ago: executing program 4 (id=1903): futex_wake$auto(0x0, 0x5, 0x8, 0x8a) mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2) ioctl$auto_SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/console\x00', 0x2480, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0xa, 0xe57a) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r1, 0x2f, 0x1, 0x9, 0x81, @count=0x9, 0x0, 0x6, 0x8, 0x7, 0x1}, 0x6) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) socket(0x15, 0x5, 0x0) setns(0xffffffffffffffff, 0x60020000) mount_setattr$auto(0x5, 0x0, 0x0, 0x0, 0x7ff) kernel console output (not intermixed with test programs): _vma_prepare+0x344/0x5e0 [ 524.146382][T13439] ? do_raw_spin_lock+0x128/0x260 [ 524.146399][T13439] __vmf_anon_prepare+0x11f/0x250 [ 524.146419][T13439] do_huge_pmd_anonymous_page+0x160/0x1530 [ 524.146436][T13439] ? _raw_spin_unlock+0x28/0x50 [ 524.146456][T13439] ? __pmd_alloc+0x3fb/0x950 [ 524.146476][T13439] __handle_mm_fault+0x239e/0x2a00 [ 524.146502][T13439] ? mt_find+0x45e/0x8e0 [ 524.146519][T13439] ? __pfx___handle_mm_fault+0x10/0x10 [ 524.146540][T13439] ? __pfx_mt_find+0x10/0x10 [ 524.146571][T13439] handle_mm_fault+0x37b/0xa30 [ 524.146597][T13439] __get_user_pages+0x1178/0x32a0 [ 524.146647][T13439] ? __pfx___get_user_pages+0x10/0x10 [ 524.146672][T13439] populate_vma_page_range+0x267/0x3f0 [ 524.146694][T13439] ? __pfx_populate_vma_page_range+0x10/0x10 [ 524.146714][T13439] ? __pfx_find_vma_intersection+0x10/0x10 [ 524.146733][T13439] ? do_mmap+0x93f/0x12f0 [ 524.146754][T13439] __mm_populate+0x107/0x3a0 [ 524.146774][T13439] ? __pfx___mm_populate+0x10/0x10 [ 524.146795][T13439] ? up_write+0x2e5/0x5c0 [ 524.146810][T13439] vm_mmap_pgoff+0x37f/0x470 [ 524.146831][T13439] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 524.146852][T13439] ? __pfx_do_futex+0x10/0x10 [ 524.146870][T13439] ksys_mmap_pgoff+0xe4/0x610 [ 524.146889][T13439] ? __x64_sys_futex+0x358/0x4d0 [ 524.146904][T13439] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 524.146922][T13439] ? xfd_validate_state+0x129/0x190 [ 524.146942][T13439] __x64_sys_mmap+0x125/0x190 [ 524.146961][T13439] do_syscall_64+0x115/0x840 [ 524.146982][T13439] ? clear_bhb_loop+0x40/0x90 [ 524.147000][T13439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.147015][T13439] RIP: 0033:0x7f88d059de59 [ 524.147029][T13439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.147042][T13439] RSP: 002b:00007f88d13bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 524.147058][T13439] RAX: ffffffffffffffda RBX: 00007f88d0825fa0 RCX: 00007f88d059de59 [ 524.147068][T13439] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 524.147077][T13439] RBP: 00007f88d0633e6f R08: ffffffffffffffff R09: 0000000000000000 [ 524.147086][T13439] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 524.147096][T13439] R13: 00007f88d0826038 R14: 00007f88d0825fa0 R15: 00007ffe69bdbc78 [ 524.147116][T13439] [ 525.450262][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 526.568984][T13466] FAULT_INJECTION: forcing a failure. [ 526.568984][T13466] name failslab, interval 1, probability 0, space 0, times 0 [ 526.648489][T13466] CPU: 0 UID: 0 PID: 13466 Comm: syz.5.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.648516][T13466] Tainted: [L]=SOFTLOCKUP [ 526.648522][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.648531][T13466] Call Trace: [ 526.648537][T13466] [ 526.648543][T13466] dump_stack_lvl+0x100/0x190 [ 526.648565][T13466] should_fail_ex.cold+0x5/0xa [ 526.648584][T13466] should_failslab+0xc2/0x120 [ 526.648602][T13466] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 526.648622][T13466] ? x509_cert_parse+0x3bd/0x910 [ 526.648646][T13466] kmemdup_noprof+0x29/0x60 [ 526.648662][T13466] x509_cert_parse+0x3bd/0x910 [ 526.648680][T13466] ? ___sys_sendmsg+0x190/0x1e0 [ 526.648700][T13466] ? __sys_sendmsg+0x160/0x210 [ 526.648714][T13466] ? do_syscall_64+0x115/0x840 [ 526.648738][T13466] pkcs7_extract_cert+0xa4/0x380 [ 526.648762][T13466] asn1_ber_decoder+0x12b3/0x2170 [ 526.648792][T13466] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 526.648817][T13466] ? kasan_save_track+0x14/0x30 [ 526.648833][T13466] ? __kasan_kmalloc+0xaa/0xb0 [ 526.648849][T13466] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 526.648872][T13466] ? pkcs7_parse_message+0x15f/0x870 [ 526.648896][T13466] pkcs7_parse_message+0x289/0x870 [ 526.648920][T13466] verify_pkcs7_signature+0x30/0xa0 [ 526.648954][T13466] valid_regdb+0x211/0x590 [ 526.648976][T13466] ? __pfx_valid_regdb+0x10/0x10 [ 526.648992][T13466] ? __kasan_kmalloc+0xaa/0xb0 [ 526.649012][T13466] reg_reload_regdb+0x11a/0x460 [ 526.649032][T13466] ? __pfx_reg_reload_regdb+0x10/0x10 [ 526.649054][T13466] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 526.649068][T13466] ? nl80211_pre_doit+0x19a/0xae0 [ 526.649084][T13466] genl_family_rcv_msg_doit+0x214/0x300 [ 526.649102][T13466] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 526.649117][T13466] ? genl_get_cmd+0x3e7/0x760 [ 526.649144][T13466] ? bpf_lsm_capable+0x9/0x10 [ 526.649158][T13466] ? security_capable+0x80/0x260 [ 526.649184][T13466] genl_rcv_msg+0x560/0x800 [ 526.649201][T13466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.649216][T13466] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 526.649229][T13466] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 526.649247][T13466] ? __pfx_nl80211_post_doit+0x10/0x10 [ 526.649268][T13466] netlink_rcv_skb+0x159/0x420 [ 526.649289][T13466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.649305][T13466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.649334][T13466] ? netlink_deliver_tap+0x1ae/0xcc0 [ 526.649357][T13466] genl_rcv+0x28/0x40 [ 526.649377][T13466] netlink_unicast+0x585/0x850 [ 526.649401][T13466] ? __pfx_netlink_unicast+0x10/0x10 [ 526.649428][T13466] netlink_sendmsg+0x8b0/0xda0 [ 526.649452][T13466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.649476][T13466] ? apparmor_socket_sendmsg+0x15b/0x270 [ 526.649504][T13466] ____sys_sendmsg+0xa4d/0xbe0 [ 526.649523][T13466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.649545][T13466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.649569][T13466] ? plist_check_list+0x1b8/0x280 [ 526.649588][T13466] ? plist_del+0x308/0x510 [ 526.649607][T13466] ___sys_sendmsg+0x190/0x1e0 [ 526.649630][T13466] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.649649][T13466] ? __lock_acquire+0x49f/0x1a40 [ 526.649671][T13466] ? futex_wake+0x220/0x5e0 [ 526.649708][T13466] __sys_sendmsg+0x160/0x210 [ 526.649725][T13466] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.649752][T13466] do_syscall_64+0x115/0x840 [ 526.649773][T13466] ? clear_bhb_loop+0x40/0x90 [ 526.649791][T13466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.649806][T13466] RIP: 0033:0x7f88d059de59 [ 526.649820][T13466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.649835][T13466] RSP: 002b:00007f88d13bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.649851][T13466] RAX: ffffffffffffffda RBX: 00007f88d0825fa0 RCX: 00007f88d059de59 [ 526.649861][T13466] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 526.649874][T13466] RBP: 00007f88d0633e6f R08: 0000000000000000 R09: 0000000000000000 [ 526.649882][T13466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.649891][T13466] R13: 00007f88d0826038 R14: 00007f88d0825fa0 R15: 00007ffe69bdbc78 [ 526.649911][T13466] [ 530.295141][ T30] audit: type=1804 audit(1843104680.344:18): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1436" name="/newroot/182/file0" dev="tmpfs" ino=972 res=1 errno=0 [ 530.447909][T13522] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13522] [ 535.547654][T13600] futex_wake_op: syz.6.1453 tries to shift op by -2048; fix this program [ 535.576372][T13601] FAULT_INJECTION: forcing a failure. [ 535.576372][T13601] name fail_futex, interval 1, probability 0, space 0, times 0 [ 535.622557][T13600] futex_wake_op: syz.6.1453 tries to shift op by -2048; fix this program [ 535.655229][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.5.1455 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.655255][T13601] Tainted: [L]=SOFTLOCKUP [ 535.655261][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.655269][T13601] Call Trace: [ 535.655275][T13601] [ 535.655280][T13601] dump_stack_lvl+0x100/0x190 [ 535.655302][T13601] should_fail_ex.cold+0x5/0xa [ 535.655319][T13601] get_futex_key+0x1d2/0x14f0 [ 535.655344][T13601] ? __pfx_get_futex_key+0x10/0x10 [ 535.655368][T13601] ? putname+0xb1/0x110 [ 535.655386][T13601] futex_wait_setup+0x91/0x540 [ 535.655409][T13601] __futex_wait+0x19f/0x300 [ 535.655427][T13601] ? __pfx___futex_wait+0x10/0x10 [ 535.655444][T13601] ? futex_hash+0x311/0x400 [ 535.655467][T13601] ? __pfx_futex_wake_mark+0x10/0x10 [ 535.655487][T13601] ? __pfx_futex_hash+0x10/0x10 [ 535.655513][T13601] futex_wait+0xe6/0x370 [ 535.655531][T13601] ? __pfx_futex_wait+0x10/0x10 [ 535.655552][T13601] ? putname+0xb1/0x110 [ 535.655564][T13601] ? kmem_cache_free+0x127/0x6b0 [ 535.655591][T13601] do_futex+0x265/0x440 [ 535.655606][T13601] ? __pfx_do_futex+0x10/0x10 [ 535.655618][T13601] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.655640][T13601] __x64_sys_futex+0x34f/0x4d0 [ 535.655656][T13601] ? __x64_sys_openat+0x12d/0x210 [ 535.655674][T13601] ? __pfx___x64_sys_futex+0x10/0x10 [ 535.655695][T13601] do_syscall_64+0x115/0x840 [ 535.655719][T13601] ? clear_bhb_loop+0x40/0x90 [ 535.655736][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.655751][T13601] RIP: 0033:0x7f88d059de59 [ 535.655763][T13601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.655778][T13601] RSP: 002b:00007f88d13bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 535.655793][T13601] RAX: ffffffffffffffda RBX: 00007f88d0825fa8 RCX: 00007f88d059de59 [ 535.655802][T13601] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88d0825fa8 [ 535.655811][T13601] RBP: 00007f88d0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 535.655820][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.655828][T13601] R13: 00007f88d0826038 R14: 00007ffe69bdbb90 R15: 00007ffe69bdbc78 [ 535.655847][T13601] [ 536.450061][ T6622] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 538.463888][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 538.616789][T13673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.729944][T13673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.429343][ T6696] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.758521][T13692] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 539.806762][T13695] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1472'. [ 539.867226][T13692] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 539.952481][ T6696] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.978915][T13692] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 540.211583][T13700] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 540.378519][T13702] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 540.705119][ T6696] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.228228][T13127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.239391][T13127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.249763][T13127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.257501][T13127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.276626][T13127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.346900][ T6696] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.379677][ T6696] batadv0: left allmulticast mode [ 542.427179][ T6696] batadv0: left promiscuous mode [ 542.479082][ T6696] bridge0: port 3(batadv0) entered disabled state [ 542.588264][ T6696] bridge_slave_1: left allmulticast mode [ 542.689104][ T6696] bridge_slave_1: left promiscuous mode [ 542.770754][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.896581][ T6696] bridge_slave_0: left allmulticast mode [ 542.947950][ T6696] bridge_slave_0: left promiscuous mode [ 542.988789][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.365234][T13127] Bluetooth: hci2: command tx timeout [ 543.836917][T13774] raw_sendmsg: syz.5.1481 forgot to set AF_INET. Fix it! [ 543.996821][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.046777][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.124727][ T6696] bond0 (unregistering): Released all slaves [ 544.281249][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 544.772649][T13780] FAULT_INJECTION: forcing a failure. [ 544.772649][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 544.953884][T13780] CPU: 0 UID: 0 PID: 13780 Comm: syz.4.1482 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.953911][T13780] Tainted: [L]=SOFTLOCKUP [ 544.953917][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.953926][T13780] Call Trace: [ 544.953931][T13780] [ 544.953939][T13780] dump_stack_lvl+0x100/0x190 [ 544.953962][T13780] should_fail_ex.cold+0x5/0xa [ 544.953981][T13780] should_failslab+0xc2/0x120 [ 544.954001][T13780] __kmalloc_cache_noprof+0x91/0x6c0 [ 544.954025][T13780] ? percpu_ref_init+0xec/0x3f0 [ 544.954108][T13780] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 544.954152][T13780] percpu_ref_init+0xec/0x3f0 [ 544.954170][T13780] blk_alloc_queue+0x574/0x790 [ 544.954214][T13780] __blk_alloc_disk+0xa0/0x170 [ 544.954232][T13780] ? __pfx___blk_alloc_disk+0x10/0x10 [ 544.954260][T13780] ? __pfx_idr_alloc+0x10/0x10 [ 544.954303][T13780] ? lockdep_init_map_type+0x5c/0x250 [ 544.954327][T13780] ? __raw_spin_lock_init+0x3a/0x110 [ 544.954345][T13780] ? __pfx_hot_add_show+0x10/0x10 [ 544.954388][T13780] zram_add+0x1bf/0x5d0 [ 544.954403][T13780] ? __pfx_zram_add+0x10/0x10 [ 544.954430][T13780] ? find_held_lock+0x2b/0x80 [ 544.954446][T13780] ? sysfs_file_kobj+0xe4/0x290 [ 544.954468][T13780] ? __pfx_hot_add_show+0x10/0x10 [ 544.954484][T13780] hot_add_show+0x21/0x80 [ 544.954498][T13780] class_attr_show+0x72/0xa0 [ 544.954518][T13780] ? __pfx_class_attr_show+0x10/0x10 [ 544.954536][T13780] sysfs_kf_seq_show+0x217/0x3f0 [ 544.954558][T13780] seq_read_iter+0x32f/0x1270 [ 544.954578][T13780] ? lock_acquire+0x1b9/0x370 [ 544.954611][T13780] kernfs_fop_read_iter+0x46c/0x610 [ 544.954627][T13780] ? rw_verify_area+0xce/0x6d0 [ 544.954647][T13780] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 544.954665][T13780] vfs_read+0x82e/0xb40 [ 544.954689][T13780] ? __pfx_vfs_read+0x10/0x10 [ 544.954722][T13780] ksys_read+0x12a/0x250 [ 544.954743][T13780] ? __pfx_ksys_read+0x10/0x10 [ 544.954769][T13780] do_syscall_64+0x115/0x840 [ 544.954791][T13780] ? clear_bhb_loop+0x40/0x90 [ 544.954809][T13780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.954825][T13780] RIP: 0033:0x7fac0ff9de59 [ 544.954839][T13780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.954862][T13780] RSP: 002b:00007fac10f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.954878][T13780] RAX: ffffffffffffffda RBX: 00007fac10226090 RCX: 00007fac0ff9de59 [ 544.954889][T13780] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000009 [ 544.954899][T13780] RBP: 00007fac10033e6f R08: 0000000000000000 R09: 0000000000000000 [ 544.954908][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.954917][T13780] R13: 00007fac10226128 R14: 00007fac10226090 R15: 00007ffc9e220ae8 [ 544.954938][T13780] [ 545.599697][T13127] Bluetooth: hci2: command tx timeout [ 545.642328][T13781] Process accounting resumed [ 547.033149][ T6696] hsr_slave_0: left promiscuous mode [ 547.080276][ T6696] hsr_slave_1: left promiscuous mode [ 547.111973][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.169184][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.223889][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.251974][T13780] zram: Error allocating disk structure for device 1 [ 547.261782][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.347575][ T6696] veth1_macvtap: left promiscuous mode [ 547.386021][ T6696] veth0_macvtap: left promiscuous mode [ 547.663992][ T6622] Bluetooth: hci2: command tx timeout [ 548.200508][T13779] zram: Added device: zram1 [ 548.327862][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 548.425488][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 549.018063][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 549.214404][T13708] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.270057][T13708] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.308260][T13708] bridge_slave_0: entered allmulticast mode [ 549.383730][T13708] bridge_slave_0: entered promiscuous mode [ 549.468268][T13708] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.521769][T13708] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.576799][T13708] bridge_slave_1: entered allmulticast mode [ 549.617821][T13708] bridge_slave_1: entered promiscuous mode [ 549.734009][ T6622] Bluetooth: hci2: command tx timeout [ 550.086743][T13708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.643546][T13708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.984406][T13708] team0: Port device team_slave_0 added [ 551.081375][T13708] team0: Port device team_slave_1 added [ 551.318301][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 551.450880][T13708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.499583][T13708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.613836][T13878] binder: BINDER_SET_CONTEXT_MGR already set [ 551.705712][T13708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.739858][T13878] binder: 13876:13878 ioctl 40046207 0 returned -16 [ 551.851235][T13708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.902061][T13708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.022373][T13708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.157768][T13882] net_ratelimit: 199 callbacks suppressed [ 552.157783][T13882] netlink: zone id is out of range [ 552.384270][T13708] hsr_slave_0: entered promiscuous mode [ 552.420849][T13708] hsr_slave_1: entered promiscuous mode [ 552.454794][T13708] debugfs: 'hsr0' already exists in 'hsr' [ 552.495076][T13708] Cannot create hsr debugfs directory [ 553.809476][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 553.945165][T13908] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1498'. [ 554.008177][T13908] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.059554][T13911] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1498'. [ 554.119242][T13908] IPv6: Can't replace route, no match found [ 554.150976][T13911] IPv6: Can't replace route, no match found [ 554.987294][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 556.905327][T13708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 556.981165][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.014989][T13708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 557.095045][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.137384][T13708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 557.211688][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.311789][T13708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 557.364035][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.966444][T13708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.085495][T13708] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.215626][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.222784][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.362469][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.369641][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.885150][T13991] netlink: zone id is out of range [ 558.934245][T13991] netlink: zone id is out of range [ 558.972375][T13991] netlink: zone id is out of range [ 559.042123][T13991] netlink: zone id is out of range [ 559.107365][T13991] netlink: zone id is out of range [ 559.152882][T13991] netlink: zone id is out of range [ 559.191325][T13991] netlink: zone id is out of range [ 559.229797][T13991] netlink: zone id is out of range [ 559.264591][T13991] netlink: zone id is out of range [ 559.301558][T13991] netlink: zone id is out of range [ 560.431250][T13708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.761494][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.768602][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.125170][T13708] veth0_vlan: entered promiscuous mode [ 562.226186][T13708] veth1_vlan: entered promiscuous mode [ 563.325110][T13127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 563.340868][T13127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 563.352635][T13127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 563.363731][T13127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 563.380167][T13127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.455907][T14053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.124051][T13708] veth0_macvtap: entered promiscuous mode [ 564.185259][T13708] veth1_macvtap: entered promiscuous mode [ 564.292386][T13708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.671643][T13708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.810959][ T9446] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.897597][ T9446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.061435][ T9446] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.160012][ T9446] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.420457][T13127] Bluetooth: hci5: command tx timeout [ 565.469888][T13127] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 565.819223][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.877290][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.144810][ T9446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.207448][ T9446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.593012][T14102] bridge0: port 3(batadv0) entered blocking state [ 566.640741][T14102] bridge0: port 3(batadv0) entered disabled state [ 566.688610][T14102] batadv0: entered allmulticast mode [ 566.730767][T14102] batadv0: entered promiscuous mode [ 566.759924][T14102] bridge0: port 3(batadv0) entered blocking state [ 566.766537][T14102] bridge0: port 3(batadv0) entered forwarding state [ 566.933817][ T6711] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 566.944546][ T6711] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 567.262015][T14113] warning: `syz.4.1515' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 567.346028][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1515'. [ 567.491098][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.497152][ T6622] Bluetooth: hci5: command tx timeout [ 567.559960][T14067] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.560029][T14067] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.560157][T14067] bridge_slave_0: entered allmulticast mode [ 567.568010][T14067] bridge_slave_0: entered promiscuous mode [ 567.577668][T14067] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.577731][T14067] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.577839][T14067] bridge_slave_1: entered allmulticast mode [ 567.578857][T14067] bridge_slave_1: entered promiscuous mode [ 567.835427][T13127] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 567.858781][T14125] FAULT_INJECTION: forcing a failure. [ 567.858781][T14125] name failslab, interval 1, probability 0, space 0, times 0 [ 567.858863][T14125] CPU: 0 UID: 0 PID: 14125 Comm: syz.4.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.858886][T14125] Tainted: [L]=SOFTLOCKUP [ 567.858891][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 567.858900][T14125] Call Trace: [ 567.858905][T14125] [ 567.858911][T14125] dump_stack_lvl+0x100/0x190 [ 567.858932][T14125] should_fail_ex.cold+0x5/0xa [ 567.858949][T14125] should_failslab+0xc2/0x120 [ 567.858968][T14125] kmem_cache_alloc_noprof+0x91/0x6a0 [ 567.858985][T14125] ? __pfx_map_id_range_down+0x10/0x10 [ 567.859004][T14125] ? rcu_is_watching+0x12/0xc0 [ 567.859019][T14125] ? security_inode_alloc+0x3b/0x2c0 [ 567.859038][T14125] security_inode_alloc+0x3b/0x2c0 [ 567.859054][T14125] inode_init_always_gfp+0xc77/0xfb0 [ 567.859079][T14125] alloc_inode+0x8e/0x250 [ 567.859100][T14125] new_inode+0x22/0x1c0 [ 567.859118][T14125] shmem_get_inode+0x1e3/0xf70 [ 567.859139][T14125] ? __pfx_shmem_get_inode+0x10/0x10 [ 567.859166][T14125] __shmem_file_setup+0x382/0x460 [ 567.859186][T14125] ? __pfx___shmem_file_setup+0x10/0x10 [ 567.859208][T14125] ? vm_area_alloc+0x1f/0x160 [ 567.859231][T14125] shmem_zero_setup+0x96/0x1b0 [ 567.859247][T14125] __mmap_region+0x24ef/0x2db0 [ 567.859273][T14125] ? __pfx___mmap_region+0x10/0x10 [ 567.859299][T14125] ? do_raw_spin_lock+0x128/0x260 [ 567.859319][T14125] ? do_raw_spin_unlock+0x145/0x1e0 [ 567.859336][T14125] ? debug_object_activate+0x343/0x4b0 [ 567.859424][T14125] ? __pfx_debug_object_activate+0x10/0x10 [ 567.859443][T14125] ? __lock_acquire+0x49f/0x1a40 [ 567.859474][T14125] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 567.859500][T14125] ? rcu_is_watching+0x12/0xc0 [ 567.859515][T14125] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 567.859539][T14125] ? lockdep_hardirqs_on+0x78/0x100 [ 567.859590][T14125] mmap_region+0x35d/0x620 [ 567.859623][T14125] ? rcu_is_watching+0x12/0xc0 [ 567.859639][T14125] ? __pfx_mmap_region+0x10/0x10 [ 567.859656][T14125] ? cap_mmap_addr+0x4b/0x120 [ 567.859712][T14125] ? bpf_lsm_mmap_addr+0x9/0x30 [ 567.859735][T14125] ? security_mmap_addr+0x71/0x1e0 [ 567.859753][T14125] ? __get_unmapped_area+0x255/0x3e0 [ 567.859774][T14125] do_mmap+0xc63/0x12f0 [ 567.859796][T14125] ? __pfx_do_mmap+0x10/0x10 [ 567.859815][T14125] ? __pfx_down_write_killable+0x10/0x10 [ 567.859830][T14125] ? __pfx_futex_wait+0x10/0x10 [ 567.859850][T14125] vm_mmap_pgoff+0x29e/0x470 [ 567.859872][T14125] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 567.859893][T14125] ? __pfx_do_futex+0x10/0x10 [ 567.859911][T14125] ksys_mmap_pgoff+0xe4/0x610 [ 567.859930][T14125] ? __x64_sys_futex+0x358/0x4d0 [ 567.859944][T14125] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 567.859962][T14125] ? xfd_validate_state+0x129/0x190 [ 567.859982][T14125] __x64_sys_mmap+0x125/0x190 [ 567.860000][T14125] do_syscall_64+0x115/0x840 [ 567.860021][T14125] ? clear_bhb_loop+0x40/0x90 [ 567.860040][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.860055][T14125] RIP: 0033:0x7fac0ff9de59 [ 567.860069][T14125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.860083][T14125] RSP: 002b:00007fac10f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 567.860099][T14125] RAX: ffffffffffffffda RBX: 00007fac10225fa0 RCX: 00007fac0ff9de59 [ 567.860109][T14125] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 567.860118][T14125] RBP: 00007fac10033e6f R08: fffffffffffffffa R09: 0000000000008000 [ 567.860128][T14125] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 567.860137][T14125] R13: 00007fac10226038 R14: 00007fac10225fa0 R15: 00007ffc9e220ae8 [ 567.860157][T14125] [ 567.953273][T14067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.070267][T14067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.281673][T14067] team0: Port device team_slave_0 added [ 568.377888][T14067] team0: Port device team_slave_1 added [ 568.675321][T14067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.675593][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.675616][T14067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.853197][T14067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.853213][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.853233][T14067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.378577][T14067] hsr_slave_0: entered promiscuous mode [ 569.379284][T14067] hsr_slave_1: entered promiscuous mode [ 569.387716][T14067] debugfs: 'hsr0' already exists in 'hsr' [ 569.387735][T14067] Cannot create hsr debugfs directory [ 569.561631][T14127] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.561674][T14127] Bluetooth: hci5: command tx timeout [ 569.885247][T13127] Bluetooth: hci2: command 0x2016 tx timeout [ 571.308375][T14147] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 571.601048][T14067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 571.613892][T14067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.641364][T14067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 571.657907][ T6622] Bluetooth: hci5: command tx timeout [ 571.658272][T14067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.658897][T14067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 571.674570][T14067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.680171][T14067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 571.708483][T14067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.954857][ T6622] Bluetooth: hci2: command 0x2016 tx timeout [ 572.261457][T14067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.315907][T14067] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.351304][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.351404][ T6711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.368047][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.368119][ T9446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.744273][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.460708][ T6621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.756983][ T6621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.064570][ T6621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.252873][T14203] Process accounting paused [ 577.965737][T14067] veth0_vlan: entered promiscuous mode [ 578.417656][T14067] veth1_vlan: entered promiscuous mode [ 578.519178][ T6621] vlan1: left allmulticast mode [ 578.556656][ T6621] veth0_vlan: left allmulticast mode [ 578.596216][ T6621] vlan1: left promiscuous mode [ 578.632616][ T6621] bridge0: port 3(vlan1) entered disabled state [ 578.740981][ T6621] macvlan1: left allmulticast mode [ 578.746124][ T6621] veth1_vlan: left allmulticast mode [ 578.825471][ T6621] macvlan1: left promiscuous mode [ 578.872797][ T6621] bridge0: port 1(macvlan1) entered disabled state [ 578.946325][ T6621] bridge_slave_1: left allmulticast mode [ 578.995246][ T6621] bridge_slave_1: left promiscuous mode [ 579.021133][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.739655][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.800725][ T6621] bond0 (unregistering): Released all slaves [ 579.984242][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 580.139308][ T6621] ovs_: left promiscuous mode [ 580.516698][ T6621] HfR: left promiscuous mode [ 580.640047][ T6621] tipc: Left network mode [ 580.659576][T14067] veth0_macvtap: entered promiscuous mode [ 580.722447][T14258] netlink: 836 bytes leftover after parsing attributes in process `syz.4.1535'. [ 580.734923][T14067] veth1_macvtap: entered promiscuous mode [ 580.861238][T14258] net_ratelimit: 30 callbacks suppressed [ 580.861252][T14258] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 580.996175][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1536'. [ 581.165623][T14067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.299891][T14067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.485705][ T9446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.542764][ T9446] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.674605][ T9446] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.838204][ T9446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.477644][T14292] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1539'. [ 582.674218][T14292] mac80211_hwsim hwsim53 : renamed from wlan0 (while UP) [ 582.812942][ T7625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.849974][ T7625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.892013][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 583.095433][ T6621] hsr_slave_0: left promiscuous mode [ 583.126120][ T6621] hsr_slave_1: left promiscuous mode [ 583.152060][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.185981][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.239416][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.290444][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.389810][ T6621] veth1_macvtap: left promiscuous mode [ 583.423745][ T6621] veth0_macvtap: left promiscuous mode [ 583.450761][ T6621] veth1_vlan: left promiscuous mode [ 583.480539][ T6621] veth0_vlan: left promiscuous mode [ 584.754775][ T6621] team0 (unregistering): Port device team_slave_1 removed [ 584.862764][ T6621] team0 (unregistering): Port device team_slave_0 removed [ 585.223757][ T6715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.293088][ T6715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.492230][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.575150][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.800009][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 587.996540][T14359] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1548'. [ 589.975093][T14395] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 590.023226][T13127] Bluetooth: hci5: unexpected event 0x34 length: 726 > 6 [ 590.164895][T13127] Bluetooth: hci5: unexpected event 0x34 length: 726 > 6 [ 590.348071][T14395] File: /dev/nullb0 PID: 14395 Comm: syz.5.1552 [ 590.737694][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 594.993399][T14476] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1565'. [ 595.407093][T14483] bridge0: port 3(batadv0) entered blocking state [ 595.441469][T14483] bridge0: port 3(batadv0) entered disabled state [ 595.478879][T14483] batadv0: entered allmulticast mode [ 595.524239][T14483] batadv0: entered promiscuous mode [ 595.561249][T14483] bridge0: port 3(batadv0) entered blocking state [ 595.567828][T14483] bridge0: port 3(batadv0) entered forwarding state [ 595.704469][ T7626] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 595.713761][ T7626] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 597.134660][T14509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 597.391537][T14510] WARNING! power/level is deprecated; use power/control instead [ 600.656935][T14571] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1581'. [ 600.844087][T14564] zswap: compressor not available [ 603.483033][T13127] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 607.569475][ T6622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.582352][ T6622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.592962][ T6622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.601994][ T6622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 607.611626][ T6622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 608.099494][T14666] Process accounting resumed [ 609.197111][T14707] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 609.682353][ T6622] Bluetooth: hci1: command tx timeout [ 609.949652][T14722] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[14067] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14722] [ 610.726520][T14748] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 610.993346][T14674] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.057674][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1604'. [ 611.069432][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.118936][T14674] bridge_slave_0: entered allmulticast mode [ 611.136775][T14756] nbd: must specify a size in bytes for the device [ 611.157618][T14674] bridge_slave_0: entered promiscuous mode [ 611.207115][T14674] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.254400][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.315174][T14674] bridge_slave_1: entered allmulticast mode [ 611.387318][T14674] bridge_slave_1: entered promiscuous mode [ 611.561656][T14674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.660241][T14674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.730810][ T6622] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 611.752639][T13127] Bluetooth: hci1: command tx timeout [ 611.931322][T14674] team0: Port device team_slave_0 added [ 612.033155][T14674] team0: Port device team_slave_1 added [ 612.118839][T14780] input: f as /devices/virtual/input/input16 [ 612.275884][T14674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.316181][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.456078][T14674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.702780][T14674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.769581][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.958602][T14674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.445522][T14789] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1611'. [ 613.742995][T13127] Bluetooth: hci0: command 0x0c1a tx timeout [ 613.821510][T13127] Bluetooth: hci1: command tx timeout [ 613.929784][T14674] hsr_slave_0: entered promiscuous mode [ 613.968844][T14674] hsr_slave_1: entered promiscuous mode [ 614.011898][T14674] debugfs: 'hsr0' already exists in 'hsr' [ 614.047649][T14674] Cannot create hsr debugfs directory [ 614.397427][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 615.211716][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1613'. [ 615.411558][T14808] bridge0: port 4(batadv0) entered blocking state [ 615.470710][T14808] bridge0: port 4(batadv0) entered disabled state [ 615.526210][T14808] batadv0: entered allmulticast mode [ 615.558996][T14808] batadv0: entered promiscuous mode [ 615.584359][T14808] bridge0: port 4(batadv0) entered blocking state [ 615.590887][T14808] bridge0: port 4(batadv0) entered forwarding state [ 615.741465][ T9446] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 615.750708][ T9446] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 615.813757][T13127] Bluetooth: hci0: command 0x0c1a tx timeout [ 615.890701][ T6622] Bluetooth: hci1: command tx timeout [ 616.352053][ T30] audit: type=1800 audit(1843105799.822:19): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1616" name="dbroot" dev="configfs" ino=64994 res=0 errno=0 [ 616.459277][T14813] db_root: cannot open: cover mmap failed [ 616.622669][T14813] db_root: cannot open: (errno 9) [ 616.675178][ T30] audit: type=1804 audit(1843105800.144:20): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1617" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject" dev="tracefs" ino=19680823 res=1 errno=0 [ 617.025445][T14674] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.062661][T14674] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.560199][T14674] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.883280][T14674] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.871764][T14871] binder: 14869:14871 ioctl 541b 0 returned -22 [ 620.104859][T14674] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 620.217598][T14674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.253162][T14674] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 620.304543][T14674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.386172][T14674] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 620.445092][T14674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 620.486043][T14674] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 620.588480][T14674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.974077][T14882] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 630.136517][T15030] dump_stack_lvl+0x100/0x190 [ 630.136542][T15030] should_fail_ex.cold+0x5/0xa [ 630.136561][T15030] should_failslab+0xc2/0x120 [ 630.136582][T15030] kmem_cache_alloc_noprof+0x91/0x6a0 [ 630.136599][T15030] ? kernel_text_address+0x8d/0x100 [ 630.136620][T15030] ? vm_area_dup+0x27/0x8e0 [ 630.136658][T15030] vm_area_dup+0x27/0x8e0 [ 630.136681][T15030] __split_vma+0x18c/0xda0 [ 630.136706][T15030] ? __pfx___split_vma+0x10/0x10 [ 630.136727][T15030] ? __pfx_stack_trace_save+0x10/0x10 [ 630.136745][T15030] ? crypto_sha256_init+0x16/0x20 [ 630.136840][T15030] ? kasan_save_stack+0x3f/0x50 [ 630.136856][T15030] ? kasan_save_stack+0x30/0x50 [ 630.136872][T15030] ? kasan_save_track+0x14/0x30 [ 630.136888][T15030] ? __kasan_kmalloc+0xaa/0xb0 [ 630.136904][T15030] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 630.136929][T15030] vms_gather_munmap_vmas+0x1d2/0x1720 [ 630.136955][T15030] ? mtree_range_walk+0x72b/0xb70 [ 630.136979][T15030] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 630.137016][T15030] ? mas_walk+0x6ef/0x9b0 [ 630.137047][T15030] __mmap_region+0x4a7/0x2db0 [ 630.137070][T15030] ? integrity_audit_message+0x426/0x4f0 [ 630.137096][T15030] ? __mutex_unlock_slowpath+0x35d/0x930 [ 630.137124][T15030] ? __pfx___mmap_region+0x10/0x10 [ 630.137148][T15030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.137185][T15030] ? __pfx_ima_add_template_entry+0x10/0x10 [ 630.137209][T15030] ? ima_calc_field_array_hash+0x378/0x440 [ 630.137264][T15030] ? process_measurement+0x109c/0x2350 [ 630.137279][T15030] ? process_measurement+0x109c/0x2350 [ 630.137298][T15030] ? __mutex_unlock_slowpath+0x35d/0x930 [ 630.137324][T15030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.137349][T15030] ? process_measurement+0x10a9/0x2350 [ 630.137363][T15030] ? rcu_is_watching+0x12/0xc0 [ 630.137410][T15030] mmap_region+0x527/0x620 [ 630.137427][T15030] ? __pfx_mmap_region+0x10/0x10 [ 630.137442][T15030] ? shmem_get_unmapped_area+0x141/0x960 [ 630.137463][T15030] ? mtree_load+0x311/0xa90 [ 630.137477][T15030] ? cap_mmap_addr+0x4b/0x120 [ 630.137499][T15030] ? bpf_lsm_mmap_addr+0x9/0x30 [ 630.137520][T15030] ? security_mmap_addr+0x71/0x1e0 [ 630.137538][T15030] ? __get_unmapped_area+0x255/0x3e0 [ 630.137558][T15030] do_mmap+0xc63/0x12f0 [ 630.137580][T15030] ? __pfx_do_mmap+0x10/0x10 [ 630.137598][T15030] ? __pfx_down_write_killable+0x10/0x10 [ 630.137618][T15030] __do_sys_remap_file_pages+0x8d4/0xa10 [ 630.137645][T15030] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 630.137664][T15030] ? __x64_sys_futex+0x34f/0x4d0 [ 630.137678][T15030] ? __x64_sys_futex+0x358/0x4d0 [ 630.137695][T15030] ? xfd_validate_state+0x129/0x190 [ 630.137719][T15030] do_syscall_64+0x115/0x840 [ 630.137740][T15030] ? clear_bhb_loop+0x40/0x90 [ 630.137758][T15030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.137773][T15030] RIP: 0033:0x7f0b7739de59 [ 630.137788][T15030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.137803][T15030] RSP: 002b:00007f0b78244028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 630.137818][T15030] RAX: ffffffffffffffda RBX: 00007f0b77625fa0 RCX: 00007f0b7739de59 [ 630.137828][T15030] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 630.137837][T15030] RBP: 00007f0b77433e6f R08: 0000000000000004 R09: 0000000000000000 [ 630.137846][T15030] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 630.137854][T15030] R13: 00007f0b77626038 R14: 00007f0b77625fa0 R15: 00007ffe3511bfe8 [ 630.137875][T15030] [ 631.184595][T15035] NFSD: Failed to start, no listeners configured. [ 631.450815][T15040] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1652'. [ 631.667128][T15037] NFSD: Failed to start, no listeners configured. [ 631.853927][ T6715] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 13 with max blocks 2 with error 117 [ 631.920464][ T6715] EXT4-fs (sda1): This should not happen!! Data will be lost [ 631.920464][ T6715] [ 632.157756][ T30] audit: type=1800 audit(1843105815.703:21): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1655" name="dbroot" dev="configfs" ino=66827 res=0 errno=0 [ 633.386909][ T6626] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.927165][ T6626] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.127874][T13127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 634.146198][T13127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 634.157768][T13127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 634.170970][T13127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 634.182943][T13127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 634.418198][T15063] zswap: compressor 000 not available [ 634.482397][T15063] zswap: compressor 000 not available [ 634.500939][ T6626] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.919717][ T6626] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.905093][ T6626] batadv0: left allmulticast mode [ 635.929484][ T6626] batadv0: left promiscuous mode [ 635.956589][ T6626] bridge0: port 3(batadv0) entered disabled state [ 636.006026][ T6626] bridge_slave_1: left allmulticast mode [ 636.037854][ T6626] bridge_slave_1: left promiscuous mode [ 636.075620][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.149197][ T6626] bridge_slave_0: left allmulticast mode [ 636.204250][ T6626] bridge_slave_0: left promiscuous mode [ 636.236473][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.276150][ T6622] Bluetooth: hci0: command tx timeout [ 637.477332][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.552336][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.613442][ T6626] bond0 (unregistering): Released all slaves [ 637.768816][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 637.931643][ T6626] tipc: Left network mode [ 638.336589][T13127] Bluetooth: hci0: command tx timeout [ 640.050193][T15152] zswap: compressor not available [ 640.405868][T13127] Bluetooth: hci0: command tx timeout [ 640.604357][T15166] FAULT_INJECTION: forcing a failure. [ 640.604357][T15166] name failslab, interval 1, probability 0, space 0, times 0 [ 640.716226][T15166] CPU: 0 UID: 0 PID: 15166 Comm: syz.6.1669 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.716254][T15166] Tainted: [L]=SOFTLOCKUP [ 640.716259][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 640.716268][T15166] Call Trace: [ 640.716274][T15166] [ 640.716280][T15166] dump_stack_lvl+0x100/0x190 [ 640.716302][T15166] should_fail_ex.cold+0x5/0xa [ 640.716320][T15166] should_failslab+0xc2/0x120 [ 640.716339][T15166] kmem_cache_alloc_noprof+0x91/0x6a0 [ 640.716356][T15166] ? __pfx_map_id_range_down+0x10/0x10 [ 640.716377][T15166] ? security_inode_alloc+0x3b/0x2c0 [ 640.716395][T15166] security_inode_alloc+0x3b/0x2c0 [ 640.716410][T15166] inode_init_always_gfp+0xc77/0xfb0 [ 640.716436][T15166] alloc_inode+0x8e/0x250 [ 640.716453][T15166] sock_alloc+0x44/0x280 [ 640.716476][T15166] ? security_socket_create+0x7f/0x250 [ 640.716501][T15166] __sock_create+0xc2/0x860 [ 640.716526][T15166] __sys_socket+0x14d/0x260 [ 640.716548][T15166] ? __pfx___sys_socket+0x10/0x10 [ 640.716575][T15166] __x64_sys_socket+0x72/0xb0 [ 640.716595][T15166] ? lockdep_hardirqs_on+0x78/0x100 [ 640.716617][T15166] do_syscall_64+0x115/0x840 [ 640.716638][T15166] ? clear_bhb_loop+0x40/0x90 [ 640.716660][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.716675][T15166] RIP: 0033:0x7f9cf059de59 [ 640.716689][T15166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.716704][T15166] RSP: 002b:00007f9cf14eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 640.716718][T15166] RAX: ffffffffffffffda RBX: 00007f9cf0825fa0 RCX: 00007f9cf059de59 [ 640.716728][T15166] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 640.716737][T15166] RBP: 00007f9cf0633e6f R08: 0000000000000000 R09: 0000000000000000 [ 640.716745][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.716754][T15166] R13: 00007f9cf0826038 R14: 00007f9cf0825fa0 R15: 00007fffbca5d598 [ 640.716774][T15166] [ 640.716823][T15166] socket: no more sockets [ 641.418306][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 641.732129][T15074] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.782651][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.810645][T15074] bridge_slave_0: entered allmulticast mode [ 641.827409][T15074] bridge_slave_0: entered promiscuous mode [ 641.883156][T15074] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.931690][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.975492][T15074] bridge_slave_1: entered allmulticast mode [ 642.015743][T15074] bridge_slave_1: entered promiscuous mode [ 642.260070][T15074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.351909][T15074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.475740][T13127] Bluetooth: hci0: command tx timeout [ 642.842209][T15074] team0: Port device team_slave_0 added [ 642.889769][T15074] team0: Port device team_slave_1 added [ 643.075799][T15074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.132815][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.310157][T15074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.392476][ T6626] hsr_slave_0: left promiscuous mode [ 643.442455][ T6626] hsr_slave_1: left promiscuous mode [ 643.489958][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.546734][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.598407][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.648892][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.667728][T15208] netlink: 'syz.7.1673': attribute type 4 has an invalid length. [ 643.735185][ T6626] veth1_macvtap: left promiscuous mode [ 643.771086][ T6626] veth0_macvtap: left promiscuous mode [ 644.392102][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 644.439450][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 644.751884][T15074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.791607][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.879930][T15074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.925660][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 645.080123][T15074] hsr_slave_0: entered promiscuous mode [ 645.126197][T15074] hsr_slave_1: entered promiscuous mode [ 645.909345][T15221] netlink: 334 bytes leftover after parsing attributes in process `syz.7.1676'. [ 646.037074][T15222] FAULT_INJECTION: forcing a failure. [ 646.037074][T15222] name failslab, interval 1, probability 0, space 0, times 0 [ 646.116234][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.4.1675 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.116267][T15222] Tainted: [L]=SOFTLOCKUP [ 646.116273][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.116283][T15222] Call Trace: [ 646.116290][T15222] [ 646.116296][T15222] dump_stack_lvl+0x100/0x190 [ 646.116318][T15222] should_fail_ex.cold+0x5/0xa [ 646.116337][T15222] should_failslab+0xc2/0x120 [ 646.116358][T15222] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 646.116378][T15222] ? __kasan_kmalloc+0x20/0xb0 [ 646.116395][T15222] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 646.116525][T15222] kstrdup+0x51/0xe0 [ 646.116542][T15222] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 646.116571][T15222] vidtv_psi_desc_clone+0x496/0x5d0 [ 646.116596][T15222] vidtv_channel_si_init+0x4b7/0x18f0 [ 646.116621][T15222] vidtv_mux_init+0x522/0xbf0 [ 646.116641][T15222] vidtv_start_feed+0x34e/0x500 [ 646.116663][T15222] ? __pfx_vidtv_start_feed+0x10/0x10 [ 646.116685][T15222] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 646.116718][T15222] dmx_section_feed_start_filtering+0x3a8/0x660 [ 646.116804][T15222] dvb_dmxdev_filter_start+0x767/0xdd0 [ 646.116834][T15222] dvb_demux_do_ioctl+0xe64/0x1200 [ 646.116861][T15222] dvb_usercopy+0x167/0x340 [ 646.116880][T15222] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 646.116902][T15222] ? __pfx_dvb_usercopy+0x10/0x10 [ 646.116929][T15222] ? __fget_files+0x21f/0x3d0 [ 646.116954][T15222] dvb_demux_ioctl+0x29/0x40 [ 646.116972][T15222] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 646.116991][T15222] __x64_sys_ioctl+0x18e/0x210 [ 646.117012][T15222] do_syscall_64+0x115/0x840 [ 646.117034][T15222] ? clear_bhb_loop+0x40/0x90 [ 646.117053][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.117069][T15222] RIP: 0033:0x7fac0ff9de59 [ 646.117083][T15222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.117097][T15222] RSP: 002b:00007fac10f00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.117112][T15222] RAX: ffffffffffffffda RBX: 00007fac10226180 RCX: 00007fac0ff9de59 [ 646.117122][T15222] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000009 [ 646.117131][T15222] RBP: 00007fac10033e6f R08: 0000000000000000 R09: 0000000000000000 [ 646.117141][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.117149][T15222] R13: 00007fac10226218 R14: 00007fac10226180 R15: 00007ffc9e220ae8 [ 646.117170][T15222] [ 647.438663][T15237] FAULT_INJECTION: forcing a failure. [ 647.438663][T15237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.477539][T15238] usb usb25: usbfs: process 15238 (syz.4.1675) did not claim interface 9 before use [ 647.576235][T15237] CPU: 0 UID: 0 PID: 15237 Comm: syz.6.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.576262][T15237] Tainted: [L]=SOFTLOCKUP [ 647.576268][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.576277][T15237] Call Trace: [ 647.576283][T15237] [ 647.576289][T15237] dump_stack_lvl+0x100/0x190 [ 647.576311][T15237] should_fail_ex.cold+0x5/0xa [ 647.576329][T15237] _copy_from_user+0x2e/0xd0 [ 647.576351][T15237] copy_msghdr_from_user+0x9f/0x4c0 [ 647.576374][T15237] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 647.576404][T15237] ___sys_sendmsg+0x106/0x1e0 [ 647.576426][T15237] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.576446][T15237] ? __lock_acquire+0x49f/0x1a40 [ 647.576489][T15237] __sys_sendmsg+0x160/0x210 [ 647.576507][T15237] ? __pfx___sys_sendmsg+0x10/0x10 [ 647.576533][T15237] do_syscall_64+0x115/0x840 [ 647.576555][T15237] ? clear_bhb_loop+0x40/0x90 [ 647.576573][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.576588][T15237] RIP: 0033:0x7f9cf059de59 [ 647.576602][T15237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.576616][T15237] RSP: 002b:00007f9cf14ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.576631][T15237] RAX: ffffffffffffffda RBX: 00007f9cf0826090 RCX: 00007f9cf059de59 [ 647.576640][T15237] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 647.576654][T15237] RBP: 00007f9cf0633e6f R08: 0000000000000000 R09: 0000000000000000 [ 647.576664][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.576672][T15237] R13: 00007f9cf0826128 R14: 00007f9cf0826090 R15: 00007fffbca5d598 [ 647.576691][T15237] [ 651.054362][T15285] FAULT_INJECTION: forcing a failure. [ 651.054362][T15285] name failslab, interval 1, probability 0, space 0, times 0 [ 651.099926][T15074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.126686][T15285] CPU: 0 UID: 0 PID: 15285 Comm: syz.7.1682 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.126720][T15285] Tainted: [L]=SOFTLOCKUP [ 651.126726][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.126735][T15285] Call Trace: [ 651.126741][T15285] [ 651.126747][T15285] dump_stack_lvl+0x100/0x190 [ 651.126768][T15285] should_fail_ex.cold+0x5/0xa [ 651.126786][T15285] should_failslab+0xc2/0x120 [ 651.126804][T15285] kmem_cache_alloc_noprof+0x91/0x6a0 [ 651.126823][T15285] ? do_getname+0x35/0x390 [ 651.126843][T15285] do_getname+0x35/0x390 [ 651.126861][T15285] do_sys_openat2+0xc7/0x1e0 [ 651.126879][T15285] ? __pfx_do_sys_openat2+0x10/0x10 [ 651.126912][T15285] __x64_sys_openat+0x12d/0x210 [ 651.126931][T15285] ? __pfx___x64_sys_openat+0x10/0x10 [ 651.126959][T15285] do_syscall_64+0x115/0x840 [ 651.126982][T15285] ? clear_bhb_loop+0x40/0x90 [ 651.127000][T15285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.127016][T15285] RIP: 0033:0x7f0b7739de59 [ 651.127029][T15285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.127043][T15285] RSP: 002b:00007f0b78244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 651.127057][T15285] RAX: ffffffffffffffda RBX: 00007f0b77625fa0 RCX: 00007f0b7739de59 [ 651.127067][T15285] RDX: 0000000000000080 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 651.127076][T15285] RBP: 00007f0b77433e6f R08: 0000000000000000 R09: 0000000000000000 [ 651.127085][T15285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.127093][T15285] R13: 00007f0b77626038 R14: 00007f0b77625fa0 R15: 00007ffe3511bfe8 [ 651.127112][T15285] [ 651.962596][T15074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.071167][T15074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 652.121733][T15074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.176947][T15074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 652.244229][T15074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.288503][T15074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 652.361945][T15074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.038953][T15312] FAULT_INJECTION: forcing a failure. [ 653.038953][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 653.102380][T15312] CPU: 0 UID: 0 PID: 15312 Comm: syz.4.1683 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.102407][T15312] Tainted: [L]=SOFTLOCKUP [ 653.102412][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.102421][T15312] Call Trace: [ 653.102429][T15312] [ 653.102435][T15312] dump_stack_lvl+0x100/0x190 [ 653.102457][T15312] should_fail_ex.cold+0x5/0xa [ 653.102476][T15312] should_failslab+0xc2/0x120 [ 653.102494][T15312] kmem_cache_alloc_noprof+0x91/0x6a0 [ 653.102512][T15312] ? anon_vma_fork+0x8d/0x6b0 [ 653.102537][T15312] anon_vma_fork+0x8d/0x6b0 [ 653.102558][T15312] ? vm_area_dup+0x59d/0x8e0 [ 653.102581][T15312] dup_mmap+0x143e/0x21b0 [ 653.102642][T15312] ? __pfx_dup_mmap+0x10/0x10 [ 653.102661][T15312] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 653.102689][T15312] ? __lock_acquire+0x49f/0x1a40 [ 653.102711][T15312] ? find_held_lock+0x2b/0x80 [ 653.102726][T15312] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 653.102829][T15312] copy_process+0x4588/0x8030 [ 653.102846][T15312] ? try_to_wake_up+0x70a/0x1c90 [ 653.102872][T15312] ? __pfx_copy_process+0x10/0x10 [ 653.102888][T15312] ? futex_wake+0x4ea/0x5e0 [ 653.102908][T15312] ? futex_private_hash_put+0x115/0x1c0 [ 653.102933][T15312] kernel_clone+0x176/0x9d0 [ 653.102949][T15312] ? __pfx_futex_wake+0x10/0x10 [ 653.102966][T15312] ? __pfx_kernel_clone+0x10/0x10 [ 653.102993][T15312] __do_sys_clone+0xd9/0x120 [ 653.103009][T15312] ? __pfx___do_sys_clone+0x10/0x10 [ 653.103025][T15312] ? fd_install+0x24f/0x580 [ 653.103060][T15312] do_syscall_64+0x115/0x840 [ 653.103082][T15312] ? clear_bhb_loop+0x40/0x90 [ 653.103100][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.103120][T15312] RIP: 0033:0x7fac0ff9de59 [ 653.103134][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.103148][T15312] RSP: 002b:00007fac10efffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 653.103162][T15312] RAX: ffffffffffffffda RBX: 00007fac10226180 RCX: 00007fac0ff9de59 [ 653.103172][T15312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 653.103181][T15312] RBP: 00007fac10033e6f R08: 0000000000000000 R09: 0000000000000000 [ 653.103191][T15312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.103199][T15312] R13: 00007fac10226218 R14: 00007fac10226180 R15: 00007ffc9e220ae8 [ 653.103220][T15312] [ 654.385071][T15074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.686436][T15074] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.808178][T14638] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.815359][T14638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.870551][T15315] bridge0: port 3(team0) entered blocking state [ 654.880005][T15315] bridge0: port 3(team0) entered disabled state [ 654.911010][T15315] team0: entered allmulticast mode [ 654.933878][T15315] team_slave_0: entered allmulticast mode [ 654.984497][T15315] team_slave_1: entered allmulticast mode [ 655.019123][T15315] team0: entered promiscuous mode [ 655.043690][T15315] team_slave_0: entered promiscuous mode [ 655.074075][T15315] team_slave_1: entered promiscuous mode [ 655.100093][T15315] bridge0: port 3(team0) entered blocking state [ 655.106470][T15315] bridge0: port 3(team0) entered forwarding state [ 655.191037][T14638] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.198188][T14638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.485499][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1687'. [ 656.122001][T15348] FAULT_INJECTION: forcing a failure. [ 656.122001][T15348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 656.217238][T15348] CPU: 0 UID: 0 PID: 15348 Comm: syz.4.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.217264][T15348] Tainted: [L]=SOFTLOCKUP [ 656.217269][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 656.217277][T15348] Call Trace: [ 656.217283][T15348] [ 656.217288][T15348] dump_stack_lvl+0x100/0x190 [ 656.217310][T15348] should_fail_ex.cold+0x5/0xa [ 656.217324][T15348] ? prepare_alloc_pages+0x16d/0x5f0 [ 656.217345][T15348] should_fail_alloc_page+0xeb/0x140 [ 656.217365][T15348] prepare_alloc_pages+0x1f0/0x5f0 [ 656.217387][T15348] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 656.217407][T15348] ? __lock_acquire+0x49f/0x1a40 [ 656.217434][T15348] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 656.217450][T15348] ? lock_acquire+0x1b9/0x370 [ 656.217471][T15348] ? find_held_lock+0x2b/0x80 [ 656.217487][T15348] ? page_table_check_set+0x48f/0x930 [ 656.217504][T15348] ? page_table_check_set+0x48f/0x930 [ 656.217529][T15348] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 656.217548][T15348] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 656.217566][T15348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 656.217587][T15348] ? policy_nodemask+0xed/0x4f0 [ 656.217608][T15348] alloc_pages_mpol+0x1fb/0x540 [ 656.217627][T15348] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 656.217651][T15348] ? __pfx_filemap_map_pages+0x10/0x10 [ 656.217672][T15348] alloc_pages_noprof+0x1a/0x160 [ 656.217693][T15348] pte_alloc_one+0x1c/0x3d0 [ 656.217714][T15348] __do_fault+0x26c/0x440 [ 656.217731][T15348] do_fault+0xa99/0x1750 [ 656.217753][T15348] __handle_mm_fault+0x187d/0x2a00 [ 656.217778][T15348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 656.217795][T15348] ? __pfx___handle_mm_fault+0x10/0x10 [ 656.217825][T15348] ? folio_mark_accessed+0xf3/0x1040 [ 656.217850][T15348] ? __pfx_folio_mark_accessed+0x10/0x10 [ 656.217873][T15348] ? find_held_lock+0x2b/0x80 [ 656.217900][T15348] handle_mm_fault+0x37b/0xa30 [ 656.217926][T15348] __get_user_pages+0x1178/0x32a0 [ 656.217952][T15348] ? __pfx___get_user_pages+0x10/0x10 [ 656.217976][T15348] populate_vma_page_range+0x267/0x3f0 [ 656.217998][T15348] ? __pfx_populate_vma_page_range+0x10/0x10 [ 656.218017][T15348] ? __pfx_find_vma_intersection+0x10/0x10 [ 656.218039][T15348] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 656.218066][T15348] __mm_populate+0x107/0x3a0 [ 656.218087][T15348] ? __pfx___mm_populate+0x10/0x10 [ 656.218108][T15348] ? up_write+0x2e5/0x5c0 [ 656.218123][T15348] __do_sys_mlockall+0x4f4/0x5d0 [ 656.218140][T15348] do_syscall_64+0x115/0x840 [ 656.218162][T15348] ? clear_bhb_loop+0x40/0x90 [ 656.218180][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.218194][T15348] RIP: 0033:0x7fac0ff9de59 [ 656.218207][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.218224][T15348] RSP: 002b:00007fac10f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 656.218238][T15348] RAX: ffffffffffffffda RBX: 00007fac10225fa0 RCX: 00007fac0ff9de59 [ 656.218248][T15348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 656.218256][T15348] RBP: 00007fac10033e6f R08: 0000000000000000 R09: 0000000000000000 [ 656.218265][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.218273][T15348] R13: 00007fac10226038 R14: 00007fac10225fa0 R15: 00007ffc9e220ae8 [ 656.218293][T15348] [ 657.846793][T15354] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 657.896524][T15354] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 657.953687][T15354] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 658.887156][T15392] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1694'. [ 659.052397][T15074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.279212][T15074] veth0_vlan: entered promiscuous mode [ 660.286057][T15426] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 660.343767][T15074] veth1_vlan: entered promiscuous mode [ 660.621686][T15074] veth0_macvtap: entered promiscuous mode [ 660.724692][T15074] veth1_macvtap: entered promiscuous mode [ 660.928478][T15074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.982842][T15074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.029881][T14638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.082259][T14638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.143967][T14638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.311041][T15444] openvswitch: netlink: IP tunnel TTL not specified. [ 661.625634][T14638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.401111][T15458] FAULT_INJECTION: forcing a failure. [ 662.401111][T15458] name fail_futex, interval 1, probability 0, space 0, times 0 [ 662.505787][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.7.1705 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.505812][T15458] Tainted: [L]=SOFTLOCKUP [ 662.505817][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.505827][T15458] Call Trace: [ 662.505832][T15458] [ 662.505837][T15458] dump_stack_lvl+0x100/0x190 [ 662.505859][T15458] should_fail_ex.cold+0x5/0xa [ 662.505876][T15458] get_futex_key+0x295/0x14f0 [ 662.505902][T15458] ? __pfx_get_futex_key+0x10/0x10 [ 662.505924][T15458] ? lock_acquire+0x1b9/0x370 [ 662.505951][T15458] futex_wake+0xf4/0x5e0 [ 662.505970][T15458] ? __pfx_futex_wake+0x10/0x10 [ 662.505987][T15458] ? find_held_lock+0x2b/0x80 [ 662.506003][T15458] ? exit_mm_release+0x19/0x30 [ 662.506023][T15458] do_futex+0x2b2/0x440 [ 662.506038][T15458] ? __pfx_do_futex+0x10/0x10 [ 662.506051][T15458] ? __might_fault+0xc5/0x140 [ 662.506079][T15458] mm_release+0x24a/0x2f0 [ 662.506102][T15458] do_exit+0x707/0x2ae0 [ 662.506124][T15458] ? __pfx_do_exit+0x10/0x10 [ 662.506141][T15458] ? do_raw_spin_lock+0x128/0x260 [ 662.506162][T15458] ? find_held_lock+0x2b/0x80 [ 662.506178][T15458] ? get_signal+0x7e0/0x21e0 [ 662.506194][T15458] do_group_exit+0xd5/0x2a0 [ 662.506214][T15458] get_signal+0x1ec7/0x21e0 [ 662.506236][T15458] ? __pfx_get_signal+0x10/0x10 [ 662.506251][T15458] ? do_futex+0x190/0x440 [ 662.506267][T15458] arch_do_signal_or_restart+0x91/0x7a0 [ 662.506317][T15458] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 662.506335][T15458] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 662.506368][T15458] exit_to_user_mode_loop+0x139/0x6f0 [ 662.506391][T15458] ? rcu_is_watching+0x12/0xc0 [ 662.506409][T15458] do_syscall_64+0x652/0x840 [ 662.506432][T15458] ? clear_bhb_loop+0x40/0x90 [ 662.506450][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.506465][T15458] RIP: 0033:0x7f0b7739de59 [ 662.506479][T15458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.506493][T15458] RSP: 002b:00007f0b781c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 662.506508][T15458] RAX: fffffffffffffe00 RBX: 00007f0b77626368 RCX: 00007f0b7739de59 [ 662.506518][T15458] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0b77626368 [ 662.506527][T15458] RBP: 00007f0b77626360 R08: 0000000000000000 R09: 0000000000000000 [ 662.506536][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.506545][T15458] R13: 00007f0b776263f8 R14: 00007ffe3511bf00 R15: 00007ffe3511bfe8 [ 662.506564][T15458] [ 662.952151][T15447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 662.958268][T15447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 662.964298][T15447] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 662.970281][T15447] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 663.074622][T15447] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 663.117989][T15447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 663.152320][T15447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 663.206531][T15447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 663.241090][T15447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 663.310201][T15447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 663.382827][T15447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 663.434210][T15456] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 663.691029][ T7629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.735906][ T7629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.744805][T15476] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1709'. [ 663.784071][T15477] FAULT_INJECTION: forcing a failure. [ 663.784071][T15477] name failslab, interval 1, probability 0, space 0, times 0 [ 663.886681][ T6622] Bluetooth: hci3: command 0x2016 tx timeout [ 663.896577][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.6.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.896601][T15477] Tainted: [L]=SOFTLOCKUP [ 663.896606][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.896615][T15477] Call Trace: [ 663.896620][T15477] [ 663.896626][T15477] dump_stack_lvl+0x100/0x190 [ 663.896648][T15477] should_fail_ex.cold+0x5/0xa [ 663.896665][T15477] should_failslab+0xc2/0x120 [ 663.896684][T15477] kmem_cache_alloc_noprof+0x91/0x6a0 [ 663.896700][T15477] ? __pfx_map_id_range_down+0x10/0x10 [ 663.896718][T15477] ? rcu_is_watching+0x12/0xc0 [ 663.896739][T15477] ? security_inode_alloc+0x3b/0x2c0 [ 663.896758][T15477] security_inode_alloc+0x3b/0x2c0 [ 663.896773][T15477] inode_init_always_gfp+0xc77/0xfb0 [ 663.896799][T15477] alloc_inode+0x8e/0x250 [ 663.896816][T15477] new_inode+0x22/0x1c0 [ 663.896831][T15477] ? proc_sys_lookup+0x266/0x430 [ 663.896856][T15477] proc_sys_make_inode+0x47/0x5c0 [ 663.896879][T15477] proc_sys_lookup+0x307/0x430 [ 663.896903][T15477] ? __pfx_proc_sys_lookup+0x10/0x10 [ 663.896927][T15477] ? __d_lookup+0x266/0x4a0 [ 663.896947][T15477] ? __pfx_proc_sys_lookup+0x10/0x10 [ 663.896970][T15477] path_openat+0x241f/0x4280 [ 663.897001][T15477] ? __pfx_path_openat+0x10/0x10 [ 663.897029][T15477] do_file_open+0x20e/0x430 [ 663.897053][T15477] ? __pfx_do_file_open+0x10/0x10 [ 663.897088][T15477] ? alloc_fd+0x471/0x7a0 [ 663.897111][T15477] ? do_getname+0x191/0x390 [ 663.897129][T15477] do_sys_openat2+0x10f/0x1e0 [ 663.897146][T15477] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.897165][T15477] ? __fget_files+0x21f/0x3d0 [ 663.897190][T15477] __x64_sys_openat+0x12d/0x210 [ 663.897208][T15477] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.897233][T15477] do_syscall_64+0x115/0x840 [ 663.897256][T15477] ? clear_bhb_loop+0x40/0x90 [ 663.897273][T15477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.897288][T15477] RIP: 0033:0x7f9cf059de59 [ 663.897302][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.897316][T15477] RSP: 002b:00007f9cf14ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.897331][T15477] RAX: ffffffffffffffda RBX: 00007f9cf0826090 RCX: 00007f9cf059de59 [ 663.897340][T15477] RDX: 0000000000001181 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 663.897349][T15477] RBP: 00007f9cf0633e6f R08: 0000000000000000 R09: 0000000000000000 [ 663.897358][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.897367][T15477] R13: 00007f9cf0826128 R14: 00007f9cf0826090 R15: 00007fffbca5d598 [ 663.897386][T15477] [ 663.904917][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.451620][T15485] binder: 15482:15485 ioctl 5c50d8be 9 returned -22 [ 664.847080][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.002554][ T6622] Bluetooth: hci5: command 0x0c1a tx timeout [ 665.009176][T13127] Bluetooth: hci4: command 0x0c1a tx timeout [ 665.159936][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 665.241277][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 665.811717][T15502] zswap: compressor @UD{Sƭm4aMv not available [ 667.070842][ T6622] Bluetooth: hci5: command 0x0c1a tx timeout [ 667.229721][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 667.310056][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 668.465983][T15563] ptp ptp0: only physical clock in use now [ 668.495089][T15564] random: crng reseeded on system resumption [ 669.139259][ T6622] Bluetooth: hci5: command 0x0c1a tx timeout [ 669.298687][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 669.378378][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.175362][T15585] vivid-011: ================= START STATUS ================= [ 670.218771][T15585] vivid-011: Radio HW Seek Mode: Bounded [ 670.300004][T15585] vivid-011: Radio Programmable HW Seek: false [ 670.359856][T15585] vivid-011: RDS Rx I/O Mode: Block I/O [ 670.433928][T15585] vivid-011: Generate RBDS Instead of RDS: false [ 670.550194][T15585] vivid-011: RDS Reception: true [ 670.603128][T15585] vivid-011: RDS Program Type: 0 inactive [ 670.678878][T15585] vivid-011: RDS PS Name: inactive [ 670.743884][T15585] vivid-011: RDS Radio Text: inactive [ 670.838261][T15585] vivid-011: RDS Traffic Announcement: false inactive [ 670.942142][T15585] vivid-011: RDS Traffic Program: false inactive [ 671.009914][T15585] vivid-011: RDS Music: false inactive [ 671.077656][T15585] vivid-011: ================== END STATUS ================== [ 671.135091][T15589] input: jJǸ-9%vJ86 as /devices/virtual/input/input17 [ 671.403240][T15599] binder: 15596:15599 ioctl 541b 0 returned -22 [ 672.522365][T15628] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 672.622233][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1739'. [ 673.949921][T15642] FAULT_INJECTION: forcing a failure. [ 673.949921][T15642] name failslab, interval 1, probability 0, space 0, times 0 [ 674.153291][T15642] CPU: 0 UID: 0 PID: 15642 Comm: syz.4.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.153320][T15642] Tainted: [L]=SOFTLOCKUP [ 674.153326][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.153335][T15642] Call Trace: [ 674.153340][T15642] [ 674.153349][T15642] dump_stack_lvl+0x100/0x190 [ 674.153371][T15642] should_fail_ex.cold+0x5/0xa [ 674.153389][T15642] should_failslab+0xc2/0x120 [ 674.153408][T15642] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 674.153426][T15642] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 674.153444][T15642] ? rcu_is_watching+0x12/0xc0 [ 674.153459][T15642] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 674.153569][T15642] krealloc_node_align_noprof+0x1f9/0x3e0 [ 674.153590][T15642] snd_pcm_hw_rule_add+0x3b3/0x510 [ 674.153610][T15642] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 674.153654][T15642] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 674.153673][T15642] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 674.153695][T15642] ? mutex_init_lockdep+0xf1/0x120 [ 674.153719][T15642] ? snd_pcm_attach_substream+0x287/0xd20 [ 674.153740][T15642] snd_pcm_open_substream+0x942/0x1850 [ 674.153758][T15642] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 674.153774][T15642] ? snd_pcm_oss_open+0x5e5/0x1390 [ 674.153836][T15642] snd_pcm_oss_open+0x735/0x1390 [ 674.153864][T15642] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 674.153887][T15642] ? __lock_acquire+0x49f/0x1a40 [ 674.153908][T15642] ? __pfx_default_wake_function+0x10/0x10 [ 674.153932][T15642] ? do_raw_spin_lock+0x128/0x260 [ 674.153948][T15642] ? soundcore_open+0x231/0x5a0 [ 674.154011][T15642] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 674.154033][T15642] soundcore_open+0x2e3/0x5a0 [ 674.154053][T15642] ? __pfx_soundcore_open+0x10/0x10 [ 674.154073][T15642] chrdev_open+0x234/0x6a0 [ 674.154096][T15642] ? __pfx_apparmor_file_open+0x10/0x10 [ 674.154120][T15642] ? __pfx_chrdev_open+0x10/0x10 [ 674.154143][T15642] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 674.154191][T15642] do_dentry_open+0x6ab/0x14d0 [ 674.154213][T15642] ? __pfx_chrdev_open+0x10/0x10 [ 674.154240][T15642] vfs_open+0x82/0x3f0 [ 674.154261][T15642] path_openat+0x2873/0x4280 [ 674.154301][T15642] ? __pfx_path_openat+0x10/0x10 [ 674.154330][T15642] do_file_open+0x20e/0x430 [ 674.154355][T15642] ? __pfx_do_file_open+0x10/0x10 [ 674.154392][T15642] ? alloc_fd+0x471/0x7a0 [ 674.154416][T15642] ? do_getname+0x191/0x390 [ 674.154434][T15642] do_sys_openat2+0x10f/0x1e0 [ 674.154451][T15642] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.154470][T15642] ? __fget_files+0x21f/0x3d0 [ 674.154494][T15642] __x64_sys_openat+0x12d/0x210 [ 674.154517][T15642] ? __pfx___x64_sys_openat+0x10/0x10 [ 674.154535][T15642] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 674.154560][T15642] ? syscall_user_dispatch+0x76/0x130 [ 674.154578][T15642] do_syscall_64+0x115/0x840 [ 674.154601][T15642] ? clear_bhb_loop+0x40/0x90 [ 674.154620][T15642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.154636][T15642] RIP: 0033:0x7fac0ff9de59 [ 674.154650][T15642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.154664][T15642] RSP: 002b:00007fac10f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.154679][T15642] RAX: ffffffffffffffda RBX: 00007fac10225fa0 RCX: 00007fac0ff9de59 [ 674.154689][T15642] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 674.154699][T15642] RBP: 00007fac10033e6f R08: 0000000000000000 R09: 0000000000000000 [ 674.154708][T15642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.154717][T15642] R13: 00007fac10226038 R14: 00007fac10225fa0 R15: 00007ffc9e220ae8 [ 674.154737][T15642] [ 675.036127][T15655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1743'. [ 676.255071][T15655] bond0: (slave bond_slave_0): Releasing backup interface [ 676.441008][T15642] [U] ^R [ 676.492863][T15672] FAULT_INJECTION: forcing a failure. [ 676.492863][T15672] name failslab, interval 1, probability 0, space 0, times 0 [ 676.553596][T15672] CPU: 0 UID: 0 PID: 15672 Comm: syz.6.1747 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.553621][T15672] Tainted: [L]=SOFTLOCKUP [ 676.553626][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 676.553635][T15672] Call Trace: [ 676.553640][T15672] [ 676.553646][T15672] dump_stack_lvl+0x100/0x190 [ 676.553668][T15672] should_fail_ex.cold+0x5/0xa [ 676.553685][T15672] should_failslab+0xc2/0x120 [ 676.553704][T15672] kmem_cache_alloc_noprof+0x91/0x6a0 [ 676.553720][T15672] ? trace_kmem_cache_alloc+0xdd/0x100 [ 676.553739][T15672] ? security_file_alloc+0x34/0x2c0 [ 676.553760][T15672] security_file_alloc+0x34/0x2c0 [ 676.553778][T15672] init_file+0x95/0x480 [ 676.553794][T15672] alloc_empty_file+0x79/0x1c0 [ 676.553811][T15672] path_openat+0xe7/0x4280 [ 676.553832][T15672] ? __kasan_slab_alloc+0x89/0x90 [ 676.553849][T15672] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 676.553863][T15672] ? do_getname+0x35/0x390 [ 676.553878][T15672] ? do_sys_openat2+0xc7/0x1e0 [ 676.553893][T15672] ? __x64_sys_openat+0x12d/0x210 [ 676.553909][T15672] ? do_syscall_64+0x115/0x840 [ 676.553932][T15672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.553952][T15672] ? __pfx_path_openat+0x10/0x10 [ 676.553979][T15672] do_file_open+0x20e/0x430 [ 676.554002][T15672] ? __pfx_do_file_open+0x10/0x10 [ 676.554037][T15672] ? alloc_fd+0x471/0x7a0 [ 676.554060][T15672] ? do_getname+0x191/0x390 [ 676.554078][T15672] do_sys_openat2+0x10f/0x1e0 [ 676.554095][T15672] ? __pfx_do_sys_openat2+0x10/0x10 [ 676.554119][T15672] __x64_sys_openat+0x12d/0x210 [ 676.554137][T15672] ? __pfx___x64_sys_openat+0x10/0x10 [ 676.554161][T15672] do_syscall_64+0x115/0x840 [ 676.554182][T15672] ? clear_bhb_loop+0x40/0x90 [ 676.554200][T15672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.554215][T15672] RIP: 0033:0x7f9cf059de59 [ 676.554228][T15672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.554241][T15672] RSP: 002b:00007f9cf14eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 676.554258][T15672] RAX: ffffffffffffffda RBX: 00007f9cf0825fa0 RCX: 00007f9cf059de59 [ 676.554267][T15672] RDX: 1a6b75d638969312 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 676.554277][T15672] RBP: 00007f9cf14eb090 R08: 0000000000000000 R09: 0000000000000000 [ 676.554286][T15672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.554294][T15672] R13: 00007f9cf0826038 R14: 00007f9cf0825fa0 R15: 00007fffbca5d598 [ 676.554313][T15672] [ 682.251908][T15745] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1760'. [ 683.187765][T15762] futex_wake_op: syz.5.1761 tries to shift op by -2048; fix this program [ 683.384880][T15762] futex_wake_op: syz.5.1761 tries to shift op by -2048; fix this program [ 683.586845][T15762] futex_wake_op: syz.5.1761 tries to shift op by -2048; fix this program [ 684.029274][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.040499][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.737238][T15797] vivid-007: ================= START STATUS ================= [ 686.851334][T15797] vivid-007: Generate PTS: true [ 686.955944][T15797] vivid-007: Generate SCR: true [ 687.004444][T15797] tpg source WxH: 320x240 (Y'CbCr) [ 687.045985][T15797] tpg field: 1 [ 687.046011][T15797] tpg crop: (0,0)/320x240 [ 687.046022][T15797] tpg compose: (0,0)/320x240 [ 687.046032][T15797] tpg colorspace: 8 [ 687.046039][T15797] tpg transfer function: 0/0 [ 687.046046][T15797] tpg Y'CbCr encoding: 0/0 [ 687.046054][T15797] tpg quantization: 0/0 [ 687.046061][T15797] tpg RGB range: 0/2 [ 687.046068][T15797] vivid-007: ================== END STATUS ================== [ 687.181812][T15806] random: crng reseeded on system resumption [ 690.255126][T15845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 690.281837][T15845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.316792][T15845] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 690.339054][T15845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 690.367017][T15845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 690.852215][ T30] audit: type=1800 audit(1843105874.702:22): pid=15866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1781" name="members" dev="configfs" ino=71916 res=0 errno=0 [ 691.071033][T15847] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 691.665819][ T6622] Bluetooth: hci3: command 0x2016 tx timeout [ 692.302293][T13127] Bluetooth: hci4: command 0x0c1a tx timeout [ 692.380563][T13127] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.386752][T13127] Bluetooth: hci5: command 0x0c1a tx timeout [ 692.397051][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 692.667745][T15917] ALSA: mixer_oss: invalid OSS volume '\' [ 692.861559][T15896] kexec: Could not allocate control_code_buffer [ 693.328150][T15925] random: crng reseeded on system resumption [ 694.925478][T15962] FAULT_INJECTION: forcing a failure. [ 694.925478][T15962] name failslab, interval 1, probability 0, space 0, times 0 [ 694.947235][T15962] CPU: 0 UID: 0 PID: 15962 Comm: syz.4.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.947279][T15962] Tainted: [L]=SOFTLOCKUP [ 694.947292][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.947306][T15962] Call Trace: [ 694.947314][T15962] [ 694.947324][T15962] dump_stack_lvl+0x100/0x190 [ 694.947357][T15962] should_fail_ex.cold+0x5/0xa [ 694.947384][T15962] should_failslab+0xc2/0x120 [ 694.947413][T15962] __kmalloc_noprof+0xfc/0x820 [ 694.947440][T15962] ? rcu_is_watching+0x12/0xc0 [ 694.947471][T15962] ? tomoyo_realpath_from_path+0xb6/0x690 [ 694.947514][T15962] tomoyo_realpath_from_path+0xb6/0x690 [ 694.947554][T15962] tomoyo_path_number_perm+0x23c/0x580 [ 694.947582][T15962] ? tomoyo_path_number_perm+0x22e/0x580 [ 694.947617][T15962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 694.947686][T15962] ? find_held_lock+0x2b/0x80 [ 694.947725][T15962] ? __fget_files+0x215/0x3d0 [ 694.947763][T15962] ? hook_file_ioctl_common+0x140/0x440 [ 694.947791][T15962] ? __fget_files+0x215/0x3d0 [ 694.947832][T15962] ? __fget_files+0x21f/0x3d0 [ 694.947872][T15962] security_file_ioctl+0xd3/0x230 [ 694.947902][T15962] __x64_sys_ioctl+0xb7/0x210 [ 694.947935][T15962] do_syscall_64+0x115/0x840 [ 694.947973][T15962] ? clear_bhb_loop+0x40/0x90 [ 694.948003][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.948031][T15962] RIP: 0033:0x7fac0ff9de59 [ 694.948054][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.948079][T15962] RSP: 002b:00007fac10f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.948104][T15962] RAX: ffffffffffffffda RBX: 00007fac10225fa0 RCX: 00007fac0ff9de59 [ 694.948122][T15962] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 694.948139][T15962] RBP: 00007fac10f42090 R08: 0000000000000000 R09: 0000000000000000 [ 694.948155][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.948170][T15962] R13: 00007fac10226038 R14: 00007fac10225fa0 R15: 00007ffc9e220ae8 [ 694.948204][T15962] [ 695.306498][T15962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 695.612342][T15973] vivid-007: ================= START STATUS ================= [ 695.630717][T15973] vivid-007: Generate PTS: true [ 695.642339][T15973] vivid-007: Generate SCR: true [ 695.661773][T15973] tpg source WxH: 320x240 (Y'CbCr) [ 695.683695][T15973] tpg field: 1 [ 695.698697][T15973] tpg crop: (0,0)/320x240 [ 695.734300][T15973] tpg compose: (0,0)/320x240 [ 695.769407][T15973] tpg colorspace: 8 [ 695.793022][T15973] tpg transfer function: 0/0 [ 695.814344][T15973] tpg Y'CbCr encoding: 0/0 [ 695.862757][T15973] tpg quantization: 0/0 [ 695.876373][T15973] tpg RGB range: 0/2 [ 695.889513][T15973] vivid-007: ================== END STATUS ================== [ 696.616075][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 697.788396][T16016] FAULT_INJECTION: forcing a failure. [ 697.788396][T16016] name failslab, interval 1, probability 0, space 0, times 0 [ 697.801555][T16016] CPU: 0 UID: 0 PID: 16016 Comm: syz.7.1810 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.801599][T16016] Tainted: [L]=SOFTLOCKUP [ 697.801608][T16016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.801624][T16016] Call Trace: [ 697.801633][T16016] [ 697.801643][T16016] dump_stack_lvl+0x100/0x190 [ 697.801679][T16016] should_fail_ex.cold+0x5/0xa [ 697.801711][T16016] should_failslab+0xc2/0x120 [ 697.801745][T16016] __kmalloc_noprof+0xfc/0x820 [ 697.801774][T16016] ? __pfx_dynamic_dname+0x10/0x10 [ 697.801890][T16016] ? tomoyo_encode2+0xfb/0x3c0 [ 697.801932][T16016] tomoyo_encode2+0xfb/0x3c0 [ 697.801972][T16016] tomoyo_encode+0x29/0x50 [ 697.802005][T16016] tomoyo_realpath_from_path+0x18c/0x690 [ 697.802051][T16016] tomoyo_path_number_perm+0x23c/0x580 [ 697.802082][T16016] ? tomoyo_path_number_perm+0x22e/0x580 [ 697.802115][T16016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 697.802185][T16016] ? find_held_lock+0x2b/0x80 [ 697.802215][T16016] ? __fget_files+0x215/0x3d0 [ 697.802250][T16016] ? hook_file_ioctl_common+0x140/0x440 [ 697.802280][T16016] ? __fget_files+0x215/0x3d0 [ 697.802323][T16016] ? __fget_files+0x21f/0x3d0 [ 697.802367][T16016] security_file_ioctl+0xd3/0x230 [ 697.802396][T16016] __x64_sys_ioctl+0xb7/0x210 [ 697.802432][T16016] do_syscall_64+0x115/0x840 [ 697.802475][T16016] ? clear_bhb_loop+0x40/0x90 [ 697.802510][T16016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.802539][T16016] RIP: 0033:0x7f0b7739de59 [ 697.802561][T16016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.802585][T16016] RSP: 002b:00007f0b78244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.802610][T16016] RAX: ffffffffffffffda RBX: 00007f0b77625fa0 RCX: 00007f0b7739de59 [ 697.802629][T16016] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 697.802646][T16016] RBP: 00007f0b78244090 R08: 0000000000000000 R09: 0000000000000000 [ 697.802662][T16016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.802678][T16016] R13: 00007f0b77626038 R14: 00007f0b77625fa0 R15: 00007ffe3511bfe8 [ 697.802716][T16016] [ 698.005105][T16006] FAULT_INJECTION: forcing a failure. [ 698.005105][T16006] name fail_futex, interval 1, probability 0, space 0, times 0 [ 698.035428][ T30] audit: type=1800 audit(1843107929.798:23): pid=16019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1809" name="dbroot" dev="configfs" ino=72717 res=0 errno=0 [ 698.068207][T16016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 698.134617][T16006] CPU: 0 UID: 0 PID: 16006 Comm: syz.5.1807 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.134660][T16006] Tainted: [L]=SOFTLOCKUP [ 698.134669][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.134685][T16006] Call Trace: [ 698.134693][T16006] [ 698.134703][T16006] dump_stack_lvl+0x100/0x190 [ 698.134736][T16006] should_fail_ex.cold+0x5/0xa [ 698.134764][T16006] get_futex_key+0x1d2/0x14f0 [ 698.134802][T16006] ? __pfx_get_futex_key+0x10/0x10 [ 698.134834][T16006] ? lock_acquire+0x1b9/0x370 [ 698.134883][T16006] futex_wake+0xf4/0x5e0 [ 698.134911][T16006] ? __pfx_futex_wake+0x10/0x10 [ 698.134936][T16006] ? find_held_lock+0x2b/0x80 [ 698.134959][T16006] ? exit_mm_release+0x19/0x30 [ 698.134987][T16006] do_futex+0x2b2/0x440 [ 698.135007][T16006] ? __pfx_do_futex+0x10/0x10 [ 698.135026][T16006] ? __might_fault+0xc5/0x140 [ 698.135064][T16006] mm_release+0x24a/0x2f0 [ 698.135096][T16006] do_exit+0x707/0x2ae0 [ 698.135128][T16006] ? __pfx_do_exit+0x10/0x10 [ 698.135154][T16006] ? do_raw_spin_lock+0x128/0x260 [ 698.135176][T16006] ? find_held_lock+0x2b/0x80 [ 698.135200][T16006] ? get_signal+0x7e0/0x21e0 [ 698.135227][T16006] do_group_exit+0xd5/0x2a0 [ 698.135259][T16006] get_signal+0x1ec7/0x21e0 [ 698.135290][T16006] ? __pfx_get_signal+0x10/0x10 [ 698.135316][T16006] ? do_futex+0x190/0x440 [ 698.135344][T16006] arch_do_signal_or_restart+0x91/0x7a0 [ 698.135385][T16006] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 698.135423][T16006] ? __sys_socket+0xac/0x260 [ 698.135458][T16006] exit_to_user_mode_loop+0x139/0x6f0 [ 698.135488][T16006] ? rcu_is_watching+0x12/0xc0 [ 698.135512][T16006] do_syscall_64+0x652/0x840 [ 698.135543][T16006] ? clear_bhb_loop+0x40/0x90 [ 698.135568][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.135590][T16006] RIP: 0033:0x7fbb61b9de59 [ 698.135609][T16006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.135629][T16006] RSP: 002b:00007fbb62abf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 698.135650][T16006] RAX: fffffffffffffe00 RBX: 00007fbb61e26098 RCX: 00007fbb61b9de59 [ 698.135666][T16006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb61e26098 [ 698.135678][T16006] RBP: 00007fbb61e26090 R08: 0000000000000000 R09: 0000000000000000 [ 698.135690][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.135701][T16006] R13: 00007fbb61e26128 R14: 00007ffecae76c90 R15: 00007ffecae76d78 [ 698.135728][T16006] [ 698.420478][T16016] bridge0: port 3(batadv0) entered blocking state [ 698.436802][T16016] bridge0: port 3(batadv0) entered disabled state [ 698.451186][T16016] batadv0: entered allmulticast mode [ 698.464117][T16016] batadv0: entered promiscuous mode [ 698.475099][T16016] bridge0: port 3(batadv0) entered blocking state [ 698.481734][T16016] bridge0: port 3(batadv0) entered forwarding state [ 698.569166][T14638] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 698.578409][T14638] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 698.760145][ T30] audit: type=1800 audit(1843107930.652:24): pid=16028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1811" name="features" dev="configfs" ino=72297 res=0 errno=0 [ 698.862755][T16025] FAULT_INJECTION: forcing a failure. [ 698.862755][T16025] name failslab, interval 1, probability 0, space 0, times 0 [ 698.933968][T16025] CPU: 1 UID: 0 PID: 16025 Comm: syz.7.1811 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.934012][T16025] Tainted: [L]=SOFTLOCKUP [ 698.934021][T16025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.934037][T16025] Call Trace: [ 698.934046][T16025] [ 698.934057][T16025] dump_stack_lvl+0x100/0x190 [ 698.934094][T16025] should_fail_ex.cold+0x5/0xa [ 698.934126][T16025] should_failslab+0xc2/0x120 [ 698.934162][T16025] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 698.934193][T16025] ? start_dirop+0x79/0xb0 [ 698.934231][T16025] ? alloc_inode+0x68/0x250 [ 698.934263][T16025] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 698.934401][T16025] alloc_inode+0x68/0x250 [ 698.934434][T16025] new_inode+0x22/0x1c0 [ 698.934469][T16025] __debugfs_create_file+0x105/0x4f0 [ 698.934510][T16025] debugfs_create_file_full+0x41/0x60 [ 698.934550][T16025] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 698.934592][T16025] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 698.934659][T16025] ? kasan_save_track+0x14/0x30 [ 698.934689][T16025] ? __kasan_kmalloc+0xaa/0xb0 [ 698.934721][T16025] ? lockdep_init_map_type+0x5c/0x250 [ 698.934775][T16025] preinit_net.part.0+0x43b/0x920 [ 698.934810][T16025] copy_net_ns+0x339/0x7c0 [ 698.934848][T16025] create_new_namespaces+0x3ea/0xac0 [ 698.934899][T16025] unshare_nsproxy_namespaces+0xf2/0x220 [ 698.934947][T16025] ksys_unshare+0x438/0xab0 [ 698.934981][T16025] ? __pfx_ksys_unshare+0x10/0x10 [ 698.935028][T16025] __x64_sys_unshare+0x31/0x40 [ 698.935059][T16025] do_syscall_64+0x115/0x840 [ 698.935101][T16025] ? clear_bhb_loop+0x40/0x90 [ 698.935135][T16025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.935163][T16025] RIP: 0033:0x7f0b7739de59 [ 698.935187][T16025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.935213][T16025] RSP: 002b:00007f0b78244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 698.935240][T16025] RAX: ffffffffffffffda RBX: 00007f0b77625fa0 RCX: 00007f0b7739de59 [ 698.935258][T16025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 698.935276][T16025] RBP: 00007f0b77433e6f R08: 0000000000000000 R09: 0000000000000000 [ 698.935293][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.935310][T16025] R13: 00007f0b77626038 R14: 00007f0b77625fa0 R15: 00007ffe3511bfe8 [ 698.935349][T16025] [ 699.304483][T16025] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88805a37aa38' [ 699.790039][T16043] bridge0: port 3(batadv0) entered blocking state [ 699.830002][T16043] bridge0: port 3(batadv0) entered disabled state [ 699.879153][T16043] batadv0: entered allmulticast mode [ 699.906065][T16043] batadv0: entered promiscuous mode [ 699.922436][T16043] bridge0: port 3(batadv0) entered blocking state [ 699.929074][T16043] bridge0: port 3(batadv0) entered forwarding state [ 700.220642][ T6626] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 700.230324][ T6626] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 701.414760][ T6622] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 701.618144][T16064] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 701.647435][T16064] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 701.657696][T16064] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 701.676718][T16064] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 701.692594][T16064] page dumped because: unmovable page [ 701.703164][T16064] page_owner tracks the page as allocated [ 701.711233][T16064] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1448391404, free_ts 0 [ 701.754375][T16064] register_early_stack+0x74/0xaf [ 701.763281][T16064] init_page_owner+0x4c/0xa10 [ 701.780878][T16064] page_ext_init+0x71d/0x780 [ 701.813364][T16064] mm_core_init+0x229/0x270 [ 701.823943][T16064] page_owner free stack trace missing [ 702.017266][T16072] random: crng reseeded on system resumption [ 702.138262][T16075] FAULT_INJECTION: forcing a failure. [ 702.138262][T16075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.169657][T16075] CPU: 0 UID: 0 PID: 16075 Comm: syz.5.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.169698][T16075] Tainted: [L]=SOFTLOCKUP [ 702.169708][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 702.169724][T16075] Call Trace: [ 702.169733][T16075] [ 702.169743][T16075] dump_stack_lvl+0x100/0x190 [ 702.169780][T16075] should_fail_ex.cold+0x5/0xa [ 702.169811][T16075] _copy_from_user+0x2e/0xd0 [ 702.169849][T16075] get_user_ifreq+0x77/0x1c0 [ 702.169885][T16075] sock_ioctl+0x467/0x6b0 [ 702.169927][T16075] ? __pfx_sock_ioctl+0x10/0x10 [ 702.169964][T16075] ? hook_file_ioctl_common+0x140/0x440 [ 702.170003][T16075] ? __fget_files+0x21f/0x3d0 [ 702.170046][T16075] ? __pfx_sock_ioctl+0x10/0x10 [ 702.170087][T16075] __x64_sys_ioctl+0x18e/0x210 [ 702.170125][T16075] do_syscall_64+0x115/0x840 [ 702.170167][T16075] ? clear_bhb_loop+0x40/0x90 [ 702.170201][T16075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.170229][T16075] RIP: 0033:0x7fbb61b9de59 [ 702.170260][T16075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.170286][T16075] RSP: 002b:00007fbb62ae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.170312][T16075] RAX: ffffffffffffffda RBX: 00007fbb61e25fa0 RCX: 00007fbb61b9de59 [ 702.170332][T16075] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 702.170349][T16075] RBP: 00007fbb62ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 702.170366][T16075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.170390][T16075] R13: 00007fbb61e26038 R14: 00007fbb61e25fa0 R15: 00007ffecae76d78 [ 702.170428][T16075] [ 702.648561][T16081] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1821'. [ 702.663308][T16081] netlink: 346 bytes leftover after parsing attributes in process `syz.5.1821'. [ 704.195647][T13127] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 706.543860][T16143] FAULT_INJECTION: forcing a failure. [ 706.543860][T16143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.646644][T16143] CPU: 1 UID: 0 PID: 16143 Comm: syz.4.1829 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.646688][T16143] Tainted: [L]=SOFTLOCKUP [ 706.646697][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.646712][T16143] Call Trace: [ 706.646721][T16143] [ 706.646730][T16143] dump_stack_lvl+0x100/0x190 [ 706.646764][T16143] should_fail_ex.cold+0x5/0xa [ 706.646793][T16143] _copy_from_user+0x2e/0xd0 [ 706.646818][T16143] br_dev_read_uargs+0xcf/0x340 [ 706.646928][T16143] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 706.646953][T16143] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 706.646971][T16143] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 706.646996][T16143] ? rcu_is_watching+0x12/0xc0 [ 706.647014][T16143] br_dev_siocdevprivate+0xeb/0x1660 [ 706.647034][T16143] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 706.647057][T16143] ? do_raw_spin_lock+0x128/0x260 [ 706.647072][T16143] ? find_held_lock+0x2b/0x80 [ 706.647088][T16143] ? debug_mutex_remove_waiter+0xa0/0x320 [ 706.647105][T16143] ? debug_mutex_remove_waiter+0xa0/0x320 [ 706.647127][T16143] ? netdev_name_node_lookup+0x107/0x150 [ 706.647195][T16143] ? __mutex_lock+0x82c/0x1bd0 [ 706.647212][T16143] dev_ifsioc+0xc2f/0x1f10 [ 706.647259][T16143] ? __pfx_dev_ifsioc+0x10/0x10 [ 706.647273][T16143] ? __pfx___mutex_lock+0x10/0x10 [ 706.647292][T16143] ? dev_load+0x8e/0x240 [ 706.647306][T16143] ? dev_load+0x8e/0x240 [ 706.647324][T16143] dev_ioctl+0x70e/0x1070 [ 706.647342][T16143] sock_ioctl+0x494/0x6b0 [ 706.647364][T16143] ? __pfx_sock_ioctl+0x10/0x10 [ 706.647384][T16143] ? hook_file_ioctl_common+0x140/0x440 [ 706.647407][T16143] ? __fget_files+0x21f/0x3d0 [ 706.647433][T16143] ? __pfx_sock_ioctl+0x10/0x10 [ 706.647455][T16143] __x64_sys_ioctl+0x18e/0x210 [ 706.647475][T16143] do_syscall_64+0x115/0x840 [ 706.647497][T16143] ? clear_bhb_loop+0x40/0x90 [ 706.647515][T16143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.647530][T16143] RIP: 0033:0x7fac0ff9de59 [ 706.647543][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.647557][T16143] RSP: 002b:00007fac10f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.647572][T16143] RAX: ffffffffffffffda RBX: 00007fac10226090 RCX: 00007fac0ff9de59 [ 706.647581][T16143] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 706.647591][T16143] RBP: 00007fac10f21090 R08: 0000000000000000 R09: 0000000000000000 [ 706.647600][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.647608][T16143] R13: 00007fac10226128 R14: 00007fac10226090 R15: 00007ffc9e220ae8 [ 706.647628][T16143] [ 709.781059][T16203] netlink: 202 bytes leftover after parsing attributes in process `syz.5.1835'. [ 710.289854][T16209] zswap: compressor not available [ 710.328830][T16219] FAULT_INJECTION: forcing a failure. [ 710.328830][T16219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.361486][T16219] CPU: 1 UID: 0 PID: 16219 Comm: syz.5.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.361528][T16219] Tainted: [L]=SOFTLOCKUP [ 710.361537][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.361551][T16219] Call Trace: [ 710.361559][T16219] [ 710.361568][T16219] dump_stack_lvl+0x100/0x190 [ 710.361606][T16219] should_fail_ex.cold+0x5/0xa [ 710.361640][T16219] _copy_to_user+0x32/0xd0 [ 710.361680][T16219] simple_read_from_buffer+0xcb/0x170 [ 710.361725][T16219] proc_fail_nth_read+0x1af/0x230 [ 710.361833][T16219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.361870][T16219] ? rw_verify_area+0xce/0x6d0 [ 710.361905][T16219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.361938][T16219] vfs_read+0x1e4/0xb40 [ 710.361981][T16219] ? __pfx_vfs_read+0x10/0x10 [ 710.362025][T16219] ? __fget_files+0x215/0x3d0 [ 710.362072][T16219] ? __fget_files+0x21f/0x3d0 [ 710.362121][T16219] ksys_read+0x12a/0x250 [ 710.362159][T16219] ? __pfx_ksys_read+0x10/0x10 [ 710.362207][T16219] do_syscall_64+0x115/0x840 [ 710.362250][T16219] ? clear_bhb_loop+0x40/0x90 [ 710.362284][T16219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.362313][T16219] RIP: 0033:0x7fbb61b5e68e [ 710.362339][T16219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.362364][T16219] RSP: 002b:00007fbb62abefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.362388][T16219] RAX: ffffffffffffffda RBX: 00007fbb62abf6c0 RCX: 00007fbb61b5e68e [ 710.362407][T16219] RDX: 000000000000000f RSI: 00007fbb62abf0a0 RDI: 0000000000000005 [ 710.362424][T16219] RBP: 00007fbb62abf090 R08: 0000000000000000 R09: 0000000000000000 [ 710.362439][T16219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.362456][T16219] R13: 00007fbb61e26128 R14: 00007fbb61e26090 R15: 00007ffecae76d78 [ 710.362492][T16219] [ 711.550406][T16235] Process accounting resumed [ 713.000638][T16251] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 713.121696][T16255] program syz.4.1844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.546605][ T6622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 713.564280][ T6622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 713.573913][ T6622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 713.582041][ T6622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 713.592264][ T6622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 715.701779][ T6622] Bluetooth: hci2: command tx timeout [ 716.444219][T16320] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1852'. [ 717.731149][T16336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1853'. [ 717.770780][T13127] Bluetooth: hci2: command tx timeout [ 718.960745][T16348] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1854'. [ 718.983884][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.007363][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.034504][T16262] bridge_slave_0: entered allmulticast mode [ 719.059852][T16262] bridge_slave_0: entered promiscuous mode [ 719.413007][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.437952][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.466294][T16262] bridge_slave_1: entered allmulticast mode [ 719.495391][T16262] bridge_slave_1: entered promiscuous mode [ 719.734821][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.788045][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.848281][ T6622] Bluetooth: hci2: command tx timeout [ 720.034575][T16262] team0: Port device team_slave_0 added [ 720.085648][T16262] team0: Port device team_slave_1 added [ 720.257057][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.273101][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.335420][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.367663][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.385923][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.448087][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.996210][T16262] hsr_slave_0: entered promiscuous mode [ 721.019846][T16262] hsr_slave_1: entered promiscuous mode [ 721.045745][T16262] debugfs: 'hsr0' already exists in 'hsr' [ 721.067308][T16262] Cannot create hsr debugfs directory [ 721.557716][ T6715] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.914704][ T6622] Bluetooth: hci2: command tx timeout [ 722.265239][ T6715] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.813167][ T6715] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.255080][ T6715] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.151823][T16387] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6813] was attempted by ""[16387] [ 724.339455][ T30] audit: type=1400 audit(1843107956.365:25): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16384 comm="syz.4.1862" [ 724.412788][T16262] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 724.642455][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.742190][ T6715] team0: left allmulticast mode [ 724.767262][ T6715] team_slave_0: left allmulticast mode [ 724.804683][ T6715] team_slave_1: left allmulticast mode [ 724.830602][ T6715] team0: left promiscuous mode [ 724.841746][ T6715] team_slave_0: left promiscuous mode [ 724.848155][ T6715] team_slave_1: left promiscuous mode [ 724.864235][ T6715] bridge0: port 3(team0) entered disabled state [ 724.910650][ T6715] bridge_slave_1: left allmulticast mode [ 724.928924][ T6715] bridge_slave_1: left promiscuous mode [ 724.949418][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.017913][ T6715] bridge_slave_0: left allmulticast mode [ 725.038030][ T6715] bridge_slave_0: left promiscuous mode [ 725.057863][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.998744][ T6715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.026487][ T6715] bond0 (unregistering): Released all slaves [ 726.116743][T16262] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 726.190862][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.221946][T16262] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 726.311664][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.345536][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 726.515568][T16262] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 726.578178][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.800184][ T6715] hsr_slave_0: left promiscuous mode [ 727.838017][ T6715] hsr_slave_1: left promiscuous mode [ 727.853739][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.875322][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.948205][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.982716][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.089292][ T6715] veth1_macvtap: left promiscuous mode [ 728.108698][ T6715] veth0_macvtap: left promiscuous mode [ 728.125994][ T6715] veth1_vlan: left promiscuous mode [ 728.146245][ T6715] veth0_vlan: left promiscuous mode [ 729.000666][T16456] kfence: disabled [ 729.043507][ T6715] team0 (unregistering): Port device team_slave_1 removed [ 729.097418][ T6715] team0 (unregistering): Port device team_slave_0 removed [ 729.485045][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 729.693095][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.751180][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.815670][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.822902][ T7629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.936258][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.943464][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.143175][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1871'. [ 730.267690][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1871'. [ 731.250455][T16504] blktrace: Concurrent blktraces are not allowed on ram10 [ 731.486105][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.597942][T16499] blktrace: Concurrent blktraces are not allowed on nbd5 [ 731.845181][T16511] netlink: 'syz.4.1874': attribute type 15 has an invalid length. [ 731.866134][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 731.967603][T16511] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1874'. [ 732.417834][T16530] random: crng reseeded on system resumption [ 733.465549][T16262] veth0_vlan: entered promiscuous mode [ 733.630578][T16262] veth1_vlan: entered promiscuous mode [ 733.660752][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 733.858978][T16262] veth0_macvtap: entered promiscuous mode [ 733.899969][T16262] veth1_macvtap: entered promiscuous mode [ 734.061256][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.364369][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.560536][ T6715] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.680869][ T6715] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.699783][ T6715] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.784327][ T6715] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.011479][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 735.903447][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.933011][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.079049][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.107090][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.430993][T16579] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 736.475376][T16579] FAULT_INJECTION: forcing a failure. [ 736.475376][T16579] name failslab, interval 1, probability 0, space 0, times 0 [ 736.511693][T16579] CPU: 1 UID: 0 PID: 16579 Comm: syz.8.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.511740][T16579] Tainted: [L]=SOFTLOCKUP [ 736.511751][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.511769][T16579] Call Trace: [ 736.511778][T16579] [ 736.511798][T16579] dump_stack_lvl+0x100/0x190 [ 736.511839][T16579] should_fail_ex.cold+0x5/0xa [ 736.511873][T16579] should_failslab+0xc2/0x120 [ 736.511912][T16579] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 736.511948][T16579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.511996][T16579] ? append_filter_err+0x3d6/0x620 [ 736.512038][T16579] kmemdup_nul+0x49/0xd0 [ 736.512071][T16579] append_filter_err+0x3d6/0x620 [ 736.512113][T16579] apply_subsystem_event_filter+0x711/0x17a0 [ 736.512171][T16579] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 736.512220][T16579] ? _copy_from_user+0x59/0xd0 [ 736.512263][T16579] subsystem_filter_write+0x95/0x120 [ 736.512304][T16579] vfs_write+0x2aa/0x1050 [ 736.512347][T16579] ? __pfx_subsystem_filter_write+0x10/0x10 [ 736.512389][T16579] ? __pfx_vfs_write+0x10/0x10 [ 736.512428][T16579] ? __fget_files+0x215/0x3d0 [ 736.512478][T16579] ? __fget_files+0x21f/0x3d0 [ 736.512529][T16579] ksys_write+0x12a/0x250 [ 736.512570][T16579] ? __pfx_ksys_write+0x10/0x10 [ 736.512623][T16579] do_syscall_64+0x115/0x840 [ 736.512666][T16579] ? clear_bhb_loop+0x40/0x90 [ 736.512701][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.512731][T16579] RIP: 0033:0x7fda0519de59 [ 736.512755][T16579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.512789][T16579] RSP: 002b:00007fda05fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.512816][T16579] RAX: ffffffffffffffda RBX: 00007fda05425fa0 RCX: 00007fda0519de59 [ 736.512835][T16579] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000006 [ 736.512854][T16579] RBP: 00007fda05233e6f R08: 0000000000000000 R09: 0000000000000000 [ 736.512871][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.512888][T16579] R13: 00007fda05426038 R14: 00007fda05425fa0 R15: 00007fffc052f8f8 [ 736.512927][T16579] [ 737.220553][T16591] input: f as /devices/virtual/input/input18 [ 740.111230][T16633] netlink: 146 bytes leftover after parsing attributes in process `syz.8.1893'. [ 741.578661][T16652] Process accounting paused [ 741.679870][T16651] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1896'. [ 742.139278][T16669] BUG: unable to handle page fault for address: fffff5200095320c [ 742.139302][T16669] #PF: supervisor read access in kernel mode [ 742.139318][T16669] #PF: error_code(0x0000) - not-present page [ 742.139333][T16669] PGD 23fff5067 P4D 23fff5067 PUD 1cafb067 PMD 268d7067 PTE 0 [ 742.139383][T16669] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 742.139410][T16669] CPU: 0 UID: 0 PID: 16669 Comm: syz.4.1903 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.139450][T16669] Tainted: [L]=SOFTLOCKUP [ 742.139460][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.139477][T16669] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 742.139591][T16669] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 742.139618][T16669] RSP: 0018:ffffc90004c97568 EFLAGS: 00010a06 [ 742.139641][T16669] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 742.139661][T16669] RDX: 0000000000000000 RSI: 1ffff9200095320c RDI: ffffc90004c975f0 [ 742.139680][T16669] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 742.139697][T16669] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888026fd06b9 [ 742.139715][T16669] R13: ffffc90004c975f0 R14: ffffc90004a99060 R15: ffffc90004a99060 [ 742.139733][T16669] FS: 00007fac10f426c0(0000) GS:ffff888123df2000(0000) knlGS:0000000000000000 [ 742.139762][T16669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.139782][T16669] CR2: fffff5200095320c CR3: 00000000746c4000 CR4: 00000000003526f0 [ 742.139801][T16669] Call Trace: [ 742.139811][T16669] [ 742.139824][T16669] ? find_held_lock+0x2b/0x80 [ 742.139857][T16669] ? debug_object_activate+0x343/0x4b0 [ 742.139896][T16669] ? __pfx_sys_imageblit+0x10/0x10 [ 742.139930][T16669] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 742.139972][T16669] ? debug_object_activate+0x343/0x4b0 [ 742.140008][T16669] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 742.140038][T16669] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 742.140142][T16669] soft_cursor+0x524/0xa10 [ 742.140190][T16669] ? do_raw_spin_unlock+0x145/0x1e0 [ 742.140217][T16669] ? fb_get_color_depth+0x120/0x250 [ 742.140292][T16669] bit_cursor+0xca1/0x1490 [ 742.140341][T16669] ? __pfx_bit_cursor+0x10/0x10 [ 742.140389][T16669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.140429][T16669] ? get_color+0x1da/0x450 [ 742.140465][T16669] ? __pfx_bit_cursor+0x10/0x10 [ 742.140506][T16669] fbcon_cursor+0x43c/0x5e0 [ 742.140543][T16669] ? mark_held_locks+0x10/0x70 [ 742.140584][T16669] hide_cursor+0x87/0x230 [ 742.140677][T16669] do_con_write+0x224c/0x4a30 [ 742.140712][T16669] ? __mutex_lock+0x26d/0x1bd0 [ 742.140740][T16669] ? __pfx___mutex_lock+0x10/0x10 [ 742.140766][T16669] ? do_raw_spin_lock+0x128/0x260 [ 742.140793][T16669] ? __pfx_do_con_write+0x10/0x10 [ 742.140834][T16669] con_write+0x23/0xb0 [ 742.140865][T16669] n_tty_write+0x431/0x1160 [ 742.141005][T16669] ? __pfx_n_tty_write+0x10/0x10 [ 742.141043][T16669] ? __kasan_kmalloc+0xaa/0xb0 [ 742.141075][T16669] ? __pfx_woken_wake_function+0x10/0x10 [ 742.141120][T16669] ? rcu_is_watching+0x12/0xc0 [ 742.141150][T16669] ? file_tty_write.isra.0+0x694/0x890 [ 742.141182][T16669] ? kfree+0x1e5/0x6c0 [ 742.141222][T16669] ? __pfx_n_tty_write+0x10/0x10 [ 742.141269][T16669] file_tty_write.isra.0+0x4d2/0x890 [ 742.141307][T16669] redirected_tty_write+0xd4/0x120 [ 742.141340][T16669] vfs_write+0x6ac/0x1050 [ 742.141381][T16669] ? __pfx_redirected_tty_write+0x10/0x10 [ 742.141413][T16669] ? __pfx_vfs_write+0x10/0x10 [ 742.141451][T16669] ? find_held_lock+0x2b/0x80 [ 742.141494][T16669] ksys_write+0x12a/0x250 [ 742.141532][T16669] ? __pfx_ksys_write+0x10/0x10 [ 742.141577][T16669] do_syscall_64+0x115/0x840 [ 742.141619][T16669] ? clear_bhb_loop+0x40/0x90 [ 742.141653][T16669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.141682][T16669] RIP: 0033:0x7fac0ff9de59 [ 742.141705][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.141733][T16669] RSP: 002b:00007fac10f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 742.141760][T16669] RAX: ffffffffffffffda RBX: 00007fac10225fa0 RCX: 00007fac0ff9de59 [ 742.141780][T16669] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 742.141798][T16669] RBP: 00007fac10033e6f R08: 0000000000000000 R09: 0000000000000000 [ 742.141816][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.141833][T16669] R13: 00007fac10226038 R14: 00007fac10225fa0 R15: 00007ffc9e220ae8 [ 742.141861][T16669] [ 742.141878][T16669] Modules linked in: [ 742.141907][T16669] CR2: fffff5200095320c [ 742.141929][T16669] ---[ end trace 0000000000000000 ]--- [ 742.141949][T16669] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 742.141984][T16669] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 742.142010][T16669] RSP: 0018:ffffc90004c97568 EFLAGS: 00010a06 [ 742.142034][T16669] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 742.142052][T16669] RDX: 0000000000000000 RSI: 1ffff9200095320c RDI: ffffc90004c975f0 [ 742.142072][T16669] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 742.142089][T16669] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888026fd06b9 [ 742.142107][T16669] R13: ffffc90004c975f0 R14: ffffc90004a99060 R15: ffffc90004a99060 [ 742.142127][T16669] FS: 00007fac10f426c0(0000) GS:ffff888123df2000(0000) knlGS:0000000000000000 [ 742.142154][T16669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.142174][T16669] CR2: fffff5200095320c CR3: 00000000746c4000 CR4: 00000000003526f0 [ 742.142196][T16669] Kernel panic - not syncing: Fatal exception [ 742.142434][T16669] Kernel Offset: disabled