last executing test programs: 3m24.172667575s ago: executing program 2 (id=205): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_BROADCAST(r0, 0x7fff, 0x6, &(0x7f0000000500)='\x00\x97T)\xce2\xdd\xb3\x8b\x9f\xae\x01\x00,\xa6\x1a\xccn\xe24\r?\xa7\x8b\x8a \x80\x9a\xf1\xcbHp\xd0\x13\xb4\x8d\x7f\x1f\xff\xc9~E*\x10\xe2Q1\x84\x86\x12d%\xc9\x92\x8c\xb0h\x9f\xbbR\x04\xc6\xc7\xcb\t%\xc3c\"qX\x18%\x01z\x81\xdd\x01\xb5\x13\xb7\xe8\x1b\xa7\xc0Y\xf7\x15O\xa4\xd6\xc3\xaf\x9dL\xde\rg\xe2c\xe7\x1dF\v\xa3\xb6njE\x17q\xb6\xed\x93c\x98\xe8\xdf\xd9\v\xe1\xb0Y\x1c\\\tH\xb0$@X\xc7\x05\xdbm1\xb5v\\\x9f\xb4jV]\xb1AF\x96,\xb0\xdcn\xbf\xad\xb5\xb9\xfc\x1d\x83\xf8\x1bf\xf8F\xac\xb7,\x89\xd2\x19I\x878k\xdd\xd2l\xdb\xac\x94\x16\xb7\x1d\xd3\xf5\t\xa9\xbb\xe1\v\xb7\xe1}\xc6\xbbe\x16{\xb6\x88\xa7\x1c\xc4!L\x89x\xf1\x9e\xf2D\x90Vo\x03g\xde\x00\x80\xd4\a\bJ\xb3\xc1\x01.X\x038^\x11\f\xf1\xe0\xce\xbe\xf2\xb6[\x17\x00E\xc3\x02\xfd}\xe9\xa7O<\xdc\fKs\xba', 0x5) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000140)=@sco, 0x3) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0xa342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket(0x2, 0x3, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = epoll_create$auto(0x7) epoll_wait$auto(r3, 0x0, 0xe007, 0xe8a4e409) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) 3m20.590126273s ago: executing program 2 (id=214): r0 = prctl$auto(0xe, 0x2, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x7ffa) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000180), r0) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000002c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x125002, 0x0) read$auto_transaction_log_fops_(r4, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) write$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x100000000) 3m18.50410995s ago: executing program 2 (id=221): r0 = socket(0x2, 0x5, 0x0) clock_gettime$auto(0x80000020, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40041, 0x0) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x3, 0xb}, 0xfff}, 0x5, 0x311) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd7/hctx0/dispatch_busy\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000000c0)=""/105, 0x69) sendfile$auto(0x1, 0x3, 0x0, 0x74c) 3m17.947329873s ago: executing program 2 (id=223): r0 = prctl$auto_PR_SCHED_CORE_GET(0x7fff, 0x0, 0xffffffffffffffff, 0x6, 0x5) r1 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x408100, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000040)={@inferred=r1, "28812bfaef6cadcf477a8f5fc524e59df2e2ac03f8a729b4c5f02d39e55a476ac17e675c38f44e2cd8c65c17e0d5a01db467029e4444f046cc653ddf80c82843e1a44877a688e3cf3696247e887c2165231e94892d097a4a6b0cb996849fbf2ce7a51760120c216217f6d10fdee009e4b4488986312d51acba78c63be9f35530457c3656ae96dc6b6c1304337d895539fb2d9026ef730ef167c1acb1150e247beffb770fd868d118847b4f3e353a56115ebe1b8984dbff4dea892bd1f980aa2650bd1104dcf5fb06bedf439aaef3c86694d69aac38173e85ab7975b6d1e849aca39a252653c799adcd193256ae23d78d34befb7acbee4fd8572b5a68857cd6ba87ea7925c67b98d6d5dd721655486f5007ac7e5ec7770b350be6d5820f7f2a2da5460dff6e006222eea82dce3c20bbba734c0a1ee602d75bd2e54c2c30f1c83d1270aea1b4826071e1bf2e7dacac6a2b2a2ab01c7d5323f649071a800c7d55c7169526d66a94a1160be9a8db49a44f3e07f1ab94ce37a7f5ea8395c693216ff29bf6c98a0bc9cc3110a1c4bc73346a0cb1a771646f685a911655be3c79b724ce8d9195e6d4a389550cfb39a2cd5c48100e981c0cab94e4cf5941182685a14d4f1d3fce74bcfdb3e7aec6b3e7ce1e32cf13a504da748ecc01a1cddf18892be02640f98aceb882543372c5e8d8c118e38146fe5bd4077aa920b743239a1ccd122b62cab7dc9db73610aa9e141990e4b080cfd6b8d3614fa6a2e12bbc8bcd05d801890ade6498c09aa477ecdcff2ac55c2196221168e0fb77bbafad47604ea7a7497f3c651b949e0dddf6ee97290164fe337d51c5dae8ac1a1b860adb4ba61e9b93ac55249f892b226a71d866e0a5f11b47a9c3981e7e9349670738238e35900e11bd6e4de3891c6380bb469a759c333e24599d950dcffc0f99964d8144859c774cb1f91e17ed533791273bd347b99b1d48ec211bc3ef4eedf562c692bd418c8930b625f82e19cdf7fbc52a50f7068e850197a7c6ffa10daa6e5f74019dda244e774b49fbb27151fa3814a6005da2df64dc53d1207942c674bbf41e77fee6e694d27dbd0e343cd8922d9c068259d573de71ea7e533cb79c042099d56f0d9a3b0a003ee1db95c85c56648225c66a7e956b6cd824b6177bd646451deca3aee8737200bbbb48643079a844d5e104f5842534db077bb7310ae477650851561da5d81e861df7778b568083eff8f9213093166fa23f2bb4ec1794602d51465a7660cf1fc08eb6c2061ee1b6380f34075faef14b825ec78d33e5607736660773cb6764715194083e4990306df059c5cb2df1efc7a27661169c6b114a819842bce0c40e6234de12f885589165f9de0aa1db6191cb902162bac666c1c2e17f5bf1e419758020f76131d2c86e3eba10243175d14530ff1fbcae6b1bcce2118ed3e27a14c7adf16ee9b7f41dcb1c80b72dc1455a2ff7a26a99cabac921a7ec6fb52c07fb22c2fbb0b8f2103a6b83b2e74dbd3e2bcc0a1da542bc5024945ef831613d50965fbcac6662f36f99cf09b80b06c465c7cbf5b9ff178f4fdfd9996088f97c20c3975196a6bf5754e840f421031d6ae7015659ee5dd6cbd8dbfc23651bb485ef356c18f8ac1e8f4cacb138d71a2e46853cbcf0b5e29f1fa202959c65e557955507563bcabfc4e322d2f33e6e24fd30752f6597efa25ae326f6ab4cf4fb3410724c8c8274f79b019fc88d7cbb5aff2261d2df560cf777307619a1f96c310198d76c70a388fe6e4644e2ca417d271ad18d185899dabd8d6e01ced808d5089269b6124891e1f93ed49bbe525d0a4c621a9b15320f991389aca7430bc07e4649eb02d1e45faec862c8e487c01d6d17bfad339680235aa276b8941de4dae327e9ea986379445667a1f52da21ecd739e32bfe02ffa3c0f7d86dc35350d8bfed78304ab4c5b9e72760d4ccc27720736660b525293a1083b14fafc0ff0ed618ef7732a05220c5697cf396b94353261a58ae21f0385a1d9f01c63350b23f3f756c3bddd2ff8aebdac712a04501babda7247e94c1a7b3b32434676f5ed06495846c07b1ad64d4eecb4e61ae639a7799a44ee1d65a488bb2fc29fac87183428bace01b5758230f1a0e4c2b97e4f57cfda08a1396147c9b7f301508ca22ca45a00a7849be538f189a92ee3fbd6ff313cc9619ad4c05ba6daea07430fdb3fad09d4f54c0842dea97766eeac0b0f0438a8049e89e8254c949d74801183292ea54aa19cc908a4c6a817a01bbbd44981025c9fea08595ebbdd93796413150c10fa85305b4680acd4a7ddecaaf8347bfa00518e432b98c95fda43fe080c41c715eecf5f76ec93124d74569db9f4070a367a74a049dbb4b256d12d29fbda8c899029932a9307c832b563414e3f5310d2cedb2dab035c8823a4fbee67bcc30179e42ab50b636bc40a10b1cdd2d8039dcbde2efb6b5c632a621c2ca63c498ab2f2c236cadeb6f9730c9a10a1b4dce02ff834ca6cffd4fc483ab13f21a78384e25b80e4f435c05f368f689e0481b3c533ae7420e2c924a5b510149e89794c88c622ccaa7d30c495ab460ce7294ee2a244afa3cd29c42ef56f6915be00835d65dc8128a6311536a021c091bd372573ef58c70cf8e6c7c9b69a95bc1e42f15ea82ad517590a31a77d721071046e7572a2e8b1cb63578f7cbe601cc106b677ff34a5dcbe05c0d0d48d169b9a4339f2c76bd4254fd60b3d763699c6a9ce97b0402fac9b281a5558c732c64c15cf1583919dcfba2baef607c8c5c6a862b09f51cbc62f4507dc672b838760336f009961dec910cea15632ec716ebd169eb1ba08e7d2ffadbccb908a62cf8e308428833e0c82f64627f4976f68981976923cea91d13f163a1c27c2c2c392d9783360fcce18ad8833772bbf667daaac500ba4d047c72abb21b4be7829899fbf8b5d638a3e5f666fffc94645c21fe2fa4fcfc817ecee8e2a5ce3cc87f7c6e46af19a065fe44617e32bd8f8803ab66f01698948b13975ff91846c66f88e4c659cd38746c871d55a7f2a0754226ccc7c3dcdb74bef75b8827e275ed4374ddc85013fc6396ca4230b44aa1467095f59bdb2633038b7ba034a9502ca9978a8067edb606ec06fb36c14792d9e84b93f612191812aa9497996a6a9e0b4b1de524d49729a4f3f9d4a4900422945596aaa571c50bf0eb3ffa26d209125bc70b5a8d804810b8bf44f73fcefdd3528316cd9661782e401b1527f19980c866fbb1f2a7630cbced9d38a2ae5e112e51549d3c51f4bb67e7321c8b89219276c5d2c3623d141b4bd02d877a94a65f5994fb029d48db402dcb8049fd4c9125931359324fbbc92ef9560707cf3cd1d875e2750cb5cf40e1e1c31bcade26929726410cd2e409aedff6a088eca64ffa9ad06a44e301d330175b17211bf14fa9b7c4cd48585e70277c349b5e099d118fc3222f5879866424bee16fec6bcca0aff8c6d50467c40007b7d4321685e2aaa5b11a1fbb161425ea114987fb1b2cd5c97ea9086a9b661bdd3310286981ebb1c7e5775430c405b11ae6534a006b69d7fefdc002f06293f376eb7eb0248a5c60e4145e1fcc7ad2cdf72ca2ad923a58fa3a98a054f7d89330b2c6498b41635e31ce853383566c3e7f03cd92d7f792456f015261ac17d74564c7f7e257e0c83a682a2e7c9c38f18a8918f58526ebde05f7c4912b165e03a8ca41ce486043b42ac56c0598125cd028d94d50881d24b024d32e357a385e9138fefcd86517c2d8ac68ff15cea8fd033abea473e0a0fd9d5918ebaca62c41d78b9bdf38dd214fc4f1f7b699a45921948a4c9fcc79311cccd8860425916ee7c7f5e4aad3d891d5daa02e2ed2b6565d18032b002e4078bd2a1d32a3be07d08f440ada7fa749cde47228728dbc1f2e4a81582ddfaa1e84e750ed73e9ba6b6497b5a1ce012ee2b6d0dabd9a8c399f167396683fce9d1e723b902a911a344107a746fb4abbad239eb48d612a41cd6288a09bdea559dae8e41fd90cb89c5c907e914b9103062d6286c1cc36e56333e6c732c27cc729c3e8cd97eaff0c614c8a4397938f1ad139ae346be30dd4e5a7f3ae2d1b9a0a32600e53856ba5b456346c93d44f779be5fa3e2555d75e72f45c86ded59ae32daa54bf97344e61cdfb75eba16c6f304ed9f0440e2868220f784541a12eef2066ebfcf45d6b4d01932d49ad0d9b7150436b89228038ebf9aa5e7a08066bad9736d69c96e45ca3f132b55523b3293111b20af6ced955536a07dd74285cc381273af1cabe6ad9e5c1c22a42795786a8f17faa14356c9e84626d370bd9b3de2e29c68cf28ecf229d8b5d93530e937e37966fe7a2df24f81e4ac05234440c1dbb7ce55bf5251eb9e1632a98fad5dd1406a7abe86a0342660b9ad4ae13b0d13296fcabf9697772f23b9425d32336e739d6b5f3a2a8741d47f45bd320cf5c46be7a51763783e7406ec4ed486d85fcfb86c05c5cc07beb5fc6d39d644989b7c2f002ce7b6978c235b79b366fc555f8aea62b0fbb259cbca06f7eb68bfc78022492f6f859445f173fec3e6ff6a0a36b9fa4c7a96225246d481196027d98b55c09ddb44aad93f3a657306dcf27efd8b266a7a49c841f4bb459cd091cf05883fe20b663ffc625eb97cc66be7c55b473a06a245f2cf673cefc0e3fdbed786bdeabaafc00e5914c23455239770a6692d86ac18bd412d4aa558464a9d2cbaa3049a96bbb8162968e381b9c5f1550ee8e5a14d3402895ec9ca5c31980d253e0d6a819206e7c348745f6feea93537f748f19785886d4650dcaec20485dafd6105f6239ba7d92068490c12aafbd7285660771c7039db9b51d235b22abcddfef2f05c01ead875575a627b9500b38d39c39c0da08490e9105d4a8dc0f93f1fe70a993bc2d2b6122e2297f1e5a549b6e7b17d876bba9b82201c992e2938312ea03459ea45188bb4ed1ebd23387f2a3b74a68a20549205955503097d218fc2e8ee0b37466b788018ac236e8dee2f8a82ed7187644255a9ff6b2c9b669f9c03498cdf49af624cf5944b608f3782c574b417f0ac218ec371c5c44412a6eb38e3e231158e0aaeec66f230af9613139e118ab1580ff540cd29ccd336d8d5d0170ffc92d2e62a6a6e854676387a75b10ad0f52a48e23500fafc96febee9b8b639d6f05c0a67068dd5676b0aae1f059ab42e5d90d69736e05b7f203f1ee376fe622cdf842e7aa5b7de4bf0aaf11125879dc8d30fa7819ebad32b43ef16e103afbc606c3a84a4d71bb4ae00b3d0f4e204f01cf961453ccdaa35702171684d1f32ba248e731abe724cd7a2419a8495d7a230257f02260db9b9fd859179ba267cd835ed6412b93e269d8492317d0b9a96a07d09764feb6196d155da30145f7c3a58f52675ebac3807868c851885ff728dd99d5fe949f6e97f695d99702b6eb3d60b03ded5dcf17c02e12c9fb56f9d834d0b5f3ebfd5af1219301867b0ba72a35259af6fa259b6e14ed74c3469c9369592519782f6c1ed1920310db37816dd746a3594088fccb106cdefb0ba0aef12811d0dd9d04797c538eeb3a692a9985554784ce5515b1733da32cc9b14964aa802652fc45381ee6c131bf2ebe0d44e74bb6d5720abee111d120330c0baee8c647651f259f1976483763c5da322f450907eb6e689ca195b673c6068510f918aba745fca2e924de5d491dbe285b33e936cba47015f0d2371f3830ea39272ddebdc35bc7c8bc22727aec6dfaa2d6da38fc7985b8fdf9cf180e827236987680853ac5062dfa1ab0d276834a4c2220ea6351e2e"}) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'bond_slave_0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000021c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002180)={&(0x7f0000001100)={0x1058, r3, 0x611, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1008, 0x19, 0x0, 0x1, [@typed={0x1004, 0x8, 0x0, 0x0, @binary="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"}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x1}]}, 0x1058}, 0x1, 0x0, 0x0, 0x4044004}, 0x4004840) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(r5, &(0x7f0000002200)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0xffff) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002280), r2) sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x30, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xb6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x6}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000023c0), r5) sendmsg$auto_NETDEV_CMD_DEV_GET(r7, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}]}, 0x24}}, 0x4000) madvise$auto(0x2, 0x3, 0x4) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002500), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x20, r9, 0x828, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) madvise$auto(0x380, 0x20a, 0x4) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000002600), 0x440000, 0x0) r10 = open(&(0x7f0000002640)='./file0\x00', 0x10000, 0x120) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000002680), 0x400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/ptysb\x00', 0x80, 0x0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000003ac0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000002740)={0x133c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x101}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @NL80211_ATTR_PMK={0x1b, 0xfe, "4e2bc9b7987fd6624df65fafa308413e81b040deecd332"}, @NL80211_ATTR_SSID={0x15, 0x34, "e8dec6804a65ed2d32c2ebf65add9ba482"}, @NL80211_ATTR_REKEY_DATA={0x12c8, 0x7a, 0x0, 0x1, [@nested={0x276, 0x169, 0x0, 0x1, [@typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="03f6bc1209f86744ae51522da53bdb5b91ac2b3a08813891b5f43e4e2161517eca96441b17864a0e73c777fd9be1663575cf1d3eae63b6b8b8d4a603c445cca21ac4c0c93781324b25c604f795077c16921e13b271007acdfd794e2cb7ee9f27f57cf69525afebbec7d5969378ee9e7c849e7ad4e0a5f9e5aae825904c9e0f39a64ed729ecf0aad3ec1cc4b625d81b7cb0f2e777b2d78b44bb6a79787844dc2e7555fb99de72d1df825b81539237", @typed={0x4, 0xd8}, @nested={0x4, 0x13a}, @generic="22b8d82abc2985e0e6b0586857a5db99b552fa48b3e76e746d29e36893b94361415f3b76b67b232c05e32bee5a8fe1dc89730c75989cbd99185c76f5b92a5503abb6164630240636aab8e2bb5da7fa75355a352d78dc44403be4ced502900d9d5a34e0216781f416789269363b3e7715bb26f2c85e1d53bd2a4f77f09b79284539e4179cc5d5ea1b30fcf8f00183f3f0bb2cd9b51b55e0f7b3a54fa37152b1832c55aabda4ccedab8b30c18bb1783a22577e33ce5ac5642b4680ee325a992317", @nested={0x4, 0x28}, @nested={0x4, 0x66}, @generic="23572fb48e78eeb42fc317a365f549bd516a95e19d48e79afd7ff1db4ff17ebfa7b03fa4ca66c189772e79b0a99520077bfcf77d4f7fcbe1aa2861c671f2ddfb618b03752f4c5546c4f77aa7f25d7602b0a0a92b8728da92e2d1c00128540ef5a6f30fb83fd6696b253ca4fed8990db6d4a6fd878d0715c5972d03ef1470382c214ad52c372151900b1480c637f5070fdbe7c1cc08a3fc74b066cb28a72ad68056577c6ca8e191455603e1a47b3a595e3c3594d74930a02aa5bd3d2ec9814e25963c5f4f82675813bd9c8d71ada8e39ec4d3a330", @typed={0x8, 0x66, 0x0, 0x0, @fd}, @nested={0x4, 0x4b}]}, @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x9}, @nested={0x103d, 0x6f, 0x0, 0x1, [@nested={0x4, 0x100}, @typed={0x8, 0x160, 0x0, 0x0, @ipv4=@remote}, @generic="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", @generic="bdf044bf8c3519654b6b74e2893fe8799cfedf85d024e2074a6786f7e14411e9191894fdddb3ab99a7", @nested={0x4, 0x5a}]}]}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9}]}, 0x133c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r11 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000003b40), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r10, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x14, r11, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4400c8c4) ioctl$auto_X86_IOC_RDMSR_REGS(r10, 0xc02063a0, &(0x7f0000003c40)=[0x5, 0x9, 0x9, 0x9, 0x5, 0x80000001, 0x1, 0x4442]) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000003cc0), r2) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x30, r13, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb6de}, @BATADV_ATTR_MESH_ADDRESS={0xa}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x50) socket(0x10, 0x2, 0x7f) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000003dc0)='/proc/thread-self/oom_score_adj\x00', 0x903c2, 0x0) 3m17.621250844s ago: executing program 2 (id=224): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x0, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) (rerun: 32) r1 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x3) (async) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x86b1) (async) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r3, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) (async) close_range$auto(0x2, 0x8000, 0x0) 3m16.544787493s ago: executing program 2 (id=228): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) read$auto(r2, 0x0, 0x1d) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r1) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\b', @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) gettid() getpid() sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="14030000", @ANYRES16=0x0, @ANYBLOB="000306000000fbdbdf25360000000600480003000000010000000000000008000000080035010800ffed0800db00", @ANYRES32=r1, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x815}, 0xc0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) 3m1.096042627s ago: executing program 32 (id=228): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) read$auto(r2, 0x0, 0x1d) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r1) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\b', @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) gettid() getpid() sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="14030000", @ANYRES16=0x0, @ANYBLOB="000306000000fbdbdf25360000000600480003000000010000000000000008000000080035010800ffed0800db00", @ANYRES32=r1, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x815}, 0xc0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) 2m52.845323229s ago: executing program 3 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000002980)=ANY=[@ANYBLOB="18140000", @ANYRESDEC=r5, @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x1418}, 0x1, 0x0, 0x0, 0x54084}, 0x4000090) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r7 = socket(0x11, 0x80003, 0x300) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x1f, 0x1, 0x948b, 0x5, 0x15f4da07, 0x9, 0x1010, 0xb1, 0xeffffffffffffffe, 0x1000, 0xb, 0x100000000, 0x9, 0xa]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) read$auto_rb_simple_fops_trace(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), r7) r9 = getpid() sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000003e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003e40)={&(0x7f0000005380)=ANY=[@ANYBLOB="d8140000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04002a80786364885506113dfb4a0c1cb9dd5d816518e163c23ffe167e34362dfb450d0c91d31aca427561730704b19ec8d79f9a0bd8c818d7e9666c4412688d2322f5bb06a46333c9c83cb93ec5633e87ea127045293966b7959deb9b566c6d7cb1144ed113b5865e2f67f25ef80f2fa02d28b2bf5e06232b431dc6d3744b54cec48cbd753d71c3d88b2c393ce47eac08005a007e00000008006400", @ANYRES32=r9, @ANYBLOB="0400080008000a00030000002c0107800c00e3800800f000ff7f0000fb002f8008004000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400b700"], 0x14d8}, 0x1, 0x0, 0x0, 0xc1}, 0x8800) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0x7fffffff) readv$auto(0x3, 0x0, 0x1) 2m52.384103887s ago: executing program 3 (id=267): r0 = io_uring_setup$auto(0x59, 0x0) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) syz_open_procfs$namespace(0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0x2, 0x80002, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) write$auto(r2, &(0x7f0000000040)='l2tp\x00', 0xfffffffffffffffc) r4 = socket(0x2, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x82, 0x0, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 2m49.153683956s ago: executing program 3 (id=268): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x4, 0xd945, 0x2, 0x40eb1, r0, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0x400053, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/filesystems\x00', 0x1c9802, 0x0) pread64$auto(r1, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x0, 0x2, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) socket(0x10, 0x2, 0xc) r3 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r3, 0x4, 0x3f, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x616) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2m44.67420403s ago: executing program 3 (id=270): mmap$auto(0xbef9, 0x1, 0x2, 0x400400000eb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m44.303358922s ago: executing program 3 (id=272): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d4}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x48a82, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0xfffffffc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x23, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x10e, 0x1, 0x0, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x40800) landlock_restrict_self$auto(r0, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0xe42b, 0x4c0, 0x4100eb7, 0x401, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000280)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2) write$auto(0x3, 0x0, 0xffd8) madvise$auto(0x6, 0x1, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) mknod$auto(&(0x7f0000000180)='./file0\x00', 0xf800, 0x6) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r6, 0x0, 0x4) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x1, 0x0) 2m42.61230983s ago: executing program 3 (id=273): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/bus/hid/drivers/isku/unbind\x00', 0x4e0502, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000100007800c00018008000180000000000c0002000600000000000000fa0b826c1e89e3f74b0a1b88b15d830cd2ad26f603fb3449bc"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x3) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES8, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c928"], 0x100}}, 0x42) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) sendmsg$auto_NL80211_CMD_STOP_AP(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf350f00000008001001f900000004008c0004008c00"], 0x72}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m27.484338849s ago: executing program 33 (id=273): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/bus/hid/drivers/isku/unbind\x00', 0x4e0502, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000100007800c00018008000180000000000c0002000600000000000000fa0b826c1e89e3f74b0a1b88b15d830cd2ad26f603fb3449bc"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x3) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES8, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c928"], 0x100}}, 0x42) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) sendmsg$auto_NL80211_CMD_STOP_AP(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf350f00000008001001f900000004008c0004008c00"], 0x72}, 0x1, 0x0, 0x0, 0x1}, 0x0) 27.11162153s ago: executing program 0 (id=567): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) socket(0x2, 0x3, 0xff) socket(0x15, 0x5, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x1, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) getsockopt$auto(0x6, 0x1, 0x53, 0xfffffffffffffffe, 0x0) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x4) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) pread64$auto(r1, &(0x7f0000000000)='MAC80211_HWSIM\x00', 0x7ffe, 0x1) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0xffffffffffffffff) pread64$auto(r0, &(0x7f0000000000)='/dev/loop-control\x00', 0xf5, 0x2) 26.485829668s ago: executing program 0 (id=568): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x1) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x1a, 0x0, 0x0) 26.050291466s ago: executing program 0 (id=569): ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) 25.504910554s ago: executing program 0 (id=572): mmap$auto(0x3ff, 0x3, 0xdf, 0x9b72, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) (async) unshare$auto(0x803) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x5ef6) (async) bpf$auto(0x0, 0x0, 0xd) (async) r1 = bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, r0, 0x4ce1, 0x1000, 0xffffffffffffffff, @relative_fd, 0xe}, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r1, 0x8) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xd2) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) ioctl$auto(r2, 0x400, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x42, &(0x7f0000000080)={@_si_pad}, 0xd) (async) r3 = socket(0x2c, 0x3, 0x2) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x9a6, 0x9fc) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/defrag\x00', 0x8a002, 0x0) (async) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) (async) write$auto(r4, &(0x7f00000002c0)='0\x00\xa6\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfb\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xc0\x04z\xd0I>\x8f\x00\xc2\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\x1d\x04\x00\x00\x00\x00\x00\x00\x00i\xcbA\xa5[\b\xb8\xffT\xc9\xd2\xc7\x0e`\xdf\xad;\x02tcf\x06\xfbD\x91\xd9\xf8\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\xd5\\O\x1c\xb9p\xce\xd9\x00\x00\x00\x00\x00`\xe7\xd5Y\a\xc1\xe9(\x95\xc3H\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00\xc30\xe4\xb6\x92\x87Z\xc1Ln\xc2s\xf2\xe5\x7f\xe1*r(\xb7\x02\xe419}J\xdc1\xac\x12(\xcd\x90Om\xddh\xd3\x9d\x92\t\xef\xe4j[?A\x14\x19\xab6\x1c\xd2\xcb1\xfb\xe8\xedq9\b\xb3\xb0\xdfA\xf0\xcc\xba&+^\a\xc4\x7f\xd8t\x03Y\x00;\xf9\x01\xb5\x00p;9\x97$\x91j\x8aZ\a\x8f\xe2\x1e\xd4\xaf6\x8cC\xe2\x9d`\x12\xa6l{Y\xa1\xbb\xaek\x91\xab\xa4;\xa3l\xcb\xc6M\x9e\xa1\xdc\x11\xf0wEV\xa3\x93\xfe\xf5N Cc\xf4\x0e2q>\x193\b\xa0E\xcf\xc3\xd1\x907M$\xdb\xbc\rq\x05\xa9\x9c\xef\xc1\xe8\x96\xf1\x12', 0x200) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x7fff, 0x0, 0xf) (async) read$auto(0x3, 0x0, 0x80) (async) write$auto(0x3, 0x0, 0x6) 24.961272234s ago: executing program 0 (id=573): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r1, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x8, 0x3cc, 0x10, 0x2, 0x801ffdf, 0xffffffff, 0x2000000000000002, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x1000000000000009, 0x2, 0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bb, 0x0, 0x2, 0x0, 0xdc1, 0x0, 0x9, [0x4, 0x0, 0x200, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x480000000000, 0x2, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x3, 0xfffffffffffffffd, 0x0, 0x3, 0x6, 0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x3ff) getcwd$auto(&(0x7f0000000000)='$@\x00', 0x7) prctl$auto_PR_SET_SECCOMP(0x16, 0xc8f, 0x3, 0xc1ce, 0x1) r3 = socket(0x2, 0x801, 0x100) prctl$auto(0x5, 0x1ffffffffffffffe, 0xffffffffffffffff, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(r0, 0x8, 0x0) socket(0x5, 0x5, 0x6) mmap$auto(0x0, 0x30009, 0x4000000400df, 0x4000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1, 0x9b72, r3, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 22.84007609s ago: executing program 0 (id=581): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffe, 0x1000000) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) (async) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x430740, 0x0) mmap$auto(0x7fffffff, 0x6000000, 0x9, 0x17, r0, 0x10009) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20000000fe6, 0x4000000000df, 0x40000000040eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000240)="f6e6812018deadf7e88f819e30236ce79200b01532f2ed0dff68130f", 0x1c) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) (async) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/system/memory/memory5/phys_index\x00', 0x40202, 0x0) write$auto(r4, &(0x7f00000001c0)='0p\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$auto(0x0, 0x0, 0x8df, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 12.452896863s ago: executing program 5 (id=603): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x7, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/lowpan0/tx_queue_len\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004010) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mprotect$auto(0x0, 0x806121, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) bpf$auto(0x0, 0x0, 0x866) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b0025bd7000fddbdf2503000000040008000c000380080006801500000012000100898771f1c19f17790485908286dd00000400028032df29d50caeedffdc"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20048880) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='=\x00\x00\t', @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250200000008000300", @ANYRES32=r9, @ANYBLOB="08000c0102000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) 10.222707406s ago: executing program 1 (id=605): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, 0x0, 0x54) ioctl$auto(0x3, 0x800005411, 0x38) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r3 = fsopen$auto(0x0, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) unshare$auto(0x40000080) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x14000004) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x40, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2dfc", 0x2) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={"f94d12eef6c39e2fbd73ece558861663dbd9b50c69f9ea07e5f4b91482bc89e7", 0x8, 0x800, 0x88d, 0x7, 0x20000000000, r2}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) fcntl$auto_F_ADD_SEALS(r5, 0x410, 0x0) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="c000faff", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25880000000800c300070000001400040076657468315f746f5f7465616d00000008003f00ffffff7f08004d010f000000"], 0x40}}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 9.540547611s ago: executing program 5 (id=606): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x55) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x82) linkat$auto(r2, &(0x7f0000000240)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r3, 0x0) unshare$auto(0x40000080) removexattr$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='/dev/ttynull\x00') close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x6) r4 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) write$auto(0x3, 0x0, 0x7fffffff) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r6 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r6, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) 7.997110518s ago: executing program 1 (id=608): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) inotify_add_watch$auto(r0, 0x0, 0x9a78) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) 7.990118274s ago: executing program 5 (id=609): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8002, 0x47, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x20000000, 0x0, 0x0, 0xbf, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xffffffffffffffdc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x401, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x9, 0x0, 0x0, 0x1]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/current_tracer\x00', 0x1a500, 0x0) write$auto(r2, &(0x7f0000000140)='/sys/kernel/config/target/d\xd5\x8a_~t\x00', 0x20000000003) bind$auto(0xffffffffffffffff, 0x0, 0x69) socket(0x5, 0x5, 0x4) bind$auto(r0, 0x0, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x5, 0x9) bind$auto(0x3, 0x0, 0x6a) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r3, &(0x7f0000000640)='/sys/devices/virtual/bdi/43:352/stric\x06_limit\x00', 0x4) r4 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(r4, 0x0, 0x3, 0xa) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x48900, 0x0) 6.855236093s ago: executing program 34 (id=581): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffe, 0x1000000) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) (async) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x430740, 0x0) mmap$auto(0x7fffffff, 0x6000000, 0x9, 0x17, r0, 0x10009) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20000000fe6, 0x4000000000df, 0x40000000040eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000240)="f6e6812018deadf7e88f819e30236ce79200b01532f2ed0dff68130f", 0x1c) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) (async) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/system/memory/memory5/phys_index\x00', 0x40202, 0x0) write$auto(r4, &(0x7f00000001c0)='0p\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$auto(0x0, 0x0, 0x8df, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6.799080883s ago: executing program 1 (id=611): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x165000, 0x0) getsockopt$auto_SO_ERROR(r0, 0x8, 0x4, &(0x7f0000000040)=')\xdb\x00', &(0x7f0000000080)=0x80000001) setsockopt$auto_SO_LINGER(r0, 0x401, 0xd, &(0x7f00000000c0)='!-]{\'(\'\x00', 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyd2\x00', 0x1, 0x0) ioctl$auto_TIOCCBRK2(r1, 0x5428, &(0x7f0000000140)="0268320245e1c36daeef485ae9986c8bc3fad6db9b5b4f431a78016cc0f428f2b0193e8b63b75e163a3286327f8d650033df079c319dda6404c6e53649de23f41a790843863ba68481fb504b73bdddb6a9fa4821a93b894fa541745a95257dd1c829935b095c3f1e453f3300a0f482aebabd4dea8b182061a1b23f0d8dcd3a44735fe6d3988f0e357fc1a779f599cb62377ae8ec06b43b0bad098aec7b66601d") fsconfig$auto_HIDEPID_OFF(r0, 0x9, &(0x7f0000000200)='#*\x00', &(0x7f0000000240)="eccb70f70fc2b11af853281150da5f24c2afe3b12b484776bb6a0cf4b8503f4a1fbcffd3eadb69e6de", 0x0) waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000280)={@_si_pad}, 0x735, &(0x7f0000000300)={{0x8, 0x9}, {0x3, 0xffffffffffffffff}, 0xffff, 0xfffffffffffffc01, 0xfffffffffffffff2, 0x58fe, 0x3, 0x2b4, 0x2, 0x6, 0x1, 0x5, 0x873, 0x5, 0xe400000000000000, 0x6}) (async) r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000280)={@_si_pad}, 0x735, &(0x7f0000000300)={{0x8, 0x9}, {0x3, 0xffffffffffffffff}, 0xffff, 0xfffffffffffffc01, 0xfffffffffffffff2, 0x58fe, 0x3, 0x2b4, 0x2, 0x6, 0x1, 0x5, 0x873, 0x5, 0xe400000000000000, 0x6}) r3 = prctl$auto(0x81, 0x6, r2, 0x2, 0x82) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000003c0)={0x200, r0, 0x9, "1cc92db94e6b64a8e30396708bc57c32"}) (async) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000003c0)={0x200, r0, 0x9, "1cc92db94e6b64a8e30396708bc57c32"}) write$auto_snd_pcm_oss_f_reg_pcm_oss(r3, &(0x7f0000000400)="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", 0xfe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r3) msgctl$auto_IPC_SET(0xff1, 0x1, &(0x7f0000000600)={{0x80000001, 0x0, 0xffffffffffffffff, 0x10, 0x2, 0x6, 0x9}, &(0x7f0000000580)=0x4, &(0x7f00000005c0)=0x4, 0x7, 0x2, 0x83, 0x0, 0xf, 0x1000, 0xeb, 0x6, @inferred=r2, @raw=0xfffffffc}) r8 = geteuid() sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000e00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xb86a0b8ee469dbd}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000680)={0x728, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FTM_RESPONDER={0x248, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "80e02c0e3f73e24fa33711e994465083fc9fe6957aa297ad51a2ceaa1b9a8dd6c2e27f2a09ff32c25b0736d9f60695e5684271be38d634071531fe9c6c1db503a65232ca367ef199b56ad35cd7820031e73171266bbe61666d06a14ffe661a1d6c2c99fd7efa4688a20562a350f82c18ddd0fd9cbfa6a9ee9950f99b38b697837d9ae24943214f916a259961f944949e65f60b17ecff0f0de186af5466e476cf39bfbfe606b567986c9ac2ed034841b5c3baec6f992bf83f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa9, 0x3, "a49c6ff6546bd1067793f8a296e809262cc7f87acbb1dedc3a3fab90a89a2140af904a25d95602ed19fd3e836c29737f155705136a5c44d92a12215b374256b3d543a14480d31897c7587ab779ca6dfa3c72ce4b90b7227678c02ffd8d1c7e2b7f41676196d480229626cb94b5637dad633b75ebe68f7e9f14805b2460d31884113b2d5387a66d33a871c175a2deea5922d0cebe0d1d77eca9e9f78524138f1c689c94be0d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3a, 0x3, "bf75740bbd572675f3528363daf4e9b35d4c9cff40519a2e17a6daf06af626f965374309c1a5f7f500161a26d6b29bb3d4eb6fc1b91b"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "db46aaac88a5fbef611bf58dc2692853daf3c24b64982c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "98c1dce1f5ae658e79bf9dc3005e116cc91a489eb864aea9edd13a3fe41862cff29d1c3353d04e955472c5d3e3adcfdf58c375fce86413aa288159cda40ac0f0dff59bf0c01fef1e3310f091221c8f1f87aeb884a524fa7c9bacfd902c0b0e7e0c45c657fa1a44f04e10f23ae0bae032425c9103cabc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x43, 0xac, "4f2aa8c2f2be8fadc6d3eea2da02fdddfd81ffc690e1fbe11a6b64131907832939afa18b56f7fa37525a024acd9fd7507ff28546bee22bc2aa64e2826783c2"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x421, 0x145, 0x0, 0x1, [@nested={0x111, 0x118, 0x0, 0x1, [@typed={0x7, 0x35, 0x0, 0x0, @str=')\xdb\x00'}, @nested={0x4, 0x63}, @nested={0x4, 0x93}, @generic="cb583c96124390b00a4434dc5ca15dc1e9043fff51cd0e1b3e76c43ef286dd0b29c35c6258560068803fa9cf51aeb9fbb2c1ef387f4746c1d7dcf23ad704fceddf5f96d1b117200d862fe957fd3ea3679ac5e905af559583910be7158bc025aaa4e934b8049845b475b0fe71d5d958d6eca921d4a62fbfbcd5107dd47147dd680d31bd4de454b258b397173519952f7b447f98b5d099df9700518ccf1367c16f1a6d75097734ce2b14a84e8e9420f77887bfde88fd9896e354806819fdb9d237b1228bb09acf076686438bbde0fe9199c71a068b96c3e8f3be95d74a00d3218353c81198a050dd0f177ed3e5dfa36cb19e", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3ff}]}, @nested={0x142, 0xc0, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @pid=r2}, @generic="c0366cc5540dadb4bdc577314dc818b984535134fd845fd1d6f96b9cc124423523f2d17ffd402c4fc8d221e1354a449444c6cce50bd08e58adfede007c4716726586b94ca3057fc36ea4484625ceb38e522e15ad1ac3aa9316d1c283a498cddcef29e0cc69c6b9a33cf1df8c2c3c1727559bfc2ae041168949e98958a5af8f7a88c1717bee4677b2003d8a0428fee286afbacd480a30cdf509b3caed070ade5c3b4f9aad094cc9c57192dd6ce2dc2b996a5100dc13312fefd745a849b75880983b0dd42774a8961441e275d86b8ff3", @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x8}, @generic="c066e24aa5e7a5dcc0e2a6960d68ebfff2de11e0f13da9c61177b6fec531aa55c4fed9395d189863add1642823dd86e498f898445bc189f644bd02883a69c0a3114ed07d8c1e7def538e15af64e8aa521e0c45060732f8a8046834"]}, @typed={0x8, 0x7e, 0x0, 0x0, @uid=r6}, @generic="de308186197143ad746e6ffa78e396ef81e9c7dde88e3517b182b6ebed0c39ba086060a3eff15f57f1bb7122b27aac54820dc4da64", @nested={0x78, 0x125, 0x0, 0x1, [@generic="ef2e8aafbf10718b04c3cd9d0d79e7b9ef3f2d0effad5be06b60744572b50633f504b77ed83bb00c605dbdefc91dfc8ea6fd4dac522ccc71e42844909932cec40338e40c783df1eb19acb49e4ce36798fcf44cc3255f192f4a865b9134c6a35a248b55ee19b98036ce6efdfc5469b4dfba871f31"]}, @typed={0x8, 0x11b, 0x0, 0x0, @uid=r8}, @nested={0x107, 0xe6, 0x0, 0x1, [@generic="336b81c5ae98a840bd7a01bcd65fc0e37b1a5d50fc06864c5b4666cdf51c8b61ae2c0ae9a3b6de4e858dd2af8b", @generic="bb0cfed8bc8a7a2cab675b87ccf75ef7c8a027721178435a43cb2f06e718ee0cbb14eceec06ac22da9ad1fbe5461a4865e2abc59098fd2a871e4b066e24e2ba5d55259a137de402e66c3f1406062496b175566fa80f4fd135482a74370224ed64db001a8bd450a6089e6b8a6ad9ffa129f05394b8aea67632ff6f813714da50beb26a69bb9c3f516f6ed6a7a9bb22b246b9d111411eec0f226fd8378b193f757c0b957a32a3ebd84ed32757b092c122b00858ed27583ccd5efaf870a3896e8e5d5522f4eb8729ba3d068692bf55f80d358d8bfd636ba"]}]}, @NL80211_ATTR_PMKID={0x47, 0x55, "ad5e00f5e41a97c16dec90fc12655c2ac78418409383ca0383b2b71a242a4a2295a37917648e5c98420656f385488ec38b675f59487614c96e2615eb04381c2a4c3076"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3ef}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x728}, 0x1, 0x0, 0x0, 0x890}, 0x800) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2042, 0x0) (async) r9 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2042, 0x0) inotify_add_watch$auto(r9, &(0x7f0000000e80)='./file0\x00', 0x7fff) mmap$auto(0x101, 0x1, 0x9, 0x12, r4, 0x3ff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000f00), r3) (async) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000f00), r3) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x31}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10001) (async) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x31}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10001) r11 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001040), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r11, 0x300, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x10) fcntl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff) (async) r12 = fcntl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000001140), r12) (async) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000001140), r12) r13 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/gid_map\x00', 0x800, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r13, 0x6, 0x9, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/slabinfo\x00', 0x900, 0x0) ioctl$auto_PPPIOCDISCONN(r3, 0x7439, 0x0) (async) ioctl$auto_PPPIOCDISCONN(r3, 0x7439, 0x0) r14 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001240), r12) sendmsg$auto_WG_CMD_SET_DEVICE(r12, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x124, r14, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x100, 0x3, "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"}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x124}}, 0x8004) (async) sendmsg$auto_WG_CMD_SET_DEVICE(r12, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x124, r14, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x100, 0x3, "211a5ef3ff5aadabbf42a41ae0d9e405a8aa57a267df178f583fab7dc9b8620e2a490982870c4f44197ff5dde58498d54e7b009f96a85ead965621b4a9c435916ba112ababeae03f8b2c49a851f52b4e5bc34f6598f9b37066f2f2d22ecc25760d5ee51992179871aee5b8e16abb211aa898efbf5ff710c0660196b6da1b7f864c0c2324c799edd14e8fa13f611b1a6a95b18efc68e6ea390581336696f588f2dd6fcf9fe24621506f836359935f8c6f65fb8f290dad910bee5c6f7bdd60520a580cbb5f6dacaed888d09b7650dffa672667f933f33ea3b9bc38a4b6219ecc83f5db26fca9f42764402ec205ecdc53f47c08538639f96542fb55a161"}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x124}}, 0x8004) syz_open_procfs$namespace(r7, &(0x7f0000001440)='ns/net\x00') (async) syz_open_procfs$namespace(r7, &(0x7f0000001440)='ns/net\x00') 6.795493366s ago: executing program 5 (id=612): unshare$auto(0x40000080) r0 = clone$auto(0x7, 0x7, 0x0, 0x0, 0xfffffffc) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000100)={@sival_int=0x7cb4, @raw=0x7f172694, 0x4, @_tid=r0}, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x694, 0x200000000009b72, r2, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x4001, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) r6 = fsopen$auto(&(0x7f0000000080)='@\x00', 0x1) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r7, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x44800) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfffffffffffffe41, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x200040c1) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) getsockopt$auto_SO_TXTIME(r6, 0xe42e, 0x3d, &(0x7f0000000140)='\x00', &(0x7f0000000280)=0x80) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1000000000000203, 0x8, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x1, 0x62, 0x8, 0x480, 0x0, 0x5, 0xa, 0xfffffffffffffffe]}, 0x0) 6.66139368s ago: executing program 4 (id=613): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/irq/8/actions\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb0/napi_defer_hard_irqs\x00', 0x8a401, 0x0) write$auto(r1, &(0x7f0000000080)='+\x00\\\xa0\xe2\xff\xaa8nr\xec\x13Dy\xe9\xd2-\xec\xb7F\x92\x05\x1e\xfa\x1c\x80\xc2);\x11\xfemdV\x9cc\x8e\x88A\xb7(\xcc\x04\xff;k\xa5\x1b=yYp4-\x89\x189\xba<\x83\xee\xc4&-\x81\xa8\x98\xaf\xaac\x06g\x84\x9e\x9f\x00\x00\x00\x00\xfed\xfdvT,', 0x81) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000280)=@batch={0xd4d9, 0x80000000, 0x6, 0x68, 0x2, r1, 0x8000, 0x400}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030026bd0ecd72913be4837b000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x160, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x149, 0x7d, 0x0, 0x1, [@generic="d285e15f862489aeb1703ccfaefb2c5d523794cf39f3d0f034acca750c8f2ead7f42828a2e5864e8b71c6ec2306f9f189f479db8a89493c01a43722793990f394907e55e3a0de2f4ef885b53a73606e64f2da2e985e2ae1198d3939911221a6897", @typed={0xc, 0x6, 0x0, 0x0, @u64=0x7f}, @nested={0xd7, 0x7b, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @u32=0x4}, @generic="20d5c07f471fd61372af64c77e7b3e7a677b31dda201b9a6c2884a0700f6360e28ad2d24771b42040ccbc263f97a75f2017d0fabb2293ee6dbbae013b469d2e1f528c6297f0f31e9fde722bc0d9980c45ebb57c2d0bc24aa310d800412fea4f5772418c1d0ee7a8217a63350b62470233151eed0accf0150ff0d1c652404be300ac80ef84a20d454ff9d0323081ccb7ecec72b1115f4996f3f048e603e5cada3740691cf665b5803ef1a09a99d5fb2740f8a3da8fb7c8f15da9ff9017069ea2219f27da5f254ba702ed6dc"]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x890}, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/73, 0x49) 6.560942197s ago: executing program 1 (id=614): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) mmap$auto(0xfffffffffffffffb, 0x402000f, 0x40000000000000, 0xeb1, r0, 0x2d8) read$auto(r0, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xed5a3e433e6d7e16}, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x7fe}, 0x7, 0x4008) 6.27078008s ago: executing program 4 (id=615): r0 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x80500, 0x0) mmap$auto(0xfffffffffffffffa, 0x4020005, 0x2, 0x19, r0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/smaps_rollup\x00', 0x0, 0x0) r2 = syz_clone3(&(0x7f00000004c0)={0x254002000, &(0x7f0000000400), &(0x7f00000000c0), &(0x7f0000000180), {0x20}, &(0x7f0000000340)=""/147, 0x93, &(0x7f0000000540)=""/102, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=r2, 0xf5, 0x1, 0x4, "3112d5852af9ffb683be6b7f8d00", @raw=0xf}, 0x2, 0x5, 0x8, @raw, @enumerated={0x2, 0x4, "23f7b11944d233964b2a5f32b66b0fe18e5b2d4edd0d9d16061791173f5412f21386d28cc66faa7a2336ad4b912a17fed2d89f48eefdf686b94fbc1bd2580477", 0x7ffffffc, 0x2}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) rt_sigqueueinfo$auto(0x0, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0x0, 0xf6b1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(r4, 0xd) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) r5 = open(&(0x7f0000000080)='./file0\x00', 0x5e3340, 0x170) mmap$auto(0x0, 0x400008, 0xdf, 0x400000009b72, 0x2, 0x8000) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) execveat$auto(r5, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x1bb) unshare$auto(0x40000080) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) 4.17786357s ago: executing program 5 (id=616): memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x141702, 0x0) write$auto(r0, 0x0, 0x7ffffffd) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) socket(0x36, 0x0, 0x3) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x367}, 0x6) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000080)="48db6bd805b269c38eeeaf125665d3e3e0a357eb282c50596d0fbcd0f63275c65e718c37084046a2316b60365c4569ad187e1e019c2c3263a5fc1ae5c5acd878f24a0463aedaea6d29df21ce592abd16430819a25aedce6499488f70ea81838c7b4eb72ab5a5b74fb8167351c360d0326e3ef797e50755a49f4b2209a04f86b702000000000000008f372ed5befd288523ecac14993b0143d2a4ae44da89680cde759b4bfaf8575f2d1a9b052ec6e1306477", 0x2000012, 0x0, 0xd4, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x0, 0x0) read$auto_ftrace_system_enable_fops_trace_events(r1, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r2, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) preadv2$auto(r2, 0x0, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10, 0x0) fsopen$auto(0x0, 0x1) 3.911303296s ago: executing program 1 (id=617): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @remote}, 0x40) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setfsuid$auto(0xee00) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, 0x0, 0x24040000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0xa0342, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x24b42, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/snd/controlC0\x00', 0x101000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER(r3, 0xc00455d0, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r2, 0xae42, r1) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/kvm/nested_run\x00', 0x42, 0x0) write$auto(r5, &(0x7f0000000280)='0\x00\\\xa0\x04\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad|\xdbd|\xad!\x85\x13Vr\xc9\xb3\xa9\x16\x84@6\x82\xf0\x9f\xe0i\xbf\x03\xbb\xb8\x86\x8ba\xfc|\x1eG\xfeq\xb8\xe9\x97W\xa3\xf8\x8dm\t\x18\xb7\x06\xa7e\x96\xd4AG\xd7\x9b\x984\xf1\x94\x82\x8al\xbb\xed\xf7\x90V\x886\x06\xe7Ms-\x10\xb1U\x10\xc1Dyi\xeb\xda\'\f\xb6\x9a\xea\xcaT\xca\xec\x95\xaf\xfb\x9fa>\x14V\"\t\xae\x89\xd5\xd9\xf9\xc5\xf5\xf6\xd8\xe6\x1c\xd0\xa0y\xae\x9aE\xd4>H\\b\x8fc3\xf8r\xca,\x11[)w\x99r<67\xa2\r\xb6_\x90;u3\xe8k\x1e_\xe7\xbd\xe8^\x93C\x05\xfd\xd9\xd1A\xb4#H\x10d\x98\xcb\xd86\xa2\xf5d|\x05\xf5\xaf\xa0\xd7^>\x82\x0eb\xbb~\xac\xaf\x8e\xe3c\x93\x7f\xe3\xc2\nPR\xe0`c\x83\x15\x9e\x0e\xa6\xfa\xcc\xfaEnD\xb6\xbf*\xa2W\x05\x93\xde{ALb\x8f\xe07\xb7\xdd\xef\xdb\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\xb7\\~\xdf~PfkP\xf0s9\xc1\r}\"\x133\bFC\b\xbfx\xb5U\xe7\xc1\xee\x1c\xa4Hg;\x93r\xa7\x92\xbf3', 0x3) r6 = socket(0x1e, 0x6, 0x4) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) listen$auto(r6, 0x1) listen$auto(0x3, 0x81) r7 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0x466200, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r7, &(0x7f0000001080)=""/4096, 0x1000) r8 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000040)=@iter_create={r0, 0x5}, 0x5) sendfile$auto(r8, r2, 0x0, 0x7fc) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r9, 0x5412, &(0x7f0000000000)="9ba80470") unshare$auto(0x6) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x1, 0x200, 0x5, 0x40}, 0x0, &(0x7f0000000140)=0x9, 0x9, 0xa, 0x3ff, 0x5, 0x7, 0x5, 0x9, 0x3}) 1.726776839s ago: executing program 4 (id=618): socket(0xa, 0x1, 0x3c) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioperm$auto(0x7, 0x6, 0x2) fremovexattr$auto(0x3, 0x0) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x3) r0 = io_uring_setup$auto(0x8, &(0x7f0000000340)={0x80000002, 0x201d, 0x3000, 0xfffffff8, 0x7, 0x84004, 0xffffffffffffffff, [0x0, 0x0, 0x7], {0x6, 0x0, 0x0, 0x29c, 0x1, 0x4, 0x1, 0x7, 0x1}, {0x80010100, 0x1, 0x52, 0x88, 0x4, 0x8, 0x76c5, 0x8, 0x1}}) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x82, 0x810004, 0xffb, 0x12, r1, 0x7ffe) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NBD_CMD_STATUS(r1, 0x0, 0x80) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000240)="ba2e9d565280ae501378b60800000000000000d00f69bd4bdab1123ade1439f7d955ac5d201dc0fcfcbde52f492b1d7145535a6beef40eb299cab223233eb1457a3c8e40c26255fe8cadf2bf6b4e197a69ed4254d19ca85c7111664ec20f5684beb2c60e18539d267007d1b16d5a2e538a9af325cc2f7ce43378c3ac7bbacf0eb9aa7d912f06d46a1d26101f893a158b4006a8391a581b830ce1c5d27e5f427ee46a5b06b3359ad0e90b3326b8fb2d4d9d4946ba26895937029e942a9e6546c80b524105d4") mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) socket(0x10, 0x2, 0xc) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0x1a, 0x4, 0xffffffff) socket(0x1d, 0xa, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x6f) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x801, 0x84) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) close_range$auto(0x2, 0x8, 0x0) 1.68041289s ago: executing program 1 (id=619): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_clone(0x30200000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) madvise$auto(0x0, 0x200007, 0x19) socketpair$auto(0x1ff, 0x5, 0xf, &(0x7f0000000000)=0x5) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x32, 0x804, 0xab2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7) msync$auto(0x200000, 0x2000000005, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) 986.7744ms ago: executing program 4 (id=620): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/oss\x00', 0x4a500, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/oss\x00', 0x4a500, 0x0) close_range$auto(0x2, r0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/109, 0x6d) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x108042, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x108042, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) 609.22034ms ago: executing program 4 (id=621): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) r0 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x4, 0x0, 0x1) r2 = setfsuid$auto(0xee00) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x4172c2, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) socketpair$auto(0x6, 0x4, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0x1a9902, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = setfsuid$auto(0xee01) setresuid$auto(r2, r4, r2) (async) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x2, 0x0, 0x1000, r4, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x84, 0x6}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) select$auto(0x9, &(0x7f0000000300)={[0x400000000000000a, 0x8000007, 0x5, 0x9, 0x6, 0x201, 0x2406, 0x3, 0x3, 0x6, 0x3, 0x400, 0x6, 0x4, 0x1000000009, 0x7fff]}, 0x0, 0x0, 0x0) 430.508478ms ago: executing program 5 (id=622): syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x7, 0x2, 0xd8, 0x9b7f, 0xffffffffffffffff, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) sysfs$auto(0x2, 0x0, 0x0) (async, rerun: 64) r1 = epoll_create$auto(0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setpgid$auto(r2, r2) (async, rerun: 64) epoll_ctl$auto(0x5, 0xfffeffff, r1, 0x0) (async) epoll_wait$auto(r1, 0x0, 0xe007, 0xe8a4e409) (async) fchdir$auto(0xffffffffffffffff) (async, rerun: 32) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async, rerun: 32) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x300000000) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) mmap$auto(0x0, 0x2020006, 0x3, 0x11, 0xffffffffffffffff, 0x2) (async) unshare$auto(0x20000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) 0s ago: executing program 4 (id=623): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async, rerun: 32) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) madvise$auto(0x0, 0x67, 0x15) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x20000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) unshare$auto(0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb1\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ustat$auto(0x440801, 0x0) (async) close_range$auto(r2, r1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r4, 0xc0285629, r4) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) (async, rerun: 64) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async, rerun: 64) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') fchdir$auto(r2) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 95.301806][ T5617] cgroup: Unknown subsys name 'net' [ 95.404671][ T5617] cgroup: Unknown subsys name 'cpuset' [ 95.414137][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.269231][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.313995][ T10] cfg80211: failed to load regulatory.db [ 99.357799][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.367119][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.375376][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.384530][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.393469][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.464585][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.475604][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.483769][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.494642][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.503413][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.598241][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.609053][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.617966][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.627115][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.640871][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.651530][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.664907][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.674183][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.696238][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.704903][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.325642][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.333359][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.341250][ T5638] bridge_slave_0: entered allmulticast mode [ 101.349088][ T5638] bridge_slave_0: entered promiscuous mode [ 101.375611][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.382900][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.390441][ T5638] bridge_slave_1: entered allmulticast mode [ 101.398071][ T5638] bridge_slave_1: entered promiscuous mode [ 101.471136][ T5636] Bluetooth: hci0: command tx timeout [ 101.487930][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.495216][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.502761][ T5642] bridge_slave_0: entered allmulticast mode [ 101.511055][ T5642] bridge_slave_0: entered promiscuous mode [ 101.541658][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.548842][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.556283][ T5634] bridge_slave_0: entered allmulticast mode [ 101.562459][ T5636] Bluetooth: hci1: command tx timeout [ 101.567577][ T5634] bridge_slave_0: entered promiscuous mode [ 101.577149][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.584399][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.591720][ T5642] bridge_slave_1: entered allmulticast mode [ 101.599544][ T5642] bridge_slave_1: entered promiscuous mode [ 101.617882][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.627733][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.635700][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.643212][ T5634] bridge_slave_1: entered allmulticast mode [ 101.652056][ T5634] bridge_slave_1: entered promiscuous mode [ 101.681999][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.710057][ T5636] Bluetooth: hci2: command tx timeout [ 101.753683][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.790036][ T5636] Bluetooth: hci3: command tx timeout [ 101.792476][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.807674][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.830866][ T5638] team0: Port device team_slave_0 added [ 101.841285][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.863439][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.870800][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.878174][ T5644] bridge_slave_0: entered allmulticast mode [ 101.886196][ T5644] bridge_slave_0: entered promiscuous mode [ 101.896459][ T5638] team0: Port device team_slave_1 added [ 101.931672][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.938911][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.946261][ T5644] bridge_slave_1: entered allmulticast mode [ 101.954300][ T5644] bridge_slave_1: entered promiscuous mode [ 101.987231][ T5642] team0: Port device team_slave_0 added [ 102.018419][ T5634] team0: Port device team_slave_0 added [ 102.026348][ T5642] team0: Port device team_slave_1 added [ 102.045000][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.052188][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.078297][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.093277][ T5634] team0: Port device team_slave_1 added [ 102.115030][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.125397][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.132684][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.158721][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.206035][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.254642][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.261950][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.288149][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.301104][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.308198][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.334559][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.348624][ T5644] team0: Port device team_slave_0 added [ 102.355373][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.362512][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.388818][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.433626][ T5644] team0: Port device team_slave_1 added [ 102.440188][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.447325][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.473431][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.501844][ T5638] hsr_slave_0: entered promiscuous mode [ 102.508571][ T5638] hsr_slave_1: entered promiscuous mode [ 102.542263][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.549274][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.576220][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.590195][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.597342][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.623960][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.688297][ T5634] hsr_slave_0: entered promiscuous mode [ 102.695231][ T5634] hsr_slave_1: entered promiscuous mode [ 102.701780][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 102.708129][ T5634] Cannot create hsr debugfs directory [ 102.765859][ T5642] hsr_slave_0: entered promiscuous mode [ 102.772825][ T5642] hsr_slave_1: entered promiscuous mode [ 102.779026][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 102.784861][ T5642] Cannot create hsr debugfs directory [ 102.877533][ T5644] hsr_slave_0: entered promiscuous mode [ 102.884291][ T5644] hsr_slave_1: entered promiscuous mode [ 102.890853][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 102.896612][ T5644] Cannot create hsr debugfs directory [ 103.357471][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.376236][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.385094][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.400992][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.410609][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.424546][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.444342][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.456023][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.530765][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.544358][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.553305][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.560382][ T5636] Bluetooth: hci0: command tx timeout [ 103.569640][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.578248][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.589646][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.598446][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.610797][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.631488][ T5636] Bluetooth: hci1: command tx timeout [ 103.755474][ T5642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.767507][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.776456][ T5642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.788229][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.795499][ T5636] Bluetooth: hci2: command tx timeout [ 103.809138][ T5642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.822908][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.833177][ T5642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.843604][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.870573][ T5636] Bluetooth: hci3: command tx timeout [ 103.954806][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.967855][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.976371][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.986731][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.995642][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.006090][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.024173][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.035392][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.096334][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.165980][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.195861][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.208436][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.216181][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.257134][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.264380][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.299714][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.333492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.340822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.378815][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.386080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.473916][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.549175][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.584156][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.623747][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.631029][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.675474][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.682798][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.701436][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.784859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.792131][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.846399][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.854218][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.630950][ T5636] Bluetooth: hci0: command tx timeout [ 105.683815][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.710382][ T5636] Bluetooth: hci1: command tx timeout [ 105.870170][ T5636] Bluetooth: hci2: command tx timeout [ 105.902127][ T5638] veth0_vlan: entered promiscuous mode [ 105.950174][ T5636] Bluetooth: hci3: command tx timeout [ 105.957402][ T5638] veth1_vlan: entered promiscuous mode [ 106.035313][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.074338][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.169803][ T5638] veth0_macvtap: entered promiscuous mode [ 106.205776][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.216189][ T5638] veth1_macvtap: entered promiscuous mode [ 106.253749][ T5634] veth0_vlan: entered promiscuous mode [ 106.290569][ T5642] veth0_vlan: entered promiscuous mode [ 106.305125][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.318657][ T5634] veth1_vlan: entered promiscuous mode [ 106.331586][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.366967][ T5642] veth1_vlan: entered promiscuous mode [ 106.395979][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.406093][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.427140][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.439159][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.500175][ T5644] veth0_vlan: entered promiscuous mode [ 106.552318][ T5634] veth0_macvtap: entered promiscuous mode [ 106.578259][ T5644] veth1_vlan: entered promiscuous mode [ 106.616492][ T5634] veth1_macvtap: entered promiscuous mode [ 106.629700][ T5642] veth0_macvtap: entered promiscuous mode [ 106.636694][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.646293][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.683459][ T5642] veth1_macvtap: entered promiscuous mode [ 106.735138][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.749191][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.752011][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.797792][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.816298][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.845589][ T5644] veth0_macvtap: entered promiscuous mode [ 106.869764][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.886133][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.895946][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.906957][ T5644] veth1_macvtap: entered promiscuous mode [ 106.914940][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.947256][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.972674][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.989697][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.038309][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.060913][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.075971][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.094763][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.152080][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.247228][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.257080][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.278011][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.278210][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.299826][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.309838][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.411066][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.427825][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.501030][ T5776] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.575738][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.590785][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.663024][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.685277][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.710235][ T5636] Bluetooth: hci0: command tx timeout [ 107.787702][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.792820][ T5636] Bluetooth: hci1: command tx timeout [ 107.829361][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.942705][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.951211][ T5636] Bluetooth: hci2: command tx timeout [ 107.987624][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.032063][ T5636] Bluetooth: hci3: command tx timeout [ 108.565977][ T5785] futex_wake_op: syz.1.2 tries to shift op by -2048; fix this program [ 108.595110][ T5785] futex_wake_op: syz.1.2 tries to shift op by -2048; fix this program [ 109.322741][ T5796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5'. [ 109.461282][ T5796] Zero length message leads to an empty skb [ 111.461332][ T5798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 113.675620][ T5841] FAULT_INJECTION: forcing a failure. [ 113.675620][ T5841] name failslab, interval 1, probability 0, space 0, times 1 [ 113.723207][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 113.723252][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.723279][ T5841] Call Trace: [ 113.723290][ T5841] [ 113.723302][ T5841] dump_stack_lvl+0x100/0x190 [ 113.723347][ T5841] should_fail_ex.cold+0x5/0xa [ 113.723386][ T5841] should_failslab+0xc2/0x120 [ 113.723430][ T5841] __kmalloc_noprof+0xfc/0x820 [ 113.723471][ T5841] ? __list_lru_init+0xd9/0x4b0 [ 113.723531][ T5841] __list_lru_init+0xd9/0x4b0 [ 113.723586][ T5841] sget_fc+0xa6f/0x1d80 [ 113.723636][ T5841] ? __pfx_test_keyed_super+0x10/0x10 [ 113.723683][ T5841] ? __pfx_set_anon_super_fc+0x10/0x10 [ 113.723727][ T5841] ? __pfx_sget_fc+0x10/0x10 [ 113.723770][ T5841] ? kasan_save_track+0x14/0x30 [ 113.723808][ T5841] ? __kasan_kmalloc+0xaa/0xb0 [ 113.723849][ T5841] ? rcu_is_watching+0x12/0xc0 [ 113.723888][ T5841] ? apparmor_capable+0x1d7/0x4d0 [ 113.723926][ T5841] ? __pfx_nfsd_fill_super+0x10/0x10 [ 113.723978][ T5841] get_tree_keyed+0x59/0x1d0 [ 113.724036][ T5841] vfs_get_tree+0x92/0x320 [ 113.724081][ T5841] path_mount+0x7d0/0x23d0 [ 113.724124][ T5841] ? __pfx_path_mount+0x10/0x10 [ 113.724157][ T5841] ? lockdep_hardirqs_on+0x78/0x100 [ 113.724197][ T5841] ? putname+0xb1/0x110 [ 113.724231][ T5841] ? kmem_cache_free+0x127/0x6b0 [ 113.724278][ T5841] ? __x64_sys_mount+0x293/0x310 [ 113.724314][ T5841] __x64_sys_mount+0x293/0x310 [ 113.724353][ T5841] ? __pfx___x64_sys_mount+0x10/0x10 [ 113.724404][ T5841] do_syscall_64+0x115/0x840 [ 113.724439][ T5841] ? clear_bhb_loop+0x40/0x90 [ 113.724482][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.724518][ T5841] RIP: 0033:0x7f4f2e99de99 [ 113.724556][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.724590][ T5841] RSP: 002b:00007f4f2f7f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.724623][ T5841] RAX: ffffffffffffffda RBX: 00007f4f2ec26180 RCX: 00007f4f2e99de99 [ 113.724645][ T5841] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 113.724665][ T5841] RBP: 00007f4f2ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 113.724686][ T5841] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 113.724706][ T5841] R13: 00007f4f2ec26218 R14: 00007f4f2ec26180 R15: 00007ffeb56dae18 [ 113.724750][ T5841] [ 116.212229][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 116.245601][ T5868] veth1_vlan: entered allmulticast mode [ 116.463139][ T5866] futex_wake_op: syz.0.17 tries to shift op by -2048; fix this program [ 116.477727][ T5869] futex_wake_op: syz.1.18 tries to shift op by -2048; fix this program [ 116.493953][ T5866] futex_wake_op: syz.0.17 tries to shift op by -2048; fix this program [ 116.517673][ T5869] futex_wake_op: syz.1.18 tries to shift op by -2048; fix this program [ 117.237952][ T5872] FAULT_INJECTION: forcing a failure. [ 117.237952][ T5872] name failslab, interval 1, probability 0, space 0, times 0 [ 117.252485][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 117.252526][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.252546][ T5872] Call Trace: [ 117.252556][ T5872] [ 117.252568][ T5872] dump_stack_lvl+0x100/0x190 [ 117.252625][ T5872] should_fail_ex.cold+0x5/0xa [ 117.252663][ T5872] should_failslab+0xc2/0x120 [ 117.252714][ T5872] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 117.252764][ T5872] ? __d_alloc+0x35/0xa50 [ 117.252806][ T5872] __d_alloc+0x35/0xa50 [ 117.252836][ T5872] ? security_inode_alloc+0xcf/0x2c0 [ 117.252875][ T5872] d_alloc_pseudo+0x1c/0xc0 [ 117.252919][ T5872] alloc_file_pseudo+0x118/0x290 [ 117.252961][ T5872] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 117.253002][ T5872] ? security_inode_init_security_anon+0x7b/0x230 [ 117.253048][ T5872] __do_sys_memfd_secret+0x11d/0x3d0 [ 117.253094][ T5872] do_syscall_64+0x115/0x840 [ 117.253129][ T5872] ? clear_bhb_loop+0x40/0x90 [ 117.253169][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.253204][ T5872] RIP: 0033:0x7f4610d9de99 [ 117.253239][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.253274][ T5872] RSP: 002b:00007f4611d53028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 117.253306][ T5872] RAX: ffffffffffffffda RBX: 00007f4611025fa0 RCX: 00007f4610d9de99 [ 117.253329][ T5872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.253348][ T5872] RBP: 00007f4610e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 117.253368][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.253388][ T5872] R13: 00007f4611026038 R14: 00007f4611025fa0 R15: 00007fff28f6c0b8 [ 117.253430][ T5872] [ 117.809709][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 117.973518][ T5882] vlan1: entered allmulticast mode [ 117.980251][ T5882] veth0_vlan: entered allmulticast mode [ 120.953947][ T5916] futex_wake_op: syz.3.28 tries to shift op by -2048; fix this program [ 121.022761][ T5916] futex_wake_op: syz.3.28 tries to shift op by -2048; fix this program [ 124.408432][ T5956] FAULT_INJECTION: forcing a failure. [ 124.408432][ T5956] name failslab, interval 1, probability 0, space 0, times 0 [ 124.448900][ T5956] CPU: 1 UID: 0 PID: 5956 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) [ 124.448948][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.448969][ T5956] Call Trace: [ 124.448982][ T5956] [ 124.448995][ T5956] dump_stack_lvl+0x100/0x190 [ 124.449040][ T5956] should_fail_ex.cold+0x5/0xa [ 124.449082][ T5956] should_failslab+0xc2/0x120 [ 124.449130][ T5956] kmem_cache_alloc_noprof+0x91/0x6a0 [ 124.449169][ T5956] ? rcu_is_watching+0x12/0xc0 [ 124.449206][ T5956] ? anon_vma_clone+0x2ba/0xcd0 [ 124.449261][ T5956] anon_vma_clone+0x2ba/0xcd0 [ 124.449319][ T5956] copy_vma+0x6ed/0xac0 [ 124.449357][ T5956] ? __pfx_copy_vma+0x10/0x10 [ 124.449436][ T5956] copy_vma_and_data+0x1cf/0x7c0 [ 124.449474][ T5956] ? __pfx_copy_vma_and_data+0x10/0x10 [ 124.449524][ T5956] ? __vma_start_write+0x17f/0x280 [ 124.449576][ T5956] ? __pfx___vma_start_write+0x10/0x10 [ 124.449642][ T5956] move_vma+0x574/0x1920 [ 124.449684][ T5956] ? __pfx_move_vma+0x10/0x10 [ 124.449733][ T5956] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 124.449791][ T5956] ? cap_mmap_addr+0x4b/0x120 [ 124.449825][ T5956] ? bpf_lsm_mmap_addr+0x9/0x30 [ 124.449886][ T5956] ? security_mmap_addr+0x71/0x1e0 [ 124.449934][ T5956] ? __get_unmapped_area+0x255/0x3e0 [ 124.449992][ T5956] ? vrm_set_new_addr+0x204/0x290 [ 124.450035][ T5956] mremap_to+0x234/0x4c0 [ 124.450072][ T5956] ? mas_walk+0x6ef/0x9b0 [ 124.450112][ T5956] ? __pfx_mremap_to+0x10/0x10 [ 124.450145][ T5956] ? check_prep_vma+0x912/0xe60 [ 124.450191][ T5956] __do_sys_mremap+0x88c/0x1850 [ 124.450244][ T5956] ? __pfx___do_sys_mremap+0x10/0x10 [ 124.450287][ T5956] ? __pfx_do_futex+0x10/0x10 [ 124.450327][ T5956] ? __x64_sys_futex+0x34f/0x4d0 [ 124.450386][ T5956] do_syscall_64+0x115/0x840 [ 124.450419][ T5956] ? clear_bhb_loop+0x40/0x90 [ 124.450456][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.450489][ T5956] RIP: 0033:0x7f32c619de99 [ 124.450514][ T5956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.450543][ T5956] RSP: 002b:00007f32c43d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 124.450572][ T5956] RAX: ffffffffffffffda RBX: 00007f32c6426090 RCX: 00007f32c619de99 [ 124.450592][ T5956] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 124.450611][ T5956] RBP: 00007f32c6233eaf R08: 0000000100000000 R09: 0000000000000000 [ 124.450630][ T5956] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 124.450647][ T5956] R13: 00007f32c6426128 R14: 00007f32c6426090 R15: 00007ffd420fbff8 [ 124.450687][ T5956] [ 127.268931][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.741325][ T5995] ovs_?: entered promiscuous mode [ 129.915058][ T6028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.187978][ T6042] futex_wake_op: syz.1.51 tries to shift op by -2048; fix this program [ 130.230202][ T6042] futex_wake_op: syz.1.51 tries to shift op by -2048; fix this program [ 130.748453][ T6051] FAULT_INJECTION: forcing a failure. [ 130.748453][ T6051] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.780253][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 130.780307][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.780327][ T6051] Call Trace: [ 130.780337][ T6051] [ 130.780349][ T6051] dump_stack_lvl+0x100/0x190 [ 130.780395][ T6051] should_fail_ex.cold+0x5/0xa [ 130.780433][ T6051] _copy_from_user+0x2e/0xd0 [ 130.780485][ T6051] core_sys_select+0x319/0xbb0 [ 130.780547][ T6051] ? __pfx_core_sys_select+0x10/0x10 [ 130.780596][ T6051] ? get_pid_task+0xfc/0x250 [ 130.780675][ T6051] ? ktime_get_ts64+0x306/0x420 [ 130.780727][ T6051] ? ktime_get_ts64+0x318/0x420 [ 130.780773][ T6051] ? ktime_get_ts64+0x257/0x420 [ 130.780830][ T6051] kern_select+0x1d0/0x280 [ 130.780883][ T6051] ? __pfx_kern_select+0x10/0x10 [ 130.780947][ T6051] __x64_sys_select+0xbd/0x160 [ 130.781000][ T6051] ? do_syscall_64+0x90/0x840 [ 130.781035][ T6051] ? lockdep_hardirqs_on+0x78/0x100 [ 130.781069][ T6051] do_syscall_64+0x115/0x840 [ 130.781108][ T6051] ? clear_bhb_loop+0x40/0x90 [ 130.781150][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.781186][ T6051] RIP: 0033:0x7fc664d9de99 [ 130.781214][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.781247][ T6051] RSP: 002b:00007fc665be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 130.781286][ T6051] RAX: ffffffffffffffda RBX: 00007fc665025fa0 RCX: 00007fc664d9de99 [ 130.781309][ T6051] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 00000000269962c6 [ 130.781330][ T6051] RBP: 00007fc664e33eaf R08: 0000200000000200 R09: 0000000000000000 [ 130.781351][ T6051] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 130.781371][ T6051] R13: 00007fc665026038 R14: 00007fc665025fa0 R15: 00007ffd20c066a8 [ 130.781414][ T6051] [ 131.193514][ T6051] hub 1-0:1.0: USB hub found [ 131.215258][ T6051] hub 1-0:1.0: 1 port detected [ 132.045564][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.320949][ T6073] cgroup: fork rejected by pids controller in /syz2 [ 132.410012][ T6107] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 132.764387][ T6121] process 'syz.0.61' launched './file0' with NULL argv: empty string added [ 133.154497][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164429][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.998339][ T6148] udc dummy_udc.0: soft-connect without a gadget driver [ 134.877036][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 137.207271][ T6198] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.253470][ T5636] Bluetooth: hci1: Unable to find connection for big 0xe0 [ 137.687761][ T6201] netlink: 330 bytes leftover after parsing attributes in process `syz.2.76'. [ 138.330695][ T6221] FAULT_INJECTION: forcing a failure. [ 138.330695][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 138.381069][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 138.381111][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.381131][ T6221] Call Trace: [ 138.381141][ T6221] [ 138.381154][ T6221] dump_stack_lvl+0x100/0x190 [ 138.381199][ T6221] should_fail_ex.cold+0x5/0xa [ 138.381238][ T6221] should_failslab+0xc2/0x120 [ 138.381285][ T6221] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 138.381331][ T6221] ? __d_alloc+0x35/0xa50 [ 138.381372][ T6221] __d_alloc+0x35/0xa50 [ 138.381419][ T6221] d_alloc_pseudo+0x1c/0xc0 [ 138.381463][ T6221] alloc_file_pseudo+0x118/0x290 [ 138.381513][ T6221] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 138.381554][ T6221] ? alloc_fd+0x471/0x7a0 [ 138.381607][ T6221] sock_alloc_file+0x50/0x210 [ 138.381649][ T6221] __sys_socket+0x1c0/0x260 [ 138.381676][ T6221] ? __pfx___sys_socket+0x10/0x10 [ 138.381716][ T6221] __x64_sys_socket+0x72/0xb0 [ 138.381745][ T6221] ? lockdep_hardirqs_on+0x78/0x100 [ 138.381784][ T6221] do_syscall_64+0x115/0x840 [ 138.381817][ T6221] ? clear_bhb_loop+0x40/0x90 [ 138.381854][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.381883][ T6221] RIP: 0033:0x7fc664d9de99 [ 138.381907][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.381938][ T6221] RSP: 002b:00007fc665ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 138.381965][ T6221] RAX: ffffffffffffffda RBX: 00007fc665026180 RCX: 00007fc664d9de99 [ 138.381985][ T6221] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 138.382002][ T6221] RBP: 00007fc664e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 138.382020][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.382038][ T6221] R13: 00007fc665026218 R14: 00007fc665026180 R15: 00007ffd20c066a8 [ 138.382077][ T6221] [ 138.755017][ T6227] futex_wake_op: syz.1.77 tries to shift op by -2048; fix this program [ 138.763971][ T6227] futex_wake_op: syz.1.77 tries to shift op by -2048; fix this program [ 139.647776][ T6243] FAULT_INJECTION: forcing a failure. [ 139.647776][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 139.684607][ T6243] CPU: 0 UID: 0 PID: 6243 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full) [ 139.684650][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.684669][ T6243] Call Trace: [ 139.684679][ T6243] [ 139.684691][ T6243] dump_stack_lvl+0x100/0x190 [ 139.684734][ T6243] should_fail_ex.cold+0x5/0xa [ 139.684773][ T6243] should_failslab+0xc2/0x120 [ 139.684817][ T6243] __kmalloc_cache_noprof+0x91/0x6c0 [ 139.684873][ T6243] ? vidtv_channel_si_init+0xa43/0x18f0 [ 139.684933][ T6243] vidtv_channel_si_init+0xa43/0x18f0 [ 139.684991][ T6243] vidtv_mux_init+0x522/0xbf0 [ 139.685042][ T6243] vidtv_start_feed+0x34e/0x500 [ 139.685119][ T6243] ? __pfx_vidtv_start_feed+0x10/0x10 [ 139.685185][ T6243] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 139.685251][ T6243] ? mark_held_locks+0x40/0x70 [ 139.685309][ T6243] ? __pfx_vidtv_start_feed+0x10/0x10 [ 139.685363][ T6243] dmx_ts_feed_start_filtering+0xf6/0x220 [ 139.685405][ T6243] dvb_dmxdev_start_feed+0x273/0x3f0 [ 139.685460][ T6243] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 139.685517][ T6243] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 139.685574][ T6243] dvb_demux_do_ioctl+0xe64/0x1200 [ 139.685640][ T6243] dvb_usercopy+0x167/0x340 [ 139.685686][ T6243] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 139.685741][ T6243] ? __pfx_dvb_usercopy+0x10/0x10 [ 139.685806][ T6243] ? __fget_files+0x21f/0x3d0 [ 139.685866][ T6243] dvb_demux_ioctl+0x29/0x40 [ 139.685913][ T6243] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 139.685963][ T6243] __x64_sys_ioctl+0x18e/0x210 [ 139.686012][ T6243] do_syscall_64+0x115/0x840 [ 139.686048][ T6243] ? clear_bhb_loop+0x40/0x90 [ 139.686090][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.686126][ T6243] RIP: 0033:0x7f4f2e99de99 [ 139.686161][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.686193][ T6243] RSP: 002b:00007f4f2f815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.686225][ T6243] RAX: ffffffffffffffda RBX: 00007f4f2ec26090 RCX: 00007f4f2e99de99 [ 139.686248][ T6243] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000007 [ 139.686269][ T6243] RBP: 00007f4f2ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 139.686289][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.686309][ T6243] R13: 00007f4f2ec26128 R14: 00007f4f2ec26090 R15: 00007ffeb56dae18 [ 139.686352][ T6243] [ 140.088476][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'. [ 140.116082][ T6249] ovs_: entered promiscuous mode [ 140.222745][ T6236] zswap: compressor not available [ 140.244178][ T6242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.279003][ T6253] veth1_vlan: entered allmulticast mode [ 140.305587][ T6242] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.398074][ T6242] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.534713][ T6242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.557926][ T6242] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.566179][ T6260] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.613752][ T6242] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.653260][ T6242] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.680906][ T6242] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.699239][ T6242] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.729934][ T6242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.749079][ T6242] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.800968][ T6242] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.829288][ T6259] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 141.710050][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.917304][ T6286] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 142.164779][ T6291] random: crng reseeded on system resumption [ 142.366653][ T6291] hub 1-0:1.0: USB hub found [ 142.397711][ T6291] hub 1-0:1.0: 1 port detected [ 142.594245][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.670188][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.751353][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.790228][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.336959][ T6330] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 144.670077][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.749980][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.830308][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.849917][ T5636] Bluetooth: hci0: Unable to find connection for big 0xe0 [ 145.870138][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.750075][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.829976][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.910140][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.244224][ T6391] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 147.563908][ T6406] netlink: 'syz.0.119': attribute type 22 has an invalid length. [ 147.587132][ T5636] Bluetooth: hci1: Malformed LE Event: 0x1d [ 147.662300][ T6406] netlink: 330 bytes leftover after parsing attributes in process `syz.0.119'. [ 147.726509][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 147.798410][ T6408] macvlan0: entered promiscuous mode [ 147.813623][ T6417] sd 0:0:1:0: device reset [ 147.840321][ T6408] macvlan0: entered allmulticast mode [ 147.872334][ T6408] veth1_vlan: entered allmulticast mode [ 148.912194][ T6438] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 149.298917][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 149.376904][ T6452] netlink: 354 bytes leftover after parsing attributes in process `syz.1.128'. [ 149.460087][ T6455] block2mtd: illegal erase size [ 149.498973][ T5636] Bluetooth: hci2: Unable to find connection for big 0xe0 [ 150.838540][ T6467] kexec: Could not allocate control_code_buffer [ 151.342786][ T6485] FAULT_INJECTION: forcing a failure. [ 151.342786][ T6485] name failslab, interval 1, probability 0, space 0, times 0 [ 151.423003][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 151.423047][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.423066][ T6485] Call Trace: [ 151.423076][ T6485] [ 151.423088][ T6485] dump_stack_lvl+0x100/0x190 [ 151.423133][ T6485] should_fail_ex.cold+0x5/0xa [ 151.423171][ T6485] should_failslab+0xc2/0x120 [ 151.423217][ T6485] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 151.423260][ T6485] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 151.423299][ T6485] ? rcu_is_watching+0x12/0xc0 [ 151.423335][ T6485] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 151.423402][ T6485] krealloc_node_align_noprof+0x1f9/0x3e0 [ 151.423445][ T6485] snd_pcm_hw_rule_add+0x3b3/0x510 [ 151.423488][ T6485] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 151.423531][ T6485] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 151.423572][ T6485] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 151.423617][ T6485] ? mutex_init_lockdep+0xf1/0x120 [ 151.423666][ T6485] ? snd_pcm_attach_substream+0x287/0xd20 [ 151.423708][ T6485] snd_pcm_open_substream+0x942/0x1850 [ 151.423745][ T6485] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 151.423781][ T6485] ? snd_pcm_oss_open+0x5e5/0x1390 [ 151.423830][ T6485] snd_pcm_oss_open+0x735/0x1390 [ 151.423888][ T6485] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 151.423936][ T6485] ? __lock_acquire+0x49f/0x1a40 [ 151.423979][ T6485] ? __pfx_default_wake_function+0x10/0x10 [ 151.424024][ T6485] ? do_raw_spin_lock+0x128/0x260 [ 151.424055][ T6485] ? soundcore_open+0x231/0x5a0 [ 151.424097][ T6485] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 151.424142][ T6485] soundcore_open+0x2e3/0x5a0 [ 151.424185][ T6485] ? __pfx_soundcore_open+0x10/0x10 [ 151.424246][ T6485] chrdev_open+0x234/0x6a0 [ 151.424277][ T6485] ? __pfx_chrdev_open+0x10/0x10 [ 151.424308][ T6485] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 151.424352][ T6485] do_dentry_open+0x6ab/0x14d0 [ 151.424419][ T6485] ? __pfx_chrdev_open+0x10/0x10 [ 151.424461][ T6485] vfs_open+0x82/0x3f0 [ 151.424509][ T6485] path_openat+0x2873/0x4280 [ 151.424557][ T6485] ? __pfx_path_openat+0x10/0x10 [ 151.424599][ T6485] do_file_open+0x20e/0x430 [ 151.424634][ T6485] ? __pfx_do_file_open+0x10/0x10 [ 151.424703][ T6485] ? alloc_fd+0x471/0x7a0 [ 151.424761][ T6485] ? do_getname+0x191/0x390 [ 151.424804][ T6485] do_sys_openat2+0x10f/0x1e0 [ 151.424846][ T6485] ? __pfx_do_sys_openat2+0x10/0x10 [ 151.424890][ T6485] ? __fget_files+0x21f/0x3d0 [ 151.424949][ T6485] __x64_sys_openat+0x12d/0x210 [ 151.424991][ T6485] ? __pfx___x64_sys_openat+0x10/0x10 [ 151.425035][ T6485] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 151.425089][ T6485] ? syscall_user_dispatch+0x76/0x130 [ 151.425125][ T6485] do_syscall_64+0x115/0x840 [ 151.425158][ T6485] ? clear_bhb_loop+0x40/0x90 [ 151.425195][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.425226][ T6485] RIP: 0033:0x7fc664d9de99 [ 151.425252][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.425280][ T6485] RSP: 002b:00007fc665bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.425307][ T6485] RAX: ffffffffffffffda RBX: 00007fc665026090 RCX: 00007fc664d9de99 [ 151.425327][ T6485] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 151.425345][ T6485] RBP: 00007fc664e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 151.425361][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.425387][ T6485] R13: 00007fc665026128 R14: 00007fc665026090 R15: 00007ffd20c066a8 [ 151.425426][ T6485] [ 152.616510][ T6502] netlink: 'syz.0.138': attribute type 4 has an invalid length. [ 155.170759][ T6524] futex_wake_op: syz.0.143 tries to shift op by -2048; fix this program [ 155.183379][ T6524] futex_wake_op: syz.0.143 tries to shift op by -2048; fix this program [ 155.945640][ T6533] smpboot: CPU 1 is now offline [ 156.064499][ T5636] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 156.507055][ T6556] FAULT_INJECTION: forcing a failure. [ 156.507055][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 156.573568][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.0.151 Not tainted syzkaller #0 PREEMPT(full) [ 156.573601][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.573615][ T6556] Call Trace: [ 156.573622][ T6556] [ 156.573631][ T6556] dump_stack_lvl+0x100/0x190 [ 156.573663][ T6556] should_fail_ex.cold+0x5/0xa [ 156.573690][ T6556] should_failslab+0xc2/0x120 [ 156.573722][ T6556] __kvmalloc_node_noprof+0x116/0x970 [ 156.573749][ T6556] ? __x64_sys_futex+0x358/0x4d0 [ 156.573779][ T6556] ? __do_sys_setgroups+0x126/0x4f0 [ 156.573817][ T6556] __do_sys_setgroups+0x126/0x4f0 [ 156.573849][ T6556] ? 0xffffffffff600000 [ 156.573871][ T6556] do_syscall_64+0x115/0x840 [ 156.573896][ T6556] ? clear_bhb_loop+0x40/0x90 [ 156.573925][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.573949][ T6556] RIP: 0033:0x7f4f2e99de99 [ 156.573975][ T6556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.573998][ T6556] RSP: 002b:00007f4f2f836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 156.574020][ T6556] RAX: ffffffffffffffda RBX: 00007f4f2ec25fa0 RCX: 00007f4f2e99de99 [ 156.574036][ T6556] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 156.574050][ T6556] RBP: 00007f4f2ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 156.574064][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.574078][ T6556] R13: 00007f4f2ec26038 R14: 00007f4f2ec25fa0 R15: 00007ffeb56dae18 [ 156.574101][ T6556] ? 0xffffffffff600000 [ 156.574123][ T6556] [ 157.329357][ T6552] FAULT_INJECTION: forcing a failure. [ 157.329357][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.415301][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 157.415332][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.415345][ T6552] Call Trace: [ 157.415352][ T6552] [ 157.415361][ T6552] dump_stack_lvl+0x100/0x190 [ 157.415392][ T6552] should_fail_ex.cold+0x5/0xa [ 157.415418][ T6552] _copy_from_user+0x2e/0xd0 [ 157.415452][ T6552] input_event_from_user+0xb9/0x290 [ 157.415488][ T6552] ? __pfx_input_event_from_user+0x10/0x10 [ 157.415530][ T6552] evdev_write+0x27a/0x430 [ 157.415566][ T6552] ? __pfx_evdev_write+0x10/0x10 [ 157.415600][ T6552] ? bpf_lsm_file_permission+0x9/0x10 [ 157.415636][ T6552] ? security_file_permission+0x76/0x210 [ 157.415667][ T6552] ? rw_verify_area+0xce/0x6d0 [ 157.415702][ T6552] vfs_write+0x2aa/0x1050 [ 157.415738][ T6552] ? __pfx_evdev_write+0x10/0x10 [ 157.415772][ T6552] ? __pfx_vfs_write+0x10/0x10 [ 157.415812][ T6552] ? find_held_lock+0x2b/0x80 [ 157.415839][ T6552] ? __fget_files+0x215/0x3d0 [ 157.415873][ T6552] ? __fget_files+0x215/0x3d0 [ 157.415913][ T6552] ? __fget_files+0x21f/0x3d0 [ 157.415955][ T6552] ksys_write+0x1f8/0x250 [ 157.415990][ T6552] ? __pfx_ksys_write+0x10/0x10 [ 157.416034][ T6552] do_syscall_64+0x115/0x840 [ 157.416058][ T6552] ? clear_bhb_loop+0x40/0x90 [ 157.416086][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.416110][ T6552] RIP: 0033:0x7f32c619de99 [ 157.416128][ T6552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.416150][ T6552] RSP: 002b:00007f32c43d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.416171][ T6552] RAX: ffffffffffffffda RBX: 00007f32c6426090 RCX: 00007f32c619de99 [ 157.416186][ T6552] RDX: 000000047ffffdf2 RSI: 0000000000000000 RDI: 0000000000000004 [ 157.416200][ T6552] RBP: 00007f32c43d5090 R08: 0000000000000000 R09: 0000000000000000 [ 157.416213][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.416226][ T6552] R13: 00007f32c6426128 R14: 00007f32c6426090 R15: 00007ffd420fbff8 [ 157.416255][ T6552] [ 158.137328][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.172208][ T6584] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 158.790833][ T6596] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 160.191162][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.935265][ T6635] netlink: 'syz.1.165': attribute type 4 has an invalid length. [ 160.955149][ T6626] FAULT_INJECTION: forcing a failure. [ 160.955149][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.036097][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(full) [ 161.036134][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.036153][ T6626] Call Trace: [ 161.036161][ T6626] [ 161.036169][ T6626] dump_stack_lvl+0x100/0x190 [ 161.036200][ T6626] should_fail_ex.cold+0x5/0xa [ 161.036226][ T6626] _copy_from_user+0x2e/0xd0 [ 161.036259][ T6626] input_event_from_user+0xb9/0x290 [ 161.036294][ T6626] ? __pfx_input_event_from_user+0x10/0x10 [ 161.036328][ T6626] ? __pfx___might_resched+0x10/0x10 [ 161.036361][ T6626] ? input_inject_event+0x198/0x380 [ 161.036398][ T6626] evdev_write+0x27a/0x430 [ 161.036433][ T6626] ? __pfx_evdev_write+0x10/0x10 [ 161.036466][ T6626] ? bpf_lsm_file_permission+0x9/0x10 [ 161.036501][ T6626] ? security_file_permission+0x76/0x210 [ 161.036532][ T6626] ? rw_verify_area+0xce/0x6d0 [ 161.036566][ T6626] vfs_write+0x2aa/0x1050 [ 161.036601][ T6626] ? __pfx_evdev_write+0x10/0x10 [ 161.036634][ T6626] ? __pfx_vfs_write+0x10/0x10 [ 161.036666][ T6626] ? find_held_lock+0x2b/0x80 [ 161.036691][ T6626] ? __fget_files+0x215/0x3d0 [ 161.036725][ T6626] ? __fget_files+0x215/0x3d0 [ 161.036764][ T6626] ? __fget_files+0x21f/0x3d0 [ 161.036806][ T6626] ksys_write+0x1f8/0x250 [ 161.036840][ T6626] ? __pfx_ksys_write+0x10/0x10 [ 161.036883][ T6626] do_syscall_64+0x115/0x840 [ 161.036906][ T6626] ? clear_bhb_loop+0x40/0x90 [ 161.036939][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.036963][ T6626] RIP: 0033:0x7fc664d9de99 [ 161.036981][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.037003][ T6626] RSP: 002b:00007fc665bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.037025][ T6626] RAX: ffffffffffffffda RBX: 00007fc665026090 RCX: 00007fc664d9de99 [ 161.037040][ T6626] RDX: 000000047ffffdf2 RSI: 0000000000000000 RDI: 0000000000000004 [ 161.037053][ T6626] RBP: 00007fc665bc5090 R08: 0000000000000000 R09: 0000000000000000 [ 161.037067][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.037080][ T6626] R13: 00007fc665026128 R14: 00007fc665026090 R15: 00007ffd20c066a8 [ 161.037109][ T6626] [ 162.230672][ T6650] binder: 6649:6650 unknown command 42949533 [ 162.262108][ T6650] binder: 6649:6650 ioctl c0306201 0 returned -22 [ 162.791606][ T6655] FAULT_INJECTION: forcing a failure. [ 162.791606][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 162.882655][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) [ 162.882687][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.882702][ T6655] Call Trace: [ 162.882712][ T6655] [ 162.882721][ T6655] dump_stack_lvl+0x100/0x190 [ 162.882752][ T6655] should_fail_ex.cold+0x5/0xa [ 162.882779][ T6655] should_failslab+0xc2/0x120 [ 162.882811][ T6655] kmem_cache_alloc_noprof+0x91/0x6a0 [ 162.882842][ T6655] ? posix_lock_inode+0x5b2/0x23f0 [ 162.882869][ T6655] posix_lock_inode+0x5b2/0x23f0 [ 162.882901][ T6655] ? rcu_is_watching+0x12/0xc0 [ 162.882929][ T6655] ? __pfx_posix_lock_inode+0x10/0x10 [ 162.882960][ T6655] vfs_lock_file+0xfb/0x150 [ 162.882984][ T6655] fcntl_setlk+0x757/0xe20 [ 162.883011][ T6655] ? __pfx_fcntl_setlk+0x10/0x10 [ 162.883039][ T6655] ? __might_fault+0xc5/0x140 [ 162.883061][ T6655] ? __might_fault+0xc5/0x140 [ 162.883095][ T6655] do_fcntl+0xf39/0x1670 [ 162.883124][ T6655] ? __pfx_do_fcntl+0x10/0x10 [ 162.883150][ T6655] ? __fget_files+0x215/0x3d0 [ 162.883196][ T6655] ? tomoyo_file_fcntl+0x6c/0xc0 [ 162.883243][ T6655] __x64_sys_fcntl+0x163/0x200 [ 162.883281][ T6655] do_syscall_64+0x115/0x840 [ 162.883306][ T6655] ? clear_bhb_loop+0x40/0x90 [ 162.883335][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.883360][ T6655] RIP: 0033:0x7f32c619de99 [ 162.883386][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.883420][ T6655] RSP: 002b:00007f32c43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 162.883443][ T6655] RAX: ffffffffffffffda RBX: 00007f32c6425fa0 RCX: 00007f32c619de99 [ 162.883458][ T6655] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000004 [ 162.883472][ T6655] RBP: 00007f32c6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 162.883486][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.883500][ T6655] R13: 00007f32c6426038 R14: 00007f32c6425fa0 R15: 00007ffd420fbff8 [ 162.883530][ T6655] [ 163.140349][ T6658] futex_wake_op: syz.2.171 tries to shift op by -2048; fix this program [ 163.148994][ T6658] futex_wake_op: syz.2.171 tries to shift op by -2048; fix this program [ 164.573942][ T6679] netlink: 'syz.1.176': attribute type 4 has an invalid length. [ 164.782228][ T6671] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5642] was attempted by ""[6671] [ 165.218244][ T6691] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 165.394813][ T6681] Process accounting resumed [ 166.452993][ T6700] device-mapper: ioctl: name not supplied when creating device [ 167.451503][ T30] audit: type=1804 audit(4294975141.715:2): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.182" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=3495 res=1 errno=0 [ 167.666584][ T6730] netlink: zone id is out of range [ 167.719521][ T6730] netlink: zone id is out of range [ 167.760658][ T6730] netlink: zone id is out of range [ 167.815332][ T6740] binder: BINDER_SET_CONTEXT_MGR already set [ 167.841318][ T6730] netlink: zone id is out of range [ 167.863296][ T6740] binder: 6727:6740 ioctl 4018620d 9 returned -16 [ 167.895157][ T6730] netlink: zone id is out of range [ 167.941864][ T6730] netlink: zone id is out of range [ 167.941900][ T6730] netlink: zone id is out of range [ 167.941909][ T6730] netlink: zone id is out of range [ 167.941917][ T6730] netlink: zone id is out of range [ 167.941925][ T6730] netlink: zone id is out of range [ 168.024324][ T6733] futex_wake_op: syz.2.184 tries to shift op by -2048; fix this program [ 168.024465][ T6733] futex_wake_op: syz.2.184 tries to shift op by -2048; fix this program [ 168.878167][ T5636] Bluetooth: hci1: Unable to find connection for big 0xe0 [ 169.085140][ T6754] capability: warning: `syz.0.187' uses 32-bit capabilities (legacy support in use) [ 176.123240][ T6827] Process accounting resumed [ 176.265922][ T6831] netlink: 'syz.1.201': attribute type 4 has an invalid length. [ 176.274374][ T5636] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 178.647127][ T6877] futex_wake_op: syz.1.210 tries to shift op by -2048; fix this program [ 178.685799][ T6877] 0x000000000001-0x000000020000 : "" [ 178.802375][ T6877] ftl_cs: FTL header corrupt! [ 179.243023][ T6878] ubi0: attaching mtd0 [ 179.345412][ T6878] ubi0: scanning is finished [ 179.363993][ T6878] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 179.647139][ T6878] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 180.405457][ T6888] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 181.129395][ T6892] syz.3.216 (6892) used greatest stack depth: 19768 bytes left [ 182.471952][ T6925] netlink: 186 bytes leftover after parsing attributes in process `syz.2.221'. [ 183.748501][ T6946] netlink: 'syz.3.225': attribute type 4 has an invalid length. [ 186.585442][ T6978] net_ratelimit: 44 callbacks suppressed [ 186.585463][ T6978] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.681563][ T6978] ======================================================= [ 186.681563][ T6978] WARNING: The mand mount option has been deprecated and [ 186.681563][ T6978] and is ignored by this kernel. Remove the mand [ 186.681563][ T6978] option from the mount to silence this warning. [ 186.681563][ T6978] ======================================================= [ 193.311627][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.321701][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.609277][ T7080] Process accounting paused [ 197.757092][ T7105] NFSD: Failed to start, no listeners configured. [ 200.014576][ T30] audit: type=1800 audit(4294975174.305:3): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.256" name="discovery_nqn" dev="configfs" ino=16165 res=0 errno=0 [ 200.607802][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.619681][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.629598][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.642169][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.661954][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.750099][ T4946] Bluetooth: hci4: command tx timeout [ 203.521793][ T7192] FAULT_INJECTION: forcing a failure. [ 203.521793][ T7192] name fail_futex, interval 1, probability 0, space 0, times 1 [ 203.610805][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(full) [ 203.610837][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.610851][ T7192] Call Trace: [ 203.610859][ T7192] [ 203.610868][ T7192] dump_stack_lvl+0x100/0x190 [ 203.610900][ T7192] should_fail_ex.cold+0x5/0xa [ 203.610927][ T7192] get_futex_key+0x1d2/0x14f0 [ 203.610982][ T7192] ? __pfx_get_futex_key+0x10/0x10 [ 203.611026][ T7192] ? __pfx_futex_hash+0x10/0x10 [ 203.611069][ T7192] ? get_pid_task+0xfc/0x250 [ 203.611097][ T7192] ? get_pid_task+0xfc/0x250 [ 203.611129][ T7192] futex_wake+0xf4/0x5e0 [ 203.611156][ T7192] ? futex_wait+0x11e/0x370 [ 203.611186][ T7192] ? find_held_lock+0x2b/0x80 [ 203.611213][ T7192] ? __pfx_futex_wake+0x10/0x10 [ 203.611246][ T7192] ? __lock_acquire+0x49f/0x1a40 [ 203.611282][ T7192] ? ksys_write+0x190/0x250 [ 203.611328][ T7192] do_futex+0x2b2/0x440 [ 203.611354][ T7192] ? __pfx_do_futex+0x10/0x10 [ 203.611379][ T7192] ? find_held_lock+0x2b/0x80 [ 203.611410][ T7192] __x64_sys_futex+0x34f/0x4d0 [ 203.611436][ T7192] ? __fget_files+0x21f/0x3d0 [ 203.611473][ T7192] ? __pfx___x64_sys_futex+0x10/0x10 [ 203.611508][ T7192] do_syscall_64+0x115/0x840 [ 203.611532][ T7192] ? clear_bhb_loop+0x40/0x90 [ 203.611561][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.611593][ T7192] RIP: 0033:0x7fc664d9de99 [ 203.611612][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.611634][ T7192] RSP: 002b:00007fc665be60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.611657][ T7192] RAX: ffffffffffffffda RBX: 00007fc665025fa8 RCX: 00007fc664d9de99 [ 203.611673][ T7192] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc665025fac [ 203.611687][ T7192] RBP: 00007fc665025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 203.611701][ T7192] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 203.611715][ T7192] R13: 00007fc665026038 R14: 00007ffd20c065c0 R15: 00007ffd20c066a8 [ 203.611744][ T7192] [ 204.853192][ T4946] Bluetooth: hci4: command tx timeout [ 204.940530][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.260'. [ 206.910684][ T4946] Bluetooth: hci4: command tx timeout [ 207.468432][ T7244] netlink: 'syz.0.263': attribute type 4 has an invalid length. [ 207.752425][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.808164][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.867393][ T7154] bridge_slave_0: entered allmulticast mode [ 207.884502][ T7244] Process accounting paused [ 207.928135][ T7154] bridge_slave_0: entered promiscuous mode [ 207.990650][ T7154] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.063721][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.120937][ T7154] bridge_slave_1: entered allmulticast mode [ 208.182330][ T7154] bridge_slave_1: entered promiscuous mode [ 208.529535][ T7154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.611848][ T7154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.859058][ T7154] team0: Port device team_slave_0 added [ 208.989907][ T4946] Bluetooth: hci4: command tx timeout [ 209.044152][ T7154] team0: Port device team_slave_1 added [ 209.053046][ T7268] syz.0.265: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 209.390943][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.0.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.390981][ T7268] Tainted: [L]=SOFTLOCKUP [ 209.390989][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.391003][ T7268] Call Trace: [ 209.391010][ T7268] [ 209.391019][ T7268] dump_stack_lvl+0x100/0x190 [ 209.391050][ T7268] warn_alloc.cold+0x94/0xa8 [ 209.391075][ T7268] ? __pfx_warn_alloc+0x10/0x10 [ 209.391098][ T7268] ? clockevents_program_event+0x1ef/0x820 [ 209.391133][ T7268] ? __pfx_clockevents_program_event+0x10/0x10 [ 209.391161][ T7268] ? find_held_lock+0x2b/0x80 [ 209.391188][ T7268] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 209.391219][ T7268] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 209.391256][ T7268] __vmalloc_node_range_noprof+0x136c/0x1630 [ 209.391303][ T7268] ? irqentry_exit+0x24d/0xa00 [ 209.391327][ T7268] ? lockdep_hardirqs_on+0x78/0x100 [ 209.391358][ T7268] ? disksize_store+0x11a/0x4d0 [ 209.391392][ T7268] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 209.391433][ T7268] ? __pfx___might_resched+0x10/0x10 [ 209.391468][ T7268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.391509][ T7268] ? disksize_store+0x11a/0x4d0 [ 209.391533][ T7268] __vmalloc_node_noprof+0xad/0xf0 [ 209.391569][ T7268] ? disksize_store+0x11a/0x4d0 [ 209.391597][ T7268] disksize_store+0x11a/0x4d0 [ 209.391627][ T7268] ? sysfs_file_kobj+0xe4/0x290 [ 209.391658][ T7268] ? __pfx_disksize_store+0x10/0x10 [ 209.391683][ T7268] dev_attr_store+0x58/0x80 [ 209.391717][ T7268] ? __pfx_dev_attr_store+0x10/0x10 [ 209.391760][ T7268] sysfs_kf_write+0xf2/0x150 [ 209.391793][ T7268] kernfs_fop_write_iter+0x3e0/0x5f0 [ 209.391818][ T7268] ? __pfx_sysfs_kf_write+0x10/0x10 [ 209.391851][ T7268] vfs_write+0x6ac/0x1050 [ 209.391890][ T7268] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 209.391919][ T7268] ? __pfx_vfs_write+0x10/0x10 [ 209.391975][ T7268] ksys_write+0x12a/0x250 [ 209.392012][ T7268] ? __pfx_ksys_write+0x10/0x10 [ 209.392057][ T7268] do_syscall_64+0x115/0x840 [ 209.392081][ T7268] ? clear_bhb_loop+0x40/0x90 [ 209.392111][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.392136][ T7268] RIP: 0033:0x7f4f2e99de99 [ 209.392155][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.392178][ T7268] RSP: 002b:00007f4f2f7d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.392200][ T7268] RAX: ffffffffffffffda RBX: 00007f4f2ec26270 RCX: 00007f4f2e99de99 [ 209.392216][ T7268] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000004 [ 209.392230][ T7268] RBP: 00007f4f2ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 209.392244][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.392264][ T7268] R13: 00007f4f2ec26308 R14: 00007f4f2ec26270 R15: 00007ffeb56dae18 [ 209.392296][ T7268] [ 209.392332][ T7268] Mem-Info: [ 209.918546][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.946973][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.042875][ T7154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.083514][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.111520][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.194512][ T7154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.035423][ T7154] hsr_slave_0: entered promiscuous mode [ 211.068617][ T7154] hsr_slave_1: entered promiscuous mode [ 211.096229][ T7154] debugfs: 'hsr0' already exists in 'hsr' [ 211.122562][ T7154] Cannot create hsr debugfs directory [ 212.460484][ T7268] active_anon:68476 inactive_anon:0 isolated_anon:0 [ 212.460484][ T7268] active_file:34 inactive_file:52242 isolated_file:0 [ 212.460484][ T7268] unevictable:769 dirty:2804 writeback:792 [ 212.460484][ T7268] slab_reclaimable:10618 slab_unreclaimable:93442 [ 212.460484][ T7268] mapped:72464 shmem:62328 pagetables:1283 [ 212.460484][ T7268] sec_pagetables:0 bounce:0 [ 212.460484][ T7268] kernel_misc_reclaimable:0 [ 212.460484][ T7268] free:1001587 free_pcp:6296 free_cma:0 [ 212.926394][ T7154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.998490][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.041136][ T7154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.118830][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.132538][ T7268] Node 0 active_anon:271096kB inactive_anon:0kB active_file:136kB inactive_file:211568kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:292628kB dirty:10060kB writeback:2432kB shmem:244916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12224kB pagetables:4972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.346489][ T7154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.485277][ T7268] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.524818][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.563938][ T7154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.726108][ T7268] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.858294][ T7268] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 213.890886][ T7268] Node 0 DMA32 free:1091196kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:278992kB inactive_anon:0kB active_file:136kB inactive_file:215616kB unevictable:1540kB writepending:10444kB zspages:0kB present:3129332kB managed:2532524kB mlocked:4kB bounce:0kB free_pcp:17384kB local_pcp:17384kB free_cma:0kB [ 214.045955][ T7268] lowmem_reserve[]: 0 0 0 0 0 [ 214.069169][ T7268] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.197598][ T7268] lowmem_reserve[]: 0 0 0 0 0 [ 214.226970][ T7268] Node 1 Normal free:2888200kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5060kB local_pcp:5060kB free_cma:0kB [ 214.419486][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.490032][ T7268] lowmem_reserve[]: 0 0 0 0 0 [ 214.591904][ T7268] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.731909][ T7268] Node 0 DMA32: 3*4kB (UME) 2*8kB (ME) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (ME) 1*256kB (E) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 262*4096kB (M) = 1077452kB [ 214.889912][ T7268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.017110][ T7268] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 9*32kB (UM) 4*64kB (UM) 3*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 703*4096kB (UM) = 2888244kB [ 215.262939][ T7268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.351197][ T7268] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.450769][ T7268] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 215.537008][ T7268] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.627814][ T7268] 120877 total pagecache pages [ 215.702667][ T7268] 1 pages in swap cache [ 215.747874][ T7268] Free swap = 124288kB [ 215.793844][ T7268] Total swap = 124996kB [ 215.842694][ T7268] 2097051 pages RAM [ 215.895702][ T7268] 0 pages HighMem/MovableOnly [ 215.954780][ T7268] 432207 pages reserved [ 216.002346][ T7268] 0 pages cma reserved [ 216.269718][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 216.433653][ T7154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.571555][ T7154] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.648978][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.656263][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.755107][ T7308] mmap: syz.0.271 (7308) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.797665][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.804890][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.367902][ T1111] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.847979][ T1111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.288654][ T1111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.405941][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.636940][ T1111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.941715][ T1111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.423177][ T7340] hub 1-0:1.0: USB hub found [ 221.523498][ T7340] hub 1-0:1.0: 1 port detected [ 221.590713][ T7154] veth0_vlan: entered promiscuous mode [ 221.658588][ T7154] veth1_vlan: entered promiscuous mode [ 221.738103][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'. [ 221.802430][ T7154] veth0_macvtap: entered promiscuous mode [ 221.849403][ T7154] veth1_macvtap: entered promiscuous mode [ 222.057632][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.107390][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.172857][ T204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.207738][ T204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.241672][ T204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.287417][ T204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.572677][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.618570][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.726724][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.756358][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.047961][ T7375] netlink: 'syz.4.278': attribute type 4 has an invalid length. [ 224.377908][ T7379] netlink: 338 bytes leftover after parsing attributes in process `syz.4.279'. [ 224.468204][ T7379] netlink: 338 bytes leftover after parsing attributes in process `syz.4.279'. [ 225.067298][ T7384] futex_wake_op: syz.4.281 tries to shift op by -2048; fix this program [ 225.176967][ T7384] futex_wake_op: syz.4.281 tries to shift op by -2048; fix this program [ 225.666911][ T7395] random: crng reseeded on system resumption [ 232.807944][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 233.338038][ T5638] Process accounting resumed [ 233.383493][ T7477] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 233.814096][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.824570][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.834607][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.846148][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.855237][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.957564][ T7482] netlink: 54 bytes leftover after parsing attributes in process `syz.0.299'. [ 234.285001][ T7492] netlink: 'syz.0.301': attribute type 4 has an invalid length. [ 235.940617][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 235.950362][ T4946] Bluetooth: hci3: command tx timeout [ 236.298102][ T7533] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 236.656172][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.674314][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.698214][ T7483] bridge_slave_0: entered allmulticast mode [ 236.715585][ T7483] bridge_slave_0: entered promiscuous mode [ 236.810043][ T7545] wlan1: mtu less than device minimum [ 236.835706][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.854689][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.871858][ T7483] bridge_slave_1: entered allmulticast mode [ 236.891956][ T7483] bridge_slave_1: entered promiscuous mode [ 237.225117][ T7483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.265800][ T7483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.476417][ T7483] team0: Port device team_slave_0 added [ 237.508266][ T7483] team0: Port device team_slave_1 added [ 237.974385][ T7483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.992868][ T7483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.034273][ T4946] Bluetooth: hci3: command tx timeout [ 238.052180][ T7483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.196040][ T7483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.213066][ T7483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.272230][ T7483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.483032][ T7483] hsr_slave_0: entered promiscuous mode [ 238.491399][ T7483] hsr_slave_1: entered promiscuous mode [ 238.497896][ T7483] debugfs: 'hsr0' already exists in 'hsr' [ 238.504302][ T7483] Cannot create hsr debugfs directory [ 238.808312][ T7561] Process accounting resumed [ 240.017553][ T7574] syz.0.314 (7574) used greatest stack depth: 19400 bytes left [ 240.101140][ T7483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.110906][ T5636] Bluetooth: hci3: command tx timeout [ 240.170501][ T7483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.205277][ T7483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.265594][ T7483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.398579][ T7483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.445257][ T7483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.481989][ T7483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.558305][ T7483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.126296][ T7483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.258376][ T7483] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.349106][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.356494][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.499746][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.507342][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.191546][ T5636] Bluetooth: hci3: command tx timeout [ 243.121015][ T30] audit: type=1804 audit(4294975217.425:4): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.321" name="/newroot/90/file0" dev="tmpfs" ino=492 res=1 errno=0 [ 243.253077][ T30] audit: type=1804 audit(4294975217.455:5): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.321" name="/newroot/90/file0" dev="tmpfs" ino=492 res=1 errno=0 [ 243.776221][ T7660] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 244.030959][ T7483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.867775][ T7483] veth0_vlan: entered promiscuous mode [ 245.965163][ T7483] veth1_vlan: entered promiscuous mode [ 246.182103][ T7483] veth0_macvtap: entered promiscuous mode [ 246.246095][ T7483] veth1_macvtap: entered promiscuous mode [ 246.394402][ T7483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.484139][ T7483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.571815][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.613929][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.677146][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.714797][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.032868][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.094151][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.246904][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.296274][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.809680][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 250.330037][ T7740] cifs: Unknown parameter 'knjeRaBt$Mi' [ 252.390268][ T7765] hub 1-0:1.0: USB hub found [ 252.624083][ T7765] hub 1-0:1.0: 1 port detected [ 253.870271][ T5636] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 253.991324][ T30] audit: type=1800 audit(4294975228.295:6): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.345" name="dbroot" dev="configfs" ino=20893 res=0 errno=0 [ 256.052533][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.065197][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.152563][ T7811] vhci_hcd: not connected 4 [ 260.128035][ T7857] FAULT_INJECTION: forcing a failure. [ 260.128035][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 260.209959][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.1.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.209998][ T7857] Tainted: [L]=SOFTLOCKUP [ 260.210006][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.210053][ T7857] Call Trace: [ 260.210062][ T7857] [ 260.210071][ T7857] dump_stack_lvl+0x100/0x190 [ 260.210103][ T7857] should_fail_ex.cold+0x5/0xa [ 260.210133][ T7857] should_failslab+0xc2/0x120 [ 260.210169][ T7857] __kmalloc_cache_noprof+0x91/0x6c0 [ 260.210226][ T7857] ? apply_subsystem_event_filter+0x539/0x17a0 [ 260.210266][ T7857] apply_subsystem_event_filter+0x539/0x17a0 [ 260.210308][ T7857] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 260.210354][ T7857] ? _copy_from_user+0x59/0xd0 [ 260.210392][ T7857] subsystem_filter_write+0x95/0x120 [ 260.210426][ T7857] vfs_write+0x2aa/0x1050 [ 260.210465][ T7857] ? __pfx_subsystem_filter_write+0x10/0x10 [ 260.210500][ T7857] ? __pfx_vfs_write+0x10/0x10 [ 260.210535][ T7857] ? __fget_files+0x215/0x3d0 [ 260.210579][ T7857] ? __fget_files+0x21f/0x3d0 [ 260.210630][ T7857] ksys_write+0x12a/0x250 [ 260.210669][ T7857] ? __pfx_ksys_write+0x10/0x10 [ 260.210715][ T7857] do_syscall_64+0x115/0x840 [ 260.210740][ T7857] ? clear_bhb_loop+0x40/0x90 [ 260.210769][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.210794][ T7857] RIP: 0033:0x7f32c619de99 [ 260.210812][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.210835][ T7857] RSP: 002b:00007f32c43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.210857][ T7857] RAX: ffffffffffffffda RBX: 00007f32c6425fa0 RCX: 00007f32c619de99 [ 260.210873][ T7857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 260.210886][ T7857] RBP: 00007f32c6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 260.210900][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.210914][ T7857] R13: 00007f32c6426038 R14: 00007f32c6425fa0 R15: 00007ffd420fbff8 [ 260.210944][ T7857] [ 262.253524][ T7876] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 264.127029][ T7901] FAULT_INJECTION: forcing a failure. [ 264.127029][ T7901] name fail_futex, interval 1, probability 0, space 0, times 0 [ 264.239922][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.4.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.239960][ T7901] Tainted: [L]=SOFTLOCKUP [ 264.239969][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.239983][ T7901] Call Trace: [ 264.239990][ T7901] [ 264.239999][ T7901] dump_stack_lvl+0x100/0x190 [ 264.240030][ T7901] should_fail_ex.cold+0x5/0xa [ 264.240057][ T7901] get_futex_key+0x1d2/0x14f0 [ 264.240099][ T7901] ? __pfx_get_futex_key+0x10/0x10 [ 264.240147][ T7901] futex_wake+0xf4/0x5e0 [ 264.240179][ T7901] ? __pfx_futex_wake+0x10/0x10 [ 264.240213][ T7901] ? __pfx_vfs_statx+0x10/0x10 [ 264.240243][ T7901] do_futex+0x2b2/0x440 [ 264.240268][ T7901] ? __pfx_do_futex+0x10/0x10 [ 264.240300][ T7901] __x64_sys_futex+0x34f/0x4d0 [ 264.240328][ T7901] ? __pfx___x64_sys_futex+0x10/0x10 [ 264.240363][ T7901] do_syscall_64+0x115/0x840 [ 264.240389][ T7901] ? clear_bhb_loop+0x40/0x90 [ 264.240418][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.240443][ T7901] RIP: 0033:0x7fc50659de99 [ 264.240470][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.240493][ T7901] RSP: 002b:00007fc5073d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 264.240516][ T7901] RAX: ffffffffffffffda RBX: 00007fc506825fa8 RCX: 00007fc50659de99 [ 264.240531][ T7901] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc506825fac [ 264.240546][ T7901] RBP: 00007fc506825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 264.240560][ T7901] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 264.240574][ T7901] R13: 00007fc506826038 R14: 00007ffe01dbc2f0 R15: 00007ffe01dbc3d8 [ 264.240603][ T7901] [ 267.234521][ T7922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.299321][ T7922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.366823][ T7922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.416524][ T7922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.464900][ T7922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.588903][ T7922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.652935][ T7922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.680786][ T7922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.735965][ T7922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 269.118657][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.357087][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.364605][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.437396][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.675680][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.821528][ T7960] nvme_fcloop: unknown parameter or missing value '' [ 269.854408][ T7942] Process accounting paused [ 270.731104][ T30] audit: type=1800 audit(4294977293.070:7): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.382" name="features" dev="configfs" ino=21907 res=0 errno=0 [ 270.919173][ T7977] ubi0: attaching mtd0 [ 271.124516][ T7977] ubi0: scanning is finished [ 271.233609][ T7977] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 271.508711][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.744381][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.814514][ T7977] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 271.827957][ T7993] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 273.574902][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.813518][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.112630][ T8021] netlink: 'syz.5.390': attribute type 4 has an invalid length. [ 276.483081][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 281.810128][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'. [ 282.443624][ T8118] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 282.664462][ T8118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 282.870773][ T8118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 285.592890][ T8162] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 289.016617][ T8185] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 289.072107][ T8185] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 289.137030][ T8185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 297.358376][ T8260] syz.4.427 uses obsolete (PF_INET,SOCK_PACKET) [ 299.558746][ T8286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.174777][ T8284] Process accounting resumed [ 302.432679][ T8330] input: f as /devices/virtual/input/input7 [ 302.560301][ T8322] zswap: compressor not available [ 302.786067][ T8336] nvme_fabrics: unknown parameter or missing value 'R;8~O u0k0>̈́ǖkh"R{Ďom7-PEppveڹlݼď$Z RspHeU+&LRw!F%}aN*KvT' in ctrl creation request [ 302.928417][ T8336] nvme_fabrics: unknown parameter or missing value '|Y=HH<2G5MK:"Xj7Fۣ 9:WQR̲nv4;Ɉɩz9$'oŞczANB%zo' in ctrl creation request [ 303.333058][ T8340] netlink: 342 bytes leftover after parsing attributes in process `syz.0.443'. [ 303.436797][ T30] audit: type=1807 audit(4294977325.940:8): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 303.490211][ T30] audit: type=1802 audit(4294977325.991:9): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.442" res=0 errno=0 [ 303.653375][ T8347] random: crng reseeded on system resumption [ 304.180159][ T8344] ima: policy update failed [ 304.223101][ T30] audit: type=1802 audit(4294977326.734:10): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.442" res=0 errno=0 [ 304.547136][ T8345] tipc: Started in network mode [ 304.631771][ T8345] tipc: Node identity ee00, cluster identity 4711 [ 304.704735][ T8345] tipc: Node number set to 60928 [ 305.929396][ T8373] ubi0: attaching mtd0 [ 306.104429][ T8373] ubi0: scanning is finished [ 306.240121][ T8373] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 306.970450][ T8373] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 309.115066][ T8407] netlink: 'syz.5.454': attribute type 4 has an invalid length. [ 312.926082][ T8447] warning: `syz.1.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 313.884622][ T8482] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 314.262911][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 315.501839][ T8491] FAULT_INJECTION: forcing a failure. [ 315.501839][ T8491] name failslab, interval 1, probability 0, space 0, times 0 [ 315.581331][ T8491] CPU: 0 UID: 0 PID: 8491 Comm: syz.4.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.581369][ T8491] Tainted: [L]=SOFTLOCKUP [ 315.581376][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.581392][ T8491] Call Trace: [ 315.581399][ T8491] [ 315.581408][ T8491] dump_stack_lvl+0x100/0x190 [ 315.581438][ T8491] should_fail_ex.cold+0x5/0xa [ 315.581464][ T8491] should_failslab+0xc2/0x120 [ 315.581495][ T8491] __kvmalloc_node_noprof+0x116/0x970 [ 315.581521][ T8491] ? __pfx_aa_file_perm+0x10/0x10 [ 315.581557][ T8491] ? seq_read_iter+0x819/0x1270 [ 315.581596][ T8491] seq_read_iter+0x819/0x1270 [ 315.581629][ T8491] ? lock_acquire+0x1b9/0x370 [ 315.581682][ T8491] kernfs_fop_read_iter+0x46c/0x610 [ 315.581709][ T8491] ? rw_verify_area+0xce/0x6d0 [ 315.581741][ T8491] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 315.581768][ T8491] vfs_read+0x82e/0xb40 [ 315.581806][ T8491] ? __pfx_vfs_read+0x10/0x10 [ 315.581863][ T8491] ksys_read+0x12a/0x250 [ 315.581897][ T8491] ? __pfx_ksys_read+0x10/0x10 [ 315.581940][ T8491] do_syscall_64+0x115/0x840 [ 315.581964][ T8491] ? clear_bhb_loop+0x40/0x90 [ 315.581992][ T8491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.582016][ T8491] RIP: 0033:0x7fc50659de99 [ 315.582034][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.582056][ T8491] RSP: 002b:00007fc5073d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.582081][ T8491] RAX: ffffffffffffffda RBX: 00007fc506825fa0 RCX: 00007fc50659de99 [ 315.582096][ T8491] RDX: 0000000000000049 RSI: 0000200000000200 RDI: 0000000000000003 [ 315.582109][ T8491] RBP: 00007fc5073d8090 R08: 0000000000000000 R09: 0000000000000000 [ 315.582123][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.582136][ T8491] R13: 00007fc506826038 R14: 00007fc506825fa0 R15: 00007ffe01dbc3d8 [ 315.582166][ T8491] [ 317.199687][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.218599][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.260179][ T8501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.471'. [ 317.450607][ T8501] bridge0: entered promiscuous mode [ 317.483706][ T8501] bridge0: entered allmulticast mode [ 320.032850][ T8551] FAULT_INJECTION: forcing a failure. [ 320.032850][ T8551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.105070][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.4.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.105109][ T8551] Tainted: [L]=SOFTLOCKUP [ 320.105119][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.105132][ T8551] Call Trace: [ 320.105142][ T8551] [ 320.105151][ T8551] dump_stack_lvl+0x100/0x190 [ 320.105228][ T8551] should_fail_ex.cold+0x5/0xa [ 320.105253][ T8551] _copy_to_iter+0x1f3/0x1720 [ 320.105288][ T8551] ? __mutex_unlock_slowpath+0x35d/0x930 [ 320.105316][ T8551] ? __pfx__copy_to_iter+0x10/0x10 [ 320.105347][ T8551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 320.105384][ T8551] ? kernfs_put_active+0x93/0xe0 [ 320.105425][ T8551] seq_read_iter+0xdab/0x1270 [ 320.105472][ T8551] kernfs_fop_read_iter+0x46c/0x610 [ 320.105498][ T8551] ? rw_verify_area+0xce/0x6d0 [ 320.105544][ T8551] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 320.105573][ T8551] vfs_read+0x82e/0xb40 [ 320.105610][ T8551] ? __pfx_vfs_read+0x10/0x10 [ 320.105664][ T8551] ksys_read+0x12a/0x250 [ 320.105699][ T8551] ? __pfx_ksys_read+0x10/0x10 [ 320.105749][ T8551] do_syscall_64+0x115/0x840 [ 320.105778][ T8551] ? clear_bhb_loop+0x40/0x90 [ 320.105809][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.105839][ T8551] RIP: 0033:0x7fc50659de99 [ 320.105858][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.105882][ T8551] RSP: 002b:00007fc5073d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.105904][ T8551] RAX: ffffffffffffffda RBX: 00007fc506825fa0 RCX: 00007fc50659de99 [ 320.105919][ T8551] RDX: 0000000000000049 RSI: 0000200000000200 RDI: 0000000000000003 [ 320.105932][ T8551] RBP: 00007fc5073d8090 R08: 0000000000000000 R09: 0000000000000000 [ 320.105945][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.105959][ T8551] R13: 00007fc506826038 R14: 00007fc506825fa0 R15: 00007ffe01dbc3d8 [ 320.105990][ T8551] [ 320.665668][ T8563] syz.1.482 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 320.731178][ T8563] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 321.362237][ T30] audit: type=1800 audit(4294977343.964:11): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.484" name="members" dev="configfs" ino=25240 res=0 errno=0 [ 325.562599][ T8616] FAULT_INJECTION: forcing a failure. [ 325.562599][ T8616] name failslab, interval 1, probability 0, space 0, times 0 [ 325.645750][ T8616] CPU: 0 UID: 0 PID: 8616 Comm: syz.4.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.645788][ T8616] Tainted: [L]=SOFTLOCKUP [ 325.645796][ T8616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.645810][ T8616] Call Trace: [ 325.645818][ T8616] [ 325.645826][ T8616] dump_stack_lvl+0x100/0x190 [ 325.645858][ T8616] should_fail_ex.cold+0x5/0xa [ 325.645885][ T8616] should_failslab+0xc2/0x120 [ 325.645918][ T8616] __kmalloc_cache_noprof+0x91/0x6c0 [ 325.645959][ T8616] ? trace_pid_list_alloc+0x232/0x480 [ 325.645997][ T8616] trace_pid_list_alloc+0x232/0x480 [ 325.646032][ T8616] trace_pid_write+0x110/0x460 [ 325.646066][ T8616] ? __pfx_trace_pid_write+0x10/0x10 [ 325.646115][ T8616] event_pid_write.isra.0+0x1e4/0x7d0 [ 325.646152][ T8616] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 325.646196][ T8616] vfs_write+0x2aa/0x1050 [ 325.646234][ T8616] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 325.646272][ T8616] ? __pfx_vfs_write+0x10/0x10 [ 325.646317][ T8616] ? __fget_files+0x215/0x3d0 [ 325.646361][ T8616] ? __fget_files+0x21f/0x3d0 [ 325.646405][ T8616] ksys_write+0x12a/0x250 [ 325.646442][ T8616] ? __pfx_ksys_write+0x10/0x10 [ 325.646487][ T8616] do_syscall_64+0x115/0x840 [ 325.646511][ T8616] ? clear_bhb_loop+0x40/0x90 [ 325.646564][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.646589][ T8616] RIP: 0033:0x7fc50659de99 [ 325.646608][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.646631][ T8616] RSP: 002b:00007fc5073d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.646654][ T8616] RAX: ffffffffffffffda RBX: 00007fc506825fa0 RCX: 00007fc50659de99 [ 325.646669][ T8616] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 325.646683][ T8616] RBP: 00007fc506633eaf R08: 0000000000000000 R09: 0000000000000000 [ 325.646697][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.646711][ T8616] R13: 00007fc506826038 R14: 00007fc506825fa0 R15: 00007ffe01dbc3d8 [ 325.646741][ T8616] [ 326.384872][ T8629] netlink: 'syz.4.497': attribute type 4 has an invalid length. [ 326.404802][ T8625] netlink: 'syz.5.493': attribute type 1 has an invalid length. [ 326.563837][ T8625] netlink: 1 bytes leftover after parsing attributes in process `syz.5.493'. [ 328.875928][ T8079] syz.5.396 (8079) used greatest stack depth: 18272 bytes left [ 329.053766][ T8682] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 329.925226][ T8692] HfR: entered promiscuous mode [ 331.791403][ T8687] kexec: Could not allocate control_code_buffer [ 332.024615][ T8687] Process accounting paused [ 332.613588][ T5636] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 332.613620][ T5636] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 332.635935][ T5636] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 335.077869][ T8770] FAULT_INJECTION: forcing a failure. [ 335.077869][ T8770] name failslab, interval 1, probability 0, space 0, times 0 [ 335.144817][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.4.521 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.144858][ T8770] Tainted: [L]=SOFTLOCKUP [ 335.144867][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.144883][ T8770] Call Trace: [ 335.144891][ T8770] [ 335.144901][ T8770] dump_stack_lvl+0x100/0x190 [ 335.144935][ T8770] should_fail_ex.cold+0x5/0xa [ 335.144965][ T8770] should_failslab+0xc2/0x120 [ 335.145001][ T8770] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 335.145034][ T8770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.145072][ T8770] ? alloc_unbound_pwq+0x3ff/0xdd0 [ 335.145122][ T8770] alloc_unbound_pwq+0x3ff/0xdd0 [ 335.145180][ T8770] apply_wqattrs_prepare+0x3aa/0xbb0 [ 335.145236][ T8770] apply_workqueue_attrs_locked+0x64/0xe0 [ 335.145282][ T8770] __alloc_workqueue+0xf55/0x1940 [ 335.145342][ T8770] alloc_workqueue_noprof+0xc7/0x130 [ 335.145375][ T8770] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 335.145412][ T8770] ? lockdep_init_map_type+0x5c/0x250 [ 335.145455][ T8770] ? lockdep_init_map_type+0x5c/0x250 [ 335.145502][ T8770] __rds_conn_create+0x1234/0x25a0 [ 335.145547][ T8770] ? __pfx___rds_conn_create+0x10/0x10 [ 335.145577][ T8770] ? __kasan_kmalloc+0xaa/0xb0 [ 335.145609][ T8770] ? lockdep_init_map_type+0x5c/0x250 [ 335.145657][ T8770] rds_conn_create_outgoing+0x44/0x60 [ 335.145693][ T8770] rds_sendmsg+0x10da/0x34a0 [ 335.145747][ T8770] ? __pfx_rds_sendmsg+0x10/0x10 [ 335.145788][ T8770] ? __pfx_aa_sk_perm+0x10/0x10 [ 335.145820][ T8770] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 335.145879][ T8770] ? ____sys_sendmsg+0xa4d/0xbe0 [ 335.145919][ T8770] ____sys_sendmsg+0xa4d/0xbe0 [ 335.145958][ T8770] ? __pfx_rds_sendmsg+0x10/0x10 [ 335.145999][ T8770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.146060][ T8770] ___sys_sendmsg+0x190/0x1e0 [ 335.146106][ T8770] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.146148][ T8770] ? __lock_acquire+0x49f/0x1a40 [ 335.146225][ T8770] __sys_sendmsg+0x160/0x210 [ 335.146259][ T8770] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.146311][ T8770] do_syscall_64+0x115/0x840 [ 335.146345][ T8770] ? clear_bhb_loop+0x40/0x90 [ 335.146378][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.146405][ T8770] RIP: 0033:0x7fc50659de99 [ 335.146426][ T8770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.146452][ T8770] RSP: 002b:00007fc5073d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.146477][ T8770] RAX: ffffffffffffffda RBX: 00007fc506825fa0 RCX: 00007fc50659de99 [ 335.146495][ T8770] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 335.146511][ T8770] RBP: 00007fc506633eaf R08: 0000000000000000 R09: 0000000000000000 [ 335.146527][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.146542][ T8770] R13: 00007fc506826038 R14: 00007fc506825fa0 R15: 00007ffe01dbc3d8 [ 335.146576][ T8770] [ 336.633609][ T8794] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 341.054265][ T7998] syz.5.383 (7998) used greatest stack depth: 18160 bytes left [ 347.139665][ T8913] netlink: 'syz.4.549': attribute type 28 has an invalid length. [ 347.178899][ T8913] netlink: 334 bytes leftover after parsing attributes in process `syz.4.549'. [ 347.650077][ T8916] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 351.051964][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 351.302333][ T8947] HfR: entered promiscuous mode [ 353.934039][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 354.027040][ T9002] deleting an unspecified loop device is not supported. [ 355.601074][ T9020] sysfs_service_op_show: Client not running :-5: [ 356.972173][ T9050] netlink: 'syz.5.576': attribute type 4 has an invalid length. [ 357.745149][ T5636] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 357.752820][ T5636] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 359.998865][ T5720] Process accounting resumed [ 361.066224][ T9089] Process accounting resumed [ 363.341991][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 363.424825][ T9130] netlink: 13 bytes leftover after parsing attributes in process `syz.1.589'. [ 365.824797][ T9166] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 368.089231][ T9182] zswap: compressor not available [ 369.604101][ T9196] FAULT_INJECTION: forcing a failure. [ 369.604101][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 369.670949][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.1.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.670993][ T9196] Tainted: [L]=SOFTLOCKUP [ 369.671001][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.671015][ T9196] Call Trace: [ 369.671022][ T9196] [ 369.671031][ T9196] dump_stack_lvl+0x100/0x190 [ 369.671061][ T9196] should_fail_ex.cold+0x5/0xa [ 369.671088][ T9196] should_failslab+0xc2/0x120 [ 369.671120][ T9196] __kmalloc_cache_noprof+0x91/0x6c0 [ 369.671158][ T9196] ? lockdep_init_map_type+0x5c/0x250 [ 369.671203][ T9196] ? fuse_pqueue_alloc+0x44/0xe0 [ 369.671237][ T9196] fuse_pqueue_alloc+0x44/0xe0 [ 369.671265][ T9196] fuse_dev_chan_new+0x2a/0x2b0 [ 369.671291][ T9196] ? kobject_get_unless_zero+0x156/0x200 [ 369.671326][ T9196] cuse_channel_open+0x1f/0x8e0 [ 369.671351][ T9196] ? __pfx_cuse_channel_open+0x10/0x10 [ 369.671377][ T9196] misc_open+0x26d/0x450 [ 369.671400][ T9196] ? __pfx_misc_open+0x10/0x10 [ 369.671422][ T9196] chrdev_open+0x234/0x6a0 [ 369.671444][ T9196] ? __pfx_apparmor_file_open+0x10/0x10 [ 369.671469][ T9196] ? __pfx_chrdev_open+0x10/0x10 [ 369.671498][ T9196] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 369.671530][ T9196] do_dentry_open+0x6ab/0x14d0 [ 369.671569][ T9196] ? __pfx_chrdev_open+0x10/0x10 [ 369.671602][ T9196] vfs_open+0x82/0x3f0 [ 369.671634][ T9196] path_openat+0x2873/0x4280 [ 369.671668][ T9196] ? __pfx_path_openat+0x10/0x10 [ 369.671698][ T9196] do_file_open+0x20e/0x430 [ 369.671722][ T9196] ? __pfx_do_file_open+0x10/0x10 [ 369.671766][ T9196] ? alloc_fd+0x471/0x7a0 [ 369.671807][ T9196] ? do_getname+0x191/0x390 [ 369.671844][ T9196] do_sys_openat2+0x10f/0x1e0 [ 369.671874][ T9196] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.671907][ T9196] ? __fget_files+0x21f/0x3d0 [ 369.671957][ T9196] __x64_sys_openat+0x12d/0x210 [ 369.671994][ T9196] ? __pfx___x64_sys_openat+0x10/0x10 [ 369.672036][ T9196] do_syscall_64+0x115/0x840 [ 369.672060][ T9196] ? clear_bhb_loop+0x40/0x90 [ 369.672089][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.672113][ T9196] RIP: 0033:0x7f32c619de99 [ 369.672132][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.672154][ T9196] RSP: 002b:00007f32c43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.672177][ T9196] RAX: ffffffffffffffda RBX: 00007f32c6425fa0 RCX: 00007f32c619de99 [ 369.672192][ T9196] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 369.672207][ T9196] RBP: 00007f32c6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 369.672227][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.672241][ T9196] R13: 00007f32c6426038 R14: 00007f32c6425fa0 R15: 00007ffd420fbff8 [ 369.672271][ T9196] [ 371.481758][ T9207] FAULT_INJECTION: forcing a failure. [ 371.481758][ T9207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.524282][ T9207] CPU: 0 UID: 0 PID: 9207 Comm: syz.5.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.524319][ T9207] Tainted: [L]=SOFTLOCKUP [ 371.524327][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.524342][ T9207] Call Trace: [ 371.524349][ T9207] [ 371.524358][ T9207] dump_stack_lvl+0x100/0x190 [ 371.524389][ T9207] should_fail_ex.cold+0x5/0xa [ 371.524416][ T9207] _copy_to_user+0x32/0xd0 [ 371.524452][ T9207] simple_read_from_buffer+0xcb/0x170 [ 371.524492][ T9207] proc_fail_nth_read+0x1af/0x230 [ 371.524524][ T9207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.524556][ T9207] ? rw_verify_area+0xce/0x6d0 [ 371.524591][ T9207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.524619][ T9207] vfs_readv+0x5d8/0x8d0 [ 371.524661][ T9207] ? __pfx_vfs_readv+0x10/0x10 [ 371.524715][ T9207] ? __fget_files+0x21f/0x3d0 [ 371.524758][ T9207] ? do_readv+0x13e/0x340 [ 371.524794][ T9207] do_readv+0x13e/0x340 [ 371.524828][ T9207] ? __pfx_do_readv+0x10/0x10 [ 371.524879][ T9207] do_syscall_64+0x115/0x840 [ 371.524903][ T9207] ? clear_bhb_loop+0x40/0x90 [ 371.524933][ T9207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.524958][ T9207] RIP: 0033:0x7f18c059de99 [ 371.524977][ T9207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.525000][ T9207] RSP: 002b:00007f18c1395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 371.525022][ T9207] RAX: ffffffffffffffda RBX: 00007f18c0826090 RCX: 00007f18c059de99 [ 371.525037][ T9207] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 371.525051][ T9207] RBP: 00007f18c0633eaf R08: 0000000000000000 R09: 0000000000000000 [ 371.525065][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.525079][ T9207] R13: 00007f18c0826128 R14: 00007f18c0826090 R15: 00007ffd58e34478 [ 371.525108][ T9207] [ 372.965574][ T9215] FAULT_INJECTION: forcing a failure. [ 372.965574][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 373.040116][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.1.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.040154][ T9215] Tainted: [L]=SOFTLOCKUP [ 373.040162][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.040176][ T9215] Call Trace: [ 373.040183][ T9215] [ 373.040192][ T9215] dump_stack_lvl+0x100/0x190 [ 373.040223][ T9215] should_fail_ex.cold+0x5/0xa [ 373.040251][ T9215] should_failslab+0xc2/0x120 [ 373.040284][ T9215] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 373.040314][ T9215] ? shmem_alloc_inode+0x25/0x50 [ 373.040349][ T9215] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 373.040381][ T9215] shmem_alloc_inode+0x25/0x50 [ 373.040410][ T9215] alloc_inode+0x68/0x250 [ 373.040439][ T9215] new_inode+0x22/0x1c0 [ 373.040473][ T9215] shmem_get_inode+0x1e3/0xf70 [ 373.040509][ T9215] ? __pfx_shmem_get_inode+0x10/0x10 [ 373.040550][ T9215] __shmem_file_setup+0x382/0x460 [ 373.040585][ T9215] ? __pfx___shmem_file_setup+0x10/0x10 [ 373.040629][ T9215] ? vm_area_alloc+0x1f/0x160 [ 373.040671][ T9215] shmem_zero_setup+0x96/0x1b0 [ 373.040698][ T9215] __mmap_region+0x24ef/0x2db0 [ 373.040726][ T9215] ? __pfx___mmap_region+0x10/0x10 [ 373.040754][ T9215] ? do_raw_spin_lock+0x128/0x260 [ 373.040787][ T9215] ? do_raw_spin_unlock+0x145/0x1e0 [ 373.040813][ T9215] ? debug_object_activate+0x343/0x4b0 [ 373.040850][ T9215] ? __pfx_debug_object_activate+0x10/0x10 [ 373.040883][ T9215] ? __lock_acquire+0x49f/0x1a40 [ 373.040931][ T9215] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 373.040973][ T9215] ? rcu_is_watching+0x12/0xc0 [ 373.041000][ T9215] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 373.041023][ T9215] ? lockdep_hardirqs_on+0x78/0x100 [ 373.041091][ T9215] mmap_region+0x35d/0x620 [ 373.041116][ T9215] ? rcu_is_watching+0x12/0xc0 [ 373.041142][ T9215] ? __pfx_mmap_region+0x10/0x10 [ 373.041169][ T9215] ? cap_mmap_addr+0x4b/0x120 [ 373.041190][ T9215] ? bpf_lsm_mmap_addr+0x9/0x30 [ 373.041227][ T9215] ? security_mmap_addr+0x71/0x1e0 [ 373.041258][ T9215] ? __get_unmapped_area+0x255/0x3e0 [ 373.041295][ T9215] do_mmap+0xc63/0x12f0 [ 373.041331][ T9215] ? __pfx_do_mmap+0x10/0x10 [ 373.041363][ T9215] ? __pfx_down_write_killable+0x10/0x10 [ 373.041391][ T9215] ? __pfx_futex_wait+0x10/0x10 [ 373.041424][ T9215] vm_mmap_pgoff+0x29e/0x470 [ 373.041460][ T9215] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 373.041496][ T9215] ? __pfx_do_futex+0x10/0x10 [ 373.041524][ T9215] ksys_mmap_pgoff+0xe4/0x610 [ 373.041555][ T9215] ? __x64_sys_futex+0x358/0x4d0 [ 373.041579][ T9215] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 373.041610][ T9215] ? xfd_validate_state+0x129/0x190 [ 373.041647][ T9215] __x64_sys_mmap+0x125/0x190 [ 373.041678][ T9215] do_syscall_64+0x115/0x840 [ 373.041702][ T9215] ? clear_bhb_loop+0x40/0x90 [ 373.041731][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.041755][ T9215] RIP: 0033:0x7f32c619de99 [ 373.041775][ T9215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.041797][ T9215] RSP: 002b:00007f32c43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 373.041820][ T9215] RAX: ffffffffffffffda RBX: 00007f32c6425fa0 RCX: 00007f32c619de99 [ 373.041835][ T9215] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 373.041849][ T9215] RBP: 00007f32c6233eaf R08: 0000000000000401 R09: 0000000000008000 [ 373.041863][ T9215] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 373.041885][ T9215] R13: 00007f32c6426038 R14: 00007f32c6425fa0 R15: 00007ffd420fbff8 [ 373.041920][ T9215] [ 373.827406][ T30] audit: type=1800 audit(4294977396.525:12): pid=9216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.609" name="dbroot" dev="configfs" ino=29020 res=0 errno=0 [ 374.433227][ T4946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.448874][ T4946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.472974][ T4946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.497371][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.526323][ T4946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.808730][ T9245] ubi0: attaching mtd0 [ 374.922199][ T5642] Process accounting resumed [ 374.983646][ T9245] ubi0: scanning is finished [ 375.099519][ T9245] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 375.490556][ T9250] FAULT_INJECTION: forcing a failure. [ 375.490556][ T9250] name fail_futex, interval 1, probability 0, space 0, times 0 [ 375.547094][ T9245] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 375.643035][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.4.615 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.643084][ T9250] Tainted: [L]=SOFTLOCKUP [ 375.643094][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.643113][ T9250] Call Trace: [ 375.643123][ T9250] [ 375.643134][ T9250] dump_stack_lvl+0x100/0x190 [ 375.643172][ T9250] should_fail_ex.cold+0x5/0xa [ 375.643199][ T9250] get_futex_key+0x1d2/0x14f0 [ 375.643242][ T9250] ? __pfx_get_futex_key+0x10/0x10 [ 375.643282][ T9250] ? trace_ignore_this_task+0xc3/0x100 [ 375.643313][ T9250] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 375.643356][ T9250] futex_wait_setup+0x91/0x540 [ 375.643394][ T9250] __futex_wait+0x19f/0x300 [ 375.643426][ T9250] ? __pfx___futex_wait+0x10/0x10 [ 375.643454][ T9250] ? __pfx_try_to_wake_up+0x10/0x10 [ 375.643476][ T9250] ? futex_hash+0x311/0x400 [ 375.643525][ T9250] ? __pfx_futex_wake_mark+0x10/0x10 [ 375.643560][ T9250] ? find_held_lock+0x2b/0x80 [ 375.643587][ T9250] ? futex_wake+0x4ea/0x5e0 [ 375.643622][ T9250] futex_wait+0xe6/0x370 [ 375.643652][ T9250] ? __pfx_futex_wait+0x10/0x10 [ 375.643697][ T9250] do_futex+0x265/0x440 [ 375.643724][ T9250] ? __pfx_do_futex+0x10/0x10 [ 375.643757][ T9250] __x64_sys_futex+0x34f/0x4d0 [ 375.643788][ T9250] ? putname+0xb1/0x110 [ 375.643811][ T9250] ? __pfx___x64_sys_futex+0x10/0x10 [ 375.643846][ T9250] do_syscall_64+0x115/0x840 [ 375.643873][ T9250] ? clear_bhb_loop+0x40/0x90 [ 375.643902][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.643927][ T9250] RIP: 0033:0x7fc50659de99 [ 375.643945][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.643968][ T9250] RSP: 002b:00007fc5073960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.643990][ T9250] RAX: ffffffffffffffda RBX: 00007fc506826188 RCX: 00007fc50659de99 [ 375.644005][ T9250] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc506826188 [ 375.644019][ T9250] RBP: 00007fc506826180 R08: 0000000000000000 R09: 0000000000000000 [ 375.644035][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.644049][ T9250] R13: 00007fc506826218 R14: 00007ffe01dbc2f0 R15: 00007ffe01dbc3d8 [ 375.644078][ T9250] [ 376.623782][ T4946] Bluetooth: hci5: command tx timeout [ 378.325402][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.331798][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.710182][ T4946] Bluetooth: hci5: command tx timeout [ 379.249721][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.313181][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.362159][ T9237] bridge_slave_0: entered allmulticast mode [ 379.423642][ T9237] bridge_slave_0: entered promiscuous mode [ 379.490528][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.539903][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.560993][ T9281] can: request_module (can-proto-3) failed. [ 379.597375][ T9237] bridge_slave_1: entered allmulticast mode [ 379.640193][ T9237] bridge_slave_1: entered promiscuous mode [ 379.951141][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.063121][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.494147][ T9237] team0: Port device team_slave_0 added [ 380.589660][ T9237] team0: Port device team_slave_1 added [ 380.779966][ T4946] Bluetooth: hci5: command tx timeout [ 380.857038][ T31] INFO: task kworker/u8:7:1111 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.897693][ T31] Tainted: G L syzkaller #0 [ 380.955942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.989719][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.034858][ T31] task:kworker/u8:7 state:D stack:23496 pid:1111 tgid:1111 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 381.058583][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.159574][ T31] Workqueue: netns cleanup_net [ 381.201220][ T31] Call Trace: [ 381.210725][ T31] [ 381.232394][ T31] __schedule+0x125c/0x6730 [ 381.256148][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.275947][ T31] ? __pfx___schedule+0x10/0x10 [ 381.310705][ T31] ? find_held_lock+0x2b/0x80 [ 381.347721][ T31] ? schedule+0x225/0x2c0 [ 381.377263][ T31] schedule+0xdd/0x2c0 [ 381.399048][ T31] schedule_timeout+0x1b2/0x280 [ 381.429427][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 381.480129][ T31] ? mark_held_locks+0x40/0x70 [ 381.527337][ T31] __wait_for_common+0x2e7/0x4c0 [ 381.575844][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 381.623194][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 381.651001][ T31] remove_one+0x312/0x420 [ 381.678624][ T31] ? up_write+0x2e5/0x5c0 [ 381.707157][ T31] __simple_recursive_removal+0x148/0x5c0 [ 381.740011][ T31] ? __pfx_remove_one+0x10/0x10 [ 381.757290][ T31] debugfs_remove+0x5d/0x80 [ 381.778301][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 381.799154][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 381.838698][ T31] nsim_dev_reload_down+0x66/0xd0 [ 381.860662][ T31] devlink_reload+0x1ae/0x7a0 [ 381.880053][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 381.905868][ T31] devlink_pernet_pre_exit+0x247/0x370 [ 381.928715][ T31] ? iput.part.0+0x1a0/0x1050 [ 381.951206][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 381.957385][ T31] ? iput+0x3a/0x40 [ 381.962978][ T31] ? sock_release+0x14d/0x1c0 [ 381.974518][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 381.993424][ T31] ops_undo_list+0x187/0xab0 [ 381.999543][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 382.010914][ T31] ? cleanup_net+0x332/0x920 [ 382.021036][ T31] ? cleanup_net+0x332/0x920 [ 382.033528][ T31] ? idr_destroy+0x62/0x2e0 [ 382.050732][ T31] cleanup_net+0x499/0x920 [ 382.056477][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 382.070663][ T31] ? rcu_is_watching+0x12/0xc0 [ 382.075513][ T31] process_one_work+0xa23/0x1940 [ 382.090518][ T31] ? __pfx_process_one_work+0x10/0x10 [ 382.096065][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 382.110580][ T31] worker_thread+0x5ef/0xe50 [ 382.120602][ T31] ? __pfx_worker_thread+0x10/0x10 [ 382.133003][ T31] ? kthread+0x13a/0x450 [ 382.142408][ T31] ? __pfx_worker_thread+0x10/0x10 [ 382.159991][ T31] kthread+0x370/0x450 [ 382.164169][ T31] ? __pfx_kthread+0x10/0x10 [ 382.168788][ T31] ret_from_fork+0x72b/0xd50 [ 382.190145][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 382.195377][ T31] ? __switch_to+0x800/0x10f0 [ 382.201855][ T31] ? __switch_to_asm+0x39/0x70 [ 382.219679][ T31] ? __pfx_kthread+0x10/0x10 [ 382.224352][ T31] ret_from_fork_asm+0x1a/0x30 [ 382.229158][ T31] [ 382.253593][ T31] INFO: task syz.3.273:7322 blocked for more than 144 seconds. [ 382.299499][ T31] Tainted: G L syzkaller #0 [ 382.319272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.330413][ T31] task:syz.3.273 state:D stack:26056 pid:7322 tgid:7321 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 382.369489][ T31] Call Trace: [ 382.372859][ T31] [ 382.375828][ T31] __schedule+0x125c/0x6730 [ 382.388973][ T31] ? do_raw_spin_lock+0x128/0x260 [ 382.395546][ T31] ? __pfx___schedule+0x10/0x10 [ 382.408987][ T31] ? find_held_lock+0x2b/0x80 [ 382.418869][ T31] ? schedule+0x225/0x2c0 [ 382.430092][ T31] schedule+0xdd/0x2c0 [ 382.437981][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.458674][ T31] __mutex_lock+0xccc/0x1bd0 [ 382.463349][ T31] ? devlink_health_report+0x656/0xb00 [ 382.478358][ T31] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 382.485986][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.499359][ T31] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 382.518287][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 382.525040][ T31] ? devlink_health_report+0x656/0xb00 [ 382.540809][ T31] devlink_health_report+0x656/0xb00 [ 382.557965][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 382.569044][ T31] ? _copy_from_user+0x59/0xd0 [ 382.580486][ T31] nsim_dev_health_break_write+0x166/0x210 [ 382.597976][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 382.606047][ T31] ? lock_acquire+0x5e/0x370 [ 382.618379][ T31] full_proxy_write+0x135/0x1a0 [ 382.629531][ T31] vfs_write+0x2aa/0x1050 [ 382.641743][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 382.658915][ T31] ? __pfx_vfs_write+0x10/0x10 [ 382.665273][ T31] ? __fget_files+0x215/0x3d0 [ 382.677430][ T31] ? __fget_files+0x21f/0x3d0 [ 382.688592][ T31] ksys_write+0x12a/0x250 [ 382.697520][ T31] ? __pfx_ksys_write+0x10/0x10 [ 382.707401][ T31] do_syscall_64+0x115/0x840 [ 382.717419][ T31] ? clear_bhb_loop+0x40/0x90 [ 382.728011][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.738828][ T31] RIP: 0033:0x7fc664d9de99 [ 382.757736][ T31] RSP: 002b:00007fc665be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.766401][ T31] RAX: ffffffffffffffda RBX: 00007fc665025fa0 RCX: 00007fc664d9de99 [ 382.797702][ T31] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000005 [ 382.816753][ T31] RBP: 00007fc664e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 382.826799][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.848369][ T4946] Bluetooth: hci5: command tx timeout [ 382.867015][ T31] R13: 00007fc665026038 R14: 00007fc665025fa0 R15: 00007ffd20c066a8 [ 382.887928][ T31] [ 382.911694][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.928334][ T31] [ 382.928334][ T31] Showing all locks held in the system: [ 382.958796][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.998705][ T31] 1 lock held by khungtaskd/31: [ 383.022988][ T31] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 383.056170][ T31] 3 locks held by kworker/u8:6/204: [ 383.076988][ T31] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 383.095415][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.130449][ T31] #1: ffffc90003147d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 383.173396][ T31] #2: ffffffff90a9f1c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 383.214246][ T31] 6 locks held by kworker/u8:7/1111: [ 383.233465][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 383.284321][ T31] #1: ffffc9000560fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 383.305067][ T31] #2: ffffffff90a865c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 383.334004][ T31] #3: ffff888033cc4128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 383.372943][ T31] #4: ffff888033cc6258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 383.423542][ T31] #5: ffff88805b409e20 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 383.458561][ T31] 2 locks held by getty/5386: [ 383.476860][ T31] #0: ffff8880378470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 383.513076][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 383.532879][ T31] 2 locks held by kworker/u8:16/6116: [ 383.542976][ T31] #0: ffff88801ef9b140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 383.570063][ T31] #1: ffffc90003247d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 383.597217][ T31] 1 lock held by syz-executor/7154: [ 383.612571][ T31] #0: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 383.632722][ T31] 3 locks held by syz.3.273/7322: [ 383.642515][ T31] #0: ffff88802375e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 383.661098][ T31] #1: ffff8880206d8450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 383.682681][ T31] #2: ffff888033cc6258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 383.712808][ T31] 1 lock held by syz.0.581/9068: [ 383.719281][ T31] 1 lock held by syz.5.612/9231: [ 383.731980][ T31] #0: ffff88806acf8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 383.752116][ T31] 3 locks held by syz.1.619/9286: [ 383.762705][ T31] #0: ffffffff90a865c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 383.781746][ T31] #1: ffffffff90a9f1c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 383.801754][ T31] #2: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 383.896901][ T31] [ 383.910247][ T31] ============================================= [ 383.910247][ T31] [ 383.984870][ T31] NMI backtrace for cpu 0 [ 383.984892][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 383.984925][ T31] Tainted: [L]=SOFTLOCKUP [ 383.984933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.984946][ T31] Call Trace: [ 383.984954][ T31] [ 383.984967][ T31] dump_stack_lvl+0x100/0x190 [ 383.984998][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 383.985032][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 383.985060][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 383.985099][ T31] sys_info+0x141/0x190 [ 383.985127][ T31] watchdog+0xcb1/0x1030 [ 383.985164][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 383.985202][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.985233][ T31] ? __kthread_parkme+0x18c/0x230 [ 383.985260][ T31] ? kthread+0x13a/0x450 [ 383.985286][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.985315][ T31] kthread+0x370/0x450 [ 383.985342][ T31] ? __pfx_kthread+0x10/0x10 [ 383.985371][ T31] ret_from_fork+0x72b/0xd50 [ 383.985398][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 383.985426][ T31] ? __switch_to+0x800/0x10f0 [ 383.985458][ T31] ? __switch_to_asm+0x39/0x70 [ 383.985488][ T31] ? __pfx_kthread+0x10/0x10 [ 383.985518][ T31] ret_from_fork_asm+0x1a/0x30 [ 383.985562][ T31] [ 384.782589][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 384.789498][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 384.800231][ T31] Tainted: [L]=SOFTLOCKUP [ 384.804568][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.814645][ T31] Call Trace: [ 384.817962][ T31] [ 384.820913][ T31] dump_stack_lvl+0x100/0x190 [ 384.825630][ T31] vpanic+0x552/0x970 [ 384.829675][ T31] ? __pfx_vpanic+0x10/0x10 [ 384.834219][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 384.840426][ T31] panic+0xd1/0xe0 [ 384.844180][ T31] ? __pfx_panic+0x10/0x10 [ 384.848628][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 384.854813][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 384.861011][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 384.867201][ T31] ? watchdog.cold+0x1ec/0x234 [ 384.871987][ T31] ? watchdog+0xcc1/0x1030 [ 384.876433][ T31] watchdog.cold+0x1fd/0x234 [ 384.881061][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 384.886905][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.891611][ T31] ? __kthread_parkme+0x18c/0x230 [ 384.896659][ T31] ? kthread+0x13a/0x450 [ 384.900926][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.905623][ T31] kthread+0x370/0x450 [ 384.909717][ T31] ? __pfx_kthread+0x10/0x10 [ 384.914336][ T31] ret_from_fork+0x72b/0xd50 [ 384.918952][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 384.924084][ T31] ? __switch_to+0x800/0x10f0 [ 384.928823][ T31] ? __switch_to_asm+0x39/0x70 [ 384.933613][ T31] ? __pfx_kthread+0x10/0x10 [ 384.938227][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.943026][ T31] [ 384.946136][ T31] Kernel Offset: disabled [ 384.950495][ T31] Rebooting in 86400 seconds..