last executing test programs: 4m30.047125133s ago: executing program 0 (id=427): r0 = open(&(0x7f0000000000)='./file0\x00', 0x12100, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x2009b72, r0, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r1) waitid$auto(0xffffff6e, 0xffffffffffffffff, 0x0, 0x66cd8758, 0x0) connect$auto(0x3, 0x0, 0x55) 4m29.389741325s ago: executing program 0 (id=429): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = open(0x0, 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, r3, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x80000001}, 0x2) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r2, 0x0, 0x6}, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) 4m28.975010214s ago: executing program 0 (id=431): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) r1 = memfd_create$auto(0x0, 0x4) ioctl$auto_FS_IOC_UNRESVSP(r1, 0x40305829, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x85) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) ioctl$auto(r0, 0x80045505, r0) 4m28.103562492s ago: executing program 0 (id=435): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0xa, 0x2, 0x0) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x0, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) connect$auto(0x3, 0x0, 0x54) 4m26.968492781s ago: executing program 0 (id=436): unshare$auto(0xffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x1, 0x5, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000) prctl$auto(0xa134, 0x22, r1, 0x800, 0x5) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) setresuid$auto(0x60, 0x1000, 0x607) ioctl$auto(r2, 0x2284, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x3, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x0, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9"}, 0x6, 0x7) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0xfffffffffffffffe, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) open(0x0, 0x0, 0x0) mkdir$auto(0x0, 0x353) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4m24.481845324s ago: executing program 0 (id=442): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x4) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2a, 0x2, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r3 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r3, &(0x7f0000000080)=""/18, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) write$auto_ppp_device_fops_ppp_generic(r5, &(0x7f00000000c0)="94cfedcb3c915f7d9efe68f87c2140c7a1f62d76174970b949a0fd38157507394f48761f4f44b82e53b6613cae9bdbde8264af8b328ea8b1e5c2ec467602674806eef29b6c1121dd95", 0x49) fdatasync$auto(r4) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r2, 0x0, 0x402, 0x0, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b63", 0x4) r6 = userfaultfd$auto(0x1) pwrite64$auto(0xc8, 0x0, 0xfffffffffffffff7, 0x7) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r6, 0x8000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r7) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="162b25bd7000fbdbdf250100020008002700000000000800270080000000"], 0x24}}, 0x40890) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x10080, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 4m20.938651622s ago: executing program 3 (id=450): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xffffffffffffffff) flock$auto(r3, 0x5) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) bpf$auto(0x6, &(0x7f00000001c0)=@bpf_attr_11={0x1000000009, 0x7fffffff, 0x8, 0x4, 0x8, 0x6c73, 0x4}, 0xfffffffc) (async) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 4m16.979167774s ago: executing program 3 (id=455): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = epoll_create$auto(0x4) sysfs$auto(0x5, 0x3bd, 0xe83ccc3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x3, 0x186) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) write$auto(r3, 0x0, 0x0) fcntl$auto_F_GETSIG(r1, 0xb, 0xab8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0xffffffffffffffff, 0x948b, 0x3, 0x95f4da0a, 0x1, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) write$auto(r4, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) mmap$auto(0x3, 0x2020009, 0x3, 0xeb6, r2, 0xe903) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r5, r6, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xe, 0xffffffffffffffff, 0x3, 0x10, 0x3, 0x2, 0x3, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r7, 0x104000000000010e, 0x5, 0x0, 0x400) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 4m15.788796293s ago: executing program 3 (id=460): socket(0xa, 0x3, 0x3b) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x11, 0x2, 0x1) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) socket(0x22, 0x3, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder0\x00', 0x0, 0x0) accept$auto(r0, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop6/queue/rq_affinity\x00', 0x121281, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x20000fe, 0xffffffffffffffff, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) write$auto_tracing_mark_raw_fops_trace(0xffffffffffffffff, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r1, 0x4, r1}, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) socket(0x1, 0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/pcmC0D0p\x00', 0xc0942, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB, @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(0xffffffffffffffff, 0x8919, 0x24) 4m15.25142213s ago: executing program 3 (id=462): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, 0x0, 0xc050) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc", 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), 0xffffffffffffffff) clone3$auto(0x0, 0xfffffffffffffff8) msgget$auto(0x1, 0x1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d0}, 0x4000000) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r5 = memfd_create$auto(&(0x7f0000000080)='nl802154\x00', 0x47f) fanotify_mark$auto(r5, 0x5, 0xfffffffffff8fffc, r3, &(0x7f0000000280)='./file0\x00') bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 4m13.16946909s ago: executing program 3 (id=467): mmap$auto(0x0, 0xffffffffffffffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x81) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/orangefs/op_timeout_secs\x00', 0x40, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0x41045508, r2) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/6, 0x6) fstat$auto(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x4, 0x3, 0xee00, 0x0, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffbff, 0x40, 0xd, 0x8, 0x3, 0x2, 0x2}) shmctl$auto_SHM_INFO(0x1000, 0xe, &(0x7f0000000240)={{0xc356, 0xee00, 0xee00, 0x7, 0xe, 0x3, 0x9ed2}, 0x9, 0x6, 0x40, 0x9, @inferred=0xffffffffffffffff, @inferred, 0xa, 0x0, &(0x7f0000000140)="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", &(0x7f0000000000)="07505cf5f29309ea8d76abf6"}) mmap$auto(0x0, 0x20009, 0x6, 0x40000800000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000002c0)={0x5, @raw=0x6, @inferred=r1, 0x3ff, 0xc9, '\x00', {0x1, 0x1ff, 0xc00, r3, r4, 0x4, 0x7fffffff, 0xb, {0x8, 0x7}, {0x9, 0x1}, {0x7, 0xffff}, 0x6, 0x8, 0x89c, 0xd, 0xfff, 0xae, 0x9, 0x6, 0x81, 0x5, '\x00', 0x6, 0x4, 0x7, 0x200}}) r6 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000400), r5) sendmsg$auto_NCSI_CMD_PKG_INFO(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000028}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) socket(0x1d, 0x2, 0x6) ioctl$auto(r0, 0x80045505, r0) 4m12.782043846s ago: executing program 3 (id=468): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x3, 0x7, 0x13, 0x7) prctl$auto(0xfffffff8, 0x1000000007ffd, 0x4, 0x5, 0x8000000000010004) (async) r0 = prctl$auto(0xfffffff8, 0x1000000007ffd, 0x4, 0x5, 0x8000000000010004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) (async) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x240c2, 0x0) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x42, 0x0, 0x0) getrandom$auto(0x0, 0xa, 0x3) (async) getrandom$auto(0x0, 0xa, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r4, 0x4b67, 0x1) r6 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r6, 0x29, 0x20, 0x0, 0x20) prctl$auto(0x3e, 0xf, 0x0, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r7, 0x80086601, 0x7fffffffbfffffff) 4m9.110358363s ago: executing program 32 (id=442): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x4) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2a, 0x2, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r3 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r3, &(0x7f0000000080)=""/18, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) write$auto_ppp_device_fops_ppp_generic(r5, &(0x7f00000000c0)="94cfedcb3c915f7d9efe68f87c2140c7a1f62d76174970b949a0fd38157507394f48761f4f44b82e53b6613cae9bdbde8264af8b328ea8b1e5c2ec467602674806eef29b6c1121dd95", 0x49) fdatasync$auto(r4) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r2, 0x0, 0x402, 0x0, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b63", 0x4) r6 = userfaultfd$auto(0x1) pwrite64$auto(0xc8, 0x0, 0xfffffffffffffff7, 0x7) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r6, 0x8000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r7) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="162b25bd7000fbdbdf250100020008002700000000000800270080000000"], 0x24}}, 0x40890) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x10080, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 3m57.519119053s ago: executing program 33 (id=468): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x3, 0x7, 0x13, 0x7) prctl$auto(0xfffffff8, 0x1000000007ffd, 0x4, 0x5, 0x8000000000010004) (async) r0 = prctl$auto(0xfffffff8, 0x1000000007ffd, 0x4, 0x5, 0x8000000000010004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) (async) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x240c2, 0x0) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x42, 0x0, 0x0) getrandom$auto(0x0, 0xa, 0x3) (async) getrandom$auto(0x0, 0xa, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r4, 0x4b67, 0x1) r6 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r6, 0x29, 0x20, 0x0, 0x20) prctl$auto(0x3e, 0xf, 0x0, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r7, 0x80086601, 0x7fffffffbfffffff) 1m2.83921476s ago: executing program 2 (id=1047): mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@_si_pad}, 0x3, &(0x7f00000000c0)={{0x8, 0x9}, {0x4800000, 0x77c293a2}, 0x80, 0x21, 0x5, 0x9, 0x7, 0x2, 0x5, 0x1, 0x4, 0x1, 0x8, 0x9, 0x4, 0xfffffffffffffffb}) prctl$auto(0x3d, 0x401, r0, 0x8000004, 0x5) madvise$auto(0x4, 0x1000, 0x19) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11\x11\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de152"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140), 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000400039d120001f900898771f10db3f20b04859082884700"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1m1.455257322s ago: executing program 2 (id=1053): mmap$auto(0x4, 0x3, 0xffffffffffff0000, 0x1000426b5, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x27, 0x80803, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x103041, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000440)='\xb4\x98\rU\x85\x10n2\xb7\xfc\xdan!~vZ\xd6\x147\xd73\xb5\xfe\x11\x9b`\x92\x8c\x12\x8a\xb1\xcd\x12i5\x1d\xaf~\x8b\xac\x16\xbbg\xe6U\xf4\xbf\xbb\xf0\xfc\xa70\xca\fz\xce)\x06^\xb9\xd4C\xc7\xda\x1c\xc5\xaa\xa7\xec8c\xdb\xea\x82\xbe]\x89\xd8\x9c/\x87<\xcd\xa5\xb7\xf5\x13zC45\xa9\xbe\x02\x92e\xf5\xa55d*\f:\x19A\\F\xb5\xb4\xbe\xce\x8fN\xa5\xdaXX\xb1@\xd3w\xb9\xa9\x94N\xcf2\xe6\xc2e\xa4\xee\x89\xfb\x86\xd5 \x821TU\x89\f\xac\xaaT\xec$2v\xa6=\x14\x95\f\x93e\xedG*\x87/\x04?f{\xe0\xdd\xcf\xa3\xc1\x90\x9d\xfd\xe8f\x8e\x9e\xa3\x9e\x8d\xc5hBh\x1f\xd8\'\x81_\x1cL8\x88\xa7LdF\xd9\x88\x84\x7f;\x1f\xa0\xa0b9VV\xb1u\a\xe1\x05\xc5\x1apj%j*\xd5K+\xbd\xce\x9e\x97\x1d\x9d\xf8r\xe7\xc4\"\x0f\xbd\xb0\xd9\xe4m2\xbf\xb1\xeb\x0e\xda\x9e\xc6\xf7>\'Q\xdd\xc3\x04\xdbf\x82l\xee`\x1dW\x05^\x82\xed{\x92.}\xc6\x06\x97\b\x9f\xb9}\x9e\xe63\xe4\xe8\xdc\x81;\xedEN\nk\xf5I\xa4\xe9\xf5~\xfe,DR\xba>\x8f\x1f\xa7cF\xd1\xb1\xd4\xc5\xc10N\xab\x1a\xeb\xe6L\x8a\x9c\xd0I\x92g', 0x8003) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xfdef}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000040)=0x3) madvise$auto(0x4000000000002, 0x4, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x6, 0x40eb1, 0x401, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0xc8000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) socket(0x11, 0x800, 0x80000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 59.554753222s ago: executing program 2 (id=1056): close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0) ioctl$auto(0x3, 0x540f, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x8000) (async, rerun: 64) mmap$auto(0xffffffffffffff86, 0x20000a00001, 0x8, 0x113, 0xffffffffffffffff, 0x8) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) (async) write$auto(0xffffffffffffffff, 0x0, 0x80000000) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6) (rerun: 32) write$auto(r3, 0x0, 0x100000a3d9) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x0, 0x8, 0x34d, 0x7fffffff) (rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) (async) unshare$auto(0x40000080) (async) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4001}, 0x90) (async, rerun: 64) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 59.238834278s ago: executing program 2 (id=1058): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, r0, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) 58.649850084s ago: executing program 2 (id=1062): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 32) bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20016, 0x9, 0x10000, 0x5f, 0x20000000000804, 0x2}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) (async) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={@raw, 0x2, &(0x7f00000000c0)=0x6, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) pread64$auto(r0, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) socket(0x2a, 0x2, 0x1) (async) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) 57.566934229s ago: executing program 2 (id=1063): mmap$auto(0x0, 0x400008, 0xdf, 0x9b75, 0xffffffffffffffff, 0xa2ac) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x34c, r1, @relative_fd=r0, 0xe600}, 0xf) bpf$auto(0x3, 0x0, 0xc) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x21, 0x940, 0x1ffde, 0x0, 0x4, 0x400000007, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x0, 0x5, 0x7, 0x1, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x1, 0x5, 0x0, 0xfffffffe, [0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0xff, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x9, 0x3, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x4757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0xae8, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x2, 0x0, 0x7fffffff, "9ba089084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) r5 = socket(0x26, 0x808, 0x1000) getsockopt$auto(r5, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) unshare$auto(0x40000080) mmap$auto(0x6, 0x40000c, 0xdf, 0x14, 0x2, 0x4) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/maps\x00', 0x4c202, 0x0) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0xc0404d1a, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x2) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) flock$auto(r7, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80e, 0xd) 42.097174088s ago: executing program 34 (id=1063): mmap$auto(0x0, 0x400008, 0xdf, 0x9b75, 0xffffffffffffffff, 0xa2ac) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x34c, r1, @relative_fd=r0, 0xe600}, 0xf) bpf$auto(0x3, 0x0, 0xc) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x21, 0x940, 0x1ffde, 0x0, 0x4, 0x400000007, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x0, 0x5, 0x7, 0x1, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x1, 0x5, 0x0, 0xfffffffe, [0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0xff, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x9, 0x3, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x4757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0xae8, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x2, 0x0, 0x7fffffff, "9ba089084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) r5 = socket(0x26, 0x808, 0x1000) getsockopt$auto(r5, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) unshare$auto(0x40000080) mmap$auto(0x6, 0x40000c, 0xdf, 0x14, 0x2, 0x4) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/maps\x00', 0x4c202, 0x0) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0xc0404d1a, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x2) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) flock$auto(r7, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80e, 0xd) 26.181515488s ago: executing program 5 (id=1173): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mincore$auto(0x1000, 0x4000000, 0x0) (async) mincore$auto(0x1000, 0x4000000, 0x0) listen$auto(0x3, 0x81) mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9u\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) ioctl$auto_FITHAW(r0, 0xc0045878, 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) socket(0xf, 0x3, 0x2) (async) r2 = socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffe2}, 0x1, 0x0, 0x0, 0x24000804}, 0x20040000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffe2}, 0x1, 0x0, 0x0, 0x24000804}, 0x20040000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd3d, 0x1, 0x1948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) ioctl$auto_EVIOCREVOKE(r1, 0x40044591, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x40, 0x0) (async) r3 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x40, 0x0) fallocate$auto(r3, 0x10000, 0x9, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x855}, 0x2000c044) pread64$auto(r0, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pselect6$auto(0x137, &(0x7f0000000100)={[0xfffffffffffff862, 0x6, 0x2, 0x620, 0x1, 0x4, 0xfffffffffffffffd, 0x6, 0x697, 0x9e4, 0x6000000000000000, 0x1, 0x0, 0x4, 0x100, 0x10001]}, &(0x7f00000001c0)={[0xc65, 0x5, 0xfffffffffffffff8, 0x7, 0x6, 0x626, 0x8000000000000002, 0x9, 0x0, 0x6, 0x7ff, 0x2, 0x40, 0x81, 0x800000000000, 0x9]}, &(0x7f0000000240)={[0x80000000, 0xfff, 0xa, 0x5, 0x4, 0x6, 0x9, 0x8, 0x5d20, 0x1, 0x800, 0xfffffffffffff2e8, 0xb, 0x4, 0x5000001, 0x1]}, &(0x7f0000000340)={0x9, 0x1}, &(0x7f0000000380)="7173e22ef95c356d6ac5723de8352d68f9e387b70596cd7c20af68247f1f021a762e59022fa12d6a8b361f0468") (async) pselect6$auto(0x137, &(0x7f0000000100)={[0xfffffffffffff862, 0x6, 0x2, 0x620, 0x1, 0x4, 0xfffffffffffffffd, 0x6, 0x697, 0x9e4, 0x6000000000000000, 0x1, 0x0, 0x4, 0x100, 0x10001]}, &(0x7f00000001c0)={[0xc65, 0x5, 0xfffffffffffffff8, 0x7, 0x6, 0x626, 0x8000000000000002, 0x9, 0x0, 0x6, 0x7ff, 0x2, 0x40, 0x81, 0x800000000000, 0x9]}, &(0x7f0000000240)={[0x80000000, 0xfff, 0xa, 0x5, 0x4, 0x6, 0x9, 0x8, 0x5d20, 0x1, 0x800, 0xfffffffffffff2e8, 0xb, 0x4, 0x5000001, 0x1]}, &(0x7f0000000340)={0x9, 0x1}, &(0x7f0000000380)="7173e22ef95c356d6ac5723de8352d68f9e387b70596cd7c20af68247f1f021a762e59022fa12d6a8b361f0468") select$auto(0x6, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x6, 0x16, 0x5, 0x100000001, 0xc, 0x9, 0x0, 0x1, 0x7ff, 0xd59, 0x101, 0x6, 0xfffffffffffffffe, 0x80000001]}, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sg1\x00', 0x0, 0x0) 24.773397183s ago: executing program 6 (id=1181): ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x49, 0xad, 0xb0, 0x8}, 0x50) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 24.49785945s ago: executing program 6 (id=1183): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) open(0x0, 0x4e8401, 0xe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) socket(0x2, 0x80002, 0x73) unshare$auto(0x8000000) unshare$auto(0x8000400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) 24.497554424s ago: executing program 5 (id=1184): r0 = socket(0x26, 0x808, 0x1000) bpf$auto(0x0, &(0x7f0000001880)=@bpf_attr_4={0xb, 0xffffffffffffffff, 0x5}, 0x5) getsockopt$auto(r0, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) unshare$auto(0x40000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, 0xffffffffffffffff, 0x28000) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x8) socket(0x1e, 0x4, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 23.654225755s ago: executing program 6 (id=1187): r0 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000300)="b6704cd04083b5e0e8eef15a38e914f573541a2af1ff59db924075dc206d16ed4cd427dcbe10380564dba4e0a18aa938c19707bd6f763eac163abfadae1fa9182522124b5dd989a8d65beeeb9e7b4b9cbc8331fadcf6a589417d52487979b30ec146f7255130227c02825a8c3be28e39da8b1f84bbae5a78e0d91f88f9bf116d1a794b476074be2f518ea3ab62a3220e2635e0ac2265ba") connect$auto(r0, &(0x7f0000000000)=@generic={0x3, "eff2f01ba99edc739f716616c9f8"}, 0xff) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x141000, 0x0) ioctl$auto_MEMREAD(r1, 0xc0404d1a, &(0x7f0000000240)={0x1, 0x5, 0x40, 0x4, 0x3, 0x9, '\x00', {0x9, 0x6, 0x80000000}}) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_GETLEASE(r0, 0x401, 0x5) (async) r2 = socket(0x10, 0x2, 0xc) (async) r3 = socket(0x22, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_STOP_AP(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x28c, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SAR_SPEC={0x220, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x54, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc58}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x19f}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS={0x84, 0x2, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6f6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7332}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x44}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1d7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}]}]}, @NL80211_SAR_ATTR_SPECS={0x12c, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x85}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x516}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x27}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbad5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2b4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9d9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x10}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x264d}]}, @NL80211_ATTR_EHT_CAPABILITY={0x55, 0x136, "f3a684f121ece52d3afae93343eb1f338ff7af0d262244c740f81e9f071125d77eb2ba1b5b2c3bf3e13dfcf3db5f14f603314794132b6be0e8699ea86937deb2746ecf5038831817cb91f91b8c91c2dbb8"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x800}, 0x48004) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '^.\x00'}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xe}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x46b7b005}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) r5 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40001) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth0_to_bridge\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'nr0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x214, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}]}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0b26d87000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='U'], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x5db}, 0xd69}, 0x3, 0x0) (async) ftruncate$auto(0x3, 0x400180200000) 22.977724502s ago: executing program 6 (id=1191): r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpu0/topology/package_cpus\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x200004000003, 0x100000001) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) mprotect$auto(0x200000000000, 0x806124, 0x8) write$auto_ctl_device_fops_user(r0, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) setsockopt$auto_SO_LOCK_FILTER(r0, 0x5, 0x2c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000001) 22.868861227s ago: executing program 5 (id=1192): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/mdc800/unbind\x00', 0x4d44c0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 22.518700493s ago: executing program 6 (id=1194): r0 = socket(0x26, 0x808, 0x1000) getsockopt$auto(r0, 0x7, 0xe, 0x0, &(0x7f0000000040)=0xb0) unshare$auto(0x40000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, 0xffffffffffffffff, 0x28000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={"f7bf8dd72904697ded1e24ca55bcacfb126f60eda7fc6e537192f9536f1606fe", 0x0, 0x674ec66b, 0x6, 0x4, 0x7}) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendto$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0x2, 0x0, 0x0) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x8) socket(0x32, 0x4, 0x1005) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 22.273863136s ago: executing program 5 (id=1195): r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x90801, 0x0) (async) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) setsockopt$auto_SO_LINGER(r0, 0xe32, 0xd, &(0x7f0000000080)='/proc/sys/kernel/timer_migration\x00', 0x7) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x1, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x40, 0x0) getsockopt$auto(r2, 0x40, 0x4, &(0x7f0000000280)='/dev/ttyS2\x00', &(0x7f00000002c0)=0x9) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)="6d69ad0f6e6f7b1990db709790c23dc4923330ae9fff484d822af64f8feaf34b1184e4b8e12bfed1782b2e10c37a006de41bfe82d03b4c90a8e6e9e3101b846146aaaaef1577057f5955e89a2624002b65c86b72d8ba9203a5ad9e66f1836289375167612032b4815bb9b3bf225469acc5a7c9e6cf8f835141302158d71a0942855e3be4b1ef2eeb1312a7ab78ea1743859cd31f7a911652a2601712c63859b62d8f5e84c000fbcd46937342c9074301205c8e8b57cc1c567d4b4912ce7a79ee866330") (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/1:0:0:0\x00', 0x4100, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88c0}, 0x1) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x408000) (async) semctl$auto(0x205, 0xffdffffa, 0x4, 0x8) (async) ioctl$auto(0xc8, 0x400454d4, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2a, 0x2, 0x8000) connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) (async, rerun: 64) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 64) 20.539203978s ago: executing program 5 (id=1198): openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x38000, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = epoll_create$auto(0x8800001) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000000c0)={0x3, 0x7, 0x1e9a800, @raw=0x9, &(0x7f0000000080)={@raw=0x4, 0x5, 0x80, 0x38cf, "42d7d512578bfde99f305d4196223bf2271e41d5be239c9800159f6debefea1c2748c795908f7d35efe7581d"}, "d5f84091ec7be7c891cb4a2ec2cfc25860deaa154afda783740b3308ecd30e9bae2a3ed09ffa3ae354dff23db67fe6c0d7ec"}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(r1, 0x1, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r3) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r3) 19.142665034s ago: executing program 5 (id=1200): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x4, 0x2020005, 0x3, 0x7fff, 0xfffffffffffffffa, 0x7ffc) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x3, 0x100000002020009, 0x3, 0x63b5, 0xfffffffffffffffa, 0x7ffc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC0\x00', 0x80, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev5\x00', 0x226200, 0x0) madvise$auto(0x0, 0xffffffffffff0003, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0xa, &(0x7f0000000400)='K.\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\xac\x17\x18T\x1f1\v\xf56i\x02l\xf3\xady\x02v\xac8\xf6\x17\x03\x85}s\xfa\x19+0\x0fX\xed\x1eg\xa3v\x11M/\xbe2x=i\x15\x1c^I\x8e;\xbaE\xf5\x0f\xa3z\xafnH\x1c\xd7\xdd\xc1\xc0\xac\xaa\xe9\xb8\x82\xb4\f\xcd\x8b=a\xcb\x01\xa8\xef\xe4g\xcb\x80\a\xfb\xa1g\xec\xb7c\x7f\x93j\xcca\xe9\xfbMY\x12\xf6\xb9,T\x97\xa7\x11\x00\xa7m\x1b\vi\"P\a\xa0\x13\n\xb1:\x9a\xc1\xa4\x01\xaa\x9b6C\xebh\xdb u_L\xa40\xf7\x9e\'\xc7\xf1\x93\x17\xa0\xeb \xe7\x103\xc3\xeb\xb5<\xa3\x98\x11\xe1\xd9F\xe2\xf6\\\vq\x90Q\xe5\xa4O\xbe\xa0\xde\xbd\xaa\xfcM\xf7\x87`@W\xc6\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00nZp\xb7n\x01\xb2\x12\xd6\x00\t\xf4\xefP\t\x9d\xc8~Ww\x04\xc6\xa4\'\xa0\xc6 \xd4\x149\x9b\xba\xc0\x10[\xcd\xa7\xb1\xc5\xe2\b\xab\x12\xf9\xc7=O\x15h\x12\x96r\xd2\xad!\x11\vw', 0x6) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25300e00001800018014000200776c616e31"], 0x2c}, 0x1, 0x1000000}, 0x8094) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111001, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x646) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x3eb7c2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae90, &(0x7f00000001c0)={0x5, 0x0, [{0x7, 0x7fe, 0x256a}, {0x1, 0x34, 0x1000000001005}, {0xe, 0x400000, 0x80000001}]}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) 17.370516265s ago: executing program 6 (id=1205): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06\x11\x00\x00\x00\x00?W\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') unshare$auto(0x40000080) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000140)=""/207, 0xcf) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 6.09154233s ago: executing program 1 (id=1243): socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyte\x00', 0x0, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f00000001c0)="4c91f2c388274610e12c861bb2bfd9800e9b394bbb4e725afa6d20907d4a42c71d94ba184ce7ff2caaa88ec51edd7915296bd6f67e5570b6a3a63eb8df3b26b3e38d7b31b903a3717ab964c0afd94560fe7b4dd137064518cb3c0ee8ff11c1ef4a180f01d2f684c00724bd02c4c23d0374d33dc38e672e3bf172f0549b989f9a53f74a1dd5cde9d5223c371a4a2f8af4b7db9bcdcf60a8dd58aa8c9e5a1aeddb0200694232292f127a95ff3fc83ec0c73343914f4554d278c33b02b95e9e6f32c3d67b4c9cf0ae19032f86b54ce23d2bcee13baa82d20395f7", 0xd9) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) pread64$auto(r3, &(0x7f0000000040)=',/+\x00', 0x9, 0x61) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 5.247303773s ago: executing program 1 (id=1244): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="000227bd7000fed9df252000000006000a0009000000050026000e0000004801308008003300", @ANYRES32=r0, @ANYBLOB="844d63e4b74e8f65cf57533672bab2f1752d15e6901447b4d024bc574c075987ce08d4c8b8639619fa01204d42db73ff2041fe1a57097ad6f5c8786638c3d7a20bb8ac31728e30661268c4856692c85b823f682198f196be0d33322c11672e3afaa836592c8e298d57926e1f9786c78d3ae6a118c7a70ed7f3b2394b9b7f24ef30d21958e5065373293e745ff61f24000a800800ff00000000000800b8000100000004005f800800d900ac1e000104006b8043107efcfc415ddb1f8b71c0698438c6869b165831df5fa5a3af8879dec340923c0995ff34be3417e0176a6f3035e166ddd9d7fc79d7d04f7b183d7c4b0f103ee56b3f8bfcb49f2eb148239c207e9a2c18b1f1bfedb8e74d8fe37d6bc6db5a18d2c5783ed0a88fdf01e1a0ddb6fbbf13de48c92f9f72f7cc4bd22add73f72d3839d232154c8c285e13ae14002b800e0033002f6465762f6d74643000000008000c000180000008002a000200000008000d000e00000005000f0081000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r2, 0x7, 0x6}, 0x6, 0x100000) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)={0x54, r4, 0x301, 0x70bd2b, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x950}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfffffffb}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x4}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r5, 0x1269, 0x0) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) r6 = socket(0x25, 0x5, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r7 = eventfd$auto(0x9) r8 = epoll_create$auto(0x3e) epoll_ctl$auto(r8, 0x1, 0x8000000000000000, 0x0) read$auto_bridges_fops_(r7, &(0x7f0000000040)=""/181, 0xb5) setsockopt$auto(r6, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x10004) bpf$auto(0x8, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x1, 0x6, 0xc0d6, 0x5a3, 0x101, 0x401, 0x5, 0x800, 0x3e1b2d20, 0x0, 0x1, 0x9, 0xff}, 0x10) 5.129797672s ago: executing program 1 (id=1246): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) mmap$auto(0xe, 0x20006, 0xe2, 0xeb1, 0x405, 0x8004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r1) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4a}]}, 0x1c}}, 0x20000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x3a) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(r3, 0x0, 0x400, 0x200, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) accept$auto(0x3, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/25/smp_affinity\x00', 0x80000, 0x0) 4.23933533s ago: executing program 1 (id=1249): openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) r0 = open(0x0, 0x161342, 0x100) read$auto_lockdown_ops_lockdown(r0, &(0x7f0000000100)=""/96, 0x60) ioctl$NS_GET_PARENT(r0, 0x40305828, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = pidfd_open$auto(0x1, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) setns(r1, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r1, 0x4008af21, 0x0) mmap$auto(0x0, 0x40, 0xffffffffffffffff, 0xebb, 0xffffffffffffffff, 0xfffb) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/kvm/pf_emulate\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c5000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) fsopen$auto(0x0, 0x1) r3 = socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x200000, 0x20499d, 0x9) setsockopt$auto(r3, 0x84, 0x21, &(0x7f0000000180)='\x01\x00\x00\x00', 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x10c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff8}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe5, 0xcd, "a8a431a9d4202b3aaaf59e66781946e15486f9b4a6aaea19ce8a31c2e218131731a5acc0ed96f2a2945de06c7ec6c9439687a0a0114cdbe93e84b0fd6581d421ef4654da99ee4e18735c382ac106b141328820372f434dd169a71856a53d032b309030cb6372bcd7210b73c7df4d8374c5db84e54d517cd5731700e48e7e435cfc54a063e6190cd54dfa7e89f86549726c97b0b4fc88f5d202e449e319d73aa851ec10ee25af908285d37d7bba59defc4ffcf28ff7f67c449e6449a3e199a4d940abbbce429b5dad80a244e933bd1ebd53b6fd9a973dd88af0733bf9ac140b0bb0"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80d1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x4}, 0x9, 0x0) socket(0x2, 0x1, 0x0) 4.103763381s ago: executing program 35 (id=1200): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x4, 0x2020005, 0x3, 0x7fff, 0xfffffffffffffffa, 0x7ffc) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x3, 0x100000002020009, 0x3, 0x63b5, 0xfffffffffffffffa, 0x7ffc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC0\x00', 0x80, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev5\x00', 0x226200, 0x0) madvise$auto(0x0, 0xffffffffffff0003, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0xa, &(0x7f0000000400)='K.\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\xac\x17\x18T\x1f1\v\xf56i\x02l\xf3\xady\x02v\xac8\xf6\x17\x03\x85}s\xfa\x19+0\x0fX\xed\x1eg\xa3v\x11M/\xbe2x=i\x15\x1c^I\x8e;\xbaE\xf5\x0f\xa3z\xafnH\x1c\xd7\xdd\xc1\xc0\xac\xaa\xe9\xb8\x82\xb4\f\xcd\x8b=a\xcb\x01\xa8\xef\xe4g\xcb\x80\a\xfb\xa1g\xec\xb7c\x7f\x93j\xcca\xe9\xfbMY\x12\xf6\xb9,T\x97\xa7\x11\x00\xa7m\x1b\vi\"P\a\xa0\x13\n\xb1:\x9a\xc1\xa4\x01\xaa\x9b6C\xebh\xdb u_L\xa40\xf7\x9e\'\xc7\xf1\x93\x17\xa0\xeb \xe7\x103\xc3\xeb\xb5<\xa3\x98\x11\xe1\xd9F\xe2\xf6\\\vq\x90Q\xe5\xa4O\xbe\xa0\xde\xbd\xaa\xfcM\xf7\x87`@W\xc6\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00nZp\xb7n\x01\xb2\x12\xd6\x00\t\xf4\xefP\t\x9d\xc8~Ww\x04\xc6\xa4\'\xa0\xc6 \xd4\x149\x9b\xba\xc0\x10[\xcd\xa7\xb1\xc5\xe2\b\xab\x12\xf9\xc7=O\x15h\x12\x96r\xd2\xad!\x11\vw', 0x6) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25300e00001800018014000200776c616e31"], 0x2c}, 0x1, 0x1000000}, 0x8094) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111001, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x646) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x3eb7c2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae90, &(0x7f00000001c0)={0x5, 0x0, [{0x7, 0x7fe, 0x256a}, {0x1, 0x34, 0x1000000001005}, {0xe, 0x400000, 0x80000001}]}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) 2.944646167s ago: executing program 1 (id=1253): openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xffff, 0x1) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x8e41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0x7b}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250200000008000100010000000800033105000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x400005, 0x1000040000005, 0x9b72, 0x2, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) setresuid$auto(0x2, 0x7, 0x8080) r4 = gettid() kill$auto(r4, 0x11) process_vm_readv$auto(r4, &(0x7f0000000280)={&(0x7f0000000180)="f019419e431c2f4cbe8de68aeb4563889bde97d7d752ca1abcbd5c6a3448", 0xb}, 0x1ff, &(0x7f00000003c0)={&(0x7f0000000300)="d495be48d27e50081c0d597b36bed234b4502d136bb01aa1cae63fb6aa20b2feb891b8d668354717adff3cdb1a8385559f409830a82137a3330410b7a0a8bf2fd634b93f05e40d72e1ec70983e4b9ccc9f8eb72127e317aab78e94602a132f225ecf88caa586f03f17efb246a2e57407e2101184793db744e4fa6df39d7b84b740c3f3d03240b1224d6391e718458b46c71b3d442329ed004907e63cd9f62c0d7b3644e56f5ebf08af8ef6048ec402", 0xfffffffffffffffd}, 0x7f, 0x0) prctl$auto(0x2f, 0x2, 0x8, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) 2.07453521s ago: executing program 36 (id=1205): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06\x11\x00\x00\x00\x00?W\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') unshare$auto(0x40000080) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000140)=""/207, 0xcf) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 1.748691052s ago: executing program 4 (id=1255): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}}, 0x4) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0x6f, 0xd7, "4d6d21c52b808ceeb84d294a92ebaf96e7bf9bbdea0bc23f068566bae500d405737922602c62b03bfd98abbaf67bab2aa26d698b657ca2b6887247a7c233411f12f39cba789e67ae7bcd418d60cf8dcee3e437628a0612692edb29a299d6bb6b519f9bc737899fcf438bee"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "3c98572e24c2139e7eb15a68b15f560757bb0b71dc80bf895666"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0x6f, 0xd7, "4d6d21c52b808ceeb84d294a92ebaf96e7bf9bbdea0bc23f068566bae500d405737922602c62b03bfd98abbaf67bab2aa26d698b657ca2b6887247a7c233411f12f39cba789e67ae7bcd418d60cf8dcee3e437628a0612692edb29a299d6bb6b519f9bc737899fcf438bee"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "3c98572e24c2139e7eb15a68b15f560757bb0b71dc80bf895666"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x2bd1d08e, 0x4008) 1.419172068s ago: executing program 4 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x144, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_MATCH={0xcd, 0x5b, "65b77156341bc6299c6f531cf22da0507e7bd07154c97844d118894af25e12aab07602cadfaca1db7b1e3a491e6060c157952349c5d740f286b726dcedb044250f41c867bbf2817d40f3b0c4c8beffc95b960ee60b84a526663ab102f57b3cbe62a50944a4b4c6ebd2df6b09705f9ff370d7e3fff7c01c67b83e8f8eefe7f4a61c65f1d7cc944d15375a17018c6687af4f431639c15aac242b79d3b45518e4e370016ccc3b491ba536b6690bf99db936355b30b80bd54d9d233bfdbe7de155e46da7bdadcbae772506"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_FILS_KEK={0x28, 0xf2, "15ca05ef588afa68d6dc44cd455156d3a2206da5b0575b8137f792fd3f0b35a9e0c931e6"}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x68f}, @NL80211_ATTR_FILS_DISCOVERY={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x4850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd70c8f0b1d07a0fba01000c00018008000100", @ANYRES32=r3], 0x20}}, 0x4000000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x10001, 0xfffffffffffffff9, 0x0, 0x10010, r4, 0x1) ioctl$auto(r4, 0x8923, 0x24) 1.189873196s ago: executing program 4 (id=1257): r0 = socket(0xa, 0x2, 0x88) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x44000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'wg1\x00'}) (async) io_uring_register$auto_IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)="f999fad612de02975831d2a6ca1ef2e122dd029a79a499c8abfc26c6db5c71ef276d819e4815084911e10a54abfb90b081dc3e8744bb26214d5b0fb0da0905045561ee45", 0x1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x80040, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) clone$auto(0x200, 0x9, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x3, 0x8) (async) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) prctl$auto(0x3a, 0xffffffff, 0x0, 0x1, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x102}, 0x5, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x827, 0x1}, 0x401}, 0x5, 0x4) (async) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, r2, 0x8000) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r5, 0x4018620d, 0x9) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) (async) socketpair$auto(0x5, 0x5, 0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x22240, 0x55) (rerun: 32) socket(0x0, 0x80000, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 1.009570079s ago: executing program 4 (id=1258): unshare$auto(0x40000080) r0 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) read$auto(r0, &(0x7f0000000080)='/dev/mtd0\x00', 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x7, 0x2f) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000180)="c1e4b13450976172711ca8fad278a157d048627385b3445212b9eb607bb13374a570a8e278bed7ab2aea35444b2c2a7777c9834e19edd0d36751f42c0b1e055e175df3330b205a18161446ed2fe528105f6cf9a3fb31ed69f4c2f31018122a84f4c56d9a11b1689e987573cfb00e72f7be9e1fcd531f01cf7e4a25758237cf479cd7ea3773f0d67e1e4eb408ccea9eb80833333a5e7f6f545b0e959f04d3cb644b71cb82ef16308d13ce5651f17219b7b435a124307ab52bf9db34cd25e931f752db6f20522b09b0d1bb2e56b514369e7fa0e95c77b783a8e0806591e491caed7190cc79", 0x4}, 0x0) prctl$auto(0x3d, 0x1, 0x0, 0x1, 0x7fffffffffffffff) listen$auto(r1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x6, 0x2, 0x0, 0x0, 0x7) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) unshare$auto(0x40000080) (async) ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) read$auto(r0, &(0x7f0000000080)='/dev/mtd0\x00', 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x7, 0x2f) (async) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000180)="c1e4b13450976172711ca8fad278a157d048627385b3445212b9eb607bb13374a570a8e278bed7ab2aea35444b2c2a7777c9834e19edd0d36751f42c0b1e055e175df3330b205a18161446ed2fe528105f6cf9a3fb31ed69f4c2f31018122a84f4c56d9a11b1689e987573cfb00e72f7be9e1fcd531f01cf7e4a25758237cf479cd7ea3773f0d67e1e4eb408ccea9eb80833333a5e7f6f545b0e959f04d3cb644b71cb82ef16308d13ce5651f17219b7b435a124307ab52bf9db34cd25e931f752db6f20522b09b0d1bb2e56b514369e7fa0e95c77b783a8e0806591e491caed7190cc79", 0x4}, 0x0) (async) prctl$auto(0x3d, 0x1, 0x0, 0x1, 0x7fffffffffffffff) (async) listen$auto(r1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xa, 0x0) (async) mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0x7, 0x8000) (async) futex$auto(0x0, 0x6, 0x2, 0x0, 0x0, 0x7) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) (async) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) (async) 632.528287ms ago: executing program 1 (id=1259): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) setsockopt$auto(r1, 0x29, 0x40, 0x0, 0x110) fsopen$auto(0x0, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) socket(0x1a, 0x5, 0x6f5) timer_create$auto(0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x4], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x3, 0x1, 0x40, 0x76c5, 0x8, 0xfffffffffffffff9}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 131.547386ms ago: executing program 4 (id=1260): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002e00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000002f80)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="df0029bd7000fbdbdf250e00000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000080) r5 = fcntl$auto_F_GETOWN(r0, 0x9, 0x3) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"735cbccc5276be75390a05693fcc31b725462d9ab9e166ad2a8374418ba5624d", 0x4, 0x1c9a, 0x9, 0xfffffffffffff015, 0x5, 0xffffffffffffffff}) r7 = setfsuid$auto(0xee00) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r8, &(0x7f0000000100)='%\x00', 0x38f) r9 = setfsuid$auto(0xee01) setresuid$auto(r7, r9, r7) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000016c0), r3) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x58, r10, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x41, 0xe8, "a5faa56abfb3613afab95f8070d39ed4adbfaba89ff5cb4e48d6da3225f9457b470c564ba8ef15a185ef811334c53392e24994d8b94a355218ccc7086d"}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r3) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r11, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@nested={0x66, 0x146, 0x0, 0x1, [@generic="967f3c58e2fbeb22fa78c3bf85cc5f4f3062dff0d352182c9e1fcf1554fdd59e8e27f1ac0f8c997f77018b9d794733a906f785637466e8799ef8a1f395601cd9e13f14f3bb15c3716e0b40566e06382f210afe3e259c", @nested={0x4, 0x81}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x47, 0x0, 0x1, [@nested={0x4, 0x14b}]}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@local}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x88c0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001880)={0x14f4, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x1327, 0x2, 0x0, 0x1, [@generic="5e8138efcac4b3f5d82fc7d6ff569d5c49584b579026e66eb99eeb6ef820f7f5d623db7cd482bc937b3ad7602c66662433c90cabc9fa720641da1d1570ef07a8eada0a3aba61dba0ac99d4e0f0a4aa2cdf1724d14e5908188c9c71a100b355d0b8c791295080871070ed815e70e3a80fd9b302bf0bc25d0a361a98b9e40eb66c9fadcad098f6164a601eb383990d23330a3b847bd3053ccd7544079ba3cfdb59a0483ddd5623afa9137fbe2a7e093315b3b320e95666b0bab8377b6ecd6705eb34fe69cb41f32c8d887d911e325568f0407abcfd8f0bb316cf11ec5c344fef65ad55bae2e8d92b44c7721995c3d239e0de640f369385d2c2429f751bd0b721e45e0630d0d66174da4fe6a56c7d9b881dceba9b0080962bdafd4feaad87067a86d983101701d854cab7fc15e121ae10793d0c2c8e2fc4159db2a5534516ab23154e57f413036a9129ef0fc25e780be38f8715ea4a6f6811b5d44f072c3d9e7f25016b641b409e5390cf6fa74f106c478ec4961a8bc697e4b584119a9e3f8d34f443163636a37dbe229a4d2ea6fa1fa5aa84d892397fe8c7f2c11f21ad2b74c240fc1ce762c8c60d0f255b3ec5a9a1ae4be10bfde0bcca73da71b11c52d1340cd3a0f76aaa329ec88b506b46ba167f3ff1e9031e9408b3dc5c9dc4cff521b5e071fa7fa9f60c5140cb2636d473c84edece64bf7417d8b5a39de9ed00b7850f1dc447bbaca5d58870397c921cd17b91a6ee5ab66add19578f704ccef5d28f83051dd005ea307ca49e253f81cb928fbf6c4f771da3cf9b943224b282f0e319bf7d6e841bafa8550a29735b12808699ec49edb2dc0a755907144493e3b44e2aee214110c004b50f225deae49b250783dbfac97e4dc3f542260c0c2ebbdda06f08611db19f12ee0e822a60ef5b72c704a6b268bd50c1ff311584fffcb8639f9502c890858f124d9a5a89738c96ff1152d5a0a25720ed35bcd0df9aac96fd3e79ff71661372344e6043dae4c7f3108c357944e686a2b6756d90a9fea6e8242bc8ccecde9fb3d3b68a1efe3d7a5047690345e8ebad7ffa7dfb491eb50f2ed27842a3a77e17a29dcb3b875eb61ca8187fc0b924d07767a4020b85432871f701e938817cdaedc382acd145e418eddeed2827f77446988c027a3b2fbb6d372cdd00e27f251aa432008ba9c7d9f997cc17b3b5539f5cd29351422d27cc6b12d12e513ebad0a7f3e2ade1d6cee2642a384f32eab30ceffcacc1854b3bfd5a3acf49ac0dfe61d44c8f64c4cd96f0c308439cff4f80829f2ade2d41b32320dd0642a0897228bc00bfb263c469c23f730fbf16dbab789150a56fd982b5ac0f5dc294c23dafd1faa20ebc3c2dd30f60ae0953e50dabc18d36fd2dfefae545f95ef562914f1a6a6e87fcbcd959f32bb2434cd58e1f4a6e7770b631ed529f5111c05c9bfe72ddc685e40794e1c244095844114ef37c19f1ef898915835995ae62d06839fbe9b3cd8cc4c7e112d7a1d3119393b7b21769787365dd0b588a5fada282dcbdd40edd08686fc641830fcc7cfbe1a40b9fa54ec04d89d9194ad8414c64c3e797839cc2d317e7177e3826cb9e6148fe2ea3a9e2e4a92b5d5ec0c738663e2f33200bdeb5f0d0dcf5e7dc3d2ae9603cdc0662d86c7a4dd9f2ef5e0059ffbba345f827b5bfcdee06bad986834cdc967cef87c93975bc156eddc927bdcc7e06d256c30e41caccbaa210aa24e9a51397f4f9e89b4619aa9a79f0d1b27e54df1b8f69e7f455160dde3fd60f1c0c7d10a5e8ba672995f6ccd22bd8bebc0a6f782baffcaf75242112fefcffc97f87ad28c59d565cad50477e68dd05f5ca9d9323a304db0e8d6c7c8b5702fcbd63e39d6f9229c378c53162f7b412667e577f674ad2b87cb8e27be455561219b1c2e2a95eea1dd32426d754c6f315eec1bf7e59eb320b0f7683e249f63e652c76e48560a002816cff164456e6a48f4ebc8144ac0ec6d240ff18dc2b5fbe96efe00a910c1d7e2c0d214833d62a376869f862186de6569769b90644579194f20cf27b07c733f9526f5dabdc095f29c1990c1cb3ab1847a84d1ed807f4456309508aabfe8bafe3310ba6f5f8f4d7bbb74ed2307024a26ed1c44394a8447b7ee70855967f1544a324d306e643d698ac091d0451cf2f9dedac2b5bf09cbdb2cd92dd3b8226ccaeeb3a6f128b209db363a46cd94b3434bd868832199a5d224220769942229eadf4d2ad58c11c382d09c25530fab8482896ce888c54c7e09bd07fb1cf40d84bab1a8d1f8d0ad82de95cc50d4306036233ba1e46b9d196039dd9aafbaad0830388b22f435903f39dd3397fc87bafd07a34c2706aba67e8ca12e2aa6c7161932218bea25a8af21782549ec59ba2476a6a3fafa05be9e22f263b3f99fdaaec072e9468c7faa2085f5405a51b6d0c56cabc542cf7e0eaf3f96eb02046413fd233e7510d6145d7f1c7baeb9e71c1671151e364c9df16511785abe9c5b3b09e2b0f5a5984df4ad7261c0022925471d66655ef7fd1e7e81cfabca510c49e66e2a3879eabc619dd33f4946658d320aa5b05f84fa5d28142fe7d5456ec5756734f90c2f147cbb18070cd5fb308bdbb11484cc1767ec8833c944d1732450c4898654c063658ce7f88f0b5eabdad6efc576f8c4a47c3d7c98acf022ffa40e859c5d6c28eb18af95874a26622de8106b7b0f0746d17262bb60b51e6706f282b3c7b86de936ee9c7ec33e280994bc1c6f411eac8e0fb6ceb761e136d6dfcd7abb0df4d642913c82acd737f0fb984ec2f5587be696b6019c674d77126eba84a430b47e4f1db2b5c56ae64df00374f5454af95fdc017e0f618e0a145f0cdf21aaa3460a172a25e01e3f5ed379a4a5cd5202e1da800447d40b01c4803dd6b7491b7846163526e1d2378235745c8d7c5053a863873ff5733b6f36e67fb0bfc89abbcdc7135070383ff88048ce9f376492da80ea4468001e693b69c75c30576a32e87a4c366decbd6bb21ec56427b91edcbf115669cb71c36d4467aaae3e152a7707a00da92f2b216f5af11399d5b22ccada38cc59e22f7c36e11818a8d3cc44521a27d51f212121a0bf9d80fcc6e1f9e79ea806c753f27bc04b74f7888aa61341c4078c452c2148c16fa0a0429eb9a56589db8f4e550c65dcee77186451613565d972aff57426df312490acedb65c3bee2c90c87f7b46b0fedccc169ccc8ca4a32ffc020f691e32f9e98736a935c722191df46d7a70cdce20ea13edfcf67c0869b6e1ed80ab02ed8e608abbe506232701aad2491b82e0ec24a1b580d4a3f3687e64b7cc50ba7e7a94018394658c3c6e8271c7d448287ea684dde9f55a46e9f5f0fe159add056da5a6b7200749cdf05993583f87b2abbce4ba8a30a0951fe20a2b26958f8092455c8fcee23ad9f7847aa7b90255cdf8b4157e976f110b6f1b10f240417dc5660133f8e1f91f258edf0cc02dcb3c59db38990e38f356d5de3a164aac283e6b97c75808a8440402e72680ea21998e7509c0ad763e084da0658e5da3eb1628eb774015156275b14ed67f4955c15471a74c55a941fc9545cb54bd4ecea1e4592658b2355d6da00a4e965148c102711abe9d78d4f1a15b686d701594acc41be933bd01fa40cdb15beee88ebadb5f1f6dc427511489f5ae01de53c0b7cb425f5098293596a19f87f380e828f8bdc95e07a862287ddc221b97e3726b6e0925c7d1fb625e6ec4b43cbd6f0eeca747f3dfe02ad14d31b0b87ba035108539750bae45bcd99d9f2c4cbfb50d228c426dc38a2cbf860580bbb6b561eb99c01f36658025b63e30e41e0ed03da032c3bdfb833a95d5c5747a7f52b9555f7ce911e53a7a019a3698a45b2d0e677e8eed16c56c028209dd5b24ac6052e2321801ad888a3f32bda03b3ff86751921352925937dcb7601b0ae377063d8b1e950b2ad1537da663a2d87e0658df7d920cad4e94dd76b8abad18d47270c2652894e4a9931cd89eb636efe64a44a2519df727258b1e88435a4e4022eee8c7d625ad402df4944dff14d1fb0692491aa29bb82a9fbed46c0acecbeeea34737da614b01d9ccc28b9cb6d70c69522576358b4ddbaa4747c0d933242b9207f58d8a229a3eb07466e39d1508b3dcedb924b7460b6684796d44754b9c89dc5c230d1dd9458f09b0aa7159fead72df0a9824f4b1aee17f842910e49c84e24e4c5c1f7f43a749a38b4ac011e079b337b2b319f59f3234fd68c7a14b23cbd572b432e8bcd93776099083d5aeb93144f29dae38e9b3ce9b682b9669aeffd3b61c5b9d767885cf13e739499795a8cd61c4eec58ff4ca0ad7417eb0f2eb9f03edb718c3f4c26436046b38940f5a514336470dd1ac4d6681fbb7593c4a65713c0078d6c784ceff2038584c97624a13ec19e6538415e8914fc2c9973c5e8bf96512794488eee506de065795e50c8b531277e1437a21387f4bb01565dde99c48a0ae99b96c3a2dbc634e34f414887f6c6ff44b3714d0a24911222a5e2957d97a587ec4258d1405d42c4872002d93397ece30e347761c8c55e8c81f948c4052d384cffabdccbadd73e9d5975f17858d0353aac93a989fea55339614170b87bf148e8e8653bd3ad4f9f13b8894b98186a7f165ae6478fee30cac603a2f6dbc777ab1929cfe59198e076c6a9d5c91ee6c0963b7c55d3b8a7a5389fc4ec7f17d40f20424a96be4f1254ac2d9685fd2579304436c78fcca93db3a4d25d5d88e55377aef19e891d4d7db7088011690e2e03e904b3fb3785c3d9df035495debca63d94cc49b5056b75dc7d1e2016fdfce16c4c627edf3dfd280c806d1b2f0a46d519645249fbf0950a174c1cd964a463366d400b69e123d0392540d2ed5a7e6dc99bd2350712239c49232fd1e130273a20948279a08e7e9b6373dc056d5435f46ee40263dbcd42a7e507ed856c195e11f29f729dfee22203401452a4f931dde20f0b9b12fe6b1bec823c18594e40a7afba99dc7c76b7b40777481e05f75b4f5d82ecd2231cdc1d27195d8299cb511e5a0c6ba25ed919c35224dcb3de9ebefc76c758bf0ecb103217cbace219c2c889887035dbaa63cd65c85da90587ebf412f001e7b5fdab521aae5876d12b056b559ae3d0e69bfe1b697c9bd8aa90cf12cacfa90df1247689a50efd5c36d031d83a7835f0ba6ae898916e6ab28d1a923801fd1bab5c8b3de05b6d494e5fe0a3deb84b4c7a3da7c6bad90b59d08f5bd85ef879098d810002e74dac2d291744586223e4927adaa3c36c5a74fac2482bfe7aa3ed22e03ae3a134d6fd79c3e1cc7ad6b296cd242539e1e004f4cb7d0c9896c2773cabc7197d779a78e5b61bea979838831679f5d28a67a1ec68e6b6cd3a8be4234d2d524f6458b9009557d49ad28d175e28912ad9c53151538effeebc0f2bc499e25f2993ff5e74f69ef00c1b412804b074df979df9bb5eb9bc1671002b7b044941f4717ec482d8f94975ad381930653fab186c66dc4891999a9c9931972eb85231526b7c0fc5cdf0fb058c5f614aa4dbe9b669942c90cc5d6db69284c6952e47524c45210cb57f46e070bf6eaaa1183527765bff8342bdbd04aafce3224e0157adaec4292f365fc8168900e90f7d415d167cf292350b4a7d1185fc3c7bea372eda1227471458d8d7c04167d07832fc6795597f42a9b2df21ff09fa30fceb852d87a021866f35d2750f0c1789d5fd4b25ad99fbd2836eab7ab20af6eec7e206a65cb24c3ad99c9b4e258c1688ae6aa32e53d1bfcbefe2d744741933ea0826b31bcd1c938ea59274093896dd64282879d69c71c1b792d", @generic="6b352b10482f5f6bf806aba8c54d73b3be82eca5e7c22b3f3dbd0fde58c46d0708183a33f647fc2c297ea9f73b865c8a2f81f230cf84d025e9d04ba4529991025d7c95aee20471b934265786f4cd2d4290aa8ac579f1ea6c78827ef84ca1b47948976374a9ec408471f3c499ae56d6c058b8c17f88d939c3b7e8560173aafcc63ff23a1a", @typed={0x4, 0x84}, @nested={0xb8, 0x90, 0x0, 0x1, [@generic="2de7272a044f98330b5fa808a1e4c7b4d59eae4cb93d07a01ddd94d2a0eeddeef9b736234f5b43f3", @nested={0x4, 0x64}, @typed={0x81, 0x90, 0x0, 0x0, @binary="44287291e9041340c937d24c9c4ce47faf064eee959d8e131cd60859778c4b593660aea9fa682639b4f3f2d5a662e529dea494d061c60b552e5123e413021e2b56946329f7fd1562b3546ae8cdc38452c663056c29853fd61afd0c50be4b891a42e5ec1822f518830f408ca20281021e30a82f2d0cbeb3ad06f23bdf69"}, @nested={0x4, 0x13e}]}, @generic="19f67bfde7f10a37608922c7ef8089ebd2346a0efc4fe96fa9525d", @typed={0x8, 0x13a, 0x0, 0x0, @u32=0x5}, @nested={0xb4, 0x131, 0x0, 0x1, [@typed={0xae, 0x30, 0x0, 0x0, @binary="7f1e179238ae57c7fdf20394d4e3722e768307c28e623417f4e2afd1facf22566dfc89ae0b3820c3121dd60072fe7cddd8427ae157e68e00d601ea158d72db761a0c84c858380b3e9c076b6564c56b8ceb878e7ebea1c60fa0a67a0f3430aa684dc4f796346004d408e362eadea981c71254165dc5fe362cebce03c81bd8c66cc487b63d3e950e35181220b282df300e56c2f249cf3729fa4f77c174254de447b85f5dc46d8a82e91234"}]}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @nested={0x103, 0x112, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x1}, @generic="561829b3b3ca5336891743cc827e77ab9451898a95a12804372ff2399808362e698642e292c17f7932c8bac18cb2eaaaa4cae73802909cc825eb004ae4237cf7956148a8170bd38c48830bf38e62eb769424b8a5095f23a2dcdbac9f23e5e530e503a30133afcca7d03f49fcb07307498c1f628936db37fba8672d7e3b4db0220e996104fa1ae590a4f886b8a1b995a322007935088aff24b1c3a5bacee8278cdc55e908af28ce289a2276e249f3fe1e2b148d06c9403764d4b70e6c4ecacd9cd92fa0efc00b6e68f3a823c628ef12fef60b9796d2c3493955a459f4b079b052b1b253c82aaabdfc9e13267b17d9b0", @nested={0x4, 0xd8}]}]}, @MACSEC_ATTR_SA_CONFIG={0x19e, 0x3, 0x0, 0x1, [@generic="6109bada314c692f75a09eed7158375a5ce3f85ff53cc449bebd5ee09a3ef336cd0a5fae0febc06200bde46c793da25bd90ebe676a3d001b4aaf79da2b2db6b96c6d9e99", @generic, @nested={0x81, 0x107, 0x0, 0x1, [@nested={0x4, 0x3f}, @nested={0x10, 0x139, 0x0, 0x1, [@typed={0xc, 0x89, 0x0, 0x0, @u64=0x100000001}]}, @nested={0x4, 0x93}, @generic="236fce324d918457797702a3694cc43e6c129d49dc4f351cd3787c95eab305520654b7155cb913b81280fb42f4165f708e2488c48fd05c5a0202f6626dd00761da66362ae147aeb86aab179c1c8487e1fe73755e887c83fa780427f398", @typed={0x8, 0x9, 0x0, 0x0, @pid=r6}]}, @generic="d2ab5c72d7ae2f298b51c7abde4bf16b1786e978dbf12fb75a2dcbfa2daad25a25a8d27f38446fa58831cd4fce671afc4a1264cdeb8a021416b747fee01f89820327610905d113726bcb3da91e47b47c14e58fec2a8fbeff7c2ffb435f3ba5fae88d645712e72e00cc2cb234c124acf687919a895faaa4bfa48a4d3639a04b5439024d6ad127e775b58d3f05a6f8951c9daf3119af33da554ef7448a0ea1d2f8bc828a65a0f399d52ca50911652ceeb26b85106bc3b42e3f46aabc933f3e6837f3bc73430cfc4244e458", @typed={0x8, 0x120, 0x0, 0x0, @uid=r9}]}, @MACSEC_ATTR_RXSC_CONFIG={0x18, 0x2, 0x0, 0x1, [@typed={0x9, 0x5a, 0x0, 0x0, @str='/\\#+\x00'}, @typed={0x8, 0x16, 0x0, 0x0, @fd=r0}]}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x81}, 0x50801) 0s ago: executing program 4 (id=1261): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020005, 0x1, 0xeb1, 0xffffffffffffffff, 0x10002) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0xb879, 0x5, 0xfffffffd) mmap$auto(0xfffffffffffffffd, 0x7, 0x7, 0x9b7e, 0xffffffffffffffff, 0x8000000000008000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x80000000, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x4, 0x2003f2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2003, 0x2020009, 0x8a, 0x18, r2, 0x8000) sysfs$auto(0x2, 0x62ae72b2, 0x4) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x6375, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xd7b) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x1) close_range$auto(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 9097] CPU: 0 UID: 0 PID: 9097 Comm: syz.1.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.336556][ T9097] Tainted: [L]=SOFTLOCKUP [ 380.336562][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.336573][ T9097] Call Trace: [ 380.336579][ T9097] [ 380.336586][ T9097] dump_stack_lvl+0x100/0x190 [ 380.336620][ T9097] should_fail_ex.cold+0x5/0xa [ 380.336642][ T9097] should_failslab+0xc2/0x120 [ 380.336663][ T9097] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 380.336692][ T9097] ? security_file_alloc+0x34/0x2c0 [ 380.336717][ T9097] ? trace_kmem_cache_alloc+0xf3/0x120 [ 380.336741][ T9097] security_file_alloc+0x34/0x2c0 [ 380.336768][ T9097] init_file+0x95/0x480 [ 380.336794][ T9097] alloc_empty_file+0x73/0x1c0 [ 380.336819][ T9097] alloc_file_clone+0x5f/0x110 [ 380.336845][ T9097] create_pipe_files+0x40e/0x970 [ 380.336868][ T9097] do_pipe2+0xbd/0x1e0 [ 380.336888][ T9097] ? __pfx_do_pipe2+0x10/0x10 [ 380.336908][ T9097] ? ksys_write+0x1ac/0x250 [ 380.336932][ T9097] __x64_sys_pipe+0x33/0x50 [ 380.336952][ T9097] do_syscall_64+0x106/0xf80 [ 380.336970][ T9097] ? clear_bhb_loop+0x40/0x90 [ 380.336992][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.337012][ T9097] RIP: 0033:0x7f29f159c799 [ 380.337027][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.337045][ T9097] RSP: 002b:00007f29f249a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 380.337063][ T9097] RAX: ffffffffffffffda RBX: 00007f29f1815fa0 RCX: 00007f29f159c799 [ 380.337075][ T9097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.337085][ T9097] RBP: 00007f29f249a090 R08: 0000000000000000 R09: 0000000000000000 [ 380.337096][ T9097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.337106][ T9097] R13: 00007f29f1816038 R14: 00007f29f1815fa0 R15: 00007ffcf2aa20d8 [ 380.337128][ T9097] [ 380.689895][ T9108] FAULT_INJECTION: forcing a failure. [ 380.689895][ T9108] name failslab, interval 1, probability 0, space 0, times 0 [ 380.702641][ T9108] CPU: 0 UID: 0 PID: 9108 Comm: syz.5.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.702675][ T9108] Tainted: [L]=SOFTLOCKUP [ 380.702681][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.702692][ T9108] Call Trace: [ 380.702699][ T9108] [ 380.702706][ T9108] dump_stack_lvl+0x100/0x190 [ 380.702739][ T9108] should_fail_ex.cold+0x5/0xa [ 380.702761][ T9108] ? tomoyo_realpath_from_path+0xb6/0x690 [ 380.702789][ T9108] should_failslab+0xc2/0x120 [ 380.702810][ T9108] __kmalloc_noprof+0xe0/0x850 [ 380.702847][ T9108] tomoyo_realpath_from_path+0xb6/0x690 [ 380.702880][ T9108] tomoyo_path_number_perm+0x23c/0x580 [ 380.702902][ T9108] ? tomoyo_path_number_perm+0x22e/0x580 [ 380.702926][ T9108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.702970][ T9108] ? find_held_lock+0x2b/0x80 [ 380.702989][ T9108] ? __fget_files+0x215/0x3d0 [ 380.703006][ T9108] ? hook_file_ioctl_common+0x146/0x410 [ 380.703034][ T9108] ? __fget_files+0x21f/0x3d0 [ 380.703056][ T9108] security_file_ioctl+0xd3/0x230 [ 380.703080][ T9108] __x64_sys_ioctl+0xb7/0x210 [ 380.703110][ T9108] do_syscall_64+0x106/0xf80 [ 380.703128][ T9108] ? clear_bhb_loop+0x40/0x90 [ 380.703151][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.703171][ T9108] RIP: 0033:0x7f1a9679c799 [ 380.703187][ T9108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.703204][ T9108] RSP: 002b:00007f1a976ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.703222][ T9108] RAX: ffffffffffffffda RBX: 00007f1a96a15fa0 RCX: 00007f1a9679c799 [ 380.703234][ T9108] RDX: 0000000000000003 RSI: 0000000080045505 RDI: 0000000000000003 [ 380.703244][ T9108] RBP: 00007f1a976ea090 R08: 0000000000000000 R09: 0000000000000000 [ 380.703255][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.703265][ T9108] R13: 00007f1a96a16038 R14: 00007f1a96a15fa0 R15: 00007ffce54f7eb8 [ 380.703295][ T9108] [ 380.703303][ T9108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.925823][ T9110] usb usb15: usbfs: interface 0 claimed by hub while 'syz.4.659' sets config #0 [ 380.944320][ T9093] zswap: compressor not available [ 380.984399][ T8904] Bluetooth: hci5: command 0x0c1a tx timeout [ 381.085061][ T9098] zswap: compressor not available [ 381.330698][ T9108] usb usb15: usbfs: interface 0 claimed by hub while 'syz.5.660' sets config #0 [ 382.318629][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 382.384062][ T8904] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.438572][ T9127] block nbd8: shutting down sockets [ 382.780386][ T8923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.790408][ T8923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.800666][ T8923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.808674][ T8923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.816605][ T8923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.898527][ T9151] FAULT_INJECTION: forcing a failure. [ 382.898527][ T9151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.993086][ T9151] CPU: 0 UID: 0 PID: 9151 Comm: syz.4.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.993117][ T9151] Tainted: [L]=SOFTLOCKUP [ 382.993123][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.993134][ T9151] Call Trace: [ 382.993140][ T9151] [ 382.993147][ T9151] dump_stack_lvl+0x100/0x190 [ 382.993180][ T9151] should_fail_ex.cold+0x5/0xa [ 382.993202][ T9151] _copy_to_user+0x32/0xd0 [ 382.993227][ T9151] do_pipe2+0x168/0x1e0 [ 382.993248][ T9151] ? __pfx_do_pipe2+0x10/0x10 [ 382.993268][ T9151] ? ksys_write+0x1ac/0x250 [ 382.993292][ T9151] __x64_sys_pipe+0x33/0x50 [ 382.993325][ T9151] do_syscall_64+0x106/0xf80 [ 382.993343][ T9151] ? clear_bhb_loop+0x40/0x90 [ 382.993366][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.993385][ T9151] RIP: 0033:0x7f3fc699c799 [ 382.993400][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.993418][ T9151] RSP: 002b:00007f3fc78e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 382.993436][ T9151] RAX: ffffffffffffffda RBX: 00007f3fc6c15fa0 RCX: 00007f3fc699c799 [ 382.993448][ T9151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.993458][ T9151] RBP: 00007f3fc78e1090 R08: 0000000000000000 R09: 0000000000000000 [ 382.993469][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.993479][ T9151] R13: 00007f3fc6c16038 R14: 00007f3fc6c15fa0 R15: 00007ffd7281c318 [ 382.993502][ T9151] [ 383.345592][ T8923] Bluetooth: hci5: command 0x0c1a tx timeout [ 383.655080][ T9147] chnl_net:caif_netlink_parms(): no params data found [ 383.980708][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.060459][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.102986][ T9147] bridge_slave_0: entered allmulticast mode [ 384.140244][ T9147] bridge_slave_0: entered promiscuous mode [ 384.211545][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.255026][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.289128][ T9147] bridge_slave_1: entered allmulticast mode [ 384.316250][ T9147] bridge_slave_1: entered promiscuous mode [ 384.480955][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.539448][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.692802][ T9147] team0: Port device team_slave_0 added [ 384.732628][ T9147] team0: Port device team_slave_1 added [ 384.863634][ T8904] Bluetooth: hci0: command tx timeout [ 384.875076][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.882081][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.106341][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.179862][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.215648][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.353554][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.403871][ T9188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 385.666108][ T9147] hsr_slave_0: entered promiscuous mode [ 385.685836][ T9147] hsr_slave_1: entered promiscuous mode [ 385.717321][ T9147] debugfs: 'hsr0' already exists in 'hsr' [ 385.751893][ T9147] Cannot create hsr debugfs directory [ 386.557470][ T9147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.753702][ T9147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.848853][ T9147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.943532][ T8904] Bluetooth: hci0: command tx timeout [ 387.041815][ T9147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.346442][ T9217] FAULT_INJECTION: forcing a failure. [ 387.346442][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 387.548797][ T9147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.585876][ T9217] CPU: 0 UID: 0 PID: 9217 Comm: syz.5.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.585905][ T9217] Tainted: [L]=SOFTLOCKUP [ 387.585912][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.585922][ T9217] Call Trace: [ 387.585933][ T9217] [ 387.585940][ T9217] dump_stack_lvl+0x100/0x190 [ 387.585973][ T9217] should_fail_ex.cold+0x5/0xa [ 387.585996][ T9217] should_failslab+0xc2/0x120 [ 387.586018][ T9217] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 387.586047][ T9217] ? security_inode_alloc+0x3b/0x2c0 [ 387.586068][ T9217] ? lockdep_init_map_type+0x5c/0x250 [ 387.586097][ T9217] security_inode_alloc+0x3b/0x2c0 [ 387.586119][ T9217] inode_init_always_gfp+0xced/0x1040 [ 387.586142][ T9217] alloc_inode+0x8e/0x250 [ 387.586176][ T9217] new_inode+0x22/0x1c0 [ 387.586204][ T9217] hugetlbfs_get_inode+0x313/0x750 [ 387.586229][ T9217] hugetlb_file_setup+0x3cc/0x5b0 [ 387.586253][ T9217] newseg+0xabb/0xed0 [ 387.586283][ T9217] ? __pfx_newseg+0x10/0x10 [ 387.586307][ T9217] ? down_write+0x146/0x1f0 [ 387.586328][ T9217] ? ksys_write+0x190/0x250 [ 387.586346][ T9217] ? ksys_write+0x190/0x250 [ 387.586366][ T9217] ipcget+0xee/0xf50 [ 387.586391][ T9217] ? do_futex+0x192/0x350 [ 387.586417][ T9217] ? __pfx_do_futex+0x10/0x10 [ 387.586445][ T9217] ? __pfx_ipcget+0x10/0x10 [ 387.586471][ T9217] ? __x64_sys_futex+0x34f/0x4d0 [ 387.586494][ T9217] ? __x64_sys_futex+0x358/0x4d0 [ 387.586522][ T9217] __x64_sys_shmget+0x13b/0x1b0 [ 387.586549][ T9217] ? __pfx___x64_sys_shmget+0x10/0x10 [ 387.586581][ T9217] do_syscall_64+0x106/0xf80 [ 387.586598][ T9217] ? clear_bhb_loop+0x40/0x90 [ 387.586620][ T9217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.586639][ T9217] RIP: 0033:0x7f1a9679c799 [ 387.586655][ T9217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.586672][ T9217] RSP: 002b:00007f1a976a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 387.586690][ T9217] RAX: ffffffffffffffda RBX: 00007f1a96a16180 RCX: 00007f1a9679c799 [ 387.586702][ T9217] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 387.586712][ T9217] RBP: 00007f1a96832c99 R08: 0000000000000000 R09: 0000000000000000 [ 387.586723][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.586733][ T9217] R13: 00007f1a96a16218 R14: 00007f1a96a16180 R15: 00007ffce54f7eb8 [ 387.586756][ T9217] [ 387.588504][ T9147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.209504][ T9232] FAULT_INJECTION: forcing a failure. [ 388.209504][ T9232] name fail_futex, interval 1, probability 0, space 0, times 0 [ 388.271306][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.5.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.271339][ T9232] Tainted: [L]=SOFTLOCKUP [ 388.271346][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.271357][ T9232] Call Trace: [ 388.271363][ T9232] [ 388.271370][ T9232] dump_stack_lvl+0x100/0x190 [ 388.271404][ T9232] should_fail_ex.cold+0x5/0xa [ 388.271426][ T9232] get_futex_key+0x1d2/0x1620 [ 388.271452][ T9232] ? __pfx_get_futex_key+0x10/0x10 [ 388.271474][ T9232] ? futex_hash+0x2c5/0x380 [ 388.271503][ T9232] futex_wake+0xea/0x530 [ 388.271532][ T9232] ? __pfx_futex_wait+0x10/0x10 [ 388.271560][ T9232] ? __pfx_futex_wake+0x10/0x10 [ 388.271590][ T9232] ? rcu_read_lock_any_held+0x6a/0xa0 [ 388.271609][ T9232] ? vfs_write+0x15d/0x1070 [ 388.271627][ T9232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 388.271654][ T9232] do_futex+0x32b/0x350 [ 388.271679][ T9232] ? __pfx_do_futex+0x10/0x10 [ 388.271701][ T9232] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.271732][ T9232] __x64_sys_futex+0x34f/0x4d0 [ 388.271759][ T9232] ? __pfx___x64_sys_futex+0x10/0x10 [ 388.271785][ T9232] ? __sys_setsockopt+0x139/0x190 [ 388.271820][ T9232] do_syscall_64+0x106/0xf80 [ 388.271837][ T9232] ? clear_bhb_loop+0x40/0x90 [ 388.271860][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.271879][ T9232] RIP: 0033:0x7f1a9679c799 [ 388.271894][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.271912][ T9232] RSP: 002b:00007f1a976ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 388.271930][ T9232] RAX: ffffffffffffffda RBX: 00007f1a96a15fa8 RCX: 00007f1a9679c799 [ 388.271941][ T9232] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1a96a15fac [ 388.271952][ T9232] RBP: 00007f1a96a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 388.271962][ T9232] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 388.271974][ T9232] R13: 00007f1a96a16038 R14: 00007ffce54f7dd0 R15: 00007ffce54f7eb8 [ 388.271996][ T9232] [ 388.763014][ T9147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.839699][ T9147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.027040][ T8904] Bluetooth: hci0: command tx timeout [ 389.260514][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.385993][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.423991][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.431326][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.478350][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.485858][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.020213][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.074495][ T9147] veth0_vlan: entered promiscuous mode [ 390.087528][ T9147] veth1_vlan: entered promiscuous mode [ 390.119274][ T9147] veth0_macvtap: entered promiscuous mode [ 390.132739][ T9147] veth1_macvtap: entered promiscuous mode [ 390.155951][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.173221][ T9252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 390.181743][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.190326][ T9252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 390.198405][ T9252] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 390.212014][ T8914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.222411][ T9252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.239376][ T8914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.250151][ T9252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 390.265451][ T8914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.277778][ T9252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 390.300909][ T8914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.446760][ T8909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.516111][ T8909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.649031][ T8931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.707960][ T8931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.093594][ T9283] < [ 391.093999][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 391.199433][ T9287] kvm: kvm [9286]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 391.583803][ T8904] Bluetooth: hci3: command 0x0406 tx timeout [ 392.075596][ T9302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 392.223530][ T8904] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.230437][ T8923] Bluetooth: hci5: command 0x0c1a tx timeout [ 392.236667][ T8923] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.303887][ T8904] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.930130][ T9342] usb usb15: usbfs: interface 0 claimed by hub while 'syz.1.715' sets config #0 [ 396.385683][ T8904] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.636774][ T9374] batman_adv: Routing algorithm '' is not supported [ 396.806847][ T9364] Invalid ELF header magic: != ELF [ 397.354528][ T9384] FAULT_INJECTION: forcing a failure. [ 397.354528][ T9384] name failslab, interval 1, probability 0, space 0, times 0 [ 397.508969][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.4.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.509000][ T9384] Tainted: [L]=SOFTLOCKUP [ 397.509007][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 397.509017][ T9384] Call Trace: [ 397.509024][ T9384] [ 397.509031][ T9384] dump_stack_lvl+0x100/0x190 [ 397.509064][ T9384] should_fail_ex.cold+0x5/0xa [ 397.509087][ T9384] should_failslab+0xc2/0x120 [ 397.509108][ T9384] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 397.509136][ T9384] ? security_inode_alloc+0x3b/0x2c0 [ 397.509157][ T9384] ? lockdep_init_map_type+0x5c/0x250 [ 397.509193][ T9384] security_inode_alloc+0x3b/0x2c0 [ 397.509215][ T9384] inode_init_always_gfp+0xced/0x1040 [ 397.509240][ T9384] alloc_inode+0x8e/0x250 [ 397.509265][ T9384] new_inode+0x22/0x1c0 [ 397.509292][ T9384] hugetlbfs_get_inode+0x313/0x750 [ 397.509317][ T9384] hugetlb_file_setup+0x3cc/0x5b0 [ 397.509341][ T9384] newseg+0xabb/0xed0 [ 397.509371][ T9384] ? __pfx_newseg+0x10/0x10 [ 397.509394][ T9384] ? down_write+0x146/0x1f0 [ 397.509416][ T9384] ? ksys_write+0x190/0x250 [ 397.509433][ T9384] ? ksys_write+0x190/0x250 [ 397.509454][ T9384] ipcget+0xee/0xf50 [ 397.509478][ T9384] ? do_futex+0x192/0x350 [ 397.509504][ T9384] ? __pfx_do_futex+0x10/0x10 [ 397.509531][ T9384] ? __pfx_ipcget+0x10/0x10 [ 397.509557][ T9384] ? __x64_sys_futex+0x34f/0x4d0 [ 397.509581][ T9384] ? __x64_sys_futex+0x358/0x4d0 [ 397.509609][ T9384] __x64_sys_shmget+0x13b/0x1b0 [ 397.509635][ T9384] ? __pfx___x64_sys_shmget+0x10/0x10 [ 397.509668][ T9384] do_syscall_64+0x106/0xf80 [ 397.509685][ T9384] ? clear_bhb_loop+0x40/0x90 [ 397.509708][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.509727][ T9384] RIP: 0033:0x7f3fc699c799 [ 397.509743][ T9384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.509761][ T9384] RSP: 002b:00007f3fc789f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 397.509779][ T9384] RAX: ffffffffffffffda RBX: 00007f3fc6c16180 RCX: 00007f3fc699c799 [ 397.509791][ T9384] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 397.509801][ T9384] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 397.509811][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.509821][ T9384] R13: 00007f3fc6c16218 R14: 00007f3fc6c16180 R15: 00007ffd7281c318 [ 397.509844][ T9384] [ 398.324754][ T9395] usb usb15: usbfs: interface 0 claimed by hub while 'syz.5.726' sets config #0 [ 399.225989][ T9400] zswap: compressor not available [ 400.879532][ T9433] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 401.828079][ T9454] FAULT_INJECTION: forcing a failure. [ 401.828079][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 402.018296][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.2.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.018335][ T9454] Tainted: [L]=SOFTLOCKUP [ 402.018342][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.018353][ T9454] Call Trace: [ 402.018359][ T9454] [ 402.018366][ T9454] dump_stack_lvl+0x100/0x190 [ 402.018400][ T9454] should_fail_ex.cold+0x5/0xa [ 402.018423][ T9454] should_failslab+0xc2/0x120 [ 402.018445][ T9454] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 402.018474][ T9454] ? security_inode_alloc+0x3b/0x2c0 [ 402.018495][ T9454] ? lockdep_init_map_type+0x5c/0x250 [ 402.018524][ T9454] security_inode_alloc+0x3b/0x2c0 [ 402.018545][ T9454] inode_init_always_gfp+0xced/0x1040 [ 402.018568][ T9454] alloc_inode+0x8e/0x250 [ 402.018593][ T9454] new_inode+0x22/0x1c0 [ 402.018620][ T9454] hugetlbfs_get_inode+0x313/0x750 [ 402.018644][ T9454] hugetlb_file_setup+0x3cc/0x5b0 [ 402.018668][ T9454] newseg+0xabb/0xed0 [ 402.018696][ T9454] ? __pfx_newseg+0x10/0x10 [ 402.018720][ T9454] ? down_write+0x146/0x1f0 [ 402.018742][ T9454] ? ksys_write+0x190/0x250 [ 402.018758][ T9454] ? ksys_write+0x190/0x250 [ 402.018779][ T9454] ipcget+0xee/0xf50 [ 402.018804][ T9454] ? do_futex+0x192/0x350 [ 402.018829][ T9454] ? __pfx_do_futex+0x10/0x10 [ 402.018858][ T9454] ? __pfx_ipcget+0x10/0x10 [ 402.018884][ T9454] ? __x64_sys_futex+0x34f/0x4d0 [ 402.018908][ T9454] ? __x64_sys_futex+0x358/0x4d0 [ 402.018935][ T9454] __x64_sys_shmget+0x13b/0x1b0 [ 402.018962][ T9454] ? __pfx___x64_sys_shmget+0x10/0x10 [ 402.018994][ T9454] do_syscall_64+0x106/0xf80 [ 402.019011][ T9454] ? clear_bhb_loop+0x40/0x90 [ 402.019033][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.019052][ T9454] RIP: 0033:0x7f753479c799 [ 402.019068][ T9454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.019085][ T9454] RSP: 002b:00007f75329d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 402.019103][ T9454] RAX: ffffffffffffffda RBX: 00007f7534a16180 RCX: 00007f753479c799 [ 402.019114][ T9454] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 402.019125][ T9454] RBP: 00007f7534832c99 R08: 0000000000000000 R09: 0000000000000000 [ 402.019135][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.019146][ T9454] R13: 00007f7534a16218 R14: 00007f7534a16180 R15: 00007fff3cd26a88 [ 402.019168][ T9454] [ 402.978462][ T9468] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 403.363139][ T9477] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 403.383856][ T9461] kvm: kvm [9460]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 404.003611][ T9482] zswap: compressor not available [ 404.435865][ T9498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.505929][ T9498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.544649][ T9498] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 404.602177][ T9498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.463449][ T8904] Bluetooth: hci3: command 0x0406 tx timeout [ 406.546449][ T8904] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.553624][ T9149] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.623487][ T8904] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.146113][ T9563] futex_wake_op: syz.4.761 tries to shift op by -2048; fix this program [ 407.193613][ T9563] futex_wake_op: syz.4.761 tries to shift op by -2048; fix this program [ 407.239015][ T9563] 0x000000000001-0x000000020000 : "" [ 407.281369][ T9563] ftl_cs: FTL header corrupt! [ 407.340689][ T9568] futex_wake_op: syz.4.761 tries to shift op by -2048; fix this program [ 407.494295][ T9567] ERROR: Out of memory at tomoyo_memory_ok. [ 407.969216][ T9585] usb usb15: usbfs: interface 0 claimed by hub while 'syz.4.765' sets config #0 [ 408.443228][ T9603] FAULT_INJECTION: forcing a failure. [ 408.443228][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 408.681223][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.1.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.681255][ T9603] Tainted: [L]=SOFTLOCKUP [ 408.681262][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.681272][ T9603] Call Trace: [ 408.681279][ T9603] [ 408.681286][ T9603] dump_stack_lvl+0x100/0x190 [ 408.681319][ T9603] should_fail_ex.cold+0x5/0xa [ 408.681342][ T9603] should_failslab+0xc2/0x120 [ 408.681363][ T9603] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 408.681391][ T9603] ? security_inode_alloc+0x3b/0x2c0 [ 408.681413][ T9603] ? lockdep_init_map_type+0x5c/0x250 [ 408.681442][ T9603] security_inode_alloc+0x3b/0x2c0 [ 408.681463][ T9603] inode_init_always_gfp+0xced/0x1040 [ 408.681487][ T9603] alloc_inode+0x8e/0x250 [ 408.681512][ T9603] new_inode+0x22/0x1c0 [ 408.681538][ T9603] hugetlbfs_get_inode+0x313/0x750 [ 408.681563][ T9603] hugetlb_file_setup+0x3cc/0x5b0 [ 408.681587][ T9603] newseg+0xabb/0xed0 [ 408.681615][ T9603] ? __pfx_newseg+0x10/0x10 [ 408.681640][ T9603] ? down_write+0x146/0x1f0 [ 408.681661][ T9603] ? ksys_write+0x190/0x250 [ 408.681678][ T9603] ? ksys_write+0x190/0x250 [ 408.681698][ T9603] ipcget+0xee/0xf50 [ 408.681723][ T9603] ? do_futex+0x192/0x350 [ 408.681748][ T9603] ? __pfx_do_futex+0x10/0x10 [ 408.681776][ T9603] ? __pfx_ipcget+0x10/0x10 [ 408.681802][ T9603] ? __x64_sys_futex+0x34f/0x4d0 [ 408.681826][ T9603] ? __x64_sys_futex+0x358/0x4d0 [ 408.681854][ T9603] __x64_sys_shmget+0x13b/0x1b0 [ 408.681880][ T9603] ? __pfx___x64_sys_shmget+0x10/0x10 [ 408.681912][ T9603] do_syscall_64+0x106/0xf80 [ 408.681929][ T9603] ? clear_bhb_loop+0x40/0x90 [ 408.681951][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.681970][ T9603] RIP: 0033:0x7f29f159c799 [ 408.681986][ T9603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.682003][ T9603] RSP: 002b:00007f29f2458028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 408.682020][ T9603] RAX: ffffffffffffffda RBX: 00007f29f1816180 RCX: 00007f29f159c799 [ 408.682032][ T9603] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 408.682043][ T9603] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 408.682053][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.682063][ T9603] R13: 00007f29f1816218 R14: 00007f29f1816180 R15: 00007ffcf2aa20d8 [ 408.682086][ T9603] [ 408.939681][ T9605] FAULT_INJECTION: forcing a failure. [ 408.939681][ T9605] name failslab, interval 1, probability 0, space 0, times 0 [ 408.952825][ T9605] CPU: 0 UID: 0 PID: 9605 Comm: syz.4.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.952857][ T9605] Tainted: [L]=SOFTLOCKUP [ 408.952864][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.952874][ T9605] Call Trace: [ 408.952881][ T9605] [ 408.952888][ T9605] dump_stack_lvl+0x100/0x190 [ 408.952922][ T9605] should_fail_ex.cold+0x5/0xa [ 408.952945][ T9605] should_failslab+0xc2/0x120 [ 408.952966][ T9605] __kmalloc_cache_noprof+0x7a/0x6f0 [ 408.952991][ T9605] ? trace_pid_list_alloc+0x2fe/0x480 [ 408.953026][ T9605] trace_pid_list_alloc+0x2fe/0x480 [ 408.953067][ T9605] trace_pid_write+0x110/0x460 [ 408.953098][ T9605] ? __pfx_trace_pid_write+0x10/0x10 [ 408.953140][ T9605] event_pid_write.isra.0+0x1e4/0x800 [ 408.953160][ T9605] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 408.953186][ T9605] vfs_write+0x2aa/0x1070 [ 408.953205][ T9605] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 408.953227][ T9605] ? __pfx_vfs_write+0x10/0x10 [ 408.953244][ T9605] ? __fget_files+0x215/0x3d0 [ 408.953268][ T9605] ? __fget_files+0x21f/0x3d0 [ 408.953294][ T9605] ksys_write+0x12a/0x250 [ 408.953317][ T9605] ? __pfx_ksys_write+0x10/0x10 [ 408.953342][ T9605] do_syscall_64+0x106/0xf80 [ 408.953359][ T9605] ? clear_bhb_loop+0x40/0x90 [ 408.953389][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.953408][ T9605] RIP: 0033:0x7f3fc699c799 [ 408.953425][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.953442][ T9605] RSP: 002b:00007f3fc78e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.953460][ T9605] RAX: ffffffffffffffda RBX: 00007f3fc6c15fa0 RCX: 00007f3fc699c799 [ 408.953471][ T9605] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 408.953482][ T9605] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 408.953492][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.953503][ T9605] R13: 00007f3fc6c16038 R14: 00007f3fc6c15fa0 R15: 00007ffd7281c318 [ 408.953527][ T9605] [ 410.907335][ T9637] MTRR 1 not used [ 410.935050][ T9637] MTRR 1 not used [ 414.316946][ T9721] FAULT_INJECTION: forcing a failure. [ 414.316946][ T9721] name failslab, interval 1, probability 0, space 0, times 0 [ 414.510311][ T9721] CPU: 0 UID: 0 PID: 9721 Comm: syz.1.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.510343][ T9721] Tainted: [L]=SOFTLOCKUP [ 414.510350][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.510360][ T9721] Call Trace: [ 414.510367][ T9721] [ 414.510374][ T9721] dump_stack_lvl+0x100/0x190 [ 414.510408][ T9721] should_fail_ex.cold+0x5/0xa [ 414.510430][ T9721] should_failslab+0xc2/0x120 [ 414.510452][ T9721] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 414.510480][ T9721] ? security_inode_alloc+0x3b/0x2c0 [ 414.510502][ T9721] ? lockdep_init_map_type+0x5c/0x250 [ 414.510530][ T9721] security_inode_alloc+0x3b/0x2c0 [ 414.510551][ T9721] inode_init_always_gfp+0xced/0x1040 [ 414.510575][ T9721] alloc_inode+0x8e/0x250 [ 414.510600][ T9721] new_inode+0x22/0x1c0 [ 414.510628][ T9721] hugetlbfs_get_inode+0x313/0x750 [ 414.510652][ T9721] hugetlb_file_setup+0x3cc/0x5b0 [ 414.510675][ T9721] newseg+0xabb/0xed0 [ 414.510703][ T9721] ? __pfx_newseg+0x10/0x10 [ 414.510727][ T9721] ? down_write+0x146/0x1f0 [ 414.510748][ T9721] ? ksys_write+0x190/0x250 [ 414.510771][ T9721] ? ksys_write+0x190/0x250 [ 414.510792][ T9721] ipcget+0xee/0xf50 [ 414.510817][ T9721] ? do_futex+0x192/0x350 [ 414.510841][ T9721] ? __pfx_do_futex+0x10/0x10 [ 414.510871][ T9721] ? __pfx_ipcget+0x10/0x10 [ 414.510896][ T9721] ? __x64_sys_futex+0x34f/0x4d0 [ 414.510919][ T9721] ? __x64_sys_futex+0x358/0x4d0 [ 414.510948][ T9721] __x64_sys_shmget+0x13b/0x1b0 [ 414.510974][ T9721] ? __pfx___x64_sys_shmget+0x10/0x10 [ 414.511006][ T9721] do_syscall_64+0x106/0xf80 [ 414.511024][ T9721] ? clear_bhb_loop+0x40/0x90 [ 414.511046][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.511065][ T9721] RIP: 0033:0x7f29f159c799 [ 414.511080][ T9721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.511098][ T9721] RSP: 002b:00007f29f2458028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 414.511117][ T9721] RAX: ffffffffffffffda RBX: 00007f29f1816180 RCX: 00007f29f159c799 [ 414.511128][ T9721] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 414.511139][ T9721] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 414.511149][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.511159][ T9721] R13: 00007f29f1816218 R14: 00007f29f1816180 R15: 00007ffcf2aa20d8 [ 414.511181][ T9721] [ 416.561094][ T9770] netlink: 350 bytes leftover after parsing attributes in process `syz.4.807'. [ 417.325958][ T9783] tipc: Started in network mode [ 417.358389][ T9783] tipc: Node identity ffffffff, cluster identity 4711 [ 417.398809][ T9783] tipc: Node number set to 4294967295 [ 418.035672][ T9804] FAULT_INJECTION: forcing a failure. [ 418.035672][ T9804] name failslab, interval 1, probability 0, space 0, times 0 [ 418.099415][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.099449][ T9804] Tainted: [L]=SOFTLOCKUP [ 418.099455][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.099466][ T9804] Call Trace: [ 418.099473][ T9804] [ 418.099480][ T9804] dump_stack_lvl+0x100/0x190 [ 418.099512][ T9804] should_fail_ex.cold+0x5/0xa [ 418.099535][ T9804] ? constrain_params_by_rules+0x175/0xcc0 [ 418.099562][ T9804] should_failslab+0xc2/0x120 [ 418.099584][ T9804] __kmalloc_noprof+0xe0/0x850 [ 418.099610][ T9804] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 418.099636][ T9804] constrain_params_by_rules+0x175/0xcc0 [ 418.099662][ T9804] ? unwind_get_return_address+0x59/0xa0 [ 418.099691][ T9804] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 418.099719][ T9804] ? stack_trace_save+0x8e/0xc0 [ 418.099737][ T9804] ? __pfx_stack_trace_save+0x10/0x10 [ 418.099758][ T9804] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 418.099789][ T9804] ? snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 418.099813][ T9804] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 418.099836][ T9804] ? snd_pcm_oss_set_trigger.isra.0+0x32/0x6c0 [ 418.099860][ T9804] ? snd_pcm_oss_ioctl+0x1fb9/0x3720 [ 418.099883][ T9804] ? __x64_sys_ioctl+0x18e/0x210 [ 418.099908][ T9804] ? do_syscall_64+0x106/0xf80 [ 418.099925][ T9804] ? snd_interval_refine+0x2d0/0x580 [ 418.099946][ T9804] snd_pcm_hw_refine+0x7e7/0xad0 [ 418.099976][ T9804] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 418.100017][ T9804] snd_pcm_hw_param_first+0x2b0/0x680 [ 418.100046][ T9804] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 418.100073][ T9804] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 418.100099][ T9804] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 418.100123][ T9804] ? kfree+0x1f6/0x6b0 [ 418.100151][ T9804] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 418.100186][ T9804] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 418.100211][ T9804] ? __pfx___mutex_lock+0x10/0x10 [ 418.100245][ T9804] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 418.100272][ T9804] snd_pcm_oss_set_trigger.isra.0+0x32/0x6c0 [ 418.100309][ T9804] snd_pcm_oss_ioctl+0x1fb9/0x3720 [ 418.100339][ T9804] ? find_held_lock+0x2b/0x80 [ 418.100358][ T9804] ? __fget_files+0x215/0x3d0 [ 418.100375][ T9804] ? hook_file_ioctl_common+0x146/0x410 [ 418.100399][ T9804] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 418.100427][ T9804] ? __fget_files+0x21f/0x3d0 [ 418.100449][ T9804] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 418.100475][ T9804] __x64_sys_ioctl+0x18e/0x210 [ 418.100504][ T9804] do_syscall_64+0x106/0xf80 [ 418.100521][ T9804] ? clear_bhb_loop+0x40/0x90 [ 418.100543][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.100562][ T9804] RIP: 0033:0x7f29f159c799 [ 418.100578][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.100595][ T9804] RSP: 002b:00007f29f249a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.100614][ T9804] RAX: ffffffffffffffda RBX: 00007f29f1815fa0 RCX: 00007f29f159c799 [ 418.100625][ T9804] RDX: 0000000000000000 RSI: 0000000040045010 RDI: 0000000000000005 [ 418.100635][ T9804] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 418.100646][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.100656][ T9804] R13: 00007f29f1816038 R14: 00007f29f1815fa0 R15: 00007ffcf2aa20d8 [ 418.100679][ T9804] [ 418.874820][ T9803] [U] ^\ [ 419.366083][ T9811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.372911][ T9811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.381340][ T9811] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 419.389702][ T9811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.865550][ T9831] usb usb15: usbfs: interface 0 claimed by hub while 'syz.4.824' sets config #0 [ 420.320464][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 420.615926][ T9850] can: request_module (can-proto-5) failed. [ 420.879712][ T9869] ima: policy update failed [ 420.915038][ T29] audit: type=1802 audit(2147483661.620:5): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.834" res=0 errno=0 [ 421.125728][ T9874] usb usb15: usbfs: interface 0 claimed by hub while 'syz.2.836' sets config #0 [ 421.423590][ T8904] Bluetooth: hci5: command 0x0c1a tx timeout [ 421.429718][ T8904] Bluetooth: hci4: command 0x0c1a tx timeout [ 421.436440][ T9149] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.443416][ T8904] Bluetooth: hci3: command 0x0406 tx timeout [ 421.469643][ T9886] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 423.148840][ T9923] bond0: invalid ARP target specified [ 424.005494][ T9955] Invalid ELF header magic: != ELF [ 424.070279][ T29] audit: type=1800 audit(2147483664.770:6): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.853" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 427.454398][T10026] FAULT_INJECTION: forcing a failure. [ 427.454398][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 427.660924][T10026] CPU: 0 UID: 0 PID: 10026 Comm: syz.4.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.660958][T10026] Tainted: [L]=SOFTLOCKUP [ 427.660964][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.660975][T10026] Call Trace: [ 427.660982][T10026] [ 427.660995][T10026] dump_stack_lvl+0x100/0x190 [ 427.661029][T10026] should_fail_ex.cold+0x5/0xa [ 427.661051][T10026] should_failslab+0xc2/0x120 [ 427.661072][T10026] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 427.661101][T10026] ? security_inode_alloc+0x3b/0x2c0 [ 427.661122][T10026] ? lockdep_init_map_type+0x5c/0x250 [ 427.661152][T10026] security_inode_alloc+0x3b/0x2c0 [ 427.661173][T10026] inode_init_always_gfp+0xced/0x1040 [ 427.661197][T10026] alloc_inode+0x8e/0x250 [ 427.661222][T10026] new_inode+0x22/0x1c0 [ 427.661251][T10026] hugetlbfs_get_inode+0x313/0x750 [ 427.661275][T10026] hugetlb_file_setup+0x3cc/0x5b0 [ 427.661299][T10026] newseg+0xabb/0xed0 [ 427.661328][T10026] ? __pfx_newseg+0x10/0x10 [ 427.661352][T10026] ? down_write+0x146/0x1f0 [ 427.661373][T10026] ? ksys_write+0x190/0x250 [ 427.661390][T10026] ? ksys_write+0x190/0x250 [ 427.661411][T10026] ipcget+0xee/0xf50 [ 427.661435][T10026] ? do_futex+0x192/0x350 [ 427.661460][T10026] ? __pfx_do_futex+0x10/0x10 [ 427.661488][T10026] ? __pfx_ipcget+0x10/0x10 [ 427.661514][T10026] ? __x64_sys_futex+0x34f/0x4d0 [ 427.661537][T10026] ? __x64_sys_futex+0x358/0x4d0 [ 427.661565][T10026] __x64_sys_shmget+0x13b/0x1b0 [ 427.661592][T10026] ? __pfx___x64_sys_shmget+0x10/0x10 [ 427.661624][T10026] do_syscall_64+0x106/0xf80 [ 427.661641][T10026] ? clear_bhb_loop+0x40/0x90 [ 427.661664][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.661683][T10026] RIP: 0033:0x7f3fc699c799 [ 427.661699][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.661716][T10026] RSP: 002b:00007f3fc789f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 427.661734][T10026] RAX: ffffffffffffffda RBX: 00007f3fc6c16180 RCX: 00007f3fc699c799 [ 427.661745][T10026] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 427.661756][T10026] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 427.661766][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.661777][T10026] R13: 00007f3fc6c16218 R14: 00007f3fc6c16180 R15: 00007ffd7281c318 [ 427.661800][T10026] [ 427.907866][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 429.744581][T10072] usb usb15: usbfs: interface 0 claimed by hub while 'syz.5.878' sets config #0 [ 429.766561][T10064] FAULT_INJECTION: forcing a failure. [ 429.766561][T10064] name failslab, interval 1, probability 0, space 0, times 0 [ 429.832284][T10073] Invalid ELF header magic: != ELF [ 429.880699][T10064] CPU: 0 UID: 0 PID: 10064 Comm: syz.2.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.880732][T10064] Tainted: [L]=SOFTLOCKUP [ 429.880739][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.880749][T10064] Call Trace: [ 429.880756][T10064] [ 429.880770][T10064] dump_stack_lvl+0x100/0x190 [ 429.880802][T10064] should_fail_ex.cold+0x5/0xa [ 429.880825][T10064] should_failslab+0xc2/0x120 [ 429.880847][T10064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 429.880876][T10064] ? security_inode_alloc+0x3b/0x2c0 [ 429.880904][T10064] ? lockdep_init_map_type+0x5c/0x250 [ 429.880933][T10064] security_inode_alloc+0x3b/0x2c0 [ 429.880955][T10064] inode_init_always_gfp+0xced/0x1040 [ 429.880979][T10064] alloc_inode+0x8e/0x250 [ 429.881005][T10064] new_inode+0x22/0x1c0 [ 429.881032][T10064] hugetlbfs_get_inode+0x313/0x750 [ 429.881056][T10064] hugetlb_file_setup+0x3cc/0x5b0 [ 429.881080][T10064] newseg+0xabb/0xed0 [ 429.881109][T10064] ? __pfx_newseg+0x10/0x10 [ 429.881132][T10064] ? down_write+0x146/0x1f0 [ 429.881153][T10064] ? ksys_write+0x190/0x250 [ 429.881172][T10064] ? ksys_write+0x190/0x250 [ 429.881193][T10064] ipcget+0xee/0xf50 [ 429.881217][T10064] ? do_futex+0x192/0x350 [ 429.881242][T10064] ? __pfx_do_futex+0x10/0x10 [ 429.881270][T10064] ? __pfx_ipcget+0x10/0x10 [ 429.881296][T10064] ? __x64_sys_futex+0x34f/0x4d0 [ 429.881320][T10064] ? __x64_sys_futex+0x358/0x4d0 [ 429.881348][T10064] __x64_sys_shmget+0x13b/0x1b0 [ 429.881374][T10064] ? __pfx___x64_sys_shmget+0x10/0x10 [ 429.881407][T10064] do_syscall_64+0x106/0xf80 [ 429.881423][T10064] ? clear_bhb_loop+0x40/0x90 [ 429.881446][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.881465][T10064] RIP: 0033:0x7f753479c799 [ 429.881480][T10064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.881497][T10064] RSP: 002b:00007f75329d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 429.881515][T10064] RAX: ffffffffffffffda RBX: 00007f7534a16180 RCX: 00007f753479c799 [ 429.881527][T10064] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 429.881538][T10064] RBP: 00007f7534832c99 R08: 0000000000000000 R09: 0000000000000000 [ 429.881548][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.881559][T10064] R13: 00007f7534a16218 R14: 00007f7534a16180 R15: 00007fff3cd26a88 [ 429.881581][T10064] [ 430.605404][T10089] random: crng reseeded on system resumption [ 430.686778][T10091] ptp ptp0: guarantee physical clock free running [ 430.702732][T10091] ptp ptp0: delete virtual clock ptp1 [ 431.171705][T10091] ptp ptp0: only physical clock in use now [ 431.546136][T10108] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 432.118539][T10116] FAULT_INJECTION: forcing a failure. [ 432.118539][T10116] name failslab, interval 1, probability 0, space 0, times 0 [ 432.365262][T10116] CPU: 0 UID: 0 PID: 10116 Comm: syz.4.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.365295][T10116] Tainted: [L]=SOFTLOCKUP [ 432.365301][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 432.365312][T10116] Call Trace: [ 432.365318][T10116] [ 432.365325][T10116] dump_stack_lvl+0x100/0x190 [ 432.365358][T10116] should_fail_ex.cold+0x5/0xa [ 432.365381][T10116] should_failslab+0xc2/0x120 [ 432.365402][T10116] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 432.365433][T10116] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 432.365458][T10116] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 432.365477][T10116] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 432.365498][T10116] alloc_inode+0x68/0x250 [ 432.365525][T10116] new_inode+0x22/0x1c0 [ 432.365551][T10116] hugetlbfs_get_inode+0x313/0x750 [ 432.365575][T10116] hugetlb_file_setup+0x3cc/0x5b0 [ 432.365599][T10116] newseg+0xabb/0xed0 [ 432.365629][T10116] ? __pfx_newseg+0x10/0x10 [ 432.365653][T10116] ? down_write+0x146/0x1f0 [ 432.365675][T10116] ? ksys_write+0x190/0x250 [ 432.365691][T10116] ? ksys_write+0x190/0x250 [ 432.365712][T10116] ipcget+0xee/0xf50 [ 432.365736][T10116] ? do_futex+0x192/0x350 [ 432.365763][T10116] ? __pfx_do_futex+0x10/0x10 [ 432.365793][T10116] ? __pfx_ipcget+0x10/0x10 [ 432.365819][T10116] ? __x64_sys_futex+0x34f/0x4d0 [ 432.365842][T10116] ? __x64_sys_futex+0x358/0x4d0 [ 432.365870][T10116] __x64_sys_shmget+0x13b/0x1b0 [ 432.365896][T10116] ? __pfx___x64_sys_shmget+0x10/0x10 [ 432.365936][T10116] do_syscall_64+0x106/0xf80 [ 432.365954][T10116] ? clear_bhb_loop+0x40/0x90 [ 432.365976][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.365995][T10116] RIP: 0033:0x7f3fc699c799 [ 432.366011][T10116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.366029][T10116] RSP: 002b:00007f3fc789f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 432.366047][T10116] RAX: ffffffffffffffda RBX: 00007f3fc6c16180 RCX: 00007f3fc699c799 [ 432.366059][T10116] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 432.366070][T10116] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 432.366081][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.366091][T10116] R13: 00007f3fc6c16218 R14: 00007f3fc6c16180 R15: 00007ffd7281c318 [ 432.366113][T10116] [ 433.424158][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.895'. [ 433.619241][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 433.677681][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 434.080256][T10158] FAULT_INJECTION: forcing a failure. [ 434.080256][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 434.235012][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.902'. [ 434.286706][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.300636][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.5.900 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.300680][T10158] Tainted: [L]=SOFTLOCKUP [ 434.300686][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.300697][T10158] Call Trace: [ 434.300704][T10158] [ 434.300711][T10158] dump_stack_lvl+0x100/0x190 [ 434.300745][T10158] should_fail_ex.cold+0x5/0xa [ 434.300771][T10158] should_failslab+0xc2/0x120 [ 434.300793][T10158] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 434.300821][T10158] ? security_inode_alloc+0x3b/0x2c0 [ 434.300842][T10158] ? lockdep_init_map_type+0x5c/0x250 [ 434.300872][T10158] security_inode_alloc+0x3b/0x2c0 [ 434.300901][T10158] inode_init_always_gfp+0xced/0x1040 [ 434.300924][T10158] alloc_inode+0x8e/0x250 [ 434.300950][T10158] new_inode+0x22/0x1c0 [ 434.300978][T10158] hugetlbfs_get_inode+0x313/0x750 [ 434.301003][T10158] hugetlb_file_setup+0x3cc/0x5b0 [ 434.301027][T10158] newseg+0xabb/0xed0 [ 434.301056][T10158] ? __pfx_newseg+0x10/0x10 [ 434.301081][T10158] ? down_write+0x146/0x1f0 [ 434.301101][T10158] ? ksys_write+0x190/0x250 [ 434.301119][T10158] ? ksys_write+0x190/0x250 [ 434.301139][T10158] ipcget+0xee/0xf50 [ 434.301164][T10158] ? do_futex+0x192/0x350 [ 434.301189][T10158] ? __pfx_do_futex+0x10/0x10 [ 434.301217][T10158] ? __pfx_ipcget+0x10/0x10 [ 434.301242][T10158] ? __x64_sys_futex+0x34f/0x4d0 [ 434.301265][T10158] ? __x64_sys_futex+0x358/0x4d0 [ 434.301294][T10158] __x64_sys_shmget+0x13b/0x1b0 [ 434.301320][T10158] ? __pfx___x64_sys_shmget+0x10/0x10 [ 434.301354][T10158] do_syscall_64+0x106/0xf80 [ 434.301371][T10158] ? clear_bhb_loop+0x40/0x90 [ 434.301393][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.301412][T10158] RIP: 0033:0x7f1a9679c799 [ 434.301428][T10158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.301445][T10158] RSP: 002b:00007f1a976a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 434.301463][T10158] RAX: ffffffffffffffda RBX: 00007f1a96a16180 RCX: 00007f1a9679c799 [ 434.301474][T10158] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 434.301485][T10158] RBP: 00007f1a96832c99 R08: 0000000000000000 R09: 0000000000000000 [ 434.301495][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.301506][T10158] R13: 00007f1a96a16218 R14: 00007f1a96a16180 R15: 00007ffce54f7eb8 [ 434.301528][T10158] [ 434.949993][T10161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.140753][T10175] usb usb15: usbfs: interface 0 claimed by hub while 'syz.5.904' sets config #0 [ 435.387065][T10168] zswap: compressor not available [ 436.196540][ T8909] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.704570][T10203] netlink: 146 bytes leftover after parsing attributes in process `syz.2.909'. [ 438.096928][T10242] FAULT_INJECTION: forcing a failure. [ 438.096928][T10242] name failslab, interval 1, probability 0, space 0, times 0 [ 438.173441][T10242] CPU: 0 UID: 0 PID: 10242 Comm: syz.5.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.173474][T10242] Tainted: [L]=SOFTLOCKUP [ 438.173481][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.173492][T10242] Call Trace: [ 438.173499][T10242] [ 438.173507][T10242] dump_stack_lvl+0x100/0x190 [ 438.173540][T10242] should_fail_ex.cold+0x5/0xa [ 438.173563][T10242] should_failslab+0xc2/0x120 [ 438.173584][T10242] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 438.173613][T10242] ? alloc_uid+0x13d/0x4c0 [ 438.173635][T10242] ? rcu_is_watching+0x12/0xc0 [ 438.173667][T10242] alloc_uid+0x13d/0x4c0 [ 438.173690][T10242] ? __pfx_alloc_uid+0x10/0x10 [ 438.173713][T10242] ? bpf_lsm_capable+0x9/0x10 [ 438.173733][T10242] ? security_capable+0x80/0x260 [ 438.173754][T10242] __sys_setreuid+0x63c/0xb00 [ 438.173776][T10242] do_syscall_64+0x106/0xf80 [ 438.173794][T10242] ? clear_bhb_loop+0x40/0x90 [ 438.173816][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.173835][T10242] RIP: 0033:0x7f1a9679c799 [ 438.173850][T10242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.173868][T10242] RSP: 002b:00007f1a976ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 438.173895][T10242] RAX: ffffffffffffffda RBX: 00007f1a96a15fa0 RCX: 00007f1a9679c799 [ 438.173907][T10242] RDX: 0000000000000000 RSI: 00000000000009d7 RDI: 0000000000000008 [ 438.173918][T10242] RBP: 00007f1a96832c99 R08: 0000000000000000 R09: 0000000000000000 [ 438.173928][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.173938][T10242] R13: 00007f1a96a16038 R14: 00007f1a96a15fa0 R15: 00007ffce54f7eb8 [ 438.173960][T10242] [ 439.402555][T10256] netlink: 342 bytes leftover after parsing attributes in process `syz.4.923'. [ 440.193583][T10264] binder: 10262:10264 ioctl 400c620e 2000000001c0 returned -22 [ 440.312948][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.313024][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.930017][T10281] usb usb15: usbfs: interface 0 claimed by hub while 'syz.5.927' sets config #0 [ 441.746508][ T29] audit: type=1326 audit(2147483682.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10292 comm="syz.1.931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29f159c799 code=0x0 [ 441.802437][ T9887] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 442.555932][ T29] audit: type=1804 audit(2147483683.250:8): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.937" name="/newroot/sys/kernel/debug/tracing/saved_tgids" dev="tracefs" ino=3593 res=1 errno=0 [ 442.589500][T10308] netlink: 504 bytes leftover after parsing attributes in process `syz.5.937'. [ 442.911056][T10314] ERROR: Out of memory at tomoyo_memory_ok. [ 443.143481][T10319] FAULT_INJECTION: forcing a failure. [ 443.143481][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 443.378672][T10319] CPU: 0 UID: 0 PID: 10319 Comm: syz.1.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.378705][T10319] Tainted: [L]=SOFTLOCKUP [ 443.378711][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.378721][T10319] Call Trace: [ 443.378728][T10319] [ 443.378735][T10319] dump_stack_lvl+0x100/0x190 [ 443.378768][T10319] should_fail_ex.cold+0x5/0xa [ 443.378791][T10319] should_failslab+0xc2/0x120 [ 443.378812][T10319] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 443.378841][T10319] ? security_inode_alloc+0x3b/0x2c0 [ 443.378862][T10319] ? lockdep_init_map_type+0x5c/0x250 [ 443.378891][T10319] security_inode_alloc+0x3b/0x2c0 [ 443.378913][T10319] inode_init_always_gfp+0xced/0x1040 [ 443.378937][T10319] alloc_inode+0x8e/0x250 [ 443.378965][T10319] new_inode+0x22/0x1c0 [ 443.378991][T10319] hugetlbfs_get_inode+0x313/0x750 [ 443.379016][T10319] hugetlb_file_setup+0x3cc/0x5b0 [ 443.379040][T10319] newseg+0xabb/0xed0 [ 443.379079][T10319] ? __pfx_newseg+0x10/0x10 [ 443.379104][T10319] ? down_write+0x146/0x1f0 [ 443.379126][T10319] ? ksys_write+0x190/0x250 [ 443.379143][T10319] ? ksys_write+0x190/0x250 [ 443.379164][T10319] ipcget+0xee/0xf50 [ 443.379190][T10319] ? do_futex+0x192/0x350 [ 443.379215][T10319] ? __pfx_do_futex+0x10/0x10 [ 443.379243][T10319] ? __pfx_ipcget+0x10/0x10 [ 443.379268][T10319] ? __x64_sys_futex+0x34f/0x4d0 [ 443.379292][T10319] ? __x64_sys_futex+0x358/0x4d0 [ 443.379320][T10319] __x64_sys_shmget+0x13b/0x1b0 [ 443.379346][T10319] ? __pfx___x64_sys_shmget+0x10/0x10 [ 443.379378][T10319] do_syscall_64+0x106/0xf80 [ 443.379395][T10319] ? clear_bhb_loop+0x40/0x90 [ 443.379418][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.379436][T10319] RIP: 0033:0x7f29f159c799 [ 443.379452][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.379470][T10319] RSP: 002b:00007f29f2458028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 443.379487][T10319] RAX: ffffffffffffffda RBX: 00007f29f1816180 RCX: 00007f29f159c799 [ 443.379499][T10319] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 443.379510][T10319] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 443.379520][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.379530][T10319] R13: 00007f29f1816218 R14: 00007f29f1816180 R15: 00007ffcf2aa20d8 [ 443.379552][T10319] [ 444.378271][T10337] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 446.296198][T10368] FAULT_INJECTION: forcing a failure. [ 446.296198][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 446.489006][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.2.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.489038][T10368] Tainted: [L]=SOFTLOCKUP [ 446.489045][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.489055][T10368] Call Trace: [ 446.489062][T10368] [ 446.489069][T10368] dump_stack_lvl+0x100/0x190 [ 446.489102][T10368] should_fail_ex.cold+0x5/0xa [ 446.489125][T10368] should_failslab+0xc2/0x120 [ 446.489146][T10368] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 446.489176][T10368] ? security_inode_alloc+0x3b/0x2c0 [ 446.489197][T10368] ? lockdep_init_map_type+0x5c/0x250 [ 446.489225][T10368] security_inode_alloc+0x3b/0x2c0 [ 446.489247][T10368] inode_init_always_gfp+0xced/0x1040 [ 446.489270][T10368] alloc_inode+0x8e/0x250 [ 446.489296][T10368] new_inode+0x22/0x1c0 [ 446.489324][T10368] hugetlbfs_get_inode+0x313/0x750 [ 446.489349][T10368] hugetlb_file_setup+0x3cc/0x5b0 [ 446.489373][T10368] newseg+0xabb/0xed0 [ 446.489401][T10368] ? __pfx_newseg+0x10/0x10 [ 446.489426][T10368] ? down_write+0x146/0x1f0 [ 446.489447][T10368] ? ksys_write+0x190/0x250 [ 446.489464][T10368] ? ksys_write+0x190/0x250 [ 446.489484][T10368] ipcget+0xee/0xf50 [ 446.489509][T10368] ? do_futex+0x192/0x350 [ 446.489534][T10368] ? __pfx_do_futex+0x10/0x10 [ 446.489562][T10368] ? __pfx_ipcget+0x10/0x10 [ 446.489587][T10368] ? __x64_sys_futex+0x34f/0x4d0 [ 446.489611][T10368] ? __x64_sys_futex+0x358/0x4d0 [ 446.489640][T10368] __x64_sys_shmget+0x13b/0x1b0 [ 446.489667][T10368] ? __pfx___x64_sys_shmget+0x10/0x10 [ 446.489699][T10368] do_syscall_64+0x106/0xf80 [ 446.489717][T10368] ? clear_bhb_loop+0x40/0x90 [ 446.489739][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.489758][T10368] RIP: 0033:0x7f753479c799 [ 446.489774][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.489791][T10368] RSP: 002b:00007f75329d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 446.489817][T10368] RAX: ffffffffffffffda RBX: 00007f7534a16180 RCX: 00007f753479c799 [ 446.489828][T10368] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 446.489839][T10368] RBP: 00007f7534832c99 R08: 0000000000000000 R09: 0000000000000000 [ 446.489849][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.489860][T10368] R13: 00007f7534a16218 R14: 00007f7534a16180 R15: 00007fff3cd26a88 [ 446.489882][T10368] [ 447.134861][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 447.348901][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 447.377201][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 448.156739][T10373] vhci_hcd vhci_hcd.2: invalid port number 194 [ 448.187808][T10373] vhci_hcd vhci_hcd.2: invalid port number 194 [ 448.532219][T10416] FAULT_INJECTION: forcing a failure. [ 448.532219][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 448.630756][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.5.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.630801][T10416] Tainted: [L]=SOFTLOCKUP [ 448.630808][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 448.630818][T10416] Call Trace: [ 448.630824][T10416] [ 448.630831][T10416] dump_stack_lvl+0x100/0x190 [ 448.630863][T10416] should_fail_ex.cold+0x5/0xa [ 448.630886][T10416] should_failslab+0xc2/0x120 [ 448.630908][T10416] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 448.630936][T10416] ? ext4_init_io_end+0x24/0x170 [ 448.630961][T10416] ext4_init_io_end+0x24/0x170 [ 448.630980][T10416] ext4_do_writepages+0xaf9/0x3f50 [ 448.631007][T10416] ? set_next_entity+0x11e/0x9c0 [ 448.631047][T10416] ? __pfx_ext4_do_writepages+0x10/0x10 [ 448.631086][T10416] ? ext4_writepages+0x347/0x790 [ 448.631110][T10416] ext4_writepages+0x347/0x790 [ 448.631137][T10416] ? __pfx_ext4_writepages+0x10/0x10 [ 448.631171][T10416] ? do_writepages+0x4b5/0x600 [ 448.631192][T10416] ? do_writepages+0x4b5/0x600 [ 448.631216][T10416] ? __pfx_ext4_writepages+0x10/0x10 [ 448.631243][T10416] do_writepages+0x278/0x600 [ 448.631268][T10416] ? __pfx_do_writepages+0x10/0x10 [ 448.631289][T10416] ? do_raw_spin_unlock+0x145/0x1e0 [ 448.631319][T10416] ? _raw_spin_unlock+0x28/0x50 [ 448.631348][T10416] filemap_writeback+0x22d/0x2e0 [ 448.631373][T10416] ? __pfx_filemap_writeback+0x10/0x10 [ 448.631420][T10416] ? mt_find+0x45e/0x8e0 [ 448.631441][T10416] ? __pfx_mt_find+0x10/0x10 [ 448.631462][T10416] file_write_and_wait_range+0xcd/0x140 [ 448.631491][T10416] ext4_sync_file+0x358/0xbc0 [ 448.631517][T10416] ? __pfx_ext4_sync_file+0x10/0x10 [ 448.631541][T10416] ? __up_read+0x220/0x700 [ 448.631568][T10416] ? __pfx___up_read+0x10/0x10 [ 448.631594][T10416] ? __do_sys_msync+0x39b/0x590 [ 448.631623][T10416] ? __pfx_ext4_sync_file+0x10/0x10 [ 448.631647][T10416] vfs_fsync_range+0x9b/0x190 [ 448.631670][T10416] __do_sys_msync+0x3ca/0x590 [ 448.631703][T10416] do_syscall_64+0x106/0xf80 [ 448.631720][T10416] ? clear_bhb_loop+0x40/0x90 [ 448.631742][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.631761][T10416] RIP: 0033:0x7f1a9679c799 [ 448.631785][T10416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.631802][T10416] RSP: 002b:00007f1a976c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 448.631821][T10416] RAX: ffffffffffffffda RBX: 00007f1a96a16090 RCX: 00007f1a9679c799 [ 448.631833][T10416] RDX: 0000000000000006 RSI: 0000002000000005 RDI: 0000000000200000 [ 448.631844][T10416] RBP: 00007f1a96832c99 R08: 0000000000000000 R09: 0000000000000000 [ 448.631854][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.631865][T10416] R13: 00007f1a96a16128 R14: 00007f1a96a16090 R15: 00007ffce54f7eb8 [ 448.631887][T10416] [ 449.899145][T10429] FAULT_INJECTION: forcing a failure. [ 449.899145][T10429] name failslab, interval 1, probability 0, space 0, times 0 [ 450.126898][T10429] CPU: 0 UID: 0 PID: 10429 Comm: syz.4.965 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.126930][T10429] Tainted: [L]=SOFTLOCKUP [ 450.126937][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 450.126947][T10429] Call Trace: [ 450.126953][T10429] [ 450.126961][T10429] dump_stack_lvl+0x100/0x190 [ 450.126995][T10429] should_fail_ex.cold+0x5/0xa [ 450.127017][T10429] should_failslab+0xc2/0x120 [ 450.127038][T10429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 450.127067][T10429] ? security_inode_alloc+0x3b/0x2c0 [ 450.127089][T10429] ? lockdep_init_map_type+0x5c/0x250 [ 450.127118][T10429] security_inode_alloc+0x3b/0x2c0 [ 450.127140][T10429] inode_init_always_gfp+0xced/0x1040 [ 450.127164][T10429] alloc_inode+0x8e/0x250 [ 450.127189][T10429] new_inode+0x22/0x1c0 [ 450.127216][T10429] hugetlbfs_get_inode+0x313/0x750 [ 450.127240][T10429] hugetlb_file_setup+0x3cc/0x5b0 [ 450.127264][T10429] newseg+0xabb/0xed0 [ 450.127292][T10429] ? __pfx_newseg+0x10/0x10 [ 450.127316][T10429] ? down_write+0x146/0x1f0 [ 450.127337][T10429] ? ksys_write+0x190/0x250 [ 450.127354][T10429] ? ksys_write+0x190/0x250 [ 450.127375][T10429] ipcget+0xee/0xf50 [ 450.127399][T10429] ? do_futex+0x192/0x350 [ 450.127424][T10429] ? __pfx_do_futex+0x10/0x10 [ 450.127452][T10429] ? __pfx_ipcget+0x10/0x10 [ 450.127478][T10429] ? __x64_sys_futex+0x34f/0x4d0 [ 450.127501][T10429] ? __x64_sys_futex+0x358/0x4d0 [ 450.127529][T10429] __x64_sys_shmget+0x13b/0x1b0 [ 450.127555][T10429] ? __pfx___x64_sys_shmget+0x10/0x10 [ 450.127588][T10429] do_syscall_64+0x106/0xf80 [ 450.127605][T10429] ? clear_bhb_loop+0x40/0x90 [ 450.127627][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.127646][T10429] RIP: 0033:0x7f3fc699c799 [ 450.127662][T10429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.127678][T10429] RSP: 002b:00007f3fc789f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 450.127696][T10429] RAX: ffffffffffffffda RBX: 00007f3fc6c16180 RCX: 00007f3fc699c799 [ 450.127707][T10429] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 450.127718][T10429] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 450.127728][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.127739][T10429] R13: 00007f3fc6c16218 R14: 00007f3fc6c16180 R15: 00007ffd7281c318 [ 450.127784][T10429] [ 450.873663][T10452] vivid-007: ================= START STATUS ================= [ 450.899155][T10452] vivid-007: Enable Output Cropping: true [ 450.932170][T10452] vivid-007: Enable Output Composing: true [ 450.951784][T10452] vivid-007: Enable Output Scaler: true [ 450.978353][T10452] vivid-007: Tx RGB Quantization Range: Automatic [ 451.005186][T10452] vivid-007: Transmit Mode: HDMI [ 451.015319][T10454] netlink: 342 bytes leftover after parsing attributes in process `syz.4.971'. [ 451.033534][T10452] vivid-007: Hotplug Present: 0x00000000 [ 451.046268][T10452] vivid-007: RxSense Present: 0x00000000 [ 451.066256][T10452] vivid-007: EDID Present: 0x00000000 [ 451.088012][T10452] vivid-007: ================== END STATUS ================== [ 451.758513][T10468] FAULT_INJECTION: forcing a failure. [ 451.758513][T10468] name failslab, interval 1, probability 0, space 0, times 0 [ 451.924602][T10468] CPU: 0 UID: 0 PID: 10468 Comm: syz.4.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.924635][T10468] Tainted: [L]=SOFTLOCKUP [ 451.924642][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 451.924652][T10468] Call Trace: [ 451.924659][T10468] [ 451.924666][T10468] dump_stack_lvl+0x100/0x190 [ 451.924700][T10468] should_fail_ex.cold+0x5/0xa [ 451.924723][T10468] should_failslab+0xc2/0x120 [ 451.924744][T10468] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 451.924780][T10468] ? sk_prot_alloc+0x60/0x2a0 [ 451.924805][T10468] sk_prot_alloc+0x60/0x2a0 [ 451.924827][T10468] sk_alloc+0x36/0xe80 [ 451.924855][T10468] smc_create+0x11a/0x290 [ 451.924883][T10468] __sock_create+0x339/0x860 [ 451.924910][T10468] __sys_socket+0x14d/0x260 [ 451.925001][T10468] ? __pfx___sys_socket+0x10/0x10 [ 451.925039][T10468] __x64_sys_socket+0x72/0xb0 [ 451.925062][T10468] ? lockdep_hardirqs_on+0x78/0x100 [ 451.925081][T10468] do_syscall_64+0x106/0xf80 [ 451.925099][T10468] ? clear_bhb_loop+0x40/0x90 [ 451.925121][T10468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.925141][T10468] RIP: 0033:0x7f3fc699c799 [ 451.925158][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.925175][T10468] RSP: 002b:00007f3fc78c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 451.925193][T10468] RAX: ffffffffffffffda RBX: 00007f3fc6c16090 RCX: 00007f3fc699c799 [ 451.925205][T10468] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 451.925216][T10468] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 451.925227][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.925238][T10468] R13: 00007f3fc6c16128 R14: 00007f3fc6c16090 R15: 00007ffd7281c318 [ 451.925260][T10468] [ 453.204116][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 453.661528][T10523] FAULT_INJECTION: forcing a failure. [ 453.661528][T10523] name failslab, interval 1, probability 0, space 0, times 0 [ 453.691693][T10523] CPU: 0 UID: 0 PID: 10523 Comm: syz.2.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.691724][T10523] Tainted: [L]=SOFTLOCKUP [ 453.691731][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 453.691741][T10523] Call Trace: [ 453.691748][T10523] [ 453.691754][T10523] dump_stack_lvl+0x100/0x190 [ 453.691796][T10523] should_fail_ex.cold+0x5/0xa [ 453.691819][T10523] should_failslab+0xc2/0x120 [ 453.691841][T10523] __kmalloc_cache_noprof+0x7a/0x6f0 [ 453.691867][T10523] ? file_f_owner_allocate+0x84/0x130 [ 453.691897][T10523] file_f_owner_allocate+0x84/0x130 [ 453.691923][T10523] f_setown+0x79/0x290 [ 453.691948][T10523] do_fcntl+0x112d/0x1670 [ 453.691973][T10523] ? __pfx_do_fcntl+0x10/0x10 [ 453.691996][T10523] ? __fget_files+0x215/0x3d0 [ 453.692022][T10523] ? tomoyo_file_fcntl+0x6c/0xc0 [ 453.692043][T10523] __x64_sys_fcntl+0x163/0x200 [ 453.692070][T10523] do_syscall_64+0x106/0xf80 [ 453.692087][T10523] ? clear_bhb_loop+0x40/0x90 [ 453.692109][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.692128][T10523] RIP: 0033:0x7f753479c799 [ 453.692143][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.692160][T10523] RSP: 002b:00007f7535579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 453.692178][T10523] RAX: ffffffffffffffda RBX: 00007f7534a15fa0 RCX: 00007f753479c799 [ 453.692189][T10523] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 453.692199][T10523] RBP: 00007f7534832c99 R08: 0000000000000000 R09: 0000000000000000 [ 453.692210][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.692220][T10523] R13: 00007f7534a16038 R14: 00007f7534a15fa0 R15: 00007fff3cd26a88 [ 453.692242][T10523] [ 454.384606][ T9887] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 454.459754][T10535] FAULT_INJECTION: forcing a failure. [ 454.459754][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 454.544790][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.4.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.544831][T10535] Tainted: [L]=SOFTLOCKUP [ 454.544838][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 454.544849][T10535] Call Trace: [ 454.544856][T10535] [ 454.544864][T10535] dump_stack_lvl+0x100/0x190 [ 454.544897][T10535] should_fail_ex.cold+0x5/0xa [ 454.544920][T10535] should_failslab+0xc2/0x120 [ 454.544943][T10535] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 454.544972][T10535] ? security_inode_alloc+0x3b/0x2c0 [ 454.544993][T10535] ? lockdep_init_map_type+0x5c/0x250 [ 454.545022][T10535] security_inode_alloc+0x3b/0x2c0 [ 454.545044][T10535] inode_init_always_gfp+0xced/0x1040 [ 454.545068][T10535] alloc_inode+0x8e/0x250 [ 454.545093][T10535] new_inode+0x22/0x1c0 [ 454.545121][T10535] hugetlbfs_get_inode+0x313/0x750 [ 454.545145][T10535] hugetlb_file_setup+0x3cc/0x5b0 [ 454.545169][T10535] newseg+0xabb/0xed0 [ 454.545197][T10535] ? __pfx_newseg+0x10/0x10 [ 454.545222][T10535] ? down_write+0x146/0x1f0 [ 454.545243][T10535] ? ksys_write+0x190/0x250 [ 454.545259][T10535] ? ksys_write+0x190/0x250 [ 454.545280][T10535] ipcget+0xee/0xf50 [ 454.545305][T10535] ? do_futex+0x192/0x350 [ 454.545329][T10535] ? __pfx_do_futex+0x10/0x10 [ 454.545358][T10535] ? __pfx_ipcget+0x10/0x10 [ 454.545384][T10535] ? __x64_sys_futex+0x34f/0x4d0 [ 454.545407][T10535] ? __x64_sys_futex+0x358/0x4d0 [ 454.545434][T10535] __x64_sys_shmget+0x13b/0x1b0 [ 454.545461][T10535] ? __pfx___x64_sys_shmget+0x10/0x10 [ 454.545492][T10535] do_syscall_64+0x106/0xf80 [ 454.545509][T10535] ? clear_bhb_loop+0x40/0x90 [ 454.545532][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.545550][T10535] RIP: 0033:0x7f3fc699c799 [ 454.545566][T10535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.545583][T10535] RSP: 002b:00007f3fc78c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 454.545601][T10535] RAX: ffffffffffffffda RBX: 00007f3fc6c16090 RCX: 00007f3fc699c799 [ 454.545613][T10535] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 454.545624][T10535] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 454.545634][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.545644][T10535] R13: 00007f3fc6c16128 R14: 00007f3fc6c16090 R15: 00007ffd7281c318 [ 454.545666][T10535] [ 455.166414][T10543] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 457.357326][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 457.407297][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 457.919160][T10601] random: crng reseeded on system resumption [ 458.090358][T10606] QAT: Stopping all acceleration devices. [ 458.805204][T10600] ima: policy update failed [ 458.821952][ T29] audit: type=1802 audit(2147483699.510:9): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1011" res=0 errno=0 [ 458.886694][T10621] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 459.165311][T10613] Invalid ELF header magic: != ELF [ 459.199942][T10632] ERROR: Out of memory at tomoyo_memory_ok. [ 459.602775][T10617] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 461.175242][T10668] FAULT_INJECTION: forcing a failure. [ 461.175242][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 461.467248][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.1.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.467279][T10668] Tainted: [L]=SOFTLOCKUP [ 461.467285][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 461.467296][T10668] Call Trace: [ 461.467303][T10668] [ 461.467309][T10668] dump_stack_lvl+0x100/0x190 [ 461.467343][T10668] should_fail_ex.cold+0x5/0xa [ 461.467365][T10668] should_failslab+0xc2/0x120 [ 461.467387][T10668] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 461.467416][T10668] ? security_inode_alloc+0x3b/0x2c0 [ 461.467437][T10668] ? lockdep_init_map_type+0x5c/0x250 [ 461.467466][T10668] security_inode_alloc+0x3b/0x2c0 [ 461.467487][T10668] inode_init_always_gfp+0xced/0x1040 [ 461.467510][T10668] alloc_inode+0x8e/0x250 [ 461.467536][T10668] new_inode+0x22/0x1c0 [ 461.467563][T10668] hugetlbfs_get_inode+0x313/0x750 [ 461.467587][T10668] hugetlb_file_setup+0x3cc/0x5b0 [ 461.467612][T10668] newseg+0xabb/0xed0 [ 461.467640][T10668] ? __pfx_newseg+0x10/0x10 [ 461.467665][T10668] ? down_write+0x146/0x1f0 [ 461.467713][T10668] ? ksys_write+0x190/0x250 [ 461.467731][T10668] ? ksys_write+0x190/0x250 [ 461.467752][T10668] ipcget+0xee/0xf50 [ 461.467777][T10668] ? do_futex+0x192/0x350 [ 461.467802][T10668] ? __pfx_do_futex+0x10/0x10 [ 461.467831][T10668] ? __pfx_ipcget+0x10/0x10 [ 461.467858][T10668] ? __x64_sys_futex+0x34f/0x4d0 [ 461.467882][T10668] ? __x64_sys_futex+0x358/0x4d0 [ 461.467910][T10668] __x64_sys_shmget+0x13b/0x1b0 [ 461.467936][T10668] ? __pfx___x64_sys_shmget+0x10/0x10 [ 461.467968][T10668] do_syscall_64+0x106/0xf80 [ 461.467985][T10668] ? clear_bhb_loop+0x40/0x90 [ 461.468007][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.468026][T10668] RIP: 0033:0x7f29f159c799 [ 461.468041][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.468059][T10668] RSP: 002b:00007f29f2458028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 461.468077][T10668] RAX: ffffffffffffffda RBX: 00007f29f1816180 RCX: 00007f29f159c799 [ 461.468088][T10668] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 461.468099][T10668] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 461.468109][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.468119][T10668] R13: 00007f29f1816218 R14: 00007f29f1816180 R15: 00007ffcf2aa20d8 [ 461.468142][T10668] [ 461.881820][T10697] snd_aloop snd_aloop.0: control 16781577:3:6:'x?F/zF˷fC:1 is already present [ 462.050375][T10702] FAULT_INJECTION: forcing a failure. [ 462.050375][T10702] name failslab, interval 1, probability 0, space 0, times 0 [ 462.104190][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.1.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.104222][T10702] Tainted: [L]=SOFTLOCKUP [ 462.104229][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 462.104239][T10702] Call Trace: [ 462.104246][T10702] [ 462.104253][T10702] dump_stack_lvl+0x100/0x190 [ 462.104287][T10702] should_fail_ex.cold+0x5/0xa [ 462.104309][T10702] should_failslab+0xc2/0x120 [ 462.104330][T10702] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 462.104360][T10702] ? sock_alloc_inode+0x25/0x1c0 [ 462.104384][T10702] ? __pfx_sock_alloc_inode+0x10/0x10 [ 462.104406][T10702] sock_alloc_inode+0x25/0x1c0 [ 462.104429][T10702] alloc_inode+0x68/0x250 [ 462.104455][T10702] sock_alloc+0x44/0x280 [ 462.104472][T10702] ? security_socket_create+0x7f/0x250 [ 462.104493][T10702] __sock_create+0xc2/0x860 [ 462.104519][T10702] __sys_socket+0x14d/0x260 [ 462.104543][T10702] ? __pfx___sys_socket+0x10/0x10 [ 462.104573][T10702] __x64_sys_socket+0x72/0xb0 [ 462.104595][T10702] ? lockdep_hardirqs_on+0x78/0x100 [ 462.104616][T10702] do_syscall_64+0x106/0xf80 [ 462.104634][T10702] ? clear_bhb_loop+0x40/0x90 [ 462.104656][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.104674][T10702] RIP: 0033:0x7f29f159c799 [ 462.104699][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.104717][T10702] RSP: 002b:00007f29f249a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 462.104736][T10702] RAX: ffffffffffffffda RBX: 00007f29f1815fa0 RCX: 00007f29f159c799 [ 462.104748][T10702] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 462.104759][T10702] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 462.104770][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.104781][T10702] R13: 00007f29f1816038 R14: 00007f29f1815fa0 R15: 00007ffcf2aa20d8 [ 462.104805][T10702] [ 462.104815][T10702] socket: no more sockets [ 462.802847][T10712] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 463.673244][T10730] program syz.1.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.753223][T10730] QAT: failed to copy from user cfg_data. [ 464.209622][T10739] FAULT_INJECTION: forcing a failure. [ 464.209622][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 464.285641][T10739] CPU: 0 UID: 0 PID: 10739 Comm: syz.1.1041 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.285673][T10739] Tainted: [L]=SOFTLOCKUP [ 464.285680][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 464.285691][T10739] Call Trace: [ 464.285697][T10739] [ 464.285705][T10739] dump_stack_lvl+0x100/0x190 [ 464.285738][T10739] should_fail_ex.cold+0x5/0xa [ 464.285760][T10739] should_failslab+0xc2/0x120 [ 464.285790][T10739] __kmalloc_cache_noprof+0x7a/0x6f0 [ 464.285816][T10739] ? snd_rawmidi_open+0x3b3/0xba0 [ 464.285842][T10739] ? _raw_spin_unlock+0x28/0x50 [ 464.285869][T10739] ? snd_card_file_add+0x26e/0x340 [ 464.285896][T10739] snd_rawmidi_open+0x3b3/0xba0 [ 464.285924][T10739] ? __mutex_unlock_slowpath+0x15c/0x790 [ 464.285946][T10739] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 464.285979][T10739] ? kobject_get_unless_zero+0x156/0x200 [ 464.286003][T10739] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 464.286031][T10739] snd_open+0x22d/0x4c0 [ 464.286053][T10739] ? __pfx_snd_open+0x10/0x10 [ 464.286074][T10739] chrdev_open+0x234/0x6a0 [ 464.286093][T10739] ? __pfx_apparmor_file_open+0x10/0x10 [ 464.286113][T10739] ? __pfx_chrdev_open+0x10/0x10 [ 464.286135][T10739] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 464.286160][T10739] do_dentry_open+0x6d8/0x1660 [ 464.286179][T10739] ? __pfx_chrdev_open+0x10/0x10 [ 464.286204][T10739] vfs_open+0x82/0x3f0 [ 464.286231][T10739] path_openat+0x208c/0x31a0 [ 464.286258][T10739] ? __pfx_path_openat+0x10/0x10 [ 464.286286][T10739] do_file_open+0x20e/0x430 [ 464.286308][T10739] ? __pfx_do_file_open+0x10/0x10 [ 464.286344][T10739] ? alloc_fd+0x476/0x790 [ 464.286366][T10739] ? do_getname+0x191/0x390 [ 464.286392][T10739] do_sys_openat2+0x10d/0x1e0 [ 464.286417][T10739] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.286450][T10739] __x64_sys_openat+0x12d/0x210 [ 464.286476][T10739] ? __pfx___x64_sys_openat+0x10/0x10 [ 464.286510][T10739] do_syscall_64+0x106/0xf80 [ 464.286527][T10739] ? clear_bhb_loop+0x40/0x90 [ 464.286549][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.286569][T10739] RIP: 0033:0x7f29f159c799 [ 464.286584][T10739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.286602][T10739] RSP: 002b:00007f29f249a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.286620][T10739] RAX: ffffffffffffffda RBX: 00007f29f1815fa0 RCX: 00007f29f159c799 [ 464.286631][T10739] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 464.286642][T10739] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 464.286653][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.286663][T10739] R13: 00007f29f1816038 R14: 00007f29f1815fa0 R15: 00007ffcf2aa20d8 [ 464.286686][T10739] [ 467.242148][T10786] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 468.104461][T10782] kexec: Could not allocate control_code_buffer [ 468.486703][T10790] Invalid ELF header magic: != ELF [ 468.790922][T10816] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 469.859908][T10843] serio: Serial port pty6 [ 471.406436][ T29] audit: type=1800 audit(2147483712.110:10): pid=10846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1060" name="lu_gp_id" dev="configfs" ino=201284 res=0 errno=0 [ 472.105216][T10878] Invalid ELF header magic: != ELF [ 472.377281][T10896] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1070'. [ 473.416328][T10912] Process accounting resumed [ 473.623195][T10919] FAULT_INJECTION: forcing a failure. [ 473.623195][T10919] name failslab, interval 1, probability 0, space 0, times 0 [ 473.681235][T10919] CPU: 0 UID: 0 PID: 10919 Comm: syz.1.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.681268][T10919] Tainted: [L]=SOFTLOCKUP [ 473.681275][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 473.681286][T10919] Call Trace: [ 473.681292][T10919] [ 473.681299][T10919] dump_stack_lvl+0x100/0x190 [ 473.681332][T10919] should_fail_ex.cold+0x5/0xa [ 473.681354][T10919] should_failslab+0xc2/0x120 [ 473.681376][T10919] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 473.681405][T10919] ? security_inode_alloc+0x3b/0x2c0 [ 473.681427][T10919] ? lockdep_init_map_type+0x5c/0x250 [ 473.681456][T10919] security_inode_alloc+0x3b/0x2c0 [ 473.681478][T10919] inode_init_always_gfp+0xced/0x1040 [ 473.681502][T10919] alloc_inode+0x8e/0x250 [ 473.681527][T10919] new_inode+0x22/0x1c0 [ 473.681554][T10919] shmem_get_inode+0x212/0x1040 [ 473.681583][T10919] ? __pfx_shmem_get_inode+0x10/0x10 [ 473.681608][T10919] ? rcu_is_watching+0x12/0xc0 [ 473.681636][T10919] ? percpu_counter_add_batch+0xb9/0x230 [ 473.681666][T10919] __shmem_file_setup+0x3ac/0x490 [ 473.681693][T10919] ? __pfx___shmem_file_setup+0x10/0x10 [ 473.681730][T10919] ? vm_area_alloc+0x1f/0x160 [ 473.681761][T10919] shmem_zero_setup+0x96/0x1b0 [ 473.681783][T10919] __mmap_region+0x2198/0x29e0 [ 473.681816][T10919] ? __pfx___mmap_region+0x10/0x10 [ 473.681849][T10919] ? set_next_entity+0x11e/0x9c0 [ 473.681880][T10919] ? __lock_acquire+0x4a5/0x2630 [ 473.681904][T10919] ? find_held_lock+0x2b/0x80 [ 473.681931][T10919] ? find_held_lock+0x2b/0x80 [ 473.681949][T10919] ? finish_task_switch.isra.0+0x200/0xb80 [ 473.681970][T10919] ? finish_task_switch.isra.0+0x200/0xb80 [ 473.681999][T10919] ? trace_sched_exit_tp+0x13a/0x180 [ 473.682022][T10919] ? __schedule+0x1000/0x6120 [ 473.682076][T10919] ? rcu_is_watching+0x12/0xc0 [ 473.682105][T10919] ? cap_capable+0x107/0x460 [ 473.682127][T10919] mmap_region+0x180/0x3e0 [ 473.682161][T10919] do_mmap+0xc63/0x12f0 [ 473.682186][T10919] ? __pfx_do_mmap+0x10/0x10 [ 473.682207][T10919] ? __pfx_down_write_killable+0x10/0x10 [ 473.682237][T10919] vm_mmap_pgoff+0x29e/0x470 [ 473.682270][T10919] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 473.682293][T10919] ? do_futex+0x192/0x350 [ 473.682318][T10919] ? __pfx_do_futex+0x10/0x10 [ 473.682346][T10919] ksys_mmap_pgoff+0xe1/0x650 [ 473.682368][T10919] ? __x64_sys_futex+0x34f/0x4d0 [ 473.682391][T10919] ? __x64_sys_futex+0x358/0x4d0 [ 473.682416][T10919] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 473.682437][T10919] ? xfd_validate_state+0x129/0x190 [ 473.682469][T10919] __x64_sys_mmap+0x125/0x190 [ 473.682499][T10919] do_syscall_64+0x106/0xf80 [ 473.682517][T10919] ? clear_bhb_loop+0x40/0x90 [ 473.682539][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.682557][T10919] RIP: 0033:0x7f29f159c799 [ 473.682574][T10919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.682591][T10919] RSP: 002b:00007f29f2479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 473.682612][T10919] RAX: ffffffffffffffda RBX: 00007f29f1816090 RCX: 00007f29f159c799 [ 473.682624][T10919] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 473.682636][T10919] RBP: 00007f29f1632c99 R08: 0000000000000401 R09: 0000000000008000 [ 473.682647][T10919] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 473.682657][T10919] R13: 00007f29f1816128 R14: 00007f29f1816090 R15: 00007ffcf2aa20d8 [ 473.682681][T10919] [ 475.768609][T10959] random: crng reseeded on system resumption [ 476.480554][T10972] FAULT_INJECTION: forcing a failure. [ 476.480554][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 476.570190][T10972] CPU: 0 UID: 0 PID: 10972 Comm: syz.4.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.570221][T10972] Tainted: [L]=SOFTLOCKUP [ 476.570228][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.570239][T10972] Call Trace: [ 476.570245][T10972] [ 476.570253][T10972] dump_stack_lvl+0x100/0x190 [ 476.570286][T10972] should_fail_ex.cold+0x5/0xa [ 476.570308][T10972] should_failslab+0xc2/0x120 [ 476.570330][T10972] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 476.570358][T10972] ? security_inode_alloc+0x3b/0x2c0 [ 476.570379][T10972] ? lockdep_init_map_type+0x5c/0x250 [ 476.570409][T10972] security_inode_alloc+0x3b/0x2c0 [ 476.570430][T10972] inode_init_always_gfp+0xced/0x1040 [ 476.570453][T10972] alloc_inode+0x8e/0x250 [ 476.570478][T10972] new_inode+0x22/0x1c0 [ 476.570505][T10972] __debugfs_create_file+0x105/0x4f0 [ 476.570530][T10972] debugfs_create_file_full+0x41/0x60 [ 476.570554][T10972] kvm_dev_ioctl+0x1491/0x1a50 [ 476.570583][T10972] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 476.570619][T10972] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 476.570643][T10972] __x64_sys_ioctl+0x18e/0x210 [ 476.570672][T10972] do_syscall_64+0x106/0xf80 [ 476.570691][T10972] ? clear_bhb_loop+0x40/0x90 [ 476.570714][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.570733][T10972] RIP: 0033:0x7f3fc699c799 [ 476.570748][T10972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.570765][T10972] RSP: 002b:00007f3fc78e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.570784][T10972] RAX: ffffffffffffffda RBX: 00007f3fc6c15fa0 RCX: 00007f3fc699c799 [ 476.570798][T10972] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 476.570808][T10972] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 476.570819][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.570829][T10972] R13: 00007f3fc6c16038 R14: 00007f3fc6c15fa0 R15: 00007ffd7281c318 [ 476.570852][T10972] [ 476.570872][T10972] debugfs: out of free dentries, can not create file 'nx_lpage_splits' [ 477.149390][T10991] bond0: option mode: unable to set because the bond device is up [ 478.187098][T11017] syz.1.1092: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 478.243243][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.1.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.243280][T11017] Tainted: [L]=SOFTLOCKUP [ 478.243287][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.243298][T11017] Call Trace: [ 478.243304][T11017] [ 478.243311][T11017] dump_stack_lvl+0x100/0x190 [ 478.243346][T11017] warn_alloc.cold+0x95/0x1c1 [ 478.243379][T11017] ? __pfx_warn_alloc+0x10/0x10 [ 478.243410][T11017] ? __lock_acquire+0x4a5/0x2630 [ 478.243447][T11017] __vmalloc_node_range_noprof+0x1252/0x1530 [ 478.243474][T11017] ? rcu_is_watching+0x12/0xc0 [ 478.243504][T11017] ? trace_contention_end+0x140/0x180 [ 478.243531][T11017] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 478.243555][T11017] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 478.243575][T11017] ? tomoyo_path_number_perm+0x28f/0x580 [ 478.243605][T11017] ? tomoyo_path_number_perm+0x28f/0x580 [ 478.243630][T11017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.243654][T11017] ? __pfx___mutex_lock+0x10/0x10 [ 478.243678][T11017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 478.243700][T11017] ? futex_wait+0x125/0x380 [ 478.243732][T11017] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 478.243753][T11017] __vmalloc_node_noprof+0xad/0xf0 [ 478.243777][T11017] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 478.243801][T11017] dvb_dvr_do_ioctl+0x15d/0x270 [ 478.243826][T11017] dvb_usercopy+0x167/0x340 [ 478.243845][T11017] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 478.243867][T11017] ? __pfx_dvb_usercopy+0x10/0x10 [ 478.243895][T11017] ? __x64_sys_openat+0x12d/0x210 [ 478.243923][T11017] ? xfd_validate_state+0x129/0x190 [ 478.243953][T11017] dvb_dvr_ioctl+0x29/0x40 [ 478.243973][T11017] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 478.243994][T11017] __x64_sys_ioctl+0x18e/0x210 [ 478.244024][T11017] do_syscall_64+0x106/0xf80 [ 478.244041][T11017] ? clear_bhb_loop+0x40/0x90 [ 478.244064][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.244084][T11017] RIP: 0033:0x7f29f159c799 [ 478.244100][T11017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.244118][T11017] RSP: 002b:00007f29f2479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.244137][T11017] RAX: ffffffffffffffda RBX: 00007f29f1816090 RCX: 00007f29f159c799 [ 478.244148][T11017] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000000 [ 478.244159][T11017] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 478.244170][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.244180][T11017] R13: 00007f29f1816128 R14: 00007f29f1816090 R15: 00007ffcf2aa20d8 [ 478.244204][T11017] [ 478.897250][T11017] Mem-Info: [ 478.900515][T11017] active_anon:22416 inactive_anon:0 isolated_anon:0 [ 478.900515][T11017] active_file:18023 inactive_file:40760 isolated_file:0 [ 478.900515][T11017] unevictable:768 dirty:723 writeback:0 [ 478.900515][T11017] slab_reclaimable:13032 slab_unreclaimable:117416 [ 478.900515][T11017] mapped:25126 shmem:1866 pagetables:1424 [ 478.900515][T11017] sec_pagetables:0 bounce:0 [ 478.900515][T11017] kernel_misc_reclaimable:0 [ 478.900515][T11017] free:1273629 free_pcp:12073 free_cma:0 [ 479.032069][T11017] Node 0 active_anon:87568kB inactive_anon:0kB active_file:72092kB inactive_file:162832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100504kB dirty:2892kB writeback:0kB shmem:5928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:59392kB kernel_stack:13792kB pagetables:5516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 479.137801][T11017] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 479.201015][T11017] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.248205][T11017] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 479.270993][T11017] Node 0 DMA32 free:1145744kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87560kB inactive_anon:0kB active_file:72092kB inactive_file:162832kB unevictable:1536kB writepending:2900kB zspages:0kB present:3129332kB managed:2537292kB mlocked:0kB bounce:0kB free_pcp:45500kB local_pcp:45500kB free_cma:0kB [ 479.360122][T11017] lowmem_reserve[]: 0 0 1 1 1 [ 479.370249][T11017] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 479.458666][T11017] lowmem_reserve[]: 0 0 0 0 0 [ 479.470775][T11017] Node 1 Normal free:3937992kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.542178][T11017] lowmem_reserve[]: 0 0 0 0 0 [ 479.552280][T11017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 479.588237][T11017] Node 0 DMA32: 1962*4kB (UME) 4008*8kB (UM) 2589*16kB (UM) 954*32kB (UME) 594*64kB (UME) 422*128kB (UME) 460*256kB (UME) 270*512kB (UM) 125*1024kB (UM) 3*2048kB (UME) 130*4096kB (M) = 1126520kB [ 479.704322][T11017] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 479.739307][T11017] Node 1 Normal: 12*4kB (UM) 13*8kB (UM) 13*16kB (UM) 5*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3937992kB [ 479.803414][T11017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.845903][T11017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 479.883970][T11017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.913410][T11017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 479.943051][T11017] 64230 total pagecache pages [ 479.959175][T11017] 0 pages in swap cache [ 479.981254][T11017] Free swap = 124996kB [ 480.018713][T11017] Total swap = 124996kB [ 480.032138][T11017] 2097051 pages RAM [ 480.040352][T11043] Invalid ELF header magic: != ELF [ 480.053110][T11017] 0 pages HighMem/MovableOnly [ 480.061215][T11017] 430849 pages reserved [ 480.076579][T11017] 0 pages cma reserved [ 480.224874][T11056] random: crng reseeded on system resumption [ 481.123691][T11044] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 481.375382][T11064] random: crng reseeded on system resumption [ 482.465887][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1114'. [ 482.901856][T11101] snd_virmidi snd_virmidi.0: control 61678:131081:32771:y:0 is already present [ 483.079428][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1117'. [ 483.115836][T11103] unsupported nlmsg_type 40 [ 484.429463][T11139] can0: slcan on ttyS2. [ 484.597961][T11138] can0 (unregistered): slcan off ttyS2. [ 485.149377][T11153] NFSD: Failed to start, no listeners configured. [ 487.290020][ T9887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.300245][ T9887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.313551][ T9887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.344153][ T9887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.353258][ T9887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.369689][T11206] chnl_net:caif_netlink_parms(): no params data found [ 489.425698][ T9887] Bluetooth: hci1: command tx timeout [ 489.820180][T11235] ecryptfs_miscdev_write: Invalid packet size [146] [ 489.919261][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.967133][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.005471][T11206] bridge_slave_0: entered allmulticast mode [ 490.068218][T11206] bridge_slave_0: entered promiscuous mode [ 490.116431][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.164651][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.209210][T11206] bridge_slave_1: entered allmulticast mode [ 490.263481][T11206] bridge_slave_1: entered promiscuous mode [ 490.483065][T11206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.563059][T11206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.766832][T11206] team0: Port device team_slave_0 added [ 490.816771][T11206] team0: Port device team_slave_1 added [ 490.983946][T11206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.990932][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.192319][T11206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.239611][T11206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.283383][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.412064][T11206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.503999][ T9887] Bluetooth: hci1: command tx timeout [ 491.775139][T11260] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1142'. [ 491.857383][T11261] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1142'. [ 492.055026][T11263] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1142'. [ 492.294246][T11206] hsr_slave_0: entered promiscuous mode [ 492.300688][T11206] hsr_slave_1: entered promiscuous mode [ 492.352883][T11206] debugfs: 'hsr0' already exists in 'hsr' [ 492.379309][T11206] Cannot create hsr debugfs directory [ 493.583578][ T9887] Bluetooth: hci1: command tx timeout [ 493.665464][T11206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 493.776763][T11206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 493.918269][T11206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 493.985466][T11206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 494.386970][T11206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.474600][T11206] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.534716][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.541899][ T8930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.615459][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.622613][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.322662][T11293] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 495.359341][T11300] syz.5.1148 (11300): drop_caches: 0 [ 495.449209][T11206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.663534][ T9887] Bluetooth: hci1: command tx timeout [ 496.549586][T11332] tipc: Started in network mode [ 496.564574][T11332] tipc: Node identity ffffffff, cluster identity 4711 [ 496.592616][T11332] tipc: Node number set to 4294967295 [ 496.657546][T11206] veth0_vlan: entered promiscuous mode [ 496.711142][T11206] veth1_vlan: entered promiscuous mode [ 496.843156][T11206] veth0_macvtap: entered promiscuous mode [ 496.928975][T11206] veth1_macvtap: entered promiscuous mode [ 497.025198][T11206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.087405][T11206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.207671][ T8914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.256791][ T8914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.338126][ T8914] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.396439][ T8914] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.673902][ T8931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.681763][ T8931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.930069][ T8914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.959148][ T8914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.627233][ T29] audit: type=1800 audit(2147483742.330:11): pid=11414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1169" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 501.680010][T11415] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 501.773733][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.780268][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.367253][T11452] netlink: 4394 bytes leftover after parsing attributes in process `syz.1.1175'. [ 503.509859][T11450] Process accounting paused [ 503.675997][ T29] audit: type=1800 audit(2147483744.380:12): pid=11462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1177" name="dummy_udc" dev="gadgetfs" ino=6749 res=0 errno=0 [ 504.011648][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 504.078349][T11468] vcan0: entered promiscuous mode [ 504.606681][ T29] audit: type=1804 audit(2147483745.300:13): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1183" name="/newroot/12/file0" dev="tmpfs" ino=79 res=1 errno=0 [ 504.728071][ T29] audit: type=1804 audit(2147483745.370:14): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1183" name="/newroot/12/file0" dev="tmpfs" ino=79 res=1 errno=0 [ 505.027140][T11495] zswap: compressor not available [ 506.144507][T11531] FAULT_INJECTION: forcing a failure. [ 506.144507][T11531] name failslab, interval 1, probability 0, space 0, times 0 [ 506.258511][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.4.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.258544][T11531] Tainted: [L]=SOFTLOCKUP [ 506.258550][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 506.258561][T11531] Call Trace: [ 506.258567][T11531] [ 506.258574][T11531] dump_stack_lvl+0x100/0x190 [ 506.258607][T11531] should_fail_ex.cold+0x5/0xa [ 506.258636][T11531] should_failslab+0xc2/0x120 [ 506.258658][T11531] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 506.258687][T11531] ? __d_alloc+0x34/0xa80 [ 506.258792][T11531] __d_alloc+0x34/0xa80 [ 506.258820][T11531] d_alloc_pseudo+0x1c/0xc0 [ 506.258849][T11531] alloc_file_pseudo+0xcf/0x230 [ 506.258876][T11531] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 506.258901][T11531] ? alloc_fd+0x476/0x790 [ 506.258924][T11531] sock_alloc_file+0x50/0x210 [ 506.258944][T11531] __sys_socket+0x1c0/0x260 [ 506.258969][T11531] ? __pfx___sys_socket+0x10/0x10 [ 506.258998][T11531] __x64_sys_socket+0x72/0xb0 [ 506.259021][T11531] ? lockdep_hardirqs_on+0x78/0x100 [ 506.259039][T11531] do_syscall_64+0x106/0xf80 [ 506.259057][T11531] ? clear_bhb_loop+0x40/0x90 [ 506.259079][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.259098][T11531] RIP: 0033:0x7f3fc699c799 [ 506.259115][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.259133][T11531] RSP: 002b:00007f3fc78e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 506.259151][T11531] RAX: ffffffffffffffda RBX: 00007f3fc6c15fa0 RCX: 00007f3fc699c799 [ 506.259163][T11531] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 506.259174][T11531] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 506.259184][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.259195][T11531] R13: 00007f3fc6c16038 R14: 00007f3fc6c15fa0 R15: 00007ffd7281c318 [ 506.259217][T11531] [ 508.403135][T11557] FAULT_INJECTION: forcing a failure. [ 508.403135][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 508.531626][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.5.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.531659][T11557] Tainted: [L]=SOFTLOCKUP [ 508.531666][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 508.531676][T11557] Call Trace: [ 508.531683][T11557] [ 508.531690][T11557] dump_stack_lvl+0x100/0x190 [ 508.531723][T11557] should_fail_ex.cold+0x5/0xa [ 508.531746][T11557] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 508.531771][T11557] should_failslab+0xc2/0x120 [ 508.531793][T11557] __kmalloc_noprof+0xe0/0x850 [ 508.531822][T11557] ? rcu_is_watching+0x12/0xc0 [ 508.531855][T11557] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 508.531884][T11557] genl_family_rcv_msg_doit+0xc7/0x300 [ 508.531909][T11557] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.531932][T11557] ? genl_get_cmd+0x3ef/0x720 [ 508.531958][T11557] ? __dev_queue_xmit+0x5af/0x4800 [ 508.531983][T11557] ? __radix_tree_lookup+0x217/0x2b0 [ 508.532015][T11557] genl_rcv_msg+0x560/0x800 [ 508.532040][T11557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.532063][T11557] ? __pfx_ctrl_getfamily+0x10/0x10 [ 508.532094][T11557] netlink_rcv_skb+0x159/0x420 [ 508.532114][T11557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.532137][T11557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.532166][T11557] ? netlink_deliver_tap+0x1ae/0xcc0 [ 508.532200][T11557] genl_rcv+0x28/0x40 [ 508.532219][T11557] netlink_unicast+0x5aa/0x870 [ 508.532242][T11557] ? __pfx_netlink_unicast+0x10/0x10 [ 508.532260][T11557] ? __pfx___might_resched+0x10/0x10 [ 508.532288][T11557] ? rcu_read_unlock+0x2d/0xb0 [ 508.532323][T11557] netlink_sendmsg+0x8b0/0xda0 [ 508.532353][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.532382][T11557] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 508.532407][T11557] __sys_sendto+0x468/0x4b0 [ 508.532433][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.532453][T11557] ? __pfx___sys_sendto+0x10/0x10 [ 508.532487][T11557] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 508.532507][T11557] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 508.532542][T11557] __x64_sys_sendto+0xe0/0x1c0 [ 508.532576][T11557] ? do_syscall_64+0x95/0xf80 [ 508.532593][T11557] ? lockdep_hardirqs_on+0x78/0x100 [ 508.532611][T11557] do_syscall_64+0x106/0xf80 [ 508.532628][T11557] ? clear_bhb_loop+0x40/0x90 [ 508.532661][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.532680][T11557] RIP: 0033:0x7f1a9675cfce [ 508.532696][T11557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.532713][T11557] RSP: 002b:00007f1a976c7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 508.532732][T11557] RAX: ffffffffffffffda RBX: 00007f1a976c96c0 RCX: 00007f1a9675cfce [ 508.532743][T11557] RDX: 0000000000000020 RSI: 00007f1a976c8000 RDI: 0000000000000008 [ 508.532754][T11557] RBP: 0000000000000000 R08: 00007f1a976c7f04 R09: 000000000000000c [ 508.532765][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 508.532775][T11557] R13: 00007f1a976c7f58 R14: 00007f1a976c8000 R15: 0000000000000000 [ 508.532798][T11557] [ 508.969242][T11562] FAULT_INJECTION: forcing a failure. [ 508.969242][T11562] name failslab, interval 1, probability 0, space 0, times 0 [ 508.982323][T11562] CPU: 0 UID: 0 PID: 11562 Comm: syz.4.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.982353][T11562] Tainted: [L]=SOFTLOCKUP [ 508.982360][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 508.982371][T11562] Call Trace: [ 508.982378][T11562] [ 508.982384][T11562] dump_stack_lvl+0x100/0x190 [ 508.982417][T11562] should_fail_ex.cold+0x5/0xa [ 508.982439][T11562] should_failslab+0xc2/0x120 [ 508.982461][T11562] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 508.982497][T11562] ? do_getname+0x35/0x390 [ 508.982525][T11562] do_getname+0x35/0x390 [ 508.982551][T11562] do_sys_openat2+0xc5/0x1e0 [ 508.982576][T11562] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.982603][T11562] ? __fget_files+0x21f/0x3d0 [ 508.982626][T11562] __x64_sys_openat+0x12d/0x210 [ 508.982652][T11562] ? __pfx___x64_sys_openat+0x10/0x10 [ 508.982686][T11562] do_syscall_64+0x106/0xf80 [ 508.982704][T11562] ? clear_bhb_loop+0x40/0x90 [ 508.982726][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.982745][T11562] RIP: 0033:0x7f3fc699c799 [ 508.982761][T11562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.982778][T11562] RSP: 002b:00007f3fc78c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.982796][T11562] RAX: ffffffffffffffda RBX: 00007f3fc6c16090 RCX: 00007f3fc699c799 [ 508.982807][T11562] RDX: 0000000000169100 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 508.982818][T11562] RBP: 00007f3fc6a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 508.982829][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.982839][T11562] R13: 00007f3fc6c16128 R14: 00007f3fc6c16090 R15: 00007ffd7281c318 [ 508.982861][T11562] [ 509.444007][T11559] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1199'. [ 510.833035][T11580] kexec: Could not allocate control_code_buffer [ 510.916876][T11583] capability: warning: `syz.4.1203' uses 32-bit capabilities (legacy support in use) [ 511.467493][T11589] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1204'. [ 511.532949][T11589] bridge_slave_1: entered promiscuous mode [ 511.565515][T11591] FAULT_INJECTION: forcing a failure. [ 511.565515][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 511.675321][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.6.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.675353][T11591] Tainted: [L]=SOFTLOCKUP [ 511.675360][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 511.675370][T11591] Call Trace: [ 511.675377][T11591] [ 511.675384][T11591] dump_stack_lvl+0x100/0x190 [ 511.675416][T11591] should_fail_ex.cold+0x5/0xa [ 511.675438][T11591] should_failslab+0xc2/0x120 [ 511.675470][T11591] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 511.675499][T11591] ? security_inode_alloc+0x3b/0x2c0 [ 511.675520][T11591] ? lockdep_init_map_type+0x5c/0x250 [ 511.675548][T11591] security_inode_alloc+0x3b/0x2c0 [ 511.675571][T11591] inode_init_always_gfp+0xced/0x1040 [ 511.675594][T11591] alloc_inode+0x8e/0x250 [ 511.675619][T11591] path_from_stashed+0x25b/0x750 [ 511.675640][T11591] ? do_raw_spin_unlock+0x145/0x1e0 [ 511.675672][T11591] ns_get_path+0x60/0x80 [ 511.675692][T11591] proc_ns_get_link+0x121/0x230 [ 511.675718][T11591] ? __pfx_proc_ns_get_link+0x10/0x10 [ 511.675747][T11591] ? atime_needs_update+0x8b/0x6b0 [ 511.675776][T11591] pick_link+0xd17/0x13c0 [ 511.675803][T11591] ? __pfx_proc_ns_get_link+0x10/0x10 [ 511.675833][T11591] step_into_slowpath+0x9ba/0xf90 [ 511.675865][T11591] ? __pfx_step_into_slowpath+0x10/0x10 [ 511.675894][T11591] ? find_held_lock+0x2b/0x80 [ 511.675919][T11591] path_openat+0xf95/0x31a0 [ 511.675946][T11591] ? __pfx_path_openat+0x10/0x10 [ 511.675974][T11591] do_file_open+0x20e/0x430 [ 511.675996][T11591] ? __pfx_do_file_open+0x10/0x10 [ 511.676031][T11591] ? alloc_fd+0x476/0x790 [ 511.676052][T11591] ? do_getname+0x191/0x390 [ 511.676078][T11591] do_sys_openat2+0x10d/0x1e0 [ 511.676103][T11591] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.676130][T11591] ? __fget_files+0x21f/0x3d0 [ 511.676152][T11591] __x64_sys_openat+0x12d/0x210 [ 511.676178][T11591] ? __pfx___x64_sys_openat+0x10/0x10 [ 511.676212][T11591] do_syscall_64+0x106/0xf80 [ 511.676229][T11591] ? clear_bhb_loop+0x40/0x90 [ 511.676252][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.676271][T11591] RIP: 0033:0x7f4a1af5cfce [ 511.676287][T11591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.676304][T11591] RSP: 002b:00007f4a1beadec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.676323][T11591] RAX: ffffffffffffffda RBX: 00007f4a1beae6c0 RCX: 00007f4a1af5cfce [ 511.676334][T11591] RDX: 0000000000000002 RSI: 00007f4a1beadf90 RDI: ffffffffffffff9c [ 511.676345][T11591] RBP: 00007f4a1b032c99 R08: 0000000000000000 R09: 0000000000000000 [ 511.676355][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.676365][T11591] R13: 00007f4a1b216038 R14: 00007f4a1b215fa0 R15: 00007fff321882a8 [ 511.676389][T11591] [ 515.152632][T11632] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 517.526436][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1222'. [ 517.650958][T11676] Unable to find swap-space signature [ 519.227176][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'. [ 519.238674][T11691] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 519.478062][T11695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1225'. [ 519.599328][T11695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.675606][T11695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.729668][T11695] bond0 (unregistering): Released all slaves [ 521.106610][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 521.572830][T11755] FAULT_INJECTION: forcing a failure. [ 521.572830][T11755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.592348][T11755] CPU: 0 UID: 0 PID: 11755 Comm: syz.1.1239 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.592381][T11755] Tainted: [L]=SOFTLOCKUP [ 521.592387][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.592398][T11755] Call Trace: [ 521.592405][T11755] [ 521.592412][T11755] dump_stack_lvl+0x100/0x190 [ 521.592444][T11755] should_fail_ex.cold+0x5/0xa [ 521.592464][T11755] ? prepare_alloc_pages+0x16d/0x5f0 [ 521.592489][T11755] should_fail_alloc_page+0xeb/0x140 [ 521.592512][T11755] prepare_alloc_pages+0x1f0/0x5f0 [ 521.592538][T11755] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 521.592577][T11755] ? stack_trace_save+0x8e/0xc0 [ 521.592597][T11755] ? __pfx_stack_trace_save+0x10/0x10 [ 521.592616][T11755] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 521.592645][T11755] ? stack_depot_save_flags+0x27/0x9d0 [ 521.592674][T11755] ? kasan_save_stack+0x3f/0x50 [ 521.592690][T11755] ? kasan_save_stack+0x30/0x50 [ 521.592706][T11755] ? kasan_save_track+0x14/0x30 [ 521.592721][T11755] ? __kasan_kmalloc+0xaa/0xb0 [ 521.592738][T11755] ? do_file_open+0x20e/0x430 [ 521.592757][T11755] ? do_sys_openat2+0x10d/0x1e0 [ 521.592780][T11755] ? __x64_sys_openat+0x12d/0x210 [ 521.592803][T11755] ? do_syscall_64+0x106/0xf80 [ 521.592821][T11755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.592843][T11755] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 521.592864][T11755] ? policy_nodemask+0xed/0x4f0 [ 521.592886][T11755] alloc_pages_mpol+0x1fb/0x550 [ 521.592907][T11755] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 521.592934][T11755] alloc_pages_noprof+0x136/0x390 [ 521.592955][T11755] get_zeroed_page_noprof+0x18/0xb0 [ 521.592977][T11755] mon_alloc_buff+0xce/0x1b0 [ 521.592999][T11755] ? kasan_save_track+0x14/0x30 [ 521.593018][T11755] mon_bin_open+0x207/0x470 [ 521.593041][T11755] ? __pfx_mon_bin_open+0x10/0x10 [ 521.593064][T11755] chrdev_open+0x234/0x6a0 [ 521.593085][T11755] ? __pfx_chrdev_open+0x10/0x10 [ 521.593106][T11755] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 521.593132][T11755] do_dentry_open+0x6d8/0x1660 [ 521.593151][T11755] ? __pfx_chrdev_open+0x10/0x10 [ 521.593176][T11755] vfs_open+0x82/0x3f0 [ 521.593203][T11755] path_openat+0x208c/0x31a0 [ 521.593230][T11755] ? __pfx_path_openat+0x10/0x10 [ 521.593263][T11755] do_file_open+0x20e/0x430 [ 521.593285][T11755] ? __pfx_do_file_open+0x10/0x10 [ 521.593327][T11755] ? alloc_fd+0x476/0x790 [ 521.593349][T11755] ? do_getname+0x191/0x390 [ 521.593375][T11755] do_sys_openat2+0x10d/0x1e0 [ 521.593401][T11755] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.593429][T11755] ? __fget_files+0x21f/0x3d0 [ 521.593452][T11755] __x64_sys_openat+0x12d/0x210 [ 521.593478][T11755] ? __pfx___x64_sys_openat+0x10/0x10 [ 521.593513][T11755] do_syscall_64+0x106/0xf80 [ 521.593530][T11755] ? clear_bhb_loop+0x40/0x90 [ 521.593554][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.593573][T11755] RIP: 0033:0x7f29f159c799 [ 521.593589][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.593606][T11755] RSP: 002b:00007f29f249a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.593624][T11755] RAX: ffffffffffffffda RBX: 00007f29f1815fa0 RCX: 00007f29f159c799 [ 521.593636][T11755] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 521.593647][T11755] RBP: 00007f29f1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 521.593658][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.593667][T11755] R13: 00007f29f1816038 R14: 00007f29f1815fa0 R15: 00007ffcf2aa20d8 [ 521.593690][T11755] [ 523.898856][T11797] zswap: compressor not available [ 525.017318][ T8923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 525.031688][ T8923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 525.043180][ T8923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 525.051433][ T8923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 525.059811][ T8923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 525.598534][T11816] chnl_net:caif_netlink_parms(): no params data found [ 525.912632][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.943423][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.974522][T11816] bridge_slave_0: entered allmulticast mode [ 525.993637][T11816] bridge_slave_0: entered promiscuous mode [ 526.021076][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.043854][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.071742][T11816] bridge_slave_1: entered allmulticast mode [ 526.092869][T11816] bridge_slave_1: entered promiscuous mode [ 526.204155][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.238182][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.406706][T11816] team0: Port device team_slave_0 added [ 526.433378][T11816] team0: Port device team_slave_1 added [ 526.518745][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.543824][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.658432][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.737049][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.763333][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.893796][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.021194][ T9887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.034672][ T9887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.046724][ T9887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.054975][ T9887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.062583][ T9887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.105796][ T8923] Bluetooth: hci0: command tx timeout [ 527.156573][T11840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1255'. [ 527.286970][T11816] hsr_slave_0: entered promiscuous mode [ 527.317019][T11816] hsr_slave_1: entered promiscuous mode [ 527.323213][T11816] debugfs: 'hsr0' already exists in 'hsr' [ 527.339907][T11816] Cannot create hsr debugfs directory [ 527.443537][T11843] : renamed from bond0 (while UP) [ 528.081328][T11836] chnl_net:caif_netlink_parms(): no params data found [ 528.355910][T11816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 528.392801][T11816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 528.438398][T11816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 528.514856][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.521969][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.553983][T11836] bridge_slave_0: entered allmulticast mode [ 528.605142][T11836] bridge_slave_0: entered promiscuous mode [ 528.629262][T11816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 528.676582][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.705518][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.732648][T11836] bridge_slave_1: entered allmulticast mode [ 528.773511][T11836] bridge_slave_1: entered promiscuous mode [ 528.960734][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.005146][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.104068][ T8923] Bluetooth: hci2: command tx timeout [ 529.185565][ T8923] Bluetooth: hci0: command tx timeout [ 529.574680][T11836] team0: Port device team_slave_0 added [ 529.608474][T11836] team0: Port device team_slave_1 added [ 529.859122][T11836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.877750][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.983472][T11836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.028124][T11836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.053457][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.121931][T11836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.171323][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.258886][T11836] hsr_slave_0: entered promiscuous mode [ 530.269298][T11836] hsr_slave_1: entered promiscuous mode [ 530.284347][T11836] debugfs: 'hsr0' already exists in 'hsr' [ 530.300410][T11836] Cannot create hsr debugfs directory [ 530.367686][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.415041][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.422185][ T8909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.486450][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.493798][ T8909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.551717][ T30] INFO: task kworker/u10:0:8903 blocked for more than 143 seconds. [ 530.575393][ T30] Tainted: G L syzkaller #0 [ 530.582394][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.654910][ T30] task:kworker/u10:0 state:D stack:26888 pid:8903 tgid:8903 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 530.678462][T11816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.743467][ T30] Workqueue: netns cleanup_net [ 530.748282][ T30] Call Trace: [ 530.751564][ T30] [ 530.863622][ T30] __schedule+0xfee/0x6120 [ 530.887629][ T30] ? __lock_acquire+0x4a5/0x2630 [ 530.892630][ T30] ? __pfx___schedule+0x10/0x10 [ 530.963917][ T30] ? find_held_lock+0x2b/0x80 [ 530.994173][ T30] ? schedule+0x2bf/0x390 [ 530.998563][ T30] schedule+0xdd/0x390 [ 531.002658][ T30] schedule_timeout+0x1b2/0x280 [ 531.025408][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 531.030852][ T30] ? mark_held_locks+0x40/0x70 [ 531.054446][ T30] __wait_for_common+0x2e7/0x4c0 [ 531.059520][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 531.084194][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 531.089797][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.105513][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 531.111379][ T30] __flush_workqueue+0x3f7/0x1200 [ 531.123564][ T30] ? __lock_acquire+0x4a5/0x2630 [ 531.128535][ T30] ? __lock_acquire+0x4a5/0x2630 [ 531.146461][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 531.151971][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 531.174470][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 531.179986][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 531.186093][ T8923] Bluetooth: hci2: command tx timeout [ 531.213733][ T30] rds_tcp_listen_stop+0x104/0x160 [ 531.218931][ T30] rds_tcp_exit_net+0xe0/0x870 [ 531.233354][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 531.238767][ T30] ? __pfx___might_resched+0x10/0x10 [ 531.254024][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 531.259462][ T30] ops_undo_list+0x2ee/0xab0 [ 531.268500][ T8923] Bluetooth: hci0: command tx timeout [ 531.290555][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 531.303224][ T30] ? cleanup_net+0x332/0x920 [ 531.308059][ T30] ? idr_destroy+0x62/0x2e0 [ 531.312577][ T30] cleanup_net+0x499/0x920 [ 531.318738][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 531.324276][ T30] ? rcu_is_watching+0x12/0xc0 [ 531.329066][ T30] process_one_work+0xa23/0x19a0 [ 531.334348][ T30] ? __pfx_process_one_work+0x10/0x10 [ 531.339743][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 531.347445][ T30] worker_thread+0x5ef/0xe50 [ 531.352510][ T30] ? kthread+0x13a/0x450 [ 531.358330][ T30] ? __pfx_worker_thread+0x10/0x10 [ 531.364994][ T30] kthread+0x370/0x450 [ 531.369274][ T30] ? __pfx_kthread+0x10/0x10 [ 531.376577][ T30] ret_from_fork+0x754/0xd80 [ 531.382738][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 531.389155][ T30] ? __switch_to+0x7b4/0x1120 [ 531.394190][ T30] ? __pfx_kthread+0x10/0x10 [ 531.398841][ T30] ret_from_fork_asm+0x1a/0x30 [ 531.404674][ T30] [ 531.503695][ T30] [ 531.503695][ T30] Showing all locks held in the system: [ 531.511603][ T30] 1 lock held by khungtaskd/30: [ 531.603036][ T30] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 531.653431][ T30] 3 locks held by kworker/0:5/5913: [ 531.658674][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 531.759861][ T30] #1: ffffc90004697d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 531.828761][ T30] #2: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 531.891189][ T30] 1 lock held by syz-executor/8002: [ 531.944122][ T30] 2 locks held by getty/8719: [ 531.948830][ T30] #0: ffff8880368930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 532.033430][ T30] #1: ffffc9000452b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 532.104014][ T30] 3 locks held by kworker/u10:0/8903: [ 532.109445][ T30] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 532.197888][ T30] #1: ffffc90003757d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 532.245341][ T30] #2: ffffffff905fdf90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 532.255407][ T30] 1 lock held by syz.2.1063/10871: [ 532.260529][ T30] #0: ffffffff905fdf90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 532.277166][ T30] 3 locks held by kworker/0:1/11343: [ 532.282482][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 532.293617][ T30] #1: ffff888033be0008 (&____s->seqcount#15){--.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 532.306435][ T30] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 532.316258][ T30] 1 lock held by syz.5.1200/11565: [ 532.321963][ T30] #0: ffffffff905fdf90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 532.331838][ T30] 1 lock held by syz.6.1205/11593: [ 532.337170][ T30] #0: ffffffff905fdf90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 532.348362][ T30] 2 locks held by syz.1.1246/11808: [ 532.353777][ T30] #0: ffffffff906167e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 532.362765][ T30] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 532.376354][ T30] 4 locks held by syz-executor/11816: [ 532.381827][ T30] #0: ffff88808ef00ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 532.394811][ T30] #1: ffff88808ef000c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 532.406343][ T30] #2: ffffffff908af708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 532.416952][ T30] #3: ffff8880763cab00 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 532.427331][ T30] 3 locks held by syz-executor/11836: [ 532.432720][ T30] #0: ffff888079b5cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 532.443516][ T30] #1: ffff888079b5c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 532.453221][ T30] #2: ffffffff908af708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 532.499116][ T30] [ 532.501513][ T30] ============================================= [ 532.501513][ T30] [ 532.561181][ T30] NMI backtrace for cpu 0 [ 532.561203][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 532.561229][ T30] Tainted: [L]=SOFTLOCKUP [ 532.561235][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.561246][ T30] Call Trace: [ 532.561252][ T30] [ 532.561259][ T30] dump_stack_lvl+0x100/0x190 [ 532.561298][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 532.561330][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.561360][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 532.561388][ T30] sys_info+0x141/0x190 [ 532.561409][ T30] watchdog+0xd25/0x1050 [ 532.561434][ T30] ? __pfx_watchdog+0x10/0x10 [ 532.561453][ T30] ? __kthread_parkme+0x18c/0x230 [ 532.561477][ T30] ? kthread+0x13a/0x450 [ 532.561500][ T30] ? __pfx_watchdog+0x10/0x10 [ 532.561517][ T30] kthread+0x370/0x450 [ 532.561541][ T30] ? __pfx_kthread+0x10/0x10 [ 532.561568][ T30] ret_from_fork+0x754/0xd80 [ 532.561597][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 532.561627][ T30] ? __switch_to+0x7b4/0x1120 [ 532.561648][ T30] ? __pfx_kthread+0x10/0x10 [ 532.561674][ T30] ret_from_fork_asm+0x1a/0x30 [ 532.561704][ T30] [ 532.834760][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 532.841661][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 532.852354][ T30] Tainted: [L]=SOFTLOCKUP [ 532.856678][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.866740][ T30] Call Trace: [ 532.870031][ T30] [ 532.872960][ T30] dump_stack_lvl+0x100/0x190 [ 532.877654][ T30] vpanic+0x552/0x970 [ 532.881648][ T30] ? __pfx_vpanic+0x10/0x10 [ 532.886168][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 532.892353][ T30] panic+0xd1/0xe0 [ 532.896097][ T30] ? __pfx_panic+0x10/0x10 [ 532.900528][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 532.906693][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 532.912858][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 532.919029][ T30] ? watchdog.cold+0x198/0x1ca [ 532.923800][ T30] ? watchdog+0xd35/0x1050 [ 532.928219][ T30] watchdog.cold+0x1a9/0x1ca [ 532.932851][ T30] ? __pfx_watchdog+0x10/0x10 [ 532.937529][ T30] ? __kthread_parkme+0x18c/0x230 [ 532.942558][ T30] ? kthread+0x13a/0x450 [ 532.946815][ T30] ? __pfx_watchdog+0x10/0x10 [ 532.951492][ T30] kthread+0x370/0x450 [ 532.955573][ T30] ? __pfx_kthread+0x10/0x10 [ 532.960187][ T30] ret_from_fork+0x754/0xd80 [ 532.964846][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 532.970003][ T30] ? __switch_to+0x7b4/0x1120 [ 532.974691][ T30] ? __pfx_kthread+0x10/0x10 [ 532.979299][ T30] ret_from_fork_asm+0x1a/0x30 [ 532.984086][ T30] [ 532.987165][ T30] Kernel Offset: disabled [ 532.991492][ T30] Rebooting in 86400 seconds..