last executing test programs: 2m40.861893404s ago: executing program 1 (id=894): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0xb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x60d02, 0x0) write$auto(0x3, 0x0, 0xfdef) mknod$auto(&(0x7f0000000900)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x4, 0x407) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b) lstat$auto(&(0x7f0000000540)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) r2 = socket(0x29, 0x2, 0x0) setsockopt$auto(r2, 0x119, 0xfffffffe, 0x0, 0x8) read$auto(r0, 0x0, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) fallocate$auto(r3, 0x3, 0x8, 0x9) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2m39.446051716s ago: executing program 1 (id=898): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex$auto(&(0x7f0000000080)=0x2, 0xb, 0x1, 0x0, 0x0, 0x8) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) futex$auto(&(0x7f0000000080)=0xfffffffa, 0x4, 0x1, 0x0, 0x0, 0xfffffffa) r0 = socket(0xa, 0x5, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/dfscache\x00', 0xc2402, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) memfd_create$auto(0x0, 0x4) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='i'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x5, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0x29, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0xe7, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb3100000000000000000075", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x3}, 0x1}, 0x2, 0x101) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0xfffffffffffffffe) ioctl$auto(0x3, 0x40085400, 0x5) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) 2m38.036130987s ago: executing program 1 (id=901): sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x9}, 0x7}, 0x3, 0x0) 2m37.895830919s ago: executing program 1 (id=902): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8080) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m37.816734779s ago: executing program 1 (id=903): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2m37.670000381s ago: executing program 1 (id=905): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) 2m22.427763095s ago: executing program 32 (id=905): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) 2m2.093721788s ago: executing program 0 (id=1028): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(0x0, 0x149443, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x31) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/7t\x00', 0x480000, 0x0) 2m1.023310635s ago: executing program 0 (id=1029): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(0x0, 0x149443, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x31) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/7t\x00', 0x480000, 0x0) 1m59.693152159s ago: executing program 0 (id=1032): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x2000000003ac, 0xa, {0x1, 0x4, 0xb, 0x3, 0x1, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x3, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r1, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r0, 0x0, 0xc800) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40, 0x0) mmap$auto(0x1, 0x7ffffffffffffffd, 0x800000000df, 0x78, 0x2, 0x9) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x6a) r3 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto(r2, &(0x7f0000000000)='/dev/loop6\x00', 0x6) write$auto_fops_init_pkru_pkeys(r3, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078ff39654003ba048fb5ce9f0cc683aa815dd3ad98c47fb90efa4ba1a790507d91d2a8beb4ce1934ec6dc65f", 0x63) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) read$auto_event_trigger_fops_trace(r3, &(0x7f0000000100)=""/11, 0xb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 1m57.921102341s ago: executing program 0 (id=1037): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) shutdown$auto(0xffffffffffffffff, 0x8) fanotify_mark$auto(0xffffffffffffffff, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x41a100, 0x0) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000280)={{0x0, 0xee01, 0x0, 0x4000000, 0x7, 0x56, 0x148}, &(0x7f0000000200)=0x80, &(0x7f0000000240), 0x5, 0x692a, 0x80000001, 0x2, 0x7ff, 0x4, 0x7, 0x8, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r3, 0x0, 0x40001000f42c, 0x586) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7) r5 = getsockopt$auto(r0, 0x40000000029, 0xb, 0xfffffffffffffffe, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000100), r5) r8 = ioctl$auto_SIOCSIFHWADDR2(r5, 0x8924, &(0x7f0000000140)="b21e15c86515b4d96bdc8e56275040b5ca2bb77ff3cea496562210543cf14c0c652811ddcda5bbfdee83d22e338f60338e17d7c06e16d5663a78c69410ffb31411d671d0566c35e4a2a2761fe004b283cc2adbe1c1909f629a6180fd8065ac793d5f619820f3b9c431deb40d3e17ae9c8f9fd41cee7a009b6e1805fab4d7ba815f311254a64c5ac4eb45081a765c1178b6f4340dad6d27e5504f182b48a0eb81b76f794a0e74633f6df36bdf09431b662ada0a325a") sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000300)={0x19d4, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x38e, 0x1, 0x0, 0x1, [@generic="23b977f43dbbd1cf4c2f7f45527bea9457ef898bdbb4de1acc00b27cc9dd37e63b697cb94394eeaa110a42edc9b5d26a7e651b01a499960b62b2ebefb9a9b32977dd139c56741ce3af3a1e3fb8e7fcd97f7b34d149b29a1acf1ce9fdc0c3f6ef95a8c41551d24f1bacf286614746f0f188bd2d5b876de94702f10c51b6cdd072eca926cf719386e7debcd62ed261db043b7bebd62f663f7df43a8616b857af4fcb", @generic="3782590803bf8a780fa55b4dcb91ce24da", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r1}, @nested={0x1cc, 0x87, 0x0, 0x1, [@nested={0x4, 0xd0}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0xfff}, @generic="b86a5bf0219e362427b03b4815ca809f3dec3ab7d58ac35dab0072a6c0", @nested={0x4, 0x37}, @typed={0x8c, 0xed, 0x0, 0x0, @binary="b617c57e187df7f0860310b87ce917279423537a5e54b88e500026f5e48c19392054433ede7a8586d0d09dded096de4303094b6261c7cb66aec82b50ec5577952d518a6294e172681f8f9d2598ce2b20272f6d940d2bde362f414d63e20b3e3b9f265d6803c3ed7d3947cb872dcde229525ca682afc562e6289f12c66e29d181e29d1e5af0f57cdb"}, @generic="97c234fd1ed7bb9b5633f7ef7f09e7d5ce496b4b4693ae05569796ebb02be02ed2527235689a9782692ececd9acfb034460b31f734619becaf45926da5e7f51a2fcbc252fcc1cce9ccd57bff73c5f662431f6760ec5b725b7161f84813a52740c1c174252d5f7a924fa615e1243f4ac809acea6a1a4dbd5698d9b15c33ef98d690fdca9eb6487dac5be55e006ef966035dd6eb8275f3a818554b2f73ba9de92247eb096c84c38330f5701a27bf2669ab4bbc5dcf0afdde2ba5024cea31a70a30e9653f3e5ccc4f5d9744d29df5b8273d68c22b89e15983c7d49260a71f61ff387f5b1f4f607ba7bbaae957b9c20058767f7d44217990806f8958d6be47d6db", @nested={0x4, 0xf}, @nested={0x4, 0x23}, @nested={0x4, 0x10b}]}, @nested={0x80, 0xc8, 0x0, 0x1, [@typed={0xc, 0xab, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x13b, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x130}, @generic="9bead1c9ec45fa7bab953ecfb8c1fce36b515decfe5dac98354b43e8e00653b32b829924c45e68a1aa222be2851e3d2471ccfcca50b8ff1f948fcb982523b738fd2bd6a983bcc832dca41329cc4005877889851e", @nested={0x4, 0x5b}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r2}]}, @generic="04bc744a464d1d48e25672a23e65fce57f033fad3c552593869c03ed1972a0b0638d3ef62d417bbaf497929737ba82869084db584bd53820010e342c5255287227f124862ea05bfc6a736146973293af78cbfc5508a89968f3477bb01794077b8eb30ce0affe9f7967599468e539e76e76e91fb4133603b9905f09f7"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xf9, 0x1, 0x0, 0x1, [@generic="d3a4d1a79835b046c23f4443265057e79397318cbe50cfe100d0e2c6520ed5214dfb33ce6acf9060d60bbd1891cab0aac959c217fa1c7b521c555bb565fa9eb6abc22238eda323291e37176f9b2d384e9b1db0c5e04ad4595220bca2d687f2d70700326fb1535df07335fbca3caa0367c04e59e34683823f334d3a21a62cac1db7dcbd760015507f5a72ac58038884984d24862535057b0d3527106fec9d5ca3791b013ee2f31752908d6306fe4d212252a9196515b79466cff441821d7372f8f1229a9fae595e1c91d14fc32a9a0840875547b33073b4", @generic="5bc78b9855593b68b20a", @typed={0xc, 0x14c, 0x0, 0x0, @u64=0xffffffffffffff7e}, @typed={0x8, 0x87, 0x0, 0x0, @uid=r1}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xa0, 0x1, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}}, @nested={0x85, 0xef, 0x0, 0x1, [@typed={0x1f, 0x125, 0x0, 0x0, @str='/proc/thread-self/net/igmp\x00'}, @nested={0x4, 0xd3}, @generic="4f3aa07d8c0e7de81ecfbf5d07cf309711a49ff80aaf228ce30aa496099ca82a3b1d5aa125f7ce19f508129e1781e87acf7534bd18aa9c46a217cefee660455d64a9498d854132c8472c236e9c", @typed={0x8, 0x91, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0x1}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @ipv4=@empty}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x64, 0x1, 0x0, 0x1, [@nested={0x5d, 0x12b, 0x0, 0x1, [@generic="e41a01880806524af0ceffe9c56ae90e8dc35fb564758c", @generic="938d1d1b462f19f35d7a804bbfbd193f9b72cf72d2164e40f4e6a528b8c735ea2a94be1868f5ae5bbeb0c349d25382e2977f7b093f96", @typed={0xc, 0x20, 0x0, 0x0, @u64=0x2}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x129e, 0x1, 0x0, 0x1, [@generic="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", @generic="daeddf7524e71612b83c3ba4002610f7f947d5d8187ec7106366677bac50439505a96004b736838fcc6691ad6989832a937368840948d0acb4ad725e3696c6caf93e90fc475e5d532195a43e164462788894e8d7aaf4d8a7692ae0ef394db07621522b3cdf9d8ea48061b8dd4286528b2e9dafe1f5df7c8a12162b4d938f5c58b5666075f959b38eae8d071b2d00cd129138377dcaa83f4e2ee8b4e4da42125d369840d8392b578b5beb3a929c28efb682150ebe3ff094093f93f194054a59fd3d715514d45f3f473e32105aebb6d0d4b662b013a2625e", @typed={0x8, 0x90, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x77, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x114}, @generic="0ec0bba31fa1331b771368f47baae3daf94a1d39372070973795f6d37e206d1e2674f4b6e53562e30f80ba5cc64847793b14f6092cea743ca0deb0079e124e2b5f96a32ccb9e9117b4c9991cee82a28119e24d7876413d2e18b5f2eaf4363ec9a9e0ea3adb3c808fdfdd7d36e28e477c3ffd73913250b6a57a500dc079d76be23d941dfd35a088aa597a44553dc4f70570c5fe886f66147474bab69f1b66d2122fa18380286a24f242996e1c5cc4ca2fdec70118aa915bb10f0258075959d7134856a351ac3e2ab3c7a1bf317796769016e274ef649c8c1d6a8c32357ffa03b87e8b9412ebba", @typed={0x4, 0x5}, @generic="62d718f415cbb3308bcb8eda28819f456f3587f4aa967a6e77353da86f87f9e44579aeaca8cdb4d53a66553657cbd449604dbaab0491be1001286607e54beb80bce14cf20f719aa787c17946066318a144105740601a4074ad8b281a3546e2c16f592b9fe63c3c4b919aba74fa5a718de634ca1af0fffe19ffff5b613908e5ec6521b1d15fec94ac5d44a512276b9e2d44fca1a04e75440222613063c2948bc299ff966b9161a2ed09e33d6aba855deae7a3a74916d2aa7eaad39db758"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x178, 0x1, 0x0, 0x1, [@typed={0x4, 0x11a}, @generic="060a8b2584b2f50ae742b4469fabb047066caab4f5d72836d62eb4957a402aa9a4e0d10e9ad8d46c0695ae59d39fd4ce76b2fc592a7cc247e88796f3a9c57c4e75068d82a8659878fc020dd1ef5e9a7e27df2b4ee9e7c144b10baef5ed4f2583f1c70ef78fe06cc063ae6b5362bab91ad2ae8f82d59a17ce21d812516ae44a96a2ace648d688d4e1dfb84b053a97ff8370f0265127836d46cb3ad779fe3983c1201a901f1744dcb7f4ac1bca09c47c2a9d99106c1d4073f312476f6ac9fce6db0d97a7340de7713bae3f11e0dbce22aca83f60c47062b9055c2e6026a3766299b25a13042407eb30b6e1fbc38b029c95", @typed={0x8, 0x10d, 0x0, 0x0, @u32=0x8}, @generic="e9da3973c76787b3f3ae22dfb080e1f607c14713071ce23df1f925f59c4430a2ba659c26bf4594c80aeefae148c047a421c97957ed2effd34b153942ebd276c7880844c3609319f2a5b8c7d555ce606496f1bc3ccaa8403884b6ff5ab09e75a2deffca363315a83a1358dc57b871c212af0d6c01d34f6904"]}]}, 0x19d4}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) 1m57.466572716s ago: executing program 0 (id=1038): getpgid$auto(0x0) (async) mlockall$auto(0x2) (async) shmget$auto(0x8, 0x10565, 0x7ff) (async) shmat$auto(0x0, &(0x7f0000000000)='\x00\x00', 0xfffffffb) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x409f80, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) write$auto(r0, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:kJr\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\x8b\xb3yA.\xb4\xbc\td\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00\x00\x00\x00\x00\x00\x00 \x00'/478, 0x8000000000b) (async, rerun: 32) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async, rerun: 32) fchown$auto(0xffffffffffffffff, 0xff, 0x5) (async) r1 = fcntl$auto(0xffffffffffffffff, 0x4, 0xfffffffffffffff9) (async) socket(0xa, 0x5, 0x84) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) (async, rerun: 32) ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000180)={{0x3, 0x0, @descriptor="5a9bfa7be934770b"}, '\x00', 0x8, 0x4, 0xb}) (rerun: 32) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) (async) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, 0x0) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x8300, 0x0) read$auto(r3, 0x0, 0x8d2d) (async, rerun: 64) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) (rerun: 64) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) (async, rerun: 64) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x40000, 0x0) (async, rerun: 64) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x1ff, 0xeb1, 0x8000000000000024, 0x800008000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) getsockopt$auto(r5, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x7fff) (async) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) 1m57.259050499s ago: executing program 0 (id=1039): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) 1m55.77220664s ago: executing program 3 (id=1045): mmap$auto(0x0, 0x40006, 0x22, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = open(0x0, 0x6260c0, 0x82) setsockopt$auto_SO_REUSEADDR(r0, 0x7, 0x2, &(0x7f0000000000)='[\x00', 0x1) statx$auto(r1, 0x0, 0x1003, 0xb8d, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) 1m55.614034445s ago: executing program 3 (id=1046): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1m54.361661476s ago: executing program 3 (id=1049): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0xc401, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_unlink$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x20000}, 0x6) (async) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/6/smp_affinity\x00', 0x40d81, 0x0) (async, rerun: 64) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2402, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) (async, rerun: 32) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x40800) (rerun: 32) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, &(0x7f0000000040)={0xb, 0x401}, &(0x7f0000000080)=0x6f5, 0x4) (async) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon37\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) socket(0x2, 0x80802, 0x0) 1m53.215186608s ago: executing program 3 (id=1056): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40006, 0x22, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb1, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x5, 0x203, 0x838b, 0x84, 0x2, 0x8, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10007, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x3ffffffffffffff, 0x1, 0x2, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x48800) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) socket(0x1, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x48200, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4a4742, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x200fffd, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_setup$auto(0x1, 0x0) socket(0x2c, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) 1m50.721494656s ago: executing program 3 (id=1067): mmap$auto(0x8000, 0x1, 0xdc, 0xc89f, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x10, 0x2, 0xf) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) read$auto_sync_info_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37) (async, rerun: 64) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="145a0000", @ANYRES16=r1, @ANYBLOB="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"], 0x7f4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:kJr\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\x8b\xb3yA.\xb4\xbc\td\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00\x00\x00\x00\x00\x00\x00 \x00'/478, 0x8000000000b) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0xd50d, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x88040, 0x0) io_uring_register$auto_IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000005c0)="72bc2d1b4592478d9489aa5e2431fdfa4002e9484e688ccc1a9dbd5d009f91c63926afc5810aba267ce93d30339e5410740cd4f152699d3db3cee6c7b81881c1472e9e86b80f092ed0e2cc930120560810342b8d38c8fa47f906f86b102248a3ec6050d2036d45cd53061b341d42f8a9bcd16f27ade4e00cd8ba86e9ef79a4f9c577007a1f73143e7c7e06a9869dc860379dc76555643946a291cf2ab447b7797183495b5674e083a19ac5fc234a1c09b4393b642a2ff833e2099b5898bf8ea4edbc247d860be7f6ddafd7c6565134e6db9a", 0x3) (async) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0xfffffffffffffff9, 0x40002020008, 0x3, 0x16, r0, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x101c82, 0x0) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x149282, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x7f, 0x15) (async) socket(0x3, 0x2, 0x0) (async, rerun: 64) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram1\x00', 0x14f602, 0x0) (rerun: 64) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) (async) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) (async) madvise$auto(0x0, 0x400053, 0x9) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x5609, r3) 1m50.519420118s ago: executing program 3 (id=1068): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x101}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x44011}, 0x4000800) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) socket(0x2c, 0x1, 0x3) sysinfo$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/019/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) mmap$auto(0x0, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) 1m42.176421793s ago: executing program 33 (id=1039): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) 1m35.337870079s ago: executing program 34 (id=1068): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x101}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x44011}, 0x4000800) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) socket(0x2c, 0x1, 0x3) sysinfo$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/019/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) mmap$auto(0x0, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) 40.712357441s ago: executing program 2 (id=1337): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0x40008000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000200)='./file0\x00', 0xc00, 0x409) fanotify_mark$auto(r3, 0x9, 0x9, r4, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) syslog$auto(0x3, 0x0, 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={r6, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r8 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r8, 0x8) fcntl$auto(r7, 0x402, 0x0) 38.303096351s ago: executing program 2 (id=1345): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x400100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:02/modalias\x00', 0x10001, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)=@bpf_attr_1={r1, 0x5, @value=0x6, 0x3}, 0x2) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1, &(0x7f0000000140)) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1, &(0x7f0000000240)="3af9c91fa3acabc564dcdc9f27d0e28c0a7eb10ba8f7f4f9eddf9f90a41caf6ed74f090b8812cc74a77632282d079fdf53128b0971cb9858b4b92688c4f9ee68e4a862404f6b9dd916d1f191f1b61157b0c8ea83bbf439caf15c3416ea3fd8f61a5d3b40913c99fa65c31921ebf3e66467fd89accef1f057c924e85f03d7dbd4428e06590fb20d6908422a4c90c1c719597696994bc8d660b2ca61e02c78b13fa3261d0fa45849d6f0abb3e1b71afd317b5199854340e1340ce53d0c8c4fa310d62053ff2dd40fbed1a27bbd90842ca6e12a0d2e14ebe0a07ef1d362d7cea1ad8b7dfd") openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r4, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r4, 0x4, 0x6, 0x101, 0x1, r4, 0xffffffffffffffff}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) r6 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x131000, 0x0) ioctl$auto_BTRFS_IOC_DEFRAG(r5, 0x50009402, &(0x7f0000000440)={@inferred=r6, "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"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, 0x0, &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto_BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000100)=[{0xdacf, 0x9, 0x5}, {0xfffffffffffffa4a, 0x0, 0x4}]) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r7 = epoll_create$auto(0x8800001) epoll_ctl$auto(r7, 0x1, r0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000000bb69322c4d2491c3210589873a0edea07fca22e059671bea3fe3a1e539174245bea1eac7d5f29d755340995b48c71fbf3479f9e4264f0a40817f67349cc1f570ad90a5d8d3f06df333b360d171f6375ed8ecd94ee505d898b88e1b96f40deee43e7c36b423a8eb4089ba37788981eba2852", @ANYRES16=r9, @ANYBLOB="01002bbd7008fcdbdf25060000000800018004000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 37.824467481s ago: executing program 2 (id=1348): mmap$auto(0x4, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x5, 0x8000000000000000, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x8, 0x80003, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(r0, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @multicast2}, 0x54) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x9}, 0x7}, 0x3, 0x0) 37.249101541s ago: executing program 2 (id=1351): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xd}) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={0x0, 0x224c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r3, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 36.188356487s ago: executing program 2 (id=1355): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0xa001, 0x0) msgctl$auto_IPC_STAT(0xd99, 0x2, &(0x7f0000000880)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2, 0x200, 0x2a}, 0x0, 0x0, 0x6a, 0x3701, 0x7c, 0x80, 0x60f, 0x1, 0x6d, 0xffff, @raw=0x7, @inferred=0xffffffffffffffff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', &(0x7f0000000100)=0x9) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x20, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(r1, 0x0, 0xd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0014800", @ANYRES16=r5, @ANYBLOB="00042cbd7000fbdbdf2510000000ac011e8008002b00", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x240400c5}, 0x800) read$auto(0x3, 0x0, 0x80) socket(0x22, 0x2, 0x4) ioctl$auto(0x3, 0x80044944, 0x10000000000402) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 34.411557787s ago: executing program 2 (id=1361): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) read$auto(0x3, 0x0, 0xfffffdef) (async) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r0, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) (async) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), 0xffffffffffffffff) mq_notify$auto(r1, &(0x7f0000000100)={@sival_int=0x10000, @raw=0x5, 0x5, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000080)=0x5, &(0x7f0000000180)="dd59fae9d61467af634c2de7651df5d3ae2bf36fe194732b95e2e981af8c2eeaa703243cb9fffa93ba8d678d7ebca51422c6dd0f2e3a97a6dac205131661d074c934af205db60875d1173bcd59df5190035f5dab36e29df33fac86e4e9ed699e02b013e6cf41ee8d6cedd6da18bd3b227ebd6dd41cbed59b962906881455eca41b506441a26d30e9a08298c4ab684ea915aee3447369c20999aca0b61246b51d3445ab4de520bd02dad5c0d717a3011c0359abf97a2c09c2d7e1f38cb1ef72887746c45b590057d98aca49399d2b0286de45746d30959f6e1894246bc326e3aadfc6b71998b3"}}) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x20080, 0x0) mmap$auto(0x800000, 0x7, 0xe9ed, 0x8000000008011, r4, 0x80000000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x8, 0x7, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044085}, 0x4002) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x8, 0x7, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044085}, 0x4002) connect$auto(0x3, &(0x7f00000018c0)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, 0x8) (async) connect$auto(0x3, &(0x7f00000018c0)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf25040000000400190004001a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4004044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) socket(0x15, 0x5, 0x0) 19.228394504s ago: executing program 35 (id=1361): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) read$auto(0x3, 0x0, 0xfffffdef) (async) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r0, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) (async) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), 0xffffffffffffffff) mq_notify$auto(r1, &(0x7f0000000100)={@sival_int=0x10000, @raw=0x5, 0x5, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000080)=0x5, &(0x7f0000000180)="dd59fae9d61467af634c2de7651df5d3ae2bf36fe194732b95e2e981af8c2eeaa703243cb9fffa93ba8d678d7ebca51422c6dd0f2e3a97a6dac205131661d074c934af205db60875d1173bcd59df5190035f5dab36e29df33fac86e4e9ed699e02b013e6cf41ee8d6cedd6da18bd3b227ebd6dd41cbed59b962906881455eca41b506441a26d30e9a08298c4ab684ea915aee3447369c20999aca0b61246b51d3445ab4de520bd02dad5c0d717a3011c0359abf97a2c09c2d7e1f38cb1ef72887746c45b590057d98aca49399d2b0286de45746d30959f6e1894246bc326e3aadfc6b71998b3"}}) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x20080, 0x0) mmap$auto(0x800000, 0x7, 0xe9ed, 0x8000000008011, r4, 0x80000000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x8, 0x7, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044085}, 0x4002) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x8, 0x7, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044085}, 0x4002) connect$auto(0x3, &(0x7f00000018c0)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, 0x8) (async) connect$auto(0x3, &(0x7f00000018c0)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf25040000000400190004001a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4004044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) socket(0x15, 0x5, 0x0) 10.156273548s ago: executing program 6 (id=1428): mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r2 = socket(0x18, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x20c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a02288931953c23012f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x3}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r5, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) nanosleep$auto(0x0, 0x0) 9.72732775s ago: executing program 4 (id=1429): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000733695e4c3970e6988a75210cad70d654ca8c9ba443df00541f1bea266df13648f3bab62005c5f418a2eb4ccfc2a114eaa606199e7bc1736332408006d3a12881d0b137a9d39901371b0b7b7c834edce3717da5b19c0acd4f68963eb5efc8583a1515783df82b7859b933c7dc24c787415bf1f3f4b7e5e10eb29b8fd5594000000", @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x4000000) write$auto(0xffffffffffffffff, 0x0, 0xfff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x30, 0x65f, 0x6, 0x2, 0x3, 0x20000002, 0x7, 0x3, 0x4, 0x4, 0xb4, 0x6, 0x80000000000a, 0x10003, 0x100, 0x4, 0x3, 0x2, 0x1002000, 0x5, 0x108, 0x84, 0xfffffffffffffffd, 0x0, 0x0, 0x40000000, 0x0, [0x0, 0xfbfffffffffffffc, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8006, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x400000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1]}, 0x3, 0xc) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x1ea0e65cd64b4e7a) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/dvb_usb_dibusb_mc/new_id\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x43) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001480)={{@raw=0x9, 0x2, 0x5, 0x0, "e462f5a29a0b2f987b9ea452a1bc9eaafd83a8eb9eea79a10397a3126cb6c4380ae1dc84e847c5ccf57f14eb", @raw=0x8}, 0x1, @integer64=@value=[0xf, 0x80, 0x0, 0x3, 0x3, 0x1000, 0xd1f6, 0x5, 0x10, 0x6, 0x4, 0xbe1, 0x1, 0x0, 0x0, 0xffffffffffffff80, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffff000, 0x5, 0x2, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2, 0x5cb56b90, 0x0, 0x81, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x2, 0x6, 0x0, 0x6, 0x5, 0x5, 0x8, 0x8, 0xe7d8, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000000000000001, 0x6, 0xc500000000000000, 0x2, 0x9, 0x0, 0x40, 0x4, 0x5, 0x4, 0xe, 0xb, 0x800, 0x10000], "2ffa3e20e80e755123e1f42e350d190e3032fa30c3621af4571878aad95f51aea60df3a075b1c15529b67947b4b67f290e12883f526b4e566ef511611abf96d1d9b723613b1fce6def179ed465852003f47d532de2721cc6b407490cd09e96be8bf6d01dca81d1d22f2554f48d1796ac750c48d1a4c1d889a0e6b6528742320c"}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r6, &(0x7f0000000700)='!dev_vhc&\x00', 0x9) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) 7.771725852s ago: executing program 5 (id=1433): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x400100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:02/modalias\x00', 0x10001, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)=@bpf_attr_1={r1, 0x5, @value=0x6, 0x3}, 0x2) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1, &(0x7f0000000140)) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1, &(0x7f0000000240)="3af9c91fa3acabc564dcdc9f27d0e28c0a7eb10ba8f7f4f9eddf9f90a41caf6ed74f090b8812cc74a77632282d079fdf53128b0971cb9858b4b92688c4f9ee68e4a862404f6b9dd916d1f191f1b61157b0c8ea83bbf439caf15c3416ea3fd8f61a5d3b40913c99fa65c31921ebf3e66467fd89accef1f057c924e85f03d7dbd4428e06590fb20d6908422a4c90c1c719597696994bc8d660b2ca61e02c78b13fa3261d0fa45849d6f0abb3e1b71afd317b5199854340e1340ce53d0c8c4fa310d62053ff2dd40fbed1a27bbd90842ca6e12a0d2e14ebe0a07ef1d362d7cea1ad8b7dfd") openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r4, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r4, 0x4, 0x6, 0x101, 0x1, r4, 0xffffffffffffffff}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) r6 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x131000, 0x0) ioctl$auto_BTRFS_IOC_DEFRAG(r5, 0x50009402, &(0x7f0000000440)={@inferred=r6, "5eede7a6aad4b951569d03fac13e0841f88732c2a20e52a6852c99a76a7e589d0aea1cd7a86632c6d10e4f426a4ec26c76212109580aea572d6ca068353003cf4b8f678d9921aad3016298e8b0f7bd673660508b6ca0dd73dbdac6146ad8285ae4b9ee8a6325c2a4157cab91f428a6aa23fdb0a034964796d1ad95cc39fe50725ecf8b9bcbcc624e3bdf89179fd878037d9e247c42a96e2949b6adb13e790fbb4e0aa06c38cdc777dcb8051373aadbd098543ffb777cf096aafe60b2786f6b7c66e79974a35bf6750dacff3f66066f6ce7a1e0b60a7745bd38c863fc1ecd39c28ee464f2c3a039332135da6c2f4395603f900aed66892a2e60f1906a97dbcaa39bb2f9e426bd9a4c9ff283b287e1f4736bdb63eeb06060cf0d9c4e833846d28686d7e8f399db5b8ae23b8bbf3ed82ff1ef662d36f0d6deb81ce27b9713af1cf0edb095e68c84b30f694d3d400f3270ced810de6616c7c1a2d5789b86dc68e99206f250a46c29685b0b9257b524440d17f1a24f5ca831013180a6e7df02ccbb3569d00963f406a018566219d98257099064faee1bb64f61ba042b48b9329fb639fd443920cbc00d07d0b0e95ab34058803440039a6617b58be578f13201bc7fe97e986e4391d43d9cd2031456e45cc56079994933978184a2a5c2f428cfc289c7582a642575285355d8804b819d06e18d9f36bd2ea67e0c1f550c01105537b6a7b885a61217765276844577a82e2bc3729370d1673d180049559d7c39de7fd363ba6ea0061372d9c24e5b2a320850f06bd876d17cfa554f4ea2fad3cab4b4f81775cad8e9fef9dcca18f6f38bad8df404e9a876b936143914a5c172c741b61ccfbbc0b6883ad019183fd8725dc5e5aae21a39b4f3b3bed0ed88a539c1337ce117010d79f8c3dbf7d23fcfe9522dc43931578ad9616edf5dcd84f7ca4f0986265520cc87883c6122631c9c14f8b1ef07ec9a4dd0a5c0a934e9e297c55332dc9a3c3a22cb66bf29bcca08900ae55aa867a2e62e39a3d9d96b0f4967cf4e5435cf242f043515fffad0c0822ed9930047c507667da6a7cfe4519c0b86328afbacc130973fa3f6fc6ef5e8d75a1f75bb30084ffcf7801e8e070cfc75e4f8ef189aa8295a2de475c3338d0ef555dde3404debbb049b24ab7d5930128ab25848ff42127f4f3d69951c348971847c67020e491437a880b73f7228283cbca8618b6677308fb6e38c9c76d161d9072973faa8362a88aa1faf67e99aa026b48e5baba3976c30ba032c4ece0f49b2291464789a626dd17e2e446acea19314b4bb66fc014ab526e2ec7166e521efc71ac137da817954ff65fe329e4ffe03f8dbb823f1619b820edfeaf23ccf2905407b394de99740f38bdf8a7f7398c15a3c71f06f0cb215ddd073f0912ea979f1c171634052a65ec5341f1e1fec6461b4d4ebcae80b33b781c24ca09d7267dceb224df5e0e6cb542df6709ada0a0eb2fada61c88d21313a1a86e86b3b11f3cca4de008a3bdd4cdefb21c3a3607cf747d533d0e97daca5ca1544e569c099d4d1ae0992d534f54fe0cfb2b60d6c10132953de7d868dbc39c5f1ccbc4e92ceb5c59fac82345190b629eac4ff884ac9b5761ab777836252797c99e4f64b25c2d9c25cef82dec064fb940244a78c7f27a31e5decadfcdf192c937ae39b57174264ab6cab0aa8461489f64e9fce58a5a77a1f3594898d8978909e4910bf1c866d6e691643d04e16e8d60b7d9c4794dda6fba0178ee5b5fb80667957f4995882434e90939a0c5a429dd1ec47345b4c51ff0d074776b83cb24ad8ccb3e500a6a65c4d87c4d071ffc399fb3aa31c0f1c465e1b9cc5cdba134913c2659167183c019933ca7c026a6baee7c998dd01b4210e14eb5edbee45d0d990121c022a25f9b86076c7085861a97c7ef46ad17cc28c108f7e266eb98fc5602fa1101167f15903687f09122a399dfb48ed4214edc43d6d21d6c1c215917a23692a5f5344f1e4fd0efd4385100c5466a2a065379e7f1af6a21b09d4e6a1da27bfa60e13528111219b5c2c8fe26815ffed6341cb22635396896b8ce829546c33ad8cba8604825bf51c79dcf93cbdfc8731aeba26f32f6f836f080e8fcad12cfab980423c379f74e2acb5455340a24a2d96e3d44bd623dec351e4e2a44856735744e787132921cdb33621fccf6238ef1634c32ccc19e43344f65a517f9f8994f125347d4883070159158721dc410707fde153b6f170f298b09a5a8e07eef2da7861fda76951f1464fb88edc1f4d5186227feed850224845e51dc12a9bf3234ab5af35752c1d1c5ffe786c6948bbae70ab2b83ce078202cb64111a79e473f3c7bf2d8308c8fc58ff4e60ed7ba0c29fcc587047258017e85261f455d37655f989010c6cb5aa1c0740b4cb73c91267bcd5d076a076c0c95fed2235c5af0b0d68f6d239b2540d8871f5224b4f0a396a5da5fcead7767e868ccc25aa92949371c01f4f01ad489f1d3e54315c3265fe12a89190f64d8387e4c31e9c85cb1231003d81645a295db8e62d3a2027fc518eaff19d88e03a3526e282c7752d56579158efc168a7d30d3c8c356aa1b35f709450ee9f7dc830b21a9017e5a854b69eafc2f60288645aabaa8bc974dbff2aee29134835774a4d45dcc59d42465dbfd553d88904d0fa4ca2be51c8efa232a585fb0cf3e6e3b1ead9923c3a62bd1a14323703cff7836e91143620be036598db977c4fdfa2ae88c661097d1e671439bec969e592785c6a8c4a50a610a0b2d7bb5e2bd8ff7608f5763e316ca818cf32f1e283a22d1c057287b2ddb2236356a13ed7da45aa643fc07bc742d2c5de16f90c1120cae5810f27492abb706a8ada22ed18a49fc527c2ef67e5e61f3735f74d66074c9fedcf51370460d608f5e5baf8b25af59a153c6fc79bf4801b3ac3c48cb3e57ae21b244a149bc039a83d77e3ee0a4f944e5577f31662f9006cfbb9daa9c2ef3b667ce859fe0b6de9ba05f9915d9a09df510d23986c38a581ce6a8cc5c0e1cf3780869f795fd2606efd92517968598f388bc7a039942718bba2840de5fd84242585a0e40c182e335c993e9478453bf0733e0bccd8d724828528b86e9dc027e2856f295803ac3030b2fac36e1fa216de16ba6cb5f74b43dc6c99ecf5be740257514e22b4253d6ba35c4ecca7903c9c3a9d3212d84788418e34df7e8774711a234acd0c6992c3c843c49ad1143e0474acd3bf973df1574cca42a3c2cc7f30f5646d9d29c7332ea41101ee60ec006b17796f0875bd46f2adc52935f6171a7fa7be675e90e876221ca87cf1115c0e1397ed50d888180f218b1a46c675622275829dc0556ea478a15e02163fc02d150c0ec002e4f80cdea6819251add9a27f5d70cb0a1dd3717ec2caf08cae098bb4c2126f7e281d0e80b394f842f0c5077ecfc0ebe7284d2f470ca164a4f10d26c1456e187413251eac3dca49c4737ee6e92ee3eab3694193303382cf0e4e9d946dc8ae51f6cea4a1a251f20cf6503d0acbdf7869b6a0bf3cb043ed022d35888e2863f9fe63453505651016fde096b08ac1a46ed43d6d2a9646d99d78aef2e3e31f500996722a70bbf25824d1c0e201e64efdcddd926637f4a87da19d70524475a33a8e203c6c1431bcaa6cd67eaa06301ff24d9a1b9c257a2fcda48b774d994cb85957810311c2d0a8f1e95e7a41cf27561b25b7b83559983f594c468ab15150840f8e273c867c3093df8645224e75b87a7c145a60efb34a43e207579b4692949a32b76566205a433919b64a0cc771ce1767a78d529a4d67231c74cea18068a8f6881f54393c9f4046aa06a2d0a0aae7cf8335a97ff1fb7e1cb7aab403c96d10438338c33cc08ddaff69d9049d78db62554e97e6d17c6e1d0174b1610a88a1b672256eb0f57e40f8d0d75ca8a4b2436e8bad871f83042a411e944373961e2b29cffd95e1134839036e6b5c22a1676081a347338e059c8274682288d7cc8450218864dce398fe1b2f3feb5a0e365c4802e9a591e06f5e21396e274dc9244b52976cbc2cebcd2e746d03715bd86bf5d40ebed37ca14f0f7b55937034aef94c550e2ccac7f8764f734aef8c238fea4d7dd0817a74fbc5664db05f38f18833823b762391f58363d6adfa3cf1a8318d915ead1442f01ec3f608d06555c2333b1d2480e1ae55f765dbb25d89ae36bb9516e28a1e7926e0a9a8e118e2a5ac1ce291cdc0f4de43378d77fdd9259d4afb61dc6bed6db34e42e010310b9cc95a66b3a6038f2568be150eee8beed1956df452cf902086321056d942ae8805723b019ab2d804b4f9c5fc32a823d67ee8de07e715051458b3e8484b54dc6936f03a6a713efbcd4a5298295caa3e25c55a2f7f280a8e1c0001ce9283573bcc732cee8743bfeb7165e3a4f526a564874a85252e5fd5d5143bda906958f7c4bb46a0e90aca4fd9f45ec769eeccc0cb6dadb842f591fa32a40cf9a75a5fae431bc7912994e12ec3210b109bb068d9970a5acc0f70323ab25a68712c111f8950ddc7e17c1f7e26de17066bc4f33086c7b0c14fb33d750b457a9b07650d2dbe73f1b6d6f5c06ce766679aaca0636626d974f768eace6b5849483c0838a42741c141bc2cf5e542f470061f2419b4623b536a245213662d25741bf7ccf511b05c55af0b45640e74ba7786a9a6874a937883f5320b150ba1449aa787eaa245ed2e263f8e299de2d15425499790772408d82fdbd310f5d7e34ca1511ce13869a6cbc73f9a76bb3907c9c101416fb1c311c4500ca3cfd5933a862e761eed0227fa50e7831c8df9bb4c8bffa511d1bca4b291fa3326a2c38a712bd17c3b91566f8a4e34338f36900f79e11cbb08e8dd40597bde8207219f60f02a30acc79df00b0f8a130632a89533bb85d11e16945cf93f93f7544e23b9e81553349cea820d1403acdb5b20f6fdac89cb1a71446300dc5ca109637dd966df0eeab7e7e10ea766c9b4d639ade9f11e50a6ce6dd9328c9c7ad43bfe32645e8276a1a184490f43ddab6a0bb9c0e7864f8351a556c94cc45aed63b9df5d4100fa2557449600cf8631f27490659ade28f79d6f058f86cb2130bceb074bddd825ffbe3c4292fde6d257343ae4cba52d77a87ee7dbc6b9daf7475732ba98d5076b0d0998ea473451c58a05c04c567fdfd06f45128ae270e4ea35cf1d27666cfa95e0d0529f5759f91907f88efb3123610d34c86df81bced3bbb319c873f98ebfb5b81908fd1cbcd67b6198944751aff6a9e220dc9c96906b9216b074115d8c57d6f50991990df9a7feb4f0044f3df5372d8437ee4793645371d9d4cf19891363ec8ea7bc6f266aecbd5f8aa0bdd1f4a76d480ed10bc2f87dbe103f61be3006bc592359020137de0644ab25cbb202dfaf84dda955b8a8f00e037463731acd097324fb5ac8cc415d2f59f21960546fb653026de18bbedf42a132ed58cce988cd85ad934fe6b74198bf6f49717e2cc478d2bd68f32f4361b7169b359288a4091eb994a4cdf302d292afeca7a4ade1c5de3916dfc8811f93eebc9b580388b57e6194ea72b4e0ba12cc132ad863f65db58f09dc6635f69b37e7d01d22e0286acf411939f18069be15fc073c617ee1080d7049f9bd82da093f8b6e9a8d25e9a1eb208589e3694e52bb8492928d6797f72eeb851222800837aadeb54bb046ea3776e0b8c19faf086b8325bac3fc270902a9bfa4726570c378770e482c17db6823c5f393085e723f7dd35fe888ce9a5268f1d89cef15a92a2117cb3aff843f1d1f002699979a30def2a22bfd2206203f"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto_BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000100)=[{0xdacf, 0x9, 0x5}, {0xfffffffffffffa4a, 0x0, 0x4}]) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r7 = epoll_create$auto(0x8800001) epoll_ctl$auto(r7, 0x1, r0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 7.650684762s ago: executing program 4 (id=1434): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0xa, 0x8, 0xffffffffffffffff, [0x7], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x0, 0x101, 0x6, 0x1000000006}, {0x100, 0x1, 0x0, 0x5, 0x1, 0x40, 0x0, 0x7, 0xfffffffc}}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x23e, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x18000, 0x80, 0x7, 0x2d7d01bf, 0x7, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200d) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x7f, 0x7, 0x987, 0x9b72, 0xffffffffffffffff, 0x8000) setreuid$auto(0x0, 0x0) socket(0x2, 0xa, 0x8) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x2001, 0x0) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x1, 0x106) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(0x3, 0x0, 0x80) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto(r0, 0x0, 0x8ed) 7.544480857s ago: executing program 5 (id=1435): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0xa001, 0x0) msgctl$auto_IPC_STAT(0xd99, 0x2, &(0x7f0000000880)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2, 0x200, 0x2a}, 0x0, 0x0, 0x6a, 0x3701, 0x7c, 0x80, 0x60f, 0x1, 0x6d, 0xffff, @raw=0x7, @inferred=0xffffffffffffffff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', &(0x7f0000000100)=0x9) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x20, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0xd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0014800", @ANYRES16=r5, @ANYBLOB="00042cbd7000fbdbdf2510000000ac011e8008002b00", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x240400c5}, 0x800) read$auto(0x3, 0x0, 0x80) socket(0x22, 0x2, 0x4) ioctl$auto(0x3, 0x80044944, 0x10000000000402) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 7.219538207s ago: executing program 6 (id=1436): close_range$auto(0x2, 0xffffffffffffffff, 0x1) socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x0, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0x9, 0x8, 0x5, 0x1001, 0x1ff, 0xf, 0x1000, 0xb, 0x2, 0xced80000000001, 0x9, 0x3, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000200)="2f36287139474c0a12000000000000", 0xfff}, 0x8) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x1, 0x0, 0xd}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r3, 0x0, 0x80, 0x0, 0x0) 7.129148507s ago: executing program 5 (id=1437): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x400100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:02/modalias\x00', 0x10001, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)=@bpf_attr_1={r1, 0x5, @value=0x6, 0x3}, 0x2) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1, &(0x7f0000000140)) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1, &(0x7f0000000240)="3af9c91fa3acabc564dcdc9f27d0e28c0a7eb10ba8f7f4f9eddf9f90a41caf6ed74f090b8812cc74a77632282d079fdf53128b0971cb9858b4b92688c4f9ee68e4a862404f6b9dd916d1f191f1b61157b0c8ea83bbf439caf15c3416ea3fd8f61a5d3b40913c99fa65c31921ebf3e66467fd89accef1f057c924e85f03d7dbd4428e06590fb20d6908422a4c90c1c719597696994bc8d660b2ca61e02c78b13fa3261d0fa45849d6f0abb3e1b71afd317b5199854340e1340ce53d0c8c4fa310d62053ff2dd40fbed1a27bbd90842ca6e12a0d2e14ebe0a07ef1d362d7cea1ad8b7dfd") openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r4, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r4, 0x4, 0x6, 0x101, 0x1, r4, 0xffffffffffffffff}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) r6 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x131000, 0x0) ioctl$auto_BTRFS_IOC_DEFRAG(r5, 0x50009402, &(0x7f0000000440)={@inferred=r6, "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"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto_BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000100)=[{0xdacf, 0x9, 0x5}, {0xfffffffffffffa4a, 0x0, 0x4}]) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r7 = epoll_create$auto(0x8800001) epoll_ctl$auto(r7, 0x1, r0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, 0x0, 0x20000000) 6.631181294s ago: executing program 5 (id=1439): unshare$auto(0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x7, 0x6, 0x13, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/binderfs/binder0\x00', 0x200, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 6.627730018s ago: executing program 4 (id=1440): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto(0x3, 0x8108551b, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x102, 0x7, 0x476, 0x0}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000001c0)={0x4, 0x3, [0xfffff7ed, 0x7ff, 0x54, 0x1000, 0x10000, 0xffffff7d]}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) process_vm_readv$auto(0x0, &(0x7f0000000200)={0x0, 0xfff}, 0x0, &(0x7f0000000280)={&(0x7f0000000300)="1138f4bff347ce668eca0a893000d4b6228272771f0708bfd770573ee574f8ebcd04de3df6f402ebde1a4cbee55f9037676ef3c76763da", 0x400000fffffffe}, 0xa, 0x3b9f) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @inferred=r1}, &(0x7f0000000080)=0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x2, 0x401) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) semget$auto(0x0, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010031bd700502cabf7c914b53f3d7cd5e051744734aa78a672912a5d699630452377fdcd800fddbdf250c00000033ced447db3e72b62544e0fcd529838c4a861c2d13c5264ebeae33fe4fe91dd631dd2a7af56978dd38a496407b633542"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 6.217382881s ago: executing program 6 (id=1442): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) 5.884558392s ago: executing program 5 (id=1444): mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r2 = socket(0x18, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x220, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth0\x00'}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="45977c8c39b253ade7b8717f9f6b0181d13715a2ebd5d7bbaa3a15b646fce0a7bac662a3b1782b36c2ceb58af8dce5999cd670e6e62a1a143fb12e84a2268c37e1ca55ff2ed100f1cf537c48a735d4721be79277a6d1baa3f93656b347455c36728642f7a6a8de4f4e6d2c01c827122397244c59756dce6505d1ad492e7a0ba37a242944ec4731da56e5b5afb3e45a560bc9a7fbbc4cf811666c305fffc1d0b1adf8674c49a6a513141f5f4880b7146152583d838e1a88ce72316b3294f9f2c2759a78f91d60928419b4f5bee26644cb7821cd8735bf2c13898d36d51ec28a234e72bc5379b95cfd74d37444e8f87275d1a26c92ed2489d39cd219a1ea", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a02288931953c23012f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x3}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x22202, 0x0) pread64$auto(r5, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) nanosleep$auto(0x0, 0x0) 5.085534276s ago: executing program 6 (id=1445): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0xa001, 0x0) msgctl$auto_IPC_STAT(0xd99, 0x2, &(0x7f0000000880)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2, 0x200, 0x2a}, 0x0, 0x0, 0x6a, 0x3701, 0x7c, 0x80, 0x60f, 0x1, 0x6d, 0xffff, @raw=0x7, @inferred=0xffffffffffffffff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', &(0x7f0000000100)=0x9) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x20, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0xd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0014800", @ANYRES16=r5, @ANYBLOB="00042cbd7000fbdbdf2510000000ac011e8008002b00", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x240400c5}, 0x800) read$auto(0x3, 0x0, 0x80) socket(0x22, 0x2, 0x4) ioctl$auto(0x3, 0x80044944, 0x10000000000402) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 4.298066364s ago: executing program 4 (id=1447): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0xd, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vivid.0/cec28/power/runtime_suspended_time\x00', 0x22040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r3, 0x0, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0) write$auto(0x3, 0x0, 0x100082) r4 = epoll_create$auto(0x4) r5 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r4, 0x1, r5, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.778526668s ago: executing program 6 (id=1448): mmap$auto(0x0, 0x10000400004, 0x80000001, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x0, 0x40000000eb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000002c0)="6a410331dfd85a6729fde058aad6b25cd0d768c86b08941d56fdf8d786587f70c463438292ceb8324592522a2c6160d0fd46780e483c5cc0fb612c03edeaac065881e338180d7e6ce5a388d1b9afe4d7f317edd606683ff22a275fb177e9faa00000002dbfe09fe34f6db0d3dbe9fecc589d671c0396893004acc99559e2258bd752046c63a7610b5cca0cc3239e1bab01572e7c36bbf57564e9c5b90e249f779b1ce5f7cadda9ccb5fd3993b406") mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x1000a}, 0x734a) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1ffffffffffe, 0xd59f) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x0, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) sendfile$auto(r0, r0, 0x0, 0x3) socket(0x2, 0x2, 0x88) 3.358689414s ago: executing program 5 (id=1449): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x80000, 0x0) write$auto(r1, 0x0, 0x4000000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x8000000007, 0x20009, 0x7, 0x1000000000000ebf, 0xffffffffffffffff, 0xf4f) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101401, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mmap$auto(0xed, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x1) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x6, &(0x7f0000000080)=@raw_tracepoint={0xfffffffffffffff7, r1, 0x0, 0x858f}, 0xa) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_vs_conn\x00', 0x8880, 0x0) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001bc0)={{0x2, 0x7fffffffffffffff}, {0x7, 0x1000}}) r5 = fcntl$auto_F_DUPFD_CLOEXEC(r4, 0x406, r4) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000100)={@raw=0x20006, 0x8, 0x100000002, @btrfs_ioctl_vol_args_v2_3_0={0x6, &(0x7f0000001180)={0x4, 0x9, 0x0, 0x7fffffff, {0x2, 0x1, 0x8, 0x8000, 0xffffffffffffeffd}, [0x99, 0x8]}}, @devid=0xfffffffffffffffd}) 2.715190746s ago: executing program 7 (id=1450): prctl$auto_PR_GET_FPEXC(0xb, 0x10001, 0x5, 0x400, 0x2) setresuid$auto(0x0, 0x7, 0x8080) r0 = setfsuid$auto(0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r1 = socket(0x1d, 0x2, 0x2) write$auto(r1, 0x0, 0x5c8) recvmmsg$auto(r1, 0x0, 0x100, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendto$auto(r3, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x4e0, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x377, 0x2, 0x0, 0x1, [@nested={0xc, 0x8f, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}]}, @generic="b2994c526312558f84eeed98525389434190be83a60882f083a2ae66ee8833e4db9764ea04ab1d1f3443566b735141b6e1c4333651aff3ff28eb2986383320a4b856383f99d9a90490d64ff0beb2a09c5496c468c694de0d1960ffb82eb438b9e672dcbbe0819bd0e8ce41f342a48d23955bb39551da83732c5efbba14ff7b45d21ef8b486cc00e30caf9b3bb072b92003d4cac4dec771cb012eccaf8c2c80ac7ce48ba6e64ec7d01ee9fb73b932312c61f817386a7aa0d6781ac8e8d65d73ff169cb233306497ff5991a6462e4f385e3d4c70b6069abcce6ce44c80943b36134cb150fa000b2491ee75ceecfa294658ffd4fcc7897bf4f2e7", @typed={0x8, 0xbc, 0x0, 0x0, @uid=r0}, @nested={0x19d, 0x8e, 0x0, 0x1, [@generic="9cfad65c34064d2b255344c585fa724768d585b2ca7083f828117bfe28f38c144625b2c61dc23381621b46ffc878a3e9e54d872a5bc52bf7a05cc49602a5bebf16ff150c83d0afaebf9ef56abfc6e57ff727064f881833be2e63", @nested={0x4, 0xdd}, @nested={0x4, 0x1}, @typed={0x8, 0x143, 0x0, 0x0, @fd=r3}, @generic="3ac4ec84b53887c390d37c122e91d33bdc6eca7a2d39c64b0e532b41bce431e935edbcc9522c5b43bb8dd8c9430263d975880046a3b0354e57e37c787098a3068ee3c802b52a187da869d355e9707f8ef61dd40e0d32190b6664bffdfc071357", @typed={0x14, 0xde, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2d}}, @generic="8fa0f2ca49b45cea2f79b8c16bc7c67f9cf858f7490cdcdb5451935ee2d078ed562b96185d1334ae2b3443506384ae3e7e9b56febd01b33b37bd2d0179681c7b6a99f27e01a35504eca0e8bb31f0f71c3e7be06a792ab1a3ff26a0c0062291fd39923e9a581d167ce7da797d775d891ad454d53f04712cc3e90bdaec84fac64396a5277e6f85c4b6081c6ead45fb3c0245f87f8d5b29006bdf6de853006c7be76bcc8f7668cbbbef930ab982e5afdc6ed2a18d428385cebf84abc7"]}, @typed={0x8, 0xeb, 0x0, 0x0, @u32=0x8}, @nested={0x51, 0xa7, 0x0, 0x1, [@nested={0x4, 0x124}, @generic="d4adfd9ed3f7b3648961691445c9eb58b1cb4e52cf6b25461004e20b1a46bcca909ba31766aa1cc266c6ebfb2f3fe545392c7412a47e59e82d85344dfcb7fb1251", @nested={0x4, 0x82}, @nested={0x4, 0x100}]}, @generic="5de4607c9736d62a2f9247fad4652d4fa6990e7a993abbf41bc9200a8be51e6bd1393b14901282f0a2b1b7452e66460bb41c560818cb6c71f0148ce46e181e97fc103782957a0eaba7b567a1d09b349f735a3ce44d1acdae2af77a229de9272ffbfb690b657b36b2699a"]}, @IPVS_CMD_ATTR_SERVICE={0x154, 0x1, 0x0, 0x1, [@nested={0x8, 0x153, 0x0, 0x1, [@nested={0x4, 0x145}]}, @nested={0x147, 0xba, 0x0, 0x1, [@typed={0xc, 0x10b, 0x0, 0x0, @u64=0xffffffff}, @typed={0x30, 0x4b, 0x0, 0x0, @binary="22362530970e140f896b694d25ed2ad470bc408785d0899b003c0e99bd52a154c06fe4e48abe2d6a112b18ad"}, @nested={0x4, 0x125}, @nested={0x4, 0x28}, @generic="1770815d7924ed1cc1255db7a1af29b34731f8d03daa9d0d6304d83e5d89ad572763262602897457f8985bf5f8a912f27c5fe290a0a6843e15b4dd161668e2a6e1d2722aa49c59fc5e68c85004344d0ebcd475c2cb620a6e1c55fdc472b952a7102510d1e20b6a8db3a117af41d1ee0389e01bef966118ca91a825ac0c0b8c1cf6b98c2c270fd16384d9b3ee69d63eed1b0afdbe1d0acbabd2bb9e333e23ff2e7026610443be3a5043aa6b45d287a0a9f281a000f4943612beeb07da8e16b680ea3256e6148e02b5a6ffd9d0fe1d7522d00b9d0743425dcdc90955585a84e8d66fc9b043ffc50781210c98d108ccb0d1dd2c060b634abe", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) acct$auto(0x0) socket(0xf, 0x4, 0x10000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) 2.491157186s ago: executing program 7 (id=1451): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0xa, 0x8, 0xffffffffffffffff, [0x7], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x0, 0x101, 0x6, 0x1000000006}, {0x100, 0x1, 0x0, 0x5, 0x1, 0x40, 0x0, 0x7, 0xfffffffc}}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x23e, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x18000, 0x80, 0x7, 0x2d7d01bf, 0x7, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200d) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x7f, 0x7, 0x987, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0xa, 0x8) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x2001, 0x0) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(0x3, 0x0, 0x80) read$auto(0x3, 0x0, 0xf34) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto(r0, 0x0, 0x8ed) 2.24098768s ago: executing program 7 (id=1452): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x8000, 0xffffffffffffffff, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x9, 0x2, 0x76) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2, 0xa, 0x106) msgget$auto(0x2, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_BTRFS_IOC_SET_RECEIVED_SUBVOL_32(r0, 0xc0c09425, &(0x7f0000000440)={"87c0451232f07e39f45af7f43d032839", 0x8, 0x6, {0xa, 0x4}, {0x9, 0x480}, 0x2, [0x8, 0x4, 0x80000001, 0x80000000, 0x4, 0x8001, 0x200, 0x7, 0xfffffffffffffeff, 0x10, 0x9c7f, 0x0, 0x10001, 0x7, 0x1000, 0x6a78]}) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec6\x00', 0x20000, 0x0) r2 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x540, 0x0) pread64$auto(r2, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd0/queue/nr_zones\x00', 0x193a02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000280)={@_si_pad}, 0xffffffef, &(0x7f0000000300)={{0x8, 0x7f}, {0x4, 0x6}, 0x9, 0x8000000000000001, 0x9418, 0x7fff, 0x2, 0x2, 0x79, 0x5, 0x2, 0x8, 0x2, 0x1, 0x80000000, 0x6}) prctl$auto_PR_SET_MM_START_BRK(0x6, 0x6, r3, 0xffffffffffffffff, 0x10000) madvise$auto(0x0, 0x2003f0, 0x15) 1.969598036s ago: executing program 4 (id=1453): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x7fffffff, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) futex_wake$auto(0x0, 0xc, 0x7, 0x9) mincore$auto(0x1000, 0x4000000, 0x0) 1.832968083s ago: executing program 6 (id=1454): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0x40008000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000200)='./file0\x00', 0xc00, 0x409) fanotify_mark$auto(r3, 0x9, 0x9, r4, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), 0x0, 0x0, 0x2) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={r6, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r8 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r8, 0x8) fcntl$auto(r7, 0x402, 0x0) 1.777209589s ago: executing program 7 (id=1455): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6}) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b35, 0x91) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4138ae84, &(0x7f0000000080)={0xfc}) 1.293965908s ago: executing program 7 (id=1456): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0x30000, 0x0) prctl$auto(0x8000, 0x6, 0x0, 0xb, 0x8) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x22, 0x940, 0x5, 0x0, 0x4, 0x7, 0xd, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffff7fe, 0x5, 0x8000, 0x1000, 0x7, 0x9, 0x0, 0x10000001, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x7fff, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x0, 0x3, 0x0, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x5757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53c, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfffffffffffffff6}, 0x2, 0x0, 0xb, 0xa505}, 0x5}, 0x6, 0x400b) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/midi2\x00', 0x11f883, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000840)={0x8, 0x1, 0x9, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x401, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40085, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x200c) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x6, 0x6}, 0x9}, 0x7, 0x6, 0x0) 455.772332ms ago: executing program 7 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x80000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, 0x0, 0x6a) 0s ago: executing program 4 (id=1458): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) recvfrom$auto(r1, 0x0, 0x1, 0xb, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r2 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 52] ? __pfx___futex_wait+0x10/0x10 [ 342.366173][T10152] ? __pfx_futex_wake_mark+0x10/0x10 [ 342.366200][T10152] ___sys_sendmsg+0x190/0x1e0 [ 342.366218][T10152] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.366245][T10152] ? find_held_lock+0x2b/0x80 [ 342.366271][T10152] __sys_sendmsg+0x170/0x220 [ 342.366294][T10152] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.366314][T10152] ? __x64_sys_futex+0x34f/0x4d0 [ 342.366346][T10152] do_syscall_64+0xc9/0xf80 [ 342.366365][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.366381][T10152] RIP: 0033:0x7fd350f9acb9 [ 342.366403][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.366418][T10152] RSP: 002b:00007fd351ed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.366434][T10152] RAX: ffffffffffffffda RBX: 00007fd351216090 RCX: 00007fd350f9acb9 [ 342.366445][T10152] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 342.366455][T10152] RBP: 00007fd351008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 342.366463][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.366472][T10152] R13: 00007fd351216128 R14: 00007fd351216090 R15: 00007ffcd16b1258 [ 342.366492][T10152] [ 345.633492][ T30] audit: type=1804 audit(6064362766.731:12): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.867" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=29 res=1 errno=0 [ 346.405085][T10233] FAULT_INJECTION: forcing a failure. [ 346.405085][T10233] name failslab, interval 1, probability 0, space 0, times 0 [ 346.450060][T10233] CPU: 0 UID: 0 PID: 10233 Comm: syz.3.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.450116][T10233] Tainted: [L]=SOFTLOCKUP [ 346.450127][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 346.450144][T10233] Call Trace: [ 346.450153][T10233] [ 346.450163][T10233] dump_stack_lvl+0x100/0x190 [ 346.450204][T10233] should_fail_ex.cold+0x5/0xa [ 346.450251][T10233] should_failslab+0xc2/0x120 [ 346.450292][T10233] __kmalloc_cache_node_noprof+0x83/0x840 [ 346.450334][T10233] ? bdi_alloc+0x44/0x170 [ 346.450381][T10233] ? bdi_alloc+0x44/0x170 [ 346.450418][T10233] bdi_alloc+0x44/0x170 [ 346.450457][T10233] __alloc_disk_node+0xac/0x6b0 [ 346.450505][T10233] __blk_mq_alloc_disk+0x89/0x120 [ 346.450545][T10233] nbd_dev_add+0x492/0xb10 [ 346.450580][T10233] ? find_held_lock+0x2b/0x80 [ 346.450609][T10233] ? __pfx_nbd_dev_add+0x10/0x10 [ 346.450640][T10233] ? nbd_genl_connect+0x131a/0x1a40 [ 346.450698][T10233] ? bpf_lsm_capable+0x9/0x10 [ 346.450726][T10233] ? __radix_tree_lookup+0x217/0x2b0 [ 346.450771][T10233] nbd_genl_connect+0xb8d/0x1a40 [ 346.450811][T10233] ? rcu_is_watching+0x12/0xc0 [ 346.450838][T10233] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 346.450877][T10233] ? __pfx_nbd_genl_connect+0x10/0x10 [ 346.450915][T10233] ? __nla_parse+0x40/0x60 [ 346.450951][T10233] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 346.450983][T10233] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 346.451023][T10233] genl_family_rcv_msg_doit+0x214/0x300 [ 346.451059][T10233] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.451096][T10233] ? genl_get_cmd+0x3ef/0x720 [ 346.451136][T10233] ? __dev_queue_xmit+0x7fd/0x46f0 [ 346.451171][T10233] ? __radix_tree_lookup+0x217/0x2b0 [ 346.451207][T10233] genl_rcv_msg+0x560/0x800 [ 346.451243][T10233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.451274][T10233] ? __pfx_nbd_genl_connect+0x10/0x10 [ 346.451324][T10233] netlink_rcv_skb+0x159/0x420 [ 346.451369][T10233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.451412][T10233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.451473][T10233] ? netlink_deliver_tap+0x1ae/0xcc0 [ 346.451522][T10233] genl_rcv+0x28/0x40 [ 346.451546][T10233] netlink_unicast+0x5aa/0x870 [ 346.451588][T10233] ? __pfx_netlink_unicast+0x10/0x10 [ 346.451642][T10233] netlink_sendmsg+0x8b0/0xda0 [ 346.451691][T10233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.451733][T10233] ? __import_iovec+0x1d2/0x640 [ 346.451780][T10233] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 346.451822][T10233] ____sys_sendmsg+0xa54/0xc30 [ 346.451858][T10233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.451888][T10233] ? __pfx___futex_wait+0x10/0x10 [ 346.451929][T10233] ? __pfx_futex_wake_mark+0x10/0x10 [ 346.451982][T10233] ___sys_sendmsg+0x190/0x1e0 [ 346.452019][T10233] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.452070][T10233] ? find_held_lock+0x2b/0x80 [ 346.452127][T10233] __sys_sendmsg+0x170/0x220 [ 346.452168][T10233] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.452205][T10233] ? __x64_sys_futex+0x34f/0x4d0 [ 346.452260][T10233] do_syscall_64+0xc9/0xf80 [ 346.452298][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.452325][T10233] RIP: 0033:0x7fd350f9acb9 [ 346.452347][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.452375][T10233] RSP: 002b:00007fd351ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.452403][T10233] RAX: ffffffffffffffda RBX: 00007fd351215fa0 RCX: 00007fd350f9acb9 [ 346.452420][T10233] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 000000000000000b [ 346.452437][T10233] RBP: 00007fd351008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 346.452453][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.452470][T10233] R13: 00007fd351216038 R14: 00007fd351215fa0 R15: 00007ffcd16b1258 [ 346.452508][T10233] [ 347.407423][T10233] nbd: failed to add new device [ 349.569247][T10284] Invalid ELF header magic: != ELF [ 350.838401][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 352.835037][T10339] blktrace: Concurrent blktraces are not allowed on loop2 [ 353.273898][T10345] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 353.303243][T10345] CPU: 1 UID: 0 PID: 10345 Comm: syz.2.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.303288][T10345] Tainted: [L]=SOFTLOCKUP [ 353.303304][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 353.303320][T10345] Call Trace: [ 353.303329][T10345] [ 353.303340][T10345] dump_stack_lvl+0x100/0x190 [ 353.303382][T10345] sysfs_warn_dup.cold+0x1c/0x28 [ 353.303423][T10345] sysfs_do_create_link_sd+0x113/0x140 [ 353.303467][T10345] sysfs_create_link+0x61/0xc0 [ 353.303518][T10345] device_add+0x675/0x1950 [ 353.303562][T10345] ? __pfx_device_add+0x10/0x10 [ 353.303600][T10345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.303635][T10345] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 353.303682][T10345] wiphy_register+0x1e58/0x2d30 [ 353.303726][T10345] ? __rtnl_unlock+0xb9/0xf0 [ 353.303765][T10345] ? __pfx_wiphy_register+0x10/0x10 [ 353.303810][T10345] ? __asan_memset+0x23/0x50 [ 353.303842][T10345] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 353.303899][T10345] ieee80211_register_hw+0x2c11/0x4040 [ 353.303960][T10345] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 353.304004][T10345] ? __pfx___debug_object_init+0x10/0x10 [ 353.304048][T10345] ? find_held_lock+0x2b/0x80 [ 353.304077][T10345] ? net_generic+0xea/0x2a0 [ 353.304110][T10345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.304142][T10345] ? __hrtimer_setup+0x178/0x280 [ 353.304189][T10345] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 353.304253][T10345] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 353.304313][T10345] hwsim_new_radio_nl+0xc1f/0x1340 [ 353.304353][T10345] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 353.304388][T10345] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 353.304438][T10345] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 353.304467][T10345] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 353.304505][T10345] genl_family_rcv_msg_doit+0x214/0x300 [ 353.304538][T10345] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.304567][T10345] ? genl_get_cmd+0x3ef/0x720 [ 353.304602][T10345] ? bpf_lsm_capable+0x9/0x10 [ 353.304627][T10345] ? security_capable+0x80/0x260 [ 353.304663][T10345] ? ns_capable+0xd2/0xf0 [ 353.304695][T10345] genl_rcv_msg+0x560/0x800 [ 353.304728][T10345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.304756][T10345] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 353.304808][T10345] netlink_rcv_skb+0x159/0x420 [ 353.304851][T10345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.304883][T10345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.304940][T10345] ? netlink_deliver_tap+0x1ae/0xcc0 [ 353.304986][T10345] genl_rcv+0x28/0x40 [ 353.305011][T10345] netlink_unicast+0x5aa/0x870 [ 353.305056][T10345] ? __pfx_netlink_unicast+0x10/0x10 [ 353.305093][T10345] ? __pfx___might_resched+0x10/0x10 [ 353.305130][T10345] ? __lock_acquire+0x4a5/0x2630 [ 353.305174][T10345] netlink_sendmsg+0x8b0/0xda0 [ 353.305220][T10345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.305259][T10345] ? __import_iovec+0x1d2/0x640 [ 353.305314][T10345] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 353.305358][T10345] ____sys_sendmsg+0xa54/0xc30 [ 353.305389][T10345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.305413][T10345] ? __pfx___futex_wait+0x10/0x10 [ 353.305431][T10345] ? __pfx_futex_wake_mark+0x10/0x10 [ 353.305458][T10345] ___sys_sendmsg+0x190/0x1e0 [ 353.305477][T10345] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.305504][T10345] ? find_held_lock+0x2b/0x80 [ 353.305532][T10345] __sys_sendmsg+0x170/0x220 [ 353.305557][T10345] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.305578][T10345] ? __x64_sys_futex+0x34f/0x4d0 [ 353.305609][T10345] do_syscall_64+0xc9/0xf80 [ 353.305629][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.305644][T10345] RIP: 0033:0x7f6dba19acb9 [ 353.305658][T10345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.305672][T10345] RSP: 002b:00007f6dbb070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.305689][T10345] RAX: ffffffffffffffda RBX: 00007f6dba416090 RCX: 00007f6dba19acb9 [ 353.305699][T10345] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 353.305708][T10345] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 353.305717][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.305726][T10345] R13: 00007f6dba416128 R14: 00007f6dba416090 R15: 00007ffd26fcbc78 [ 353.305747][T10345] [ 354.373878][T10353] netlink: 334 bytes leftover after parsing attributes in process `syz.1.891'. [ 355.779945][ T7088] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 357.531285][T10396] netlink: 342 bytes leftover after parsing attributes in process `syz.1.902'. [ 358.028883][T10409] FAULT_INJECTION: forcing a failure. [ 358.028883][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.067104][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.2.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.067153][T10409] Tainted: [L]=SOFTLOCKUP [ 358.067165][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 358.067182][T10409] Call Trace: [ 358.067191][T10409] [ 358.067202][T10409] dump_stack_lvl+0x100/0x190 [ 358.067253][T10409] should_fail_ex.cold+0x5/0xa [ 358.067301][T10409] _copy_from_user+0x2e/0xd0 [ 358.067347][T10409] snd_seq_oss_write+0x395/0x7f0 [ 358.067395][T10409] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 358.067435][T10409] ? common_file_perm+0x1ab/0x4f0 [ 358.067478][T10409] ? futex_wait+0x125/0x380 [ 358.067508][T10409] ? bpf_lsm_file_permission+0x9/0x10 [ 358.067554][T10409] odev_write+0x51/0xa0 [ 358.067584][T10409] vfs_write+0x2aa/0x1070 [ 358.067617][T10409] ? __pfx_odev_write+0x10/0x10 [ 358.067649][T10409] ? __pfx_vfs_write+0x10/0x10 [ 358.067678][T10409] ? find_held_lock+0x2b/0x80 [ 358.067706][T10409] ? __fget_files+0x215/0x3d0 [ 358.067736][T10409] ? __fget_files+0x215/0x3d0 [ 358.067772][T10409] ? __fget_files+0x21f/0x3d0 [ 358.067812][T10409] ksys_write+0x12a/0x250 [ 358.067844][T10409] ? __pfx_ksys_write+0x10/0x10 [ 358.067915][T10409] do_syscall_64+0xc9/0xf80 [ 358.067956][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.067988][T10409] RIP: 0033:0x7f6dba19acb9 [ 358.068012][T10409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.068040][T10409] RSP: 002b:00007f6dbb091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.068069][T10409] RAX: ffffffffffffffda RBX: 00007f6dba415fa0 RCX: 00007f6dba19acb9 [ 358.068089][T10409] RDX: 00000000000002f8 RSI: 0000200000000040 RDI: 0000000000000002 [ 358.068107][T10409] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 358.068125][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.068141][T10409] R13: 00007f6dba416038 R14: 00007f6dba415fa0 R15: 00007ffd26fcbc78 [ 358.068178][T10409] [ 359.787285][T10406] zswap: compressor not available [ 360.623976][ T30] audit: type=1800 audit(6064362781.721:13): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.912" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 360.747519][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4bfc00: rx timeout, send abort [ 360.758119][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b4bfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 360.805763][T10414] NFSD: Failed to start, no listeners configured. [ 363.245774][T10484] binder: 10482:10484 ioctl c0046209 9 returned -22 [ 363.452945][T10480] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 363.536897][T10480] CPU: 1 UID: 0 PID: 10480 Comm: syz.2.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.536942][T10480] Tainted: [L]=SOFTLOCKUP [ 363.536951][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 363.536977][T10480] Call Trace: [ 363.536986][T10480] [ 363.536996][T10480] dump_stack_lvl+0x100/0x190 [ 363.537035][T10480] sysfs_warn_dup.cold+0x1c/0x28 [ 363.537073][T10480] sysfs_do_create_link_sd+0x113/0x140 [ 363.537113][T10480] sysfs_create_link+0x61/0xc0 [ 363.537150][T10480] device_add+0x675/0x1950 [ 363.537193][T10480] ? __pfx_device_add+0x10/0x10 [ 363.537239][T10480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.537269][T10480] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 363.537314][T10480] wiphy_register+0x1e58/0x2d30 [ 363.537353][T10480] ? __rtnl_unlock+0xb9/0xf0 [ 363.537392][T10480] ? __pfx_wiphy_register+0x10/0x10 [ 363.537436][T10480] ? __asan_memset+0x23/0x50 [ 363.537467][T10480] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 363.537525][T10480] ieee80211_register_hw+0x2c11/0x4040 [ 363.537584][T10480] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 363.537627][T10480] ? __pfx___debug_object_init+0x10/0x10 [ 363.537673][T10480] ? find_held_lock+0x2b/0x80 [ 363.537702][T10480] ? net_generic+0xea/0x2a0 [ 363.537735][T10480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.537777][T10480] ? __hrtimer_setup+0x178/0x280 [ 363.537825][T10480] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 363.537890][T10480] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 363.537944][T10480] hwsim_new_radio_nl+0xc1f/0x1340 [ 363.537985][T10480] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 363.538025][T10480] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 363.538076][T10480] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 363.538107][T10480] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 363.538145][T10480] genl_family_rcv_msg_doit+0x214/0x300 [ 363.538178][T10480] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 363.538215][T10480] ? genl_get_cmd+0x3ef/0x720 [ 363.538250][T10480] ? bpf_lsm_capable+0x9/0x10 [ 363.538274][T10480] ? security_capable+0x80/0x260 [ 363.538311][T10480] ? ns_capable+0xd2/0xf0 [ 363.538345][T10480] genl_rcv_msg+0x560/0x800 [ 363.538380][T10480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.538411][T10480] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 363.538465][T10480] netlink_rcv_skb+0x159/0x420 [ 363.538509][T10480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.538541][T10480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.538611][T10480] genl_rcv+0x28/0x40 [ 363.538637][T10480] netlink_unicast+0x5aa/0x870 [ 363.538687][T10480] ? __pfx_netlink_unicast+0x10/0x10 [ 363.538727][T10480] ? __pfx___might_resched+0x10/0x10 [ 363.538770][T10480] ? __lock_acquire+0x4a5/0x2630 [ 363.538817][T10480] netlink_sendmsg+0x8b0/0xda0 [ 363.538868][T10480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.538907][T10480] ? __import_iovec+0x1d2/0x640 [ 363.538952][T10480] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 363.538994][T10480] ____sys_sendmsg+0xa54/0xc30 [ 363.539030][T10480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.539058][T10480] ? __pfx___futex_wait+0x10/0x10 [ 363.539091][T10480] ? __pfx_futex_wake_mark+0x10/0x10 [ 363.539141][T10480] ___sys_sendmsg+0x190/0x1e0 [ 363.539176][T10480] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.539232][T10480] ? find_held_lock+0x2b/0x80 [ 363.539284][T10480] __sys_sendmsg+0x170/0x220 [ 363.539327][T10480] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.539368][T10480] ? __x64_sys_futex+0x34f/0x4d0 [ 363.539429][T10480] do_syscall_64+0xc9/0xf80 [ 363.539467][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.539495][T10480] RIP: 0033:0x7f6dba19acb9 [ 363.539518][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.539544][T10480] RSP: 002b:00007f6dbb070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.539571][T10480] RAX: ffffffffffffffda RBX: 00007f6dba416090 RCX: 00007f6dba19acb9 [ 363.539590][T10480] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 363.539608][T10480] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 363.539626][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.539643][T10480] R13: 00007f6dba416128 R14: 00007f6dba416090 R15: 00007ffd26fcbc78 [ 363.539682][T10480] [ 364.951517][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 365.782535][T10504] netlink: 342 bytes leftover after parsing attributes in process `syz.0.925'. [ 367.573163][T10531] netlink: 186 bytes leftover after parsing attributes in process `syz.2.932'. [ 367.716229][T10539] netlink: 186 bytes leftover after parsing attributes in process `syz.2.932'. [ 370.203610][T10571] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.210402][T10571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 370.221742][T10571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.230888][T10571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.489582][T10583] zswap: compressor  not available [ 370.874909][T10598] FAULT_INJECTION: forcing a failure. [ 370.874909][T10598] name fail_futex, interval 1, probability 0, space 0, times 0 [ 370.976718][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.2.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.976767][T10598] Tainted: [L]=SOFTLOCKUP [ 370.976779][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 370.976796][T10598] Call Trace: [ 370.976806][T10598] [ 370.976816][T10598] dump_stack_lvl+0x100/0x190 [ 370.976860][T10598] should_fail_ex.cold+0x5/0xa [ 370.976908][T10598] get_futex_key+0x1d2/0x1620 [ 370.976948][T10598] ? __pfx_get_futex_key+0x10/0x10 [ 370.976988][T10598] ? trace_pid_list_is_set+0x22c/0x390 [ 370.977040][T10598] futex_wait_setup+0x81/0x500 [ 370.977079][T10598] __futex_wait+0x19f/0x300 [ 370.977108][T10598] ? __pfx___futex_wait+0x10/0x10 [ 370.977132][T10598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 370.977164][T10598] ? lockdep_hardirqs_on+0x78/0x100 [ 370.977200][T10598] ? __pfx_futex_wake_mark+0x10/0x10 [ 370.977250][T10598] ? find_held_lock+0x2b/0x80 [ 370.977287][T10598] ? futex_wake+0x456/0x530 [ 370.977340][T10598] futex_wait+0xed/0x380 [ 370.977367][T10598] ? __pfx_futex_wait+0x10/0x10 [ 370.977405][T10598] ? up_write+0x290/0x4f0 [ 370.977453][T10598] do_futex+0x1ef/0x350 [ 370.977491][T10598] ? __pfx_do_futex+0x10/0x10 [ 370.977530][T10598] ? __pfx___might_resched+0x10/0x10 [ 370.977571][T10598] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 370.977613][T10598] __x64_sys_futex+0x34f/0x4d0 [ 370.977657][T10598] ? __pfx___x64_sys_futex+0x10/0x10 [ 370.977693][T10598] ? ksys_mmap_pgoff+0x85/0x5b0 [ 370.977746][T10598] do_syscall_64+0xc9/0xf80 [ 370.977782][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.977813][T10598] RIP: 0033:0x7f6dba19acb9 [ 370.977837][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.977866][T10598] RSP: 002b:00007f6dbb0910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 370.977895][T10598] RAX: ffffffffffffffda RBX: 00007f6dba415fa8 RCX: 00007f6dba19acb9 [ 370.977914][T10598] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6dba415fa8 [ 370.977944][T10598] RBP: 00007f6dba415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 370.977962][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.977980][T10598] R13: 00007f6dba416038 R14: 00007ffd26fcbb90 R15: 00007ffd26fcbc78 [ 370.978018][T10598] [ 370.982847][ T30] audit: type=1800 audit(6064362792.081:14): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.951" name="dbroot" dev="configfs" ino=33582 res=0 errno=0 [ 371.260210][T10600] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 371.275006][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.3.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.275049][T10600] Tainted: [L]=SOFTLOCKUP [ 371.275060][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 371.275075][T10600] Call Trace: [ 371.275085][T10600] [ 371.275095][T10600] dump_stack_lvl+0x100/0x190 [ 371.275143][T10600] sysfs_warn_dup.cold+0x1c/0x28 [ 371.275180][T10600] sysfs_do_create_link_sd+0x113/0x140 [ 371.275223][T10600] sysfs_create_link+0x61/0xc0 [ 371.275260][T10600] device_add+0x675/0x1950 [ 371.275305][T10600] ? __pfx_device_add+0x10/0x10 [ 371.275343][T10600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.275376][T10600] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 371.275423][T10600] wiphy_register+0x1e58/0x2d30 [ 371.275467][T10600] ? __rtnl_unlock+0xb9/0xf0 [ 371.275512][T10600] ? __pfx_wiphy_register+0x10/0x10 [ 371.275557][T10600] ? __asan_memset+0x23/0x50 [ 371.275588][T10600] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 371.275643][T10600] ieee80211_register_hw+0x2c11/0x4040 [ 371.275699][T10600] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 371.275739][T10600] ? __pfx___debug_object_init+0x10/0x10 [ 371.275781][T10600] ? find_held_lock+0x2b/0x80 [ 371.275808][T10600] ? net_generic+0xea/0x2a0 [ 371.275838][T10600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.275869][T10600] ? __hrtimer_setup+0x178/0x280 [ 371.275910][T10600] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 371.275971][T10600] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 371.276102][T10600] hwsim_new_radio_nl+0xc1f/0x1340 [ 371.276142][T10600] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 371.276183][T10600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.276236][T10600] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 371.276266][T10600] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 371.276304][T10600] genl_family_rcv_msg_doit+0x214/0x300 [ 371.276338][T10600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.276369][T10600] ? genl_get_cmd+0x3ef/0x720 [ 371.276405][T10600] ? bpf_lsm_capable+0x9/0x10 [ 371.276428][T10600] ? security_capable+0x80/0x260 [ 371.276467][T10600] ? ns_capable+0xd2/0xf0 [ 371.276502][T10600] genl_rcv_msg+0x560/0x800 [ 371.276553][T10600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.276583][T10600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.276644][T10600] netlink_rcv_skb+0x159/0x420 [ 371.276690][T10600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.276721][T10600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.276780][T10600] ? netlink_deliver_tap+0x1ae/0xcc0 [ 371.276828][T10600] genl_rcv+0x28/0x40 [ 371.276854][T10600] netlink_unicast+0x5aa/0x870 [ 371.276911][T10600] ? __pfx_netlink_unicast+0x10/0x10 [ 371.276956][T10600] ? __pfx___might_resched+0x10/0x10 [ 371.276998][T10600] ? __lock_acquire+0x4a5/0x2630 [ 371.277075][T10600] netlink_sendmsg+0x8b0/0xda0 [ 371.277125][T10600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.277166][T10600] ? __import_iovec+0x1d2/0x640 [ 371.277214][T10600] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 371.277255][T10600] ____sys_sendmsg+0xa54/0xc30 [ 371.277291][T10600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.277327][T10600] ? try_to_wake_up+0x644/0x1a60 [ 371.277367][T10600] ___sys_sendmsg+0x190/0x1e0 [ 371.277402][T10600] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.277435][T10600] ? futex_private_hash_put+0x107/0x1c0 [ 371.277487][T10600] ? find_held_lock+0x2b/0x80 [ 371.277542][T10600] __sys_sendmsg+0x170/0x220 [ 371.277584][T10600] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.277624][T10600] ? __x64_sys_futex+0x34f/0x4d0 [ 371.277691][T10600] do_syscall_64+0xc9/0xf80 [ 371.277731][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.277760][T10600] RIP: 0033:0x7fd350f9acb9 [ 371.277793][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.277821][T10600] RSP: 002b:00007fd351ed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.277848][T10600] RAX: ffffffffffffffda RBX: 00007fd351216090 RCX: 00007fd350f9acb9 [ 371.277869][T10600] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 371.277887][T10600] RBP: 00007fd351008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 371.277906][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.277923][T10600] R13: 00007fd351216128 R14: 00007fd351216090 R15: 00007ffcd16b1258 [ 371.277957][T10600] [ 372.247364][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 372.253946][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 372.253979][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 372.260800][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 372.639452][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 373.430083][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.441391][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.452426][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.463297][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.471110][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.586387][T10616] netlink: 280 bytes leftover after parsing attributes in process `syz.3.955'. [ 374.209337][T10618] chnl_net:caif_netlink_parms(): no params data found [ 374.592791][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.616767][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.633927][T10618] bridge_slave_0: entered allmulticast mode [ 374.806046][T10618] bridge_slave_0: entered promiscuous mode [ 374.829809][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.850751][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.871821][T10618] bridge_slave_1: entered allmulticast mode [ 374.881382][T10618] bridge_slave_1: entered promiscuous mode [ 375.039894][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.061555][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.248439][T10618] team0: Port device team_slave_0 added [ 375.256205][T10618] team0: Port device team_slave_1 added [ 375.329903][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.345093][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.401651][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.526717][ T5838] Bluetooth: hci4: command tx timeout [ 375.540676][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.554824][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.706642][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.831642][T10618] hsr_slave_0: entered promiscuous mode [ 375.838580][T10618] hsr_slave_1: entered promiscuous mode [ 375.844931][T10618] debugfs: 'hsr0' already exists in 'hsr' [ 375.852053][T10618] Cannot create hsr debugfs directory [ 376.670061][T10618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.737768][T10618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.827640][T10618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.861159][T10618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.013602][T10618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.069546][T10618] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.096627][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.103817][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.158719][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.165930][ T7108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.606802][ T5838] Bluetooth: hci4: command tx timeout [ 377.845330][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.481634][T10618] veth0_vlan: entered promiscuous mode [ 378.512853][T10618] veth1_vlan: entered promiscuous mode [ 378.612494][T10618] veth0_macvtap: entered promiscuous mode [ 378.723971][T10618] veth1_macvtap: entered promiscuous mode [ 378.825456][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.853813][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.971033][ T7111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.020790][ T7111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.115972][ T7111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.183447][ T7111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.561063][ T7089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.576578][ T7089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.651480][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.664088][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.697535][ T5838] Bluetooth: hci4: command tx timeout [ 380.086980][T10729] netlink: 342 bytes leftover after parsing attributes in process `syz.4.954'. [ 381.308423][T10745] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 381.336899][T10745] CPU: 0 UID: 0 PID: 10745 Comm: syz.0.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.336950][T10745] Tainted: [L]=SOFTLOCKUP [ 381.336960][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 381.336975][T10745] Call Trace: [ 381.336985][T10745] [ 381.337001][T10745] dump_stack_lvl+0x100/0x190 [ 381.337042][T10745] sysfs_warn_dup.cold+0x1c/0x28 [ 381.337078][T10745] sysfs_do_create_link_sd+0x113/0x140 [ 381.337116][T10745] sysfs_create_link+0x61/0xc0 [ 381.337151][T10745] device_add+0x675/0x1950 [ 381.337194][T10745] ? __pfx_device_add+0x10/0x10 [ 381.337231][T10745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.337263][T10745] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 381.337308][T10745] wiphy_register+0x1e58/0x2d30 [ 381.337351][T10745] ? __rtnl_unlock+0xb9/0xf0 [ 381.337390][T10745] ? __pfx_wiphy_register+0x10/0x10 [ 381.337433][T10745] ? __asan_memset+0x23/0x50 [ 381.337464][T10745] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 381.337521][T10745] ieee80211_register_hw+0x2c11/0x4040 [ 381.337584][T10745] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 381.337627][T10745] ? __pfx___debug_object_init+0x10/0x10 [ 381.337672][T10745] ? find_held_lock+0x2b/0x80 [ 381.337701][T10745] ? net_generic+0xea/0x2a0 [ 381.337735][T10745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.337765][T10745] ? __hrtimer_setup+0x178/0x280 [ 381.337811][T10745] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 381.337878][T10745] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 381.337933][T10745] hwsim_new_radio_nl+0xc1f/0x1340 [ 381.337973][T10745] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 381.338022][T10745] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 381.338076][T10745] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 381.338109][T10745] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 381.338151][T10745] genl_family_rcv_msg_doit+0x214/0x300 [ 381.338189][T10745] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.338220][T10745] ? genl_get_cmd+0x3ef/0x720 [ 381.338259][T10745] ? bpf_lsm_capable+0x9/0x10 [ 381.338296][T10745] ? security_capable+0x80/0x260 [ 381.338335][T10745] ? ns_capable+0xd2/0xf0 [ 381.338371][T10745] genl_rcv_msg+0x560/0x800 [ 381.338407][T10745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.338440][T10745] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 381.338496][T10745] netlink_rcv_skb+0x159/0x420 [ 381.338541][T10745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.338575][T10745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.338649][T10745] ? netlink_deliver_tap+0x1ae/0xcc0 [ 381.338690][T10745] genl_rcv+0x28/0x40 [ 381.338710][T10745] netlink_unicast+0x5aa/0x870 [ 381.338749][T10745] ? __pfx_netlink_unicast+0x10/0x10 [ 381.338781][T10745] ? __pfx___might_resched+0x10/0x10 [ 381.338814][T10745] ? __lock_acquire+0x4a5/0x2630 [ 381.338850][T10745] netlink_sendmsg+0x8b0/0xda0 [ 381.338889][T10745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.338921][T10745] ? __import_iovec+0x1d2/0x640 [ 381.338957][T10745] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 381.338997][T10745] ____sys_sendmsg+0xa54/0xc30 [ 381.339026][T10745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.339056][T10745] ? try_to_wake_up+0x644/0x1a60 [ 381.339086][T10745] ___sys_sendmsg+0x190/0x1e0 [ 381.339113][T10745] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.339140][T10745] ? futex_private_hash_put+0x107/0x1c0 [ 381.339192][T10745] ? find_held_lock+0x2b/0x80 [ 381.339246][T10745] __sys_sendmsg+0x170/0x220 [ 381.339288][T10745] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.339328][T10745] ? __x64_sys_futex+0x34f/0x4d0 [ 381.339390][T10745] do_syscall_64+0xc9/0xf80 [ 381.339428][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.339458][T10745] RIP: 0033:0x7f530059acb9 [ 381.339482][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.339511][T10745] RSP: 002b:00007f530145d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.339539][T10745] RAX: ffffffffffffffda RBX: 00007f5300816090 RCX: 00007f530059acb9 [ 381.339559][T10745] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 381.339578][T10745] RBP: 00007f5300608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 381.339595][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.339612][T10745] R13: 00007f5300816128 R14: 00007f5300816090 R15: 00007ffda9dcc768 [ 381.339653][T10745] [ 381.970055][ T5838] Bluetooth: hci4: command tx timeout [ 383.911823][T10786] netlink: 342 bytes leftover after parsing attributes in process `syz.0.984'. [ 384.999968][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 385.942965][T10827] Invalid ELF header magic: != ELF [ 385.975581][T10827] Invalid ELF header magic: != ELF [ 386.044850][T10827] Invalid ELF header magic: != ELF [ 386.082697][T10827] Invalid ELF header magic: != ELF [ 386.118620][T10827] Invalid ELF header magic: != ELF [ 386.163498][T10827] Invalid ELF header magic: != ELF [ 386.201012][T10827] Invalid ELF header magic: != ELF [ 386.255576][T10827] Invalid ELF header magic: != ELF [ 386.284407][T10835] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 386.299657][T10827] Invalid ELF header magic: != ELF [ 386.348218][T10827] Invalid ELF header magic: != ELF [ 386.380312][T10827] Invalid ELF header magic: != ELF [ 386.409023][T10827] Invalid ELF header magic: != ELF [ 386.429031][T10827] Invalid ELF header magic: != ELF [ 386.453501][T10827] Invalid ELF header magic: != ELF [ 386.490198][T10827] Invalid ELF header magic: != ELF [ 386.525938][T10827] Invalid ELF header magic: != ELF [ 386.566157][T10827] Invalid ELF header magic: != ELF [ 386.649771][T10827] Invalid ELF header magic: != ELF [ 386.730650][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.737121][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.978835][T10845] ptp ptp0: new virtual clock ptp1 [ 386.996972][T10845] ptp ptp0: guarantee physical clock free running [ 388.332834][T10880] FAULT_INJECTION: forcing a failure. [ 388.332834][T10880] name failslab, interval 1, probability 0, space 0, times 0 [ 388.372236][T10880] CPU: 0 UID: 0 PID: 10880 Comm: syz.2.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.372265][T10880] Tainted: [L]=SOFTLOCKUP [ 388.372271][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 388.372281][T10880] Call Trace: [ 388.372287][T10880] [ 388.372293][T10880] dump_stack_lvl+0x100/0x190 [ 388.372318][T10880] should_fail_ex.cold+0x5/0xa [ 388.372345][T10880] should_failslab+0xc2/0x120 [ 388.372368][T10880] __kmalloc_cache_noprof+0x80/0x810 [ 388.372385][T10880] ? snd_seq_pool_new+0x44/0x230 [ 388.372410][T10880] ? snd_seq_pool_new+0x44/0x230 [ 388.372428][T10880] ? __pfx_snd_seq_open+0x10/0x10 [ 388.372442][T10880] snd_seq_pool_new+0x44/0x230 [ 388.372460][T10880] snd_seq_fifo_new+0x5a/0x270 [ 388.372481][T10880] snd_seq_open+0x3fe/0x590 [ 388.372496][T10880] ? __pfx_snd_seq_open+0x10/0x10 [ 388.372509][T10880] snd_open+0x22d/0x4c0 [ 388.372527][T10880] ? __pfx_snd_open+0x10/0x10 [ 388.372543][T10880] chrdev_open+0x234/0x6a0 [ 388.372561][T10880] ? __pfx_apparmor_file_open+0x10/0x10 [ 388.372580][T10880] ? __pfx_chrdev_open+0x10/0x10 [ 388.372599][T10880] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 388.372622][T10880] do_dentry_open+0x73e/0x1570 [ 388.372640][T10880] ? __pfx_chrdev_open+0x10/0x10 [ 388.372658][T10880] ? security_inode_permission+0xbf/0x250 [ 388.372684][T10880] vfs_open+0x82/0x3f0 [ 388.372721][T10880] path_openat+0x21dc/0x3120 [ 388.372747][T10880] ? __pfx_path_openat+0x10/0x10 [ 388.372772][T10880] do_filp_open+0x1f7/0x420 [ 388.372791][T10880] ? __pfx_do_filp_open+0x10/0x10 [ 388.372821][T10880] ? _raw_spin_unlock+0x28/0x50 [ 388.372837][T10880] ? alloc_fd+0x476/0x790 [ 388.372858][T10880] do_sys_openat2+0x12e/0x220 [ 388.372880][T10880] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.372908][T10880] __x64_sys_openat+0x12d/0x210 [ 388.372939][T10880] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.372961][T10880] ? xfd_validate_state+0x129/0x190 [ 388.372992][T10880] do_syscall_64+0xc9/0xf80 [ 388.373012][T10880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.373027][T10880] RIP: 0033:0x7f6dba19acb9 [ 388.373040][T10880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.373055][T10880] RSP: 002b:00007f6dbb091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.373071][T10880] RAX: ffffffffffffffda RBX: 00007f6dba415fa0 RCX: 00007f6dba19acb9 [ 388.373082][T10880] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 388.373092][T10880] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 388.373101][T10880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.373110][T10880] R13: 00007f6dba416038 R14: 00007f6dba415fa0 R15: 00007ffd26fcbc78 [ 388.373129][T10880] [ 388.970936][T10886] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1005'. [ 389.195897][T10887] sd 0:0:1:0: PR command failed: 1026 [ 389.269454][T10887] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 389.276357][T10887] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 389.705087][T10899] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 389.825625][T10896] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1008'. [ 390.559277][T10904] bond0: no command found in slaves file - use +ifname or -ifname [ 391.168101][T10925] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1015'. [ 392.122419][T10948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 395.142710][T10983] input: jJǸ-J86 as /devices/virtual/input/input22 [ 397.710941][T11007] nfs4: Unknown parameter '_yMBB' [ 398.500286][ T30] audit: type=1806 audit(6064362819.601:15): xattr="10" res=-22 [ 399.137515][ T5838] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 399.290370][T11030] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1042'. [ 401.365462][T11069] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1052'. [ 402.327554][ T30] audit: type=1800 audit(6064362823.421:16): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1056" name="lu_gp_id" dev="configfs" ino=36832 res=0 errno=0 [ 402.530809][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 402.752867][T11090] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 402.790134][T11090] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1055'. [ 402.815931][T11090] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.151809][T11151] FAULT_INJECTION: forcing a failure. [ 405.151809][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 405.170516][T11151] CPU: 0 UID: 0 PID: 11151 Comm: syz.2.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.170544][T11151] Tainted: [L]=SOFTLOCKUP [ 405.170549][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 405.170559][T11151] Call Trace: [ 405.170577][T11151] [ 405.170583][T11151] dump_stack_lvl+0x100/0x190 [ 405.170607][T11151] should_fail_ex.cold+0x5/0xa [ 405.170632][T11151] should_failslab+0xc2/0x120 [ 405.170653][T11151] ? tomoyo_encode2+0xfb/0x3c0 [ 405.170669][T11151] __kmalloc_noprof+0xf6/0x9c0 [ 405.170689][T11151] ? tomoyo_encode2+0xfb/0x3c0 [ 405.170703][T11151] tomoyo_encode2+0xfb/0x3c0 [ 405.170720][T11151] tomoyo_encode+0x29/0x50 [ 405.170734][T11151] tomoyo_realpath_from_path+0x18c/0x690 [ 405.170755][T11151] tomoyo_check_open_permission+0x2af/0x3c0 [ 405.170777][T11151] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 405.170821][T11151] ? do_raw_spin_lock+0x128/0x260 [ 405.170847][T11151] ? path_get+0x61/0x80 [ 405.170868][T11151] tomoyo_file_open+0x6b/0x90 [ 405.170885][T11151] security_file_open+0xb5/0x1e0 [ 405.170900][T11151] do_dentry_open+0x58c/0x1570 [ 405.170919][T11151] ? security_inode_permission+0xbf/0x250 [ 405.170943][T11151] vfs_open+0x82/0x3f0 [ 405.170966][T11151] path_openat+0x21dc/0x3120 [ 405.170990][T11151] ? __pfx_path_openat+0x10/0x10 [ 405.171014][T11151] do_filp_open+0x1f7/0x420 [ 405.171032][T11151] ? __pfx_do_filp_open+0x10/0x10 [ 405.171062][T11151] ? _raw_spin_unlock+0x28/0x50 [ 405.171078][T11151] ? alloc_fd+0x476/0x790 [ 405.171105][T11151] do_sys_openat2+0x12e/0x220 [ 405.171128][T11151] ? __pfx_do_sys_openat2+0x10/0x10 [ 405.171151][T11151] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 405.171176][T11151] __x64_sys_openat+0x12d/0x210 [ 405.171199][T11151] ? __pfx___x64_sys_openat+0x10/0x10 [ 405.171220][T11151] ? xfd_validate_state+0x129/0x190 [ 405.171250][T11151] do_syscall_64+0xc9/0xf80 [ 405.171269][T11151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.171284][T11151] RIP: 0033:0x7f6dba19acb9 [ 405.171297][T11151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.171311][T11151] RSP: 002b:00007f6dbb091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 405.171327][T11151] RAX: ffffffffffffffda RBX: 00007f6dba415fa0 RCX: 00007f6dba19acb9 [ 405.171337][T11151] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 405.171347][T11151] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 405.171355][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.171364][T11151] R13: 00007f6dba416038 R14: 00007f6dba415fa0 R15: 00007ffd26fcbc78 [ 405.171384][T11151] [ 405.171403][T11151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.601692][T11167] netlink: 'syz.4.1075': attribute type 15 has an invalid length. [ 406.609677][T11167] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1075'. [ 410.480529][T11205] FAULT_INJECTION: forcing a failure. [ 410.480529][T11205] name failslab, interval 1, probability 0, space 0, times 0 [ 410.499711][T11205] CPU: 1 UID: 0 PID: 11205 Comm: syz.2.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.499764][T11205] Tainted: [L]=SOFTLOCKUP [ 410.499774][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 410.499792][T11205] Call Trace: [ 410.499802][T11205] [ 410.499814][T11205] dump_stack_lvl+0x100/0x190 [ 410.499856][T11205] should_fail_ex.cold+0x5/0xa [ 410.499905][T11205] should_failslab+0xc2/0x120 [ 410.499945][T11205] ? tomoyo_encode2+0xfb/0x3c0 [ 410.499973][T11205] __kmalloc_noprof+0xf6/0x9c0 [ 410.500014][T11205] ? tomoyo_encode2+0xfb/0x3c0 [ 410.500039][T11205] tomoyo_encode2+0xfb/0x3c0 [ 410.500072][T11205] tomoyo_encode+0x29/0x50 [ 410.500098][T11205] tomoyo_realpath_from_path+0x18c/0x690 [ 410.500135][T11205] tomoyo_path_number_perm+0x23c/0x580 [ 410.500175][T11205] ? tomoyo_path_number_perm+0x22e/0x580 [ 410.500219][T11205] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 410.500258][T11205] ? futex_wake+0x1ad/0x530 [ 410.500338][T11205] ? find_held_lock+0x2b/0x80 [ 410.500367][T11205] ? hook_file_ioctl_common+0x146/0x410 [ 410.500408][T11205] ? __fget_files+0x215/0x3d0 [ 410.500455][T11205] ? __fget_files+0x21f/0x3d0 [ 410.500492][T11205] security_file_ioctl+0xd3/0x230 [ 410.500537][T11205] __x64_sys_ioctl+0xb7/0x210 [ 410.500585][T11205] do_syscall_64+0xc9/0xf80 [ 410.500624][T11205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.500654][T11205] RIP: 0033:0x7f6dba19acb9 [ 410.500677][T11205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.500706][T11205] RSP: 002b:00007f6dbb091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.500734][T11205] RAX: ffffffffffffffda RBX: 00007f6dba415fa0 RCX: 00007f6dba19acb9 [ 410.500754][T11205] RDX: 0000000000000000 RSI: 00000000000007b3 RDI: 0000000000000008 [ 410.500771][T11205] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 410.500788][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.500805][T11205] R13: 00007f6dba416038 R14: 00007f6dba415fa0 R15: 00007ffd26fcbc78 [ 410.500844][T11205] [ 410.500871][T11205] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.877790][T11209] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1086'. [ 411.194243][T11216] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 411.223771][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.2.1088 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.223818][T11216] Tainted: [L]=SOFTLOCKUP [ 411.223828][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 411.223844][T11216] Call Trace: [ 411.223868][T11216] [ 411.223878][T11216] dump_stack_lvl+0x100/0x190 [ 411.223922][T11216] sysfs_warn_dup.cold+0x1c/0x28 [ 411.223961][T11216] sysfs_do_create_link_sd+0x113/0x140 [ 411.224010][T11216] sysfs_create_link+0x61/0xc0 [ 411.224048][T11216] device_add+0x675/0x1950 [ 411.224093][T11216] ? __pfx_device_add+0x10/0x10 [ 411.224132][T11216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 411.224175][T11216] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 411.224223][T11216] wiphy_register+0x1e58/0x2d30 [ 411.224269][T11216] ? __rtnl_unlock+0xb9/0xf0 [ 411.224309][T11216] ? __pfx_wiphy_register+0x10/0x10 [ 411.224355][T11216] ? __asan_memset+0x23/0x50 [ 411.224386][T11216] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 411.224441][T11216] ieee80211_register_hw+0x2c11/0x4040 [ 411.224503][T11216] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 411.224545][T11216] ? __pfx___debug_object_init+0x10/0x10 [ 411.224589][T11216] ? find_held_lock+0x2b/0x80 [ 411.224616][T11216] ? net_generic+0xea/0x2a0 [ 411.224650][T11216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 411.224682][T11216] ? __hrtimer_setup+0x178/0x280 [ 411.224728][T11216] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 411.224794][T11216] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 411.224848][T11216] hwsim_new_radio_nl+0xc1f/0x1340 [ 411.224887][T11216] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 411.224926][T11216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 411.224979][T11216] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 411.225012][T11216] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 411.225052][T11216] genl_family_rcv_msg_doit+0x214/0x300 [ 411.225088][T11216] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.225120][T11216] ? genl_get_cmd+0x3ef/0x720 [ 411.225166][T11216] ? bpf_lsm_capable+0x9/0x10 [ 411.225192][T11216] ? security_capable+0x80/0x260 [ 411.225229][T11216] ? ns_capable+0xd2/0xf0 [ 411.225265][T11216] genl_rcv_msg+0x560/0x800 [ 411.225301][T11216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.225334][T11216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 411.225387][T11216] netlink_rcv_skb+0x159/0x420 [ 411.225432][T11216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.225464][T11216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.225524][T11216] ? netlink_deliver_tap+0x1ae/0xcc0 [ 411.225572][T11216] genl_rcv+0x28/0x40 [ 411.225599][T11216] netlink_unicast+0x5aa/0x870 [ 411.225648][T11216] ? __pfx_netlink_unicast+0x10/0x10 [ 411.225690][T11216] ? __pfx___might_resched+0x10/0x10 [ 411.225732][T11216] ? __lock_acquire+0x4a5/0x2630 [ 411.225780][T11216] netlink_sendmsg+0x8b0/0xda0 [ 411.225830][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.225871][T11216] ? __import_iovec+0x1d2/0x640 [ 411.225919][T11216] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 411.225970][T11216] ____sys_sendmsg+0xa54/0xc30 [ 411.226008][T11216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.226037][T11216] ? __pfx___futex_wait+0x10/0x10 [ 411.226071][T11216] ? __pfx_futex_wake_mark+0x10/0x10 [ 411.226123][T11216] ___sys_sendmsg+0x190/0x1e0 [ 411.226168][T11216] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.226221][T11216] ? find_held_lock+0x2b/0x80 [ 411.226274][T11216] __sys_sendmsg+0x170/0x220 [ 411.226318][T11216] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.226358][T11216] ? __x64_sys_futex+0x34f/0x4d0 [ 411.226420][T11216] do_syscall_64+0xc9/0xf80 [ 411.226458][T11216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.226487][T11216] RIP: 0033:0x7f6dba19acb9 [ 411.226514][T11216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.226540][T11216] RSP: 002b:00007f6dbb070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.226566][T11216] RAX: ffffffffffffffda RBX: 00007f6dba416090 RCX: 00007f6dba19acb9 [ 411.226585][T11216] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 411.226602][T11216] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 411.226619][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.226634][T11216] R13: 00007f6dba416128 R14: 00007f6dba416090 R15: 00007ffd26fcbc78 [ 411.226671][T11216] [ 412.158006][T11225] netlink: 'syz.4.1090': attribute type 11 has an invalid length. [ 412.450733][T11229] block nbd0: shutting down sockets [ 412.491468][T11229] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1091'. [ 412.810667][T11232] FAULT_INJECTION: forcing a failure. [ 412.810667][T11232] name failslab, interval 1, probability 0, space 0, times 0 [ 412.827053][T11232] CPU: 1 UID: 0 PID: 11232 Comm: syz.4.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.827104][T11232] Tainted: [L]=SOFTLOCKUP [ 412.827114][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 412.827132][T11232] Call Trace: [ 412.827141][T11232] [ 412.827153][T11232] dump_stack_lvl+0x100/0x190 [ 412.827196][T11232] should_fail_ex.cold+0x5/0xa [ 412.827245][T11232] should_failslab+0xc2/0x120 [ 412.827286][T11232] __kmalloc_cache_noprof+0x80/0x810 [ 412.827317][T11232] ? nfc_llcp_register_device+0x4b/0xa60 [ 412.827361][T11232] ? nfc_llcp_register_device+0x4b/0xa60 [ 412.827395][T11232] nfc_llcp_register_device+0x4b/0xa60 [ 412.827433][T11232] nfc_register_device+0x6d/0x3e0 [ 412.827472][T11232] nci_register_device+0x7f1/0xb80 [ 412.827505][T11232] ? __pfx_nci_register_device+0x10/0x10 [ 412.827548][T11232] virtual_ncidev_open+0x141/0x220 [ 412.827596][T11232] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 412.827639][T11232] misc_open+0x26d/0x450 [ 412.827674][T11232] ? __pfx_misc_open+0x10/0x10 [ 412.827706][T11232] chrdev_open+0x234/0x6a0 [ 412.827740][T11232] ? __pfx_apparmor_file_open+0x10/0x10 [ 412.827778][T11232] ? __pfx_chrdev_open+0x10/0x10 [ 412.827827][T11232] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 412.827867][T11232] do_dentry_open+0x73e/0x1570 [ 412.827898][T11232] ? __pfx_chrdev_open+0x10/0x10 [ 412.827941][T11232] ? security_inode_permission+0xbf/0x250 [ 412.827989][T11232] vfs_open+0x82/0x3f0 [ 412.828031][T11232] path_openat+0x21dc/0x3120 [ 412.828077][T11232] ? __pfx_path_openat+0x10/0x10 [ 412.828124][T11232] do_filp_open+0x1f7/0x420 [ 412.828161][T11232] ? __pfx_do_filp_open+0x10/0x10 [ 412.828221][T11232] ? _raw_spin_unlock+0x28/0x50 [ 412.828249][T11232] ? alloc_fd+0x476/0x790 [ 412.828292][T11232] do_sys_openat2+0x12e/0x220 [ 412.828336][T11232] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.828382][T11232] ? find_held_lock+0x2b/0x80 [ 412.828420][T11232] __x64_sys_openat+0x12d/0x210 [ 412.828464][T11232] ? __pfx___x64_sys_openat+0x10/0x10 [ 412.828506][T11232] ? xfd_validate_state+0x129/0x190 [ 412.828564][T11232] do_syscall_64+0xc9/0xf80 [ 412.828602][T11232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.828631][T11232] RIP: 0033:0x7f424a99acb9 [ 412.828655][T11232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.828683][T11232] RSP: 002b:00007f424b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.828712][T11232] RAX: ffffffffffffffda RBX: 00007f424ac15fa0 RCX: 00007f424a99acb9 [ 412.828731][T11232] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 412.828751][T11232] RBP: 00007f424aa08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 412.828769][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.828786][T11232] R13: 00007f424ac16038 R14: 00007f424ac15fa0 R15: 00007ffd0b511ff8 [ 412.828825][T11232] [ 412.831290][T11232] nfc: nfc_register_device: Could not register llcp device [ 413.302946][T11232] llcp: nfc_llcp_remove_local: Shutting down device not found [ 413.598539][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.611673][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.619860][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.635674][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.646776][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.121491][T11243] chnl_net:caif_netlink_parms(): no params data found [ 414.261529][T11243] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.268845][T11243] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.281131][T11243] bridge_slave_0: entered allmulticast mode [ 414.289215][T11243] bridge_slave_0: entered promiscuous mode [ 414.298703][T11243] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.307888][T11243] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.315153][T11243] bridge_slave_1: entered allmulticast mode [ 414.323158][T11243] bridge_slave_1: entered promiscuous mode [ 414.370630][T11243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.384208][T11243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.424863][T11243] team0: Port device team_slave_0 added [ 414.434096][T11243] team0: Port device team_slave_1 added [ 414.496886][T11243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.503881][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.542842][T11243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.613997][T11243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.642335][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.676846][T11243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.923310][T11243] hsr_slave_0: entered promiscuous mode [ 414.941673][T11243] hsr_slave_1: entered promiscuous mode [ 414.957710][T11243] debugfs: 'hsr0' already exists in 'hsr' [ 414.963475][T11243] Cannot create hsr debugfs directory [ 415.687703][ T5834] Bluetooth: hci5: command tx timeout [ 415.813691][T11243] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.833824][T11243] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.851125][T11243] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.865004][T11243] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 415.888767][T11279] nvme_fcloop: unknown parameter or missing value '7' [ 416.264874][T11243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.309239][T11243] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.332729][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.339887][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.397469][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.404650][ T7108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.725770][ T30] audit: type=1804 audit(6064362837.821:17): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1104" name="/newroot/296/file0" dev="tmpfs" ino=1556 res=1 errno=0 [ 416.882013][T11243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.345091][T11243] veth0_vlan: entered promiscuous mode [ 417.363809][T11243] veth1_vlan: entered promiscuous mode [ 417.415313][T11243] veth0_macvtap: entered promiscuous mode [ 417.435704][T11243] veth1_macvtap: entered promiscuous mode [ 417.529525][T11243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.552730][T11243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.597165][ T7088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.629452][ T7088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.642466][ T7088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.654786][ T7088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.766816][ T5834] Bluetooth: hci5: command tx timeout [ 417.773439][T11327] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 417.881270][ T7088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.902028][ T7088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.943156][ T7101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.956566][ T7101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.050755][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 418.170812][T11335] FAULT_INJECTION: forcing a failure. [ 418.170812][T11335] name failslab, interval 1, probability 0, space 0, times 0 [ 418.198636][T11335] CPU: 0 UID: 0 PID: 11335 Comm: syz.2.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.198698][T11335] Tainted: [L]=SOFTLOCKUP [ 418.198709][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 418.198725][T11335] Call Trace: [ 418.198733][T11335] [ 418.198743][T11335] dump_stack_lvl+0x100/0x190 [ 418.198784][T11335] should_fail_ex.cold+0x5/0xa [ 418.198830][T11335] should_failslab+0xc2/0x120 [ 418.198872][T11335] kmem_cache_alloc_noprof+0x83/0x780 [ 418.198910][T11335] ? __pfx_map_id_range_down+0x10/0x10 [ 418.198939][T11335] ? security_inode_alloc+0x3b/0x2c0 [ 418.198984][T11335] ? security_inode_alloc+0x3b/0x2c0 [ 418.199021][T11335] security_inode_alloc+0x3b/0x2c0 [ 418.199059][T11335] inode_init_always_gfp+0xced/0x1040 [ 418.199096][T11335] alloc_inode+0x8e/0x250 [ 418.199134][T11335] sock_alloc+0x44/0x280 [ 418.199155][T11335] ? security_socket_create+0x7f/0x250 [ 418.199190][T11335] __sock_create+0xc2/0x860 [ 418.199226][T11335] __sys_socket+0x14d/0x260 [ 418.199269][T11335] ? __pfx___sys_socket+0x10/0x10 [ 418.199303][T11335] ? __pfx_do_writev+0x10/0x10 [ 418.199328][T11335] ? shstk_prctl+0xb4/0x670 [ 418.199370][T11335] __x64_sys_socket+0x72/0xb0 [ 418.199398][T11335] ? lockdep_hardirqs_on+0x78/0x100 [ 418.199429][T11335] do_syscall_64+0xc9/0xf80 [ 418.199461][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.199486][T11335] RIP: 0033:0x7f6dba19acb9 [ 418.199507][T11335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.199532][T11335] RSP: 002b:00007f6dbb091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 418.199559][T11335] RAX: ffffffffffffffda RBX: 00007f6dba415fa0 RCX: 00007f6dba19acb9 [ 418.199577][T11335] RDX: 0000000000000106 RSI: 0000000000000801 RDI: 000000000000000a [ 418.199593][T11335] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 418.199602][T11335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.199612][T11335] R13: 00007f6dba416038 R14: 00007f6dba415fa0 R15: 00007ffd26fcbc78 [ 418.199632][T11335] [ 418.200001][T11335] socket: no more sockets [ 419.846832][ T5834] Bluetooth: hci5: command tx timeout [ 420.481688][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.501742][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.512704][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.528895][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.536867][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.936669][ T5838] Bluetooth: hci5: command tx timeout [ 422.202211][T11374] chnl_net:caif_netlink_parms(): no params data found [ 422.398562][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.415845][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.443533][T11374] bridge_slave_0: entered allmulticast mode [ 422.499051][T11374] bridge_slave_0: entered promiscuous mode [ 422.510560][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.566274][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.584598][T11402] zswap: compressor not available [ 422.626981][T11374] bridge_slave_1: entered allmulticast mode [ 422.635013][T11374] bridge_slave_1: entered promiscuous mode [ 422.686166][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.708141][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.726784][ T5838] Bluetooth: hci6: command tx timeout [ 422.780546][T11374] team0: Port device team_slave_0 added [ 422.808181][T11374] team0: Port device team_slave_1 added [ 422.912528][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.940395][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.039170][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.090240][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.102967][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.150390][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.649292][T11374] hsr_slave_0: entered promiscuous mode [ 423.656151][T11374] hsr_slave_1: entered promiscuous mode [ 423.674041][T11374] debugfs: 'hsr0' already exists in 'hsr' [ 423.686812][T11374] Cannot create hsr debugfs directory [ 424.387405][T11374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.454410][T11374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.528563][T11374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.575662][T11374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 424.806595][ T5838] Bluetooth: hci6: command tx timeout [ 424.975321][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.078171][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.144114][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.151419][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.200940][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.208170][ T6410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.363628][T11374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.685416][T11475] sctp: [Deprecated]: syz.5.1136 (pid 11475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.685416][T11475] Use struct sctp_sack_info instead [ 425.890523][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.539552][T11374] veth0_vlan: entered promiscuous mode [ 426.561132][T11374] veth1_vlan: entered promiscuous mode [ 426.719207][T11374] veth0_macvtap: entered promiscuous mode [ 426.788691][T11374] veth1_macvtap: entered promiscuous mode [ 426.866119][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.886854][ T5838] Bluetooth: hci6: command tx timeout [ 426.925768][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.980607][ T7088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.991257][ T6410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.011674][ T6410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.040341][ T6410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.402386][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.431306][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.541594][ T7088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.565453][ T7088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.913975][T11496] FAULT_INJECTION: forcing a failure. [ 427.913975][T11496] name fail_futex, interval 1, probability 0, space 0, times 0 [ 427.948499][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.5.1138 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.948541][T11496] Tainted: [L]=SOFTLOCKUP [ 427.948550][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 427.948566][T11496] Call Trace: [ 427.948575][T11496] [ 427.948585][T11496] dump_stack_lvl+0x100/0x190 [ 427.948625][T11496] should_fail_ex.cold+0x5/0xa [ 427.948661][T11496] ? rcu_is_watching+0x12/0xc0 [ 427.948687][T11496] get_futex_key+0x1d2/0x1620 [ 427.948720][T11496] ? __pfx_get_futex_key+0x10/0x10 [ 427.948747][T11496] ? ___sys_sendmsg+0x19d/0x1e0 [ 427.948777][T11496] ? ___sys_sendmsg+0x127/0x1e0 [ 427.948808][T11496] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.948843][T11496] futex_wake+0xea/0x530 [ 427.948884][T11496] ? __pfx_futex_wake+0x10/0x10 [ 427.948936][T11496] do_futex+0x32b/0x350 [ 427.948971][T11496] ? __pfx_do_futex+0x10/0x10 [ 427.949008][T11496] ? fput+0x79/0x100 [ 427.949053][T11496] ? __sys_sendmsg+0x18f/0x220 [ 427.949096][T11496] __x64_sys_futex+0x34f/0x4d0 [ 427.949139][T11496] ? __pfx___x64_sys_futex+0x10/0x10 [ 427.949192][T11496] do_syscall_64+0xc9/0xf80 [ 427.949230][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.949259][T11496] RIP: 0033:0x7fabcbf9acb9 [ 427.949280][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.949308][T11496] RSP: 002b:00007fabcce610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 427.949335][T11496] RAX: ffffffffffffffda RBX: 00007fabcc216188 RCX: 00007fabcbf9acb9 [ 427.949354][T11496] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabcc21618c [ 427.949372][T11496] RBP: 00007fabcc216180 R08: 0000000000000000 R09: 0000000000000000 [ 427.949389][T11496] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 427.949406][T11496] R13: 00007fabcc216218 R14: 00007ffd3e753070 R15: 00007ffd3e753158 [ 427.949443][T11496] [ 428.967307][ T5838] Bluetooth: hci6: command tx timeout [ 430.918268][ T30] audit: type=1800 audit(6064362852.011:18): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1156" name="dbroot" dev="configfs" ino=40936 res=0 errno=0 [ 430.943157][T11571] db_root: not a directory: /dev/audio1 [ 433.364564][T11601] FAULT_INJECTION: forcing a failure. [ 433.364564][T11601] name failslab, interval 1, probability 0, space 0, times 0 [ 433.387320][T11601] CPU: 0 UID: 0 PID: 11601 Comm: syz.5.1163 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.387369][T11601] Tainted: [L]=SOFTLOCKUP [ 433.387379][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 433.387399][T11601] Call Trace: [ 433.387425][T11601] [ 433.387436][T11601] dump_stack_lvl+0x100/0x190 [ 433.387479][T11601] should_fail_ex.cold+0x5/0xa [ 433.387527][T11601] should_failslab+0xc2/0x120 [ 433.387566][T11601] kmem_cache_alloc_noprof+0x83/0x780 [ 433.387602][T11601] ? sk_prot_alloc+0x60/0x2a0 [ 433.387634][T11601] ? sk_prot_alloc+0x60/0x2a0 [ 433.387658][T11601] sk_prot_alloc+0x60/0x2a0 [ 433.387687][T11601] sk_alloc+0x36/0xe80 [ 433.387723][T11601] inet_create+0x3a0/0x1060 [ 433.387757][T11601] ? inet_create+0x94/0x1060 [ 433.387792][T11601] __sock_create+0x339/0x860 [ 433.387836][T11601] __sys_socket+0x14d/0x260 [ 433.387867][T11601] ? __pfx___sys_socket+0x10/0x10 [ 433.387898][T11601] ? xfd_validate_state+0x129/0x190 [ 433.387942][T11601] ? __task_pid_nr_ns+0x1f5/0x500 [ 433.387991][T11601] __x64_sys_socket+0x72/0xb0 [ 433.388024][T11601] ? lockdep_hardirqs_on+0x78/0x100 [ 433.388059][T11601] do_syscall_64+0xc9/0xf80 [ 433.388097][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.388127][T11601] RIP: 0033:0x7fabcbf9acb9 [ 433.388151][T11601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.388179][T11601] RSP: 002b:00007fabcce82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.388207][T11601] RAX: ffffffffffffffda RBX: 00007fabcc216090 RCX: 00007fabcbf9acb9 [ 433.388223][T11601] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 433.388240][T11601] RBP: 00007fabcc008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 433.388255][T11601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.388271][T11601] R13: 00007fabcc216128 R14: 00007fabcc216090 R15: 00007ffd3e753158 [ 433.388304][T11601] [ 434.645320][T11621] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 435.766688][ T5838] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 436.038204][T11653] kAFS: bad VL server IP address [ 438.136790][T11704] kAFS: bad VL server IP address [ 440.730541][T11751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.738279][T11751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.746197][T11751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.752945][T11751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.761164][T11751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.767877][T11751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 440.783415][T11751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 440.798538][T11751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 440.804765][T11751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 440.813114][T11751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 440.823507][T11751] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 440.830611][T11751] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 440.839056][T11751] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 441.438288][T11791] netlink: 50 bytes leftover after parsing attributes in process `syz.5.1205'. [ 442.006761][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 442.471588][T11823] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 442.819678][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 442.825791][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.825841][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 442.832083][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 442.842412][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 442.886815][ T5834] Bluetooth: hci6: command 0x0c1a tx timeout [ 443.081442][T11829] FAULT_INJECTION: forcing a failure. [ 443.081442][T11829] name failslab, interval 1, probability 0, space 0, times 0 [ 443.094317][T11829] CPU: 0 UID: 0 PID: 11829 Comm: syz.5.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.094374][T11829] Tainted: [L]=SOFTLOCKUP [ 443.094385][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 443.094403][T11829] Call Trace: [ 443.094413][T11829] [ 443.094424][T11829] dump_stack_lvl+0x100/0x190 [ 443.094468][T11829] should_fail_ex.cold+0x5/0xa [ 443.094515][T11829] should_failslab+0xc2/0x120 [ 443.094556][T11829] __kmalloc_cache_noprof+0x80/0x810 [ 443.094587][T11829] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 443.094632][T11829] ? madvise_collapse+0x1a9/0xa30 [ 443.094683][T11829] ? madvise_collapse+0x1a9/0xa30 [ 443.094725][T11829] madvise_collapse+0x1a9/0xa30 [ 443.094768][T11829] ? find_held_lock+0x2b/0x80 [ 443.094796][T11829] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 443.094835][T11829] ? __pfx_madvise_collapse+0x10/0x10 [ 443.094887][T11829] ? mtree_range_walk+0x6ce/0xcd0 [ 443.094921][T11829] madvise_vma_behavior+0x14f7/0x2a40 [ 443.094966][T11829] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 443.095004][T11829] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 443.095048][T11829] ? mas_prev+0x9b/0xf0 [ 443.095083][T11829] ? __pfx_mas_prev+0x10/0x10 [ 443.095127][T11829] ? find_vma_prev+0xd8/0x150 [ 443.095170][T11829] ? __pfx_find_vma_prev+0x10/0x10 [ 443.095223][T11829] ? __futex_wait+0x256/0x300 [ 443.095258][T11829] madvise_walk_vmas+0x2fe/0xa90 [ 443.095308][T11829] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 443.095376][T11829] madvise_do_behavior+0x1ea/0x510 [ 443.095423][T11829] ? __pfx_madvise_do_behavior+0x10/0x10 [ 443.095469][T11829] ? down_read+0x13b/0x460 [ 443.095526][T11829] do_madvise+0x195/0x240 [ 443.095568][T11829] ? __pfx_do_madvise+0x10/0x10 [ 443.095610][T11829] ? do_futex+0x192/0x350 [ 443.095673][T11829] ? syscall_user_dispatch+0x76/0x130 [ 443.095724][T11829] __x64_sys_madvise+0xa9/0x110 [ 443.095769][T11829] do_syscall_64+0xc9/0xf80 [ 443.095806][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.095856][T11829] RIP: 0033:0x7fabcbf9acb9 [ 443.095880][T11829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.095910][T11829] RSP: 002b:00007fabccea3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 443.095938][T11829] RAX: ffffffffffffffda RBX: 00007fabcc215fa0 RCX: 00007fabcbf9acb9 [ 443.095958][T11829] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 443.095976][T11829] RBP: 00007fabcc008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 443.095993][T11829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.096010][T11829] R13: 00007fabcc216038 R14: 00007fabcc215fa0 R15: 00007ffd3e753158 [ 443.096049][T11829] [ 443.841364][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 444.886995][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 444.887043][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 444.967286][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 445.177749][T11860] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 445.201705][T11860] netlink: 'syz.6.1217': attribute type 16 has an invalid length. [ 445.210460][T11860] netlink: 306 bytes leftover after parsing attributes in process `syz.6.1217'. [ 445.260179][ T5838] Bluetooth: hci6: unexpected subevent 0x01 length: 3 < 18 [ 446.711574][T11886] random: crng reseeded on system resumption [ 446.966617][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 446.966733][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 447.055219][ T5834] Bluetooth: hci6: command 0x0c1a tx timeout [ 448.171427][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.178053][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.969266][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 452.722862][T12000] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 452.873029][T12004] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 453.675269][T11999] zswap: compressor not available [ 454.691725][T12049] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 458.768454][T12145] FAULT_INJECTION: forcing a failure. [ 458.768454][T12145] name failslab, interval 1, probability 0, space 0, times 0 [ 458.859179][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.2.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.859228][T12145] Tainted: [L]=SOFTLOCKUP [ 458.859245][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 458.859264][T12145] Call Trace: [ 458.859274][T12145] [ 458.859285][T12145] dump_stack_lvl+0x100/0x190 [ 458.859325][T12145] should_fail_ex.cold+0x5/0xa [ 458.859373][T12145] should_failslab+0xc2/0x120 [ 458.859415][T12145] __kmalloc_cache_noprof+0x80/0x810 [ 458.859448][T12145] ? snd_seq_create_port+0xf7/0xa80 [ 458.859478][T12145] ? vsnprintf+0x4ee/0x1240 [ 458.859513][T12145] ? snd_seq_create_port+0xf7/0xa80 [ 458.859541][T12145] snd_seq_create_port+0xf7/0xa80 [ 458.859581][T12145] snd_seq_ioctl_create_port+0x253/0x940 [ 458.859612][T12145] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 458.859659][T12145] ? __pfx_sprintf+0x10/0x10 [ 458.859686][T12145] ? __lock_acquire+0x4a5/0x2630 [ 458.859730][T12145] call_seq_client_ctl+0xa3/0x130 [ 458.859762][T12145] snd_seq_kernel_client_ctl+0x77/0xd0 [ 458.859793][T12145] create_port+0x19b/0x270 [ 458.859824][T12145] ? __pfx_create_port+0x10/0x10 [ 458.859859][T12145] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 458.859894][T12145] ? __pfx_free_devinfo+0x10/0x10 [ 458.859948][T12145] ? mark_held_locks+0x40/0x70 [ 458.859984][T12145] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.860012][T12145] ? lockdep_hardirqs_on+0x78/0x100 [ 458.860049][T12145] snd_seq_oss_open+0x292/0xa10 [ 458.860088][T12145] odev_open+0x79/0xc0 [ 458.860114][T12145] ? __pfx_odev_open+0x10/0x10 [ 458.860141][T12145] soundcore_open+0x2e3/0x5a0 [ 458.860179][T12145] ? __pfx_soundcore_open+0x10/0x10 [ 458.860210][T12145] chrdev_open+0x234/0x6a0 [ 458.860252][T12145] ? __pfx_apparmor_file_open+0x10/0x10 [ 458.860292][T12145] ? __pfx_chrdev_open+0x10/0x10 [ 458.860329][T12145] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 458.860371][T12145] do_dentry_open+0x73e/0x1570 [ 458.860405][T12145] ? __pfx_chrdev_open+0x10/0x10 [ 458.860440][T12145] ? security_inode_permission+0xbf/0x250 [ 458.860489][T12145] vfs_open+0x82/0x3f0 [ 458.860534][T12145] path_openat+0x21dc/0x3120 [ 458.860580][T12145] ? __pfx_path_openat+0x10/0x10 [ 458.860626][T12145] do_filp_open+0x1f7/0x420 [ 458.860663][T12145] ? __pfx_do_filp_open+0x10/0x10 [ 458.860722][T12145] ? _raw_spin_unlock+0x28/0x50 [ 458.860749][T12145] ? alloc_fd+0x476/0x790 [ 458.860791][T12145] do_sys_openat2+0x12e/0x220 [ 458.860833][T12145] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.860877][T12145] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 458.860924][T12145] __x64_sys_openat+0x12d/0x210 [ 458.860968][T12145] ? __pfx___x64_sys_openat+0x10/0x10 [ 458.861009][T12145] ? xfd_validate_state+0x129/0x190 [ 458.861066][T12145] do_syscall_64+0xc9/0xf80 [ 458.861104][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.861133][T12145] RIP: 0033:0x7f6dba19acb9 [ 458.861157][T12145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.861187][T12145] RSP: 002b:00007f6dbb091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.861216][T12145] RAX: ffffffffffffffda RBX: 00007f6dba415fa0 RCX: 00007f6dba19acb9 [ 458.861246][T12145] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 458.861266][T12145] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 458.861284][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.861302][T12145] R13: 00007f6dba416038 R14: 00007f6dba415fa0 R15: 00007ffd26fcbc78 [ 458.861343][T12145] [ 459.236740][T12145] ALSA: seq_oss: can't create port [ 459.799896][T12153] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 459.972183][T12161] FAULT_INJECTION: forcing a failure. [ 459.972183][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 460.064441][T12161] CPU: 1 UID: 7 PID: 12161 Comm: syz.6.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.064471][T12161] Tainted: [L]=SOFTLOCKUP [ 460.064477][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 460.064487][T12161] Call Trace: [ 460.064493][T12161] [ 460.064500][T12161] dump_stack_lvl+0x100/0x190 [ 460.064525][T12161] should_fail_ex.cold+0x5/0xa [ 460.064550][T12161] should_failslab+0xc2/0x120 [ 460.064572][T12161] kmem_cache_alloc_noprof+0x83/0x780 [ 460.064594][T12161] ? alloc_vfsmnt+0x23/0x6b0 [ 460.064617][T12161] ? alloc_vfsmnt+0x23/0x6b0 [ 460.064637][T12161] alloc_vfsmnt+0x23/0x6b0 [ 460.064658][T12161] ? __pfx___might_resched+0x10/0x10 [ 460.064682][T12161] clone_mnt+0x4b/0x930 [ 460.064698][T12161] copy_tree+0xfc/0xbf0 [ 460.064714][T12161] ? __pfx_down_write+0x10/0x10 [ 460.064738][T12161] copy_mnt_ns+0x2c7/0xc40 [ 460.064757][T12161] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 460.064776][T12161] ? create_new_namespaces+0x30/0xab0 [ 460.064798][T12161] create_new_namespaces+0xd3/0xab0 [ 460.064815][T12161] ? bpf_lsm_capable+0x9/0x10 [ 460.064828][T12161] ? security_capable+0x80/0x260 [ 460.064850][T12161] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 460.064870][T12161] ksys_unshare+0x455/0xab0 [ 460.064894][T12161] ? __pfx_ksys_unshare+0x10/0x10 [ 460.064914][T12161] ? xfd_validate_state+0x129/0x190 [ 460.064943][T12161] __x64_sys_unshare+0x31/0x40 [ 460.064963][T12161] do_syscall_64+0xc9/0xf80 [ 460.064983][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.064998][T12161] RIP: 0033:0x7f9cc139acb9 [ 460.065012][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.065028][T12161] RSP: 002b:00007f9cc22d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 460.065044][T12161] RAX: ffffffffffffffda RBX: 00007f9cc1615fa0 RCX: 00007f9cc139acb9 [ 460.065055][T12161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 460.065064][T12161] RBP: 00007f9cc1408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 460.065075][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.065084][T12161] R13: 00007f9cc1616038 R14: 00007f9cc1615fa0 R15: 00007fffeeaecc28 [ 460.065104][T12161] [ 461.132825][T12178] busy [ 461.889406][T12191] FAULT_INJECTION: forcing a failure. [ 461.889406][T12191] name failslab, interval 1, probability 0, space 0, times 0 [ 461.926638][T12191] CPU: 1 UID: 0 PID: 12191 Comm: syz.4.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.926684][T12191] Tainted: [L]=SOFTLOCKUP [ 461.926694][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 461.926709][T12191] Call Trace: [ 461.926720][T12191] [ 461.926730][T12191] dump_stack_lvl+0x100/0x190 [ 461.926771][T12191] should_fail_ex.cold+0x5/0xa [ 461.926823][T12191] should_failslab+0xc2/0x120 [ 461.926861][T12191] __kmalloc_cache_noprof+0x80/0x810 [ 461.926891][T12191] ? snd_seq_create_port+0xf7/0xa80 [ 461.926921][T12191] ? vsnprintf+0x4ee/0x1240 [ 461.926960][T12191] ? snd_seq_create_port+0xf7/0xa80 [ 461.926990][T12191] snd_seq_create_port+0xf7/0xa80 [ 461.927032][T12191] snd_seq_ioctl_create_port+0x253/0x940 [ 461.927063][T12191] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 461.927111][T12191] ? __pfx_sprintf+0x10/0x10 [ 461.927140][T12191] ? __lock_acquire+0x4a5/0x2630 [ 461.927187][T12191] call_seq_client_ctl+0xa3/0x130 [ 461.927219][T12191] snd_seq_kernel_client_ctl+0x77/0xd0 [ 461.927252][T12191] create_port+0x19b/0x270 [ 461.927284][T12191] ? __pfx_create_port+0x10/0x10 [ 461.927322][T12191] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 461.927356][T12191] ? __pfx_free_devinfo+0x10/0x10 [ 461.927408][T12191] ? mark_held_locks+0x40/0x70 [ 461.927441][T12191] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.927469][T12191] ? lockdep_hardirqs_on+0x78/0x100 [ 461.927506][T12191] snd_seq_oss_open+0x292/0xa10 [ 461.927548][T12191] odev_open+0x79/0xc0 [ 461.927576][T12191] ? __pfx_odev_open+0x10/0x10 [ 461.927604][T12191] soundcore_open+0x2e3/0x5a0 [ 461.927640][T12191] ? __pfx_soundcore_open+0x10/0x10 [ 461.927671][T12191] chrdev_open+0x234/0x6a0 [ 461.927707][T12191] ? __pfx_apparmor_file_open+0x10/0x10 [ 461.927746][T12191] ? __pfx_chrdev_open+0x10/0x10 [ 461.927785][T12191] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 461.927837][T12191] do_dentry_open+0x73e/0x1570 [ 461.927873][T12191] ? __pfx_chrdev_open+0x10/0x10 [ 461.927911][T12191] ? security_inode_permission+0xbf/0x250 [ 461.927962][T12191] vfs_open+0x82/0x3f0 [ 461.928009][T12191] path_openat+0x21dc/0x3120 [ 461.928057][T12191] ? __pfx_path_openat+0x10/0x10 [ 461.928106][T12191] do_filp_open+0x1f7/0x420 [ 461.928144][T12191] ? __pfx_do_filp_open+0x10/0x10 [ 461.928206][T12191] ? _raw_spin_unlock+0x28/0x50 [ 461.928234][T12191] ? alloc_fd+0x476/0x790 [ 461.928279][T12191] do_sys_openat2+0x12e/0x220 [ 461.928323][T12191] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.928369][T12191] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 461.928416][T12191] __x64_sys_openat+0x12d/0x210 [ 461.928461][T12191] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.928504][T12191] ? xfd_validate_state+0x129/0x190 [ 461.928565][T12191] do_syscall_64+0xc9/0xf80 [ 461.928602][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.928630][T12191] RIP: 0033:0x7f424a99acb9 [ 461.928674][T12191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.928703][T12191] RSP: 002b:00007f424b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.928733][T12191] RAX: ffffffffffffffda RBX: 00007f424ac15fa0 RCX: 00007f424a99acb9 [ 461.928753][T12191] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 461.928774][T12191] RBP: 00007f424aa08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 461.928793][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.928818][T12191] R13: 00007f424ac16038 R14: 00007f424ac15fa0 R15: 00007ffd0b511ff8 [ 461.928860][T12191] [ 461.928875][T12191] ALSA: seq_oss: can't create port [ 462.425929][ T30] audit: type=1326 audit(4294967309.550:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.2.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dba19acb9 code=0x0 [ 462.836285][T12179] nvme_fabrics: missing parameter 'transport=%s' [ 462.842867][T12179] nvme_fabrics: missing parameter 'nqn=%s' [ 463.115141][T12193] zswap: compressor not available [ 464.648138][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 464.801667][T12239] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1297'. [ 466.770781][T12259] zswap: compressor not available [ 466.823850][T12279] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1306'. [ 466.998325][T12283] random: crng reseeded on system resumption [ 467.706049][T12292] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 467.782433][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.6.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.782461][T12292] Tainted: [L]=SOFTLOCKUP [ 467.782467][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 467.782477][T12292] Call Trace: [ 467.782483][T12292] [ 467.782489][T12292] dump_stack_lvl+0x100/0x190 [ 467.782514][T12292] sysfs_warn_dup.cold+0x1c/0x28 [ 467.782535][T12292] sysfs_do_create_link_sd+0x113/0x140 [ 467.782560][T12292] sysfs_create_link+0x61/0xc0 [ 467.782581][T12292] device_add+0x675/0x1950 [ 467.782606][T12292] ? __pfx_device_add+0x10/0x10 [ 467.782627][T12292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.782645][T12292] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 467.782672][T12292] wiphy_register+0x1e58/0x2d30 [ 467.782696][T12292] ? __rtnl_unlock+0xb9/0xf0 [ 467.782717][T12292] ? __pfx_wiphy_register+0x10/0x10 [ 467.782741][T12292] ? __asan_memset+0x23/0x50 [ 467.782759][T12292] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 467.782788][T12292] ieee80211_register_hw+0x2c11/0x4040 [ 467.782822][T12292] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 467.782844][T12292] ? __pfx___debug_object_init+0x10/0x10 [ 467.782868][T12292] ? find_held_lock+0x2b/0x80 [ 467.782883][T12292] ? net_generic+0xea/0x2a0 [ 467.782902][T12292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.782919][T12292] ? __hrtimer_setup+0x178/0x280 [ 467.782943][T12292] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 467.782977][T12292] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 467.783005][T12292] hwsim_new_radio_nl+0xc1f/0x1340 [ 467.783025][T12292] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 467.783046][T12292] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.783073][T12292] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 467.783101][T12292] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 467.783123][T12292] genl_family_rcv_msg_doit+0x214/0x300 [ 467.783143][T12292] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.783160][T12292] ? genl_get_cmd+0x3ef/0x720 [ 467.783180][T12292] ? bpf_lsm_capable+0x9/0x10 [ 467.783194][T12292] ? security_capable+0x80/0x260 [ 467.783214][T12292] ? ns_capable+0xd2/0xf0 [ 467.783232][T12292] genl_rcv_msg+0x560/0x800 [ 467.783251][T12292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.783267][T12292] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.783295][T12292] netlink_rcv_skb+0x159/0x420 [ 467.783318][T12292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.783335][T12292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.783366][T12292] ? netlink_deliver_tap+0x1ae/0xcc0 [ 467.783391][T12292] genl_rcv+0x28/0x40 [ 467.783404][T12292] netlink_unicast+0x5aa/0x870 [ 467.783430][T12292] ? __pfx_netlink_unicast+0x10/0x10 [ 467.783452][T12292] ? __pfx___might_resched+0x10/0x10 [ 467.783474][T12292] ? __lock_acquire+0x4a5/0x2630 [ 467.783499][T12292] netlink_sendmsg+0x8b0/0xda0 [ 467.783525][T12292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.783546][T12292] ? __import_iovec+0x1d2/0x640 [ 467.783571][T12292] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 467.783594][T12292] ____sys_sendmsg+0xa54/0xc30 [ 467.783613][T12292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.783629][T12292] ? __pfx___futex_wait+0x10/0x10 [ 467.783646][T12292] ? __pfx_futex_wake_mark+0x10/0x10 [ 467.783673][T12292] ___sys_sendmsg+0x190/0x1e0 [ 467.783693][T12292] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.783719][T12292] ? find_held_lock+0x2b/0x80 [ 467.783746][T12292] __sys_sendmsg+0x170/0x220 [ 467.783769][T12292] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.783790][T12292] ? __x64_sys_futex+0x34f/0x4d0 [ 467.783822][T12292] do_syscall_64+0xc9/0xf80 [ 467.783842][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.783858][T12292] RIP: 0033:0x7f9cc139acb9 [ 467.783872][T12292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.783888][T12292] RSP: 002b:00007f9cc22b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.783904][T12292] RAX: ffffffffffffffda RBX: 00007f9cc1616090 RCX: 00007f9cc139acb9 [ 467.783914][T12292] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 467.783924][T12292] RBP: 00007f9cc1408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 467.783933][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.783943][T12292] R13: 00007f9cc1616128 R14: 00007f9cc1616090 R15: 00007fffeeaecc28 [ 467.783964][T12292] [ 469.358544][T12317] FAULT_INJECTION: forcing a failure. [ 469.358544][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 469.386347][T12317] CPU: 1 UID: 0 PID: 12317 Comm: syz.2.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.386391][T12317] Tainted: [L]=SOFTLOCKUP [ 469.386401][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 469.386415][T12317] Call Trace: [ 469.386425][T12317] [ 469.386435][T12317] dump_stack_lvl+0x100/0x190 [ 469.386475][T12317] should_fail_ex.cold+0x5/0xa [ 469.386521][T12317] should_failslab+0xc2/0x120 [ 469.386557][T12317] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 469.386591][T12317] ? stack_trace_save+0x8e/0xc0 [ 469.386621][T12317] ? __d_alloc+0x34/0xa80 [ 469.386657][T12317] ? __d_alloc+0x34/0xa80 [ 469.386688][T12317] __d_alloc+0x34/0xa80 [ 469.386727][T12317] d_alloc_parallel+0x111/0x14e0 [ 469.386781][T12317] ? find_held_lock+0x2b/0x80 [ 469.386808][T12317] ? __d_lookup+0x25c/0x4a0 [ 469.386851][T12317] ? __pfx_d_alloc_parallel+0x10/0x10 [ 469.386899][T12317] ? __d_lookup+0x266/0x4a0 [ 469.386949][T12317] lookup_open.isra.0+0x633/0x1890 [ 469.386987][T12317] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 469.387037][T12317] ? mnt_get_write_access+0x1e9/0x2f0 [ 469.387085][T12317] path_openat+0xa9b/0x3120 [ 469.387131][T12317] ? __pfx_path_openat+0x10/0x10 [ 469.387185][T12317] do_filp_open+0x1f7/0x420 [ 469.387221][T12317] ? __pfx_do_filp_open+0x10/0x10 [ 469.387279][T12317] ? _raw_spin_unlock+0x28/0x50 [ 469.387307][T12317] ? alloc_fd+0x476/0x790 [ 469.387346][T12317] do_sys_openat2+0x12e/0x220 [ 469.387385][T12317] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.387437][T12317] __x64_sys_openat+0x12d/0x210 [ 469.387480][T12317] ? __pfx___x64_sys_openat+0x10/0x10 [ 469.387517][T12317] ? xfd_validate_state+0x129/0x190 [ 469.387570][T12317] do_syscall_64+0xc9/0xf80 [ 469.387603][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.387629][T12317] RIP: 0033:0x7f6dba19acb9 [ 469.387651][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.387676][T12317] RSP: 002b:00007f6dbb070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.387702][T12317] RAX: ffffffffffffffda RBX: 00007f6dba416090 RCX: 00007f6dba19acb9 [ 469.387721][T12317] RDX: 0000000000001401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 469.387759][T12317] RBP: 00007f6dba208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 469.387777][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.387792][T12317] R13: 00007f6dba416128 R14: 00007f6dba416090 R15: 00007ffd26fcbc78 [ 469.387828][T12317] [ 469.904639][T12327] lo: entered allmulticast mode [ 469.925710][T12326] busy [ 469.999882][T12327] lo: left allmulticast mode [ 470.215625][T12327] zswap: compressor not available [ 470.251067][T12339] busy [ 470.252815][T12329] Setting dangerous option i915.mitigations - tainting kernel [ 471.229739][T12362] busy [ 474.821686][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 474.871198][T12418] FAULT_INJECTION: forcing a failure. [ 474.871198][T12418] name failslab, interval 1, probability 0, space 0, times 0 [ 474.926812][T12418] CPU: 1 UID: 0 PID: 12418 Comm: syz.4.1335 Tainted: G U L syzkaller #0 PREEMPT(full) [ 474.926864][T12418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 474.926878][T12418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 474.926896][T12418] Call Trace: [ 474.926907][T12418] [ 474.926919][T12418] dump_stack_lvl+0x100/0x190 [ 474.926963][T12418] should_fail_ex.cold+0x5/0xa [ 474.927013][T12418] should_failslab+0xc2/0x120 [ 474.927077][T12418] kmem_cache_alloc_noprof+0x83/0x780 [ 474.927117][T12418] ? __proc_create+0xc2/0x8c0 [ 474.927162][T12418] ? __proc_create+0x2cb/0x8c0 [ 474.927213][T12418] ? __proc_create+0x2cb/0x8c0 [ 474.927254][T12418] __proc_create+0x2cb/0x8c0 [ 474.927300][T12418] ? __pfx___proc_create+0x10/0x10 [ 474.927350][T12418] ? _raw_write_unlock+0x28/0x50 [ 474.927383][T12418] ? proc_register+0x559/0x8a0 [ 474.927430][T12418] proc_create_reg+0x75/0x170 [ 474.927462][T12418] proc_create_net_data+0x8e/0x1c0 [ 474.927515][T12418] ? __pfx_proc_create_net_data+0x10/0x10 [ 474.927571][T12418] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 474.927610][T12418] kcm_proc_init_net+0xa3/0x120 [ 474.927648][T12418] ops_init+0x1e2/0x5f0 [ 474.927697][T12418] setup_net+0x118/0x3a0 [ 474.927725][T12418] ? __pfx_setup_net+0x10/0x10 [ 474.927767][T12418] ? lockdep_init_map_type+0x5c/0x250 [ 474.927809][T12418] ? mutex_init_lockep+0x110/0x150 [ 474.927856][T12418] copy_net_ns+0x46f/0x7c0 [ 474.927889][T12418] create_new_namespaces+0x3ea/0xab0 [ 474.927932][T12418] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 474.927969][T12418] ksys_unshare+0x455/0xab0 [ 474.928013][T12418] ? __pfx_ksys_unshare+0x10/0x10 [ 474.928053][T12418] ? xfd_validate_state+0x129/0x190 [ 474.928110][T12418] __x64_sys_unshare+0x31/0x40 [ 474.928150][T12418] do_syscall_64+0xc9/0xf80 [ 474.928188][T12418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.928217][T12418] RIP: 0033:0x7f424a99acb9 [ 474.928242][T12418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.928271][T12418] RSP: 002b:00007f424b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 474.928301][T12418] RAX: ffffffffffffffda RBX: 00007f424ac15fa0 RCX: 00007f424a99acb9 [ 474.928321][T12418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 474.928340][T12418] RBP: 00007f424aa08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 474.928358][T12418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.928376][T12418] R13: 00007f424ac16038 R14: 00007f424ac15fa0 R15: 00007ffd0b511ff8 [ 474.928417][T12418] [ 476.927608][T12460] kAFS: bad VL server IP address [ 477.391676][T12470] random: crng reseeded on system resumption [ 479.245131][T12509] busy [ 479.346181][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1356'. [ 479.470063][T12514] ipvlan0: entered promiscuous mode [ 479.479301][T12514] ipvlan0: entered allmulticast mode [ 479.484667][T12514] veth0_vlan: entered allmulticast mode [ 480.253122][T12525] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 480.340021][T12525] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 480.440585][T12525] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 480.521808][T12525] page_type: f5(slab) [ 480.557715][T12536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1360'. [ 480.584685][T12525] raw: 00fff00000000040 ffff88801c6c3780 ffffea0001e96280 dead000000000002 [ 480.699845][T12525] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 480.766704][T12525] head: 00fff00000000040 ffff88801c6c3780 ffffea0001e96280 dead000000000002 [ 480.832762][T12525] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 480.935293][T12525] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 480.971005][T12525] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 480.990054][T12525] page dumped because: unmovable page [ 481.002043][T12525] page_owner tracks the page as allocated [ 481.018401][T12525] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevd), ts 58730933434, free_ts 35929403067 [ 481.125329][T12525] post_alloc_hook+0x1e1/0x250 [ 481.126013][T12543] futex_wake_op: syz.2.1361 tries to shift op by -2048; fix this program [ 481.176793][T12543] futex_wake_op: syz.2.1361 tries to shift op by -2048; fix this program [ 481.179911][T12525] get_page_from_freelist+0xe3d/0x2e10 [ 481.221823][T12525] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 481.258492][T12525] alloc_pages_mpol+0x1fb/0x550 [ 481.272999][T12525] new_slab+0x2c4/0x440 [ 481.281274][T12525] ___slab_alloc+0xda3/0x1ca0 [ 481.407801][T12525] __slab_alloc.isra.0+0x63/0x110 [ 481.484410][T12525] kmem_cache_alloc_lru_noprof+0x507/0x7d0 [ 481.539692][T12525] __d_alloc+0x34/0xa80 [ 481.552317][T12525] d_alloc+0x4a/0x1e0 [ 481.575305][T12525] lookup_one_qstr_excl+0x175/0x250 [ 481.601903][T12525] do_unlinkat+0x285/0x6e0 [ 481.626939][T12525] __x64_sys_unlink+0xc5/0x110 [ 481.654480][T12525] do_syscall_64+0xc9/0xf80 [ 481.676635][T12525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.693783][T12525] page last free pid 1 tgid 1 stack trace: [ 481.713990][T12525] __free_frozen_pages+0x822/0x1130 [ 481.736282][T12525] free_contig_range+0x1a3/0x520 [ 481.773739][T12525] destroy_args+0xa8/0x7a0 [ 481.802955][T12525] debug_vm_pgtable+0x1b66/0x34b0 [ 481.831491][T12525] do_one_initcall+0x11d/0x690 [ 481.861966][T12525] kernel_init_freeable+0x6e5/0x790 [ 481.887646][T12525] kernel_init+0x1f/0x1e0 [ 481.910080][T12525] ret_from_fork+0x754/0xaf0 [ 481.945441][T12525] ret_from_fork_asm+0x1a/0x30 [ 482.973054][T12558] random: crng reseeded on system resumption [ 484.718343][T12575] FAULT_INJECTION: forcing a failure. [ 484.718343][T12575] name failslab, interval 1, probability 0, space 0, times 0 [ 484.750487][T12575] CPU: 1 UID: 0 PID: 12575 Comm: syz.5.1365 Tainted: G U L syzkaller #0 PREEMPT(full) [ 484.750537][T12575] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 484.750549][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 484.750567][T12575] Call Trace: [ 484.750577][T12575] [ 484.750589][T12575] dump_stack_lvl+0x100/0x190 [ 484.750630][T12575] should_fail_ex.cold+0x5/0xa [ 484.750679][T12575] should_failslab+0xc2/0x120 [ 484.750720][T12575] ? ima_alloc_init_template+0xb6/0x6d0 [ 484.750762][T12575] __kmalloc_noprof+0xf6/0x9c0 [ 484.750804][T12575] ? ima_alloc_init_template+0xb6/0x6d0 [ 484.750841][T12575] ima_alloc_init_template+0xb6/0x6d0 [ 484.750880][T12575] ? take_dentry_name_snapshot+0x310/0x7c0 [ 484.750930][T12575] ima_store_measurement+0x1e3/0x5b0 [ 484.750974][T12575] ? __pfx_ima_store_measurement+0x10/0x10 [ 484.751028][T12575] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 484.751070][T12575] process_measurement+0x1958/0x2400 [ 484.751121][T12575] ? __pfx_process_measurement+0x10/0x10 [ 484.751154][T12575] ? kasan_save_stack+0x3f/0x50 [ 484.751189][T12575] ? kasan_save_track+0x14/0x30 [ 484.751224][T12575] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 484.751280][T12575] ? aa_file_perm+0x268/0x1540 [ 484.751358][T12575] ima_file_mmap+0x1be/0x1e0 [ 484.751395][T12575] ? __pfx_ima_file_mmap+0x10/0x10 [ 484.751442][T12575] security_mmap_file+0x278/0x9b0 [ 484.751490][T12575] vm_mmap_pgoff+0xec/0x470 [ 484.751538][T12575] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 484.751579][T12575] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 484.751623][T12575] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 484.751666][T12575] ksys_mmap_pgoff+0x1c4/0x5b0 [ 484.751715][T12575] __x64_sys_mmap+0x125/0x190 [ 484.751748][T12575] do_syscall_64+0xc9/0xf80 [ 484.751788][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.751823][T12575] RIP: 0033:0x7fabcbf9acb9 [ 484.751847][T12575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.751877][T12575] RSP: 002b:00007fabcce82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 484.751906][T12575] RAX: ffffffffffffffda RBX: 00007fabcc216090 RCX: 00007fabcbf9acb9 [ 484.751926][T12575] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 484.751945][T12575] RBP: 00007fabcc008bf7 R08: 0000000000000006 R09: 0000300000000000 [ 484.751965][T12575] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 484.751984][T12575] R13: 00007fabcc216128 R14: 00007fabcc216090 R15: 00007ffd3e753158 [ 484.752023][T12575] [ 485.096715][ T30] audit: type=1804 audit(4294967332.140:20): pid=12575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.5.1365" name="anon_hugepage" dev="hugetlbfs" ino=46416 res=0 errno=0 [ 487.013101][ T5834] Bluetooth: hci4: unexpected event 0x31 length: 19 > 6 [ 490.512451][T12653] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 492.176073][T12672] random: crng reseeded on system resumption [ 492.859443][T12696] busy [ 493.594643][T12713] random: crng reseeded on system resumption [ 494.452744][T12727] busy [ 494.679104][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 496.439086][T12751] Invalid ELF header magic: != ELF [ 496.565298][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 496.580707][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 496.597271][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 496.607453][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 496.619218][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.212267][T12760] chnl_net:caif_netlink_parms(): no params data found [ 497.495885][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.516997][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.542763][T12760] bridge_slave_0: entered allmulticast mode [ 497.558176][T12760] bridge_slave_0: entered promiscuous mode [ 497.574936][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.598654][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.623685][T12760] bridge_slave_1: entered allmulticast mode [ 497.639152][T12760] bridge_slave_1: entered promiscuous mode [ 497.758218][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.786304][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.883429][T12760] team0: Port device team_slave_0 added [ 497.914370][T12760] team0: Port device team_slave_1 added [ 498.001057][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.015845][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.066744][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.213425][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.226581][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.305275][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.451165][T12790] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1411'. [ 498.500867][T12760] hsr_slave_0: entered promiscuous mode [ 498.514589][T12760] hsr_slave_1: entered promiscuous mode [ 498.526278][T12760] debugfs: 'hsr0' already exists in 'hsr' [ 498.532886][T12760] Cannot create hsr debugfs directory [ 498.656835][ T5834] Bluetooth: hci7: command tx timeout [ 498.919701][T12797] busy [ 499.334007][T12760] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.449655][T12760] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 499.462025][T12809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 499.480674][T12760] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 499.579019][T12760] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 499.736086][T12815] : Can't lookup blockdev [ 500.382535][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.448530][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.485735][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.492952][ T7091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.522369][T12826] FAULT_INJECTION: forcing a failure. [ 500.522369][T12826] name failslab, interval 1, probability 0, space 0, times 0 [ 500.538103][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.545254][ T7091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.616682][T12826] CPU: 0 UID: 0 PID: 12826 Comm: syz.6.1418 Tainted: G U L syzkaller #0 PREEMPT(full) [ 500.616732][T12826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 500.616744][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 500.616763][T12826] Call Trace: [ 500.616774][T12826] [ 500.616784][T12826] dump_stack_lvl+0x100/0x190 [ 500.616826][T12826] should_fail_ex.cold+0x5/0xa [ 500.616873][T12826] should_failslab+0xc2/0x120 [ 500.616916][T12826] kmem_cache_alloc_noprof+0x83/0x780 [ 500.616953][T12826] ? sk_prot_alloc+0x60/0x2a0 [ 500.616990][T12826] ? sk_prot_alloc+0x60/0x2a0 [ 500.617017][T12826] sk_prot_alloc+0x60/0x2a0 [ 500.617051][T12826] sk_alloc+0x36/0xe80 [ 500.617106][T12826] inet6_create+0x381/0x12c0 [ 500.617156][T12826] ? inet6_create+0x7f/0x12c0 [ 500.617204][T12826] __sock_create+0x339/0x860 [ 500.617245][T12826] __sys_socket+0x14d/0x260 [ 500.617280][T12826] ? __pfx___sys_socket+0x10/0x10 [ 500.617313][T12826] ? xfd_validate_state+0x129/0x190 [ 500.617367][T12826] __x64_sys_socket+0x72/0xb0 [ 500.617400][T12826] ? lockdep_hardirqs_on+0x78/0x100 [ 500.617436][T12826] do_syscall_64+0xc9/0xf80 [ 500.617473][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.617501][T12826] RIP: 0033:0x7f9cc139acb9 [ 500.617525][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.617553][T12826] RSP: 002b:00007f9cc22d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 500.617587][T12826] RAX: ffffffffffffffda RBX: 00007f9cc1615fa0 RCX: 00007f9cc139acb9 [ 500.617607][T12826] RDX: 000000000000003b RSI: 0000000000000003 RDI: 000000000000000a [ 500.617623][T12826] RBP: 00007f9cc1408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 500.617642][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.617658][T12826] R13: 00007f9cc1616038 R14: 00007f9cc1615fa0 R15: 00007fffeeaecc28 [ 500.617697][T12826] [ 500.820713][ T5834] Bluetooth: hci7: command tx timeout [ 502.032627][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.381679][T12861] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 502.888381][ T5834] Bluetooth: hci7: command tx timeout [ 503.190245][T12760] veth0_vlan: entered promiscuous mode [ 503.229396][T12760] veth1_vlan: entered promiscuous mode [ 503.278595][T12882] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 503.286230][T12882] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 503.379399][T12760] veth0_macvtap: entered promiscuous mode [ 503.531507][T12760] veth1_macvtap: entered promiscuous mode [ 503.585937][T12760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.631405][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.662478][ T6407] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.684812][ T6407] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.721177][ T6407] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.737770][ T6407] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.015643][ T7108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.046747][ T7108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.136473][ T7094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.156992][ T7094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.642727][T12900] can: request_module (can-proto-4) failed. [ 504.809902][ T5834] Bluetooth: hci6: unexpected event 0x23 length: 127 > 13 [ 504.970506][ T5834] Bluetooth: hci7: command tx timeout [ 505.803630][T12917] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 505.837165][T12917] CPU: 1 UID: 0 PID: 12917 Comm: syz.6.1428 Tainted: G U L syzkaller #0 PREEMPT(full) [ 505.837217][T12917] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 505.837228][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 505.837244][T12917] Call Trace: [ 505.837254][T12917] [ 505.837264][T12917] dump_stack_lvl+0x100/0x190 [ 505.837304][T12917] sysfs_warn_dup.cold+0x1c/0x28 [ 505.837342][T12917] sysfs_do_create_link_sd+0x113/0x140 [ 505.837380][T12917] sysfs_create_link+0x61/0xc0 [ 505.837417][T12917] device_add+0x675/0x1950 [ 505.837459][T12917] ? __pfx_device_add+0x10/0x10 [ 505.837494][T12917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.837528][T12917] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 505.837575][T12917] wiphy_register+0x1e58/0x2d30 [ 505.837614][T12917] ? __rtnl_unlock+0xb9/0xf0 [ 505.837651][T12917] ? __pfx_wiphy_register+0x10/0x10 [ 505.837708][T12917] ? __asan_memset+0x23/0x50 [ 505.837737][T12917] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 505.837787][T12917] ieee80211_register_hw+0x2c11/0x4040 [ 505.837844][T12917] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 505.837886][T12917] ? __pfx___debug_object_init+0x10/0x10 [ 505.837930][T12917] ? find_held_lock+0x2b/0x80 [ 505.837960][T12917] ? net_generic+0xea/0x2a0 [ 505.837995][T12917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.838029][T12917] ? __hrtimer_setup+0x178/0x280 [ 505.838076][T12917] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 505.838144][T12917] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 505.838199][T12917] hwsim_new_radio_nl+0xc1f/0x1340 [ 505.838239][T12917] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 505.838280][T12917] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 505.838334][T12917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 505.838367][T12917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 505.838408][T12917] genl_family_rcv_msg_doit+0x214/0x300 [ 505.838444][T12917] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 505.838477][T12917] ? genl_get_cmd+0x3ef/0x720 [ 505.838514][T12917] ? bpf_lsm_capable+0x9/0x10 [ 505.838541][T12917] ? security_capable+0x80/0x260 [ 505.838578][T12917] ? ns_capable+0xd2/0xf0 [ 505.838613][T12917] genl_rcv_msg+0x560/0x800 [ 505.838649][T12917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.838689][T12917] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 505.838747][T12917] netlink_rcv_skb+0x159/0x420 [ 505.838793][T12917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.838827][T12917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.838888][T12917] ? netlink_deliver_tap+0x1ae/0xcc0 [ 505.838938][T12917] genl_rcv+0x28/0x40 [ 505.838964][T12917] netlink_unicast+0x5aa/0x870 [ 505.839014][T12917] ? __pfx_netlink_unicast+0x10/0x10 [ 505.839058][T12917] ? __pfx___might_resched+0x10/0x10 [ 505.839102][T12917] ? __lock_acquire+0x4a5/0x2630 [ 505.839150][T12917] netlink_sendmsg+0x8b0/0xda0 [ 505.839203][T12917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.839245][T12917] ? __import_iovec+0x1d2/0x640 [ 505.839294][T12917] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 505.839337][T12917] ____sys_sendmsg+0xa54/0xc30 [ 505.839375][T12917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.839404][T12917] ? __pfx___futex_wait+0x10/0x10 [ 505.839438][T12917] ? __pfx_futex_wake_mark+0x10/0x10 [ 505.839491][T12917] ___sys_sendmsg+0x190/0x1e0 [ 505.839529][T12917] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.839583][T12917] ? find_held_lock+0x2b/0x80 [ 505.839637][T12917] __sys_sendmsg+0x170/0x220 [ 505.839688][T12917] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.839730][T12917] ? __x64_sys_futex+0x34f/0x4d0 [ 505.839795][T12917] do_syscall_64+0xc9/0xf80 [ 505.839834][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.839865][T12917] RIP: 0033:0x7f9cc139acb9 [ 505.839890][T12917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.839920][T12917] RSP: 002b:00007f9cc22b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.839949][T12917] RAX: ffffffffffffffda RBX: 00007f9cc1616090 RCX: 00007f9cc139acb9 [ 505.839970][T12917] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 505.839990][T12917] RBP: 00007f9cc1408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 505.840008][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.840026][T12917] R13: 00007f9cc1616128 R14: 00007f9cc1616090 R15: 00007fffeeaecc28 [ 505.840066][T12917] [ 507.453935][ T5872] Process accounting resumed [ 508.256680][T12947] busy [ 509.295875][ T30] audit: type=1800 audit(4294967356.410:21): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1441" name="dbroot" dev="configfs" ino=48031 res=0 errno=0 [ 509.617082][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.624119][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.800899][T12989] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 509.818775][T12988] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 509.840682][T12988] CPU: 0 UID: 0 PID: 12988 Comm: syz.5.1444 Tainted: G U L syzkaller #0 PREEMPT(full) [ 509.840728][T12988] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 509.840738][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 509.840754][T12988] Call Trace: [ 509.840764][T12988] [ 509.840774][T12988] dump_stack_lvl+0x100/0x190 [ 509.840816][T12988] sysfs_warn_dup.cold+0x1c/0x28 [ 509.840857][T12988] sysfs_do_create_link_sd+0x113/0x140 [ 509.840900][T12988] sysfs_create_link+0x61/0xc0 [ 509.840940][T12988] device_add+0x675/0x1950 [ 509.840984][T12988] ? __pfx_device_add+0x10/0x10 [ 509.841023][T12988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 509.841058][T12988] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 509.841115][T12988] wiphy_register+0x1e58/0x2d30 [ 509.841161][T12988] ? __rtnl_unlock+0xb9/0xf0 [ 509.841201][T12988] ? __pfx_wiphy_register+0x10/0x10 [ 509.841247][T12988] ? __asan_memset+0x23/0x50 [ 509.841284][T12988] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 509.841341][T12988] ieee80211_register_hw+0x2c11/0x4040 [ 509.841404][T12988] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 509.841448][T12988] ? __pfx___debug_object_init+0x10/0x10 [ 509.841493][T12988] ? find_held_lock+0x2b/0x80 [ 509.841522][T12988] ? net_generic+0xea/0x2a0 [ 509.841557][T12988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 509.841591][T12988] ? __hrtimer_setup+0x178/0x280 [ 509.841636][T12988] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 509.841680][T12988] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 509.841708][T12988] hwsim_new_radio_nl+0xc1f/0x1340 [ 509.841728][T12988] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 509.841749][T12988] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.841778][T12988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 509.841794][T12988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 509.841815][T12988] genl_family_rcv_msg_doit+0x214/0x300 [ 509.841833][T12988] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.841850][T12988] ? genl_get_cmd+0x3ef/0x720 [ 509.841874][T12988] ? bpf_lsm_capable+0x9/0x10 [ 509.841886][T12988] ? security_capable+0x80/0x260 [ 509.841906][T12988] ? ns_capable+0xd2/0xf0 [ 509.841924][T12988] genl_rcv_msg+0x560/0x800 [ 509.841942][T12988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.841958][T12988] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.841986][T12988] netlink_rcv_skb+0x159/0x420 [ 509.842009][T12988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.842025][T12988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.842061][T12988] genl_rcv+0x28/0x40 [ 509.842075][T12988] netlink_unicast+0x5aa/0x870 [ 509.842100][T12988] ? __pfx_netlink_unicast+0x10/0x10 [ 509.842138][T12988] ? __pfx___might_resched+0x10/0x10 [ 509.842162][T12988] ? __lock_acquire+0x4a5/0x2630 [ 509.842188][T12988] netlink_sendmsg+0x8b0/0xda0 [ 509.842215][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.842236][T12988] ? __import_iovec+0x1d2/0x640 [ 509.842261][T12988] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 509.842283][T12988] ____sys_sendmsg+0xa54/0xc30 [ 509.842302][T12988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.842317][T12988] ? __pfx___futex_wait+0x10/0x10 [ 509.842335][T12988] ? __pfx_futex_wake_mark+0x10/0x10 [ 509.842362][T12988] ___sys_sendmsg+0x190/0x1e0 [ 509.842381][T12988] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.842408][T12988] ? find_held_lock+0x2b/0x80 [ 509.842435][T12988] __sys_sendmsg+0x170/0x220 [ 509.842458][T12988] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.842478][T12988] ? __x64_sys_futex+0x34f/0x4d0 [ 509.842510][T12988] do_syscall_64+0xc9/0xf80 [ 509.842531][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.842548][T12988] RIP: 0033:0x7fabcbf9acb9 [ 509.842563][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.842579][T12988] RSP: 002b:00007fabcce82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.842596][T12988] RAX: ffffffffffffffda RBX: 00007fabcc216090 RCX: 00007fabcbf9acb9 [ 509.842607][T12988] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 509.842617][T12988] RBP: 00007fabcc008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 509.842627][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.842636][T12988] R13: 00007fabcc216128 R14: 00007fabcc216090 R15: 00007ffd3e753158 [ 509.842657][T12988] [ 513.663738][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1454'. [ 514.590653][ T5834] Bluetooth: hci7: unexpected event 0x23 length: 127 > 13 [ 514.619164][T13051] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1456'. [ 514.694727][T13051] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1456'. [ 514.747854][T13051] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1456'. [ 515.367831][ T31] INFO: task syz.1.905:10421 blocked for more than 143 seconds. [ 515.376037][ T31] Tainted: G U L syzkaller #0 [ 515.396576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.405313][ T31] task:syz.1.905 state:D stack:24184 pid:10421 tgid:10405 ppid:5823 task_flags:0x400640 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 515.486607][ T31] Call Trace: [ 515.489939][ T31] [ 515.492885][ T31] ? __schedule+0xf65/0x5e10 [ 515.523683][ T31] __schedule+0xfe4/0x5e10 [ 515.550423][ T31] ? __lock_acquire+0x4a5/0x2630 [ 515.555470][ T31] ? __pfx___schedule+0x10/0x10 [ 515.586569][ T31] ? find_held_lock+0x2b/0x80 [ 515.591317][ T31] ? schedule+0x2bf/0x390 [ 515.595714][ T31] schedule+0xdd/0x390 [ 515.635568][ T31] schedule_timeout+0x1b2/0x280 [ 515.643576][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.675545][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 515.693054][ T31] __wait_for_common+0x2e7/0x4c0 [ 515.736617][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.742119][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 515.756648][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 515.767763][ T31] ? vfs_coredump+0x7e0/0x5530 [ 515.787768][ T31] ? vfs_coredump+0x7e0/0x5530 [ 515.813235][ T31] ? rcu_is_watching+0x12/0xc0 [ 515.824103][ T31] wait_for_completion_state+0x1c/0x40 [ 515.844168][ T31] vfs_coredump+0x80d/0x5530 [ 515.857197][ T31] ? __lock_acquire+0x4a5/0x2630 [ 515.862248][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 515.887704][ T31] ? __lock_acquire+0x4a5/0x2630 [ 515.910460][ T31] ? __lock_acquire+0x4a5/0x2630 [ 515.930678][ T31] ? lock_acquire+0x17c/0x330 [ 515.942928][ T31] ? lock_acquire+0x17c/0x330 [ 515.956806][ T31] ? find_held_lock+0x2b/0x80 [ 515.970932][ T31] ? __lock_acquire+0x4a5/0x2630 [ 516.016631][ T31] ? lock_acquire+0x17c/0x330 [ 516.027453][ T31] ? find_held_lock+0x2b/0x80 [ 516.045709][ T31] ? stack_depot_save_flags+0x3f8/0x9c0 [ 516.097038][ T31] ? stack_depot_save_flags+0x3f8/0x9c0 [ 516.106597][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 516.123653][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 516.156634][ T31] ? stack_depot_save_flags+0x3f8/0x9c0 [ 516.177597][ T31] ? kasan_save_stack+0x3f/0x50 [ 516.182572][ T31] ? proc_coredump_connector+0x2d3/0x4f0 [ 516.287646][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 516.294853][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.300854][ T31] get_signal+0x1f2a/0x21e0 [ 516.306483][ T31] ? __pfx_get_signal+0x10/0x10 [ 516.311465][ T31] arch_do_signal_or_restart+0x91/0x770 [ 516.317122][ T31] ? __pfx_force_exit_sig+0x10/0x10 [ 516.322369][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.328901][ T31] exit_to_user_mode_loop+0x86/0x4b0 [ 516.334331][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.341962][ T31] do_syscall_64+0x4ea/0xf80 [ 516.346654][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.352918][ T31] RIP: 0033:0x7f4c6cd9acb9 [ 516.357444][ T31] RSP: 002b:00007f4c6dccf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 516.367385][ T31] RAX: ffffffffffffffda RBX: 00007f4c6d016278 RCX: 00007f4c6cd9acb9 [ 516.376696][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c6d01627c [ 516.385787][ T31] RBP: 00007f4c6d016270 R08: 0000000000000000 R09: 0000000000000000 [ 516.393918][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 516.402063][ T31] R13: 00007f4c6d016308 R14: 00007ffd16785370 R15: 00007ffd16785458 [ 516.410569][ T31] [ 516.416048][ T31] [ 516.416048][ T31] Showing all locks held in the system: [ 516.425653][ T31] 1 lock held by khungtaskd/31: [ 516.445808][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 516.526644][ T31] no locks held by kcompactd0/34. [ 516.548216][ T31] 3 locks held by syz-executor/5811: [ 516.579370][ T31] 2 locks held by syz-executor/5822: [ 516.584701][ T31] #0: ffff8880216ae0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 516.603113][ T31] #1: ffffffff8ea470e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 516.613412][ T31] 2 locks held by syz-executor/5824: [ 516.619063][ T31] #0: ffff888037eec0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 516.633374][ T31] #1: ffffffff8ea470e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 516.643428][ T31] 4 locks held by kworker/u8:19/6407: [ 516.662844][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 516.675059][ T31] #1: ffffc9000ec07c98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 516.685904][ T31] #2: ffffffff903dd070 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 516.696636][ T31] #3: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 516.707090][ T31] 2 locks held by syz.1.905/10414: [ 516.712253][ T31] #0: ffffffff904a2810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 516.721004][ T31] #1: ffffffff8ea470e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 516.731476][ T31] 2 locks held by getty/12148: [ 516.736259][ T31] #0: ffff8880318ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 516.808853][ T31] #1: ffffc90003f832f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 516.846653][ T31] 2 locks held by syz.2.1361/12543: [ 516.851905][ T31] #0: ffffffff904a2810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 516.906700][ T31] #1: ffffffff8ea470e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 516.940398][ T31] [ 516.942770][ T31] ============================================= [ 516.942770][ T31] [ 517.053358][ T31] NMI backtrace for cpu 0 [ 517.053385][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.053424][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.053435][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 517.053450][ T31] Call Trace: [ 517.053460][ T31] [ 517.053470][ T31] dump_stack_lvl+0x100/0x190 [ 517.053508][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 517.053544][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.053585][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 517.053629][ T31] sys_info+0x141/0x190 [ 517.053662][ T31] watchdog+0xcc3/0xfe0 [ 517.053698][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.053726][ T31] ? __kthread_parkme+0x18c/0x230 [ 517.053760][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.053790][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.053816][ T31] kthread+0x3b3/0x730 [ 517.053855][ T31] ? __pfx_kthread+0x10/0x10 [ 517.053889][ T31] ? ret_from_fork+0x79/0xaf0 [ 517.053913][ T31] ? ret_from_fork+0x79/0xaf0 [ 517.053938][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.053964][ T31] ? __pfx_kthread+0x10/0x10 [ 517.053998][ T31] ret_from_fork+0x754/0xaf0 [ 517.054033][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 517.054060][ T31] ? __switch_to+0x7b9/0x10c0 [ 517.054091][ T31] ? __pfx_kthread+0x10/0x10 [ 517.054127][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.054180][ T31] [ 517.054190][ T31] Sending NMI from CPU 0 to CPUs 1: [ 517.205387][ C1] NMI backtrace for cpu 1 [ 517.205410][ C1] CPU: 1 UID: 0 PID: 12749 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.205450][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.205460][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 517.205475][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 517.205512][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 06 8b 43 05 85 c0 74 20 8b 05 90 ba 43 05 85 c0 74 16 65 48 8b 05 48 e8 6f 08 <8b> 80 2c 0b 00 00 85 c0 0f 94 c0 0f b6 c0 e9 3d 28 03 00 66 2e 0f [ 517.205536][ C1] RSP: 0018:ffffc9000eabf660 EFLAGS: 00000202 [ 517.205556][ C1] RAX: ffff88801f3c8000 RBX: 0000000000000001 RCX: 0000000000000000 [ 517.205572][ C1] RDX: 0000000000000000 RSI: ffffffff8dc1b45f RDI: ffffffff8bfa32a0 [ 517.205589][ C1] RBP: ffffc9000eabf728 R08: 0000000086db7919 R09: 0000000000000007 [ 517.205605][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f10c60 [ 517.205621][ C1] R13: ffffc9000eabf6e0 R14: 0000000000000000 R15: ffff88801f3c8000 [ 517.205638][ C1] FS: 0000000000000000(0000) GS:ffff8881246e3000(0000) knlGS:0000000000000000 [ 517.205662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.205678][ C1] CR2: 00007fabccd47e20 CR3: 000000000e392000 CR4: 00000000003526f0 [ 517.205695][ C1] Call Trace: [ 517.205703][ C1] [ 517.205711][ C1] unwind_next_frame+0xd6/0x1ea0 [ 517.205746][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 517.205774][ C1] ? __free_frozen_pages+0x822/0x1130 [ 517.205801][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 517.205831][ C1] arch_stack_walk+0x94/0xf0 [ 517.205861][ C1] ? __free_frozen_pages+0x822/0x1130 [ 517.205888][ C1] stack_trace_save+0x8e/0xc0 [ 517.205914][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 517.205943][ C1] ? __lock_acquire+0x4a5/0x2630 [ 517.205976][ C1] save_stack+0x162/0x1e0 [ 517.206005][ C1] ? __pfx_save_stack+0x10/0x10 [ 517.206032][ C1] ? __free_frozen_pages+0x822/0x1130 [ 517.206061][ C1] ? page_ext_put+0x3e/0xd0 [ 517.206091][ C1] __reset_page_owner+0x84/0x190 [ 517.206122][ C1] __free_frozen_pages+0x822/0x1130 [ 517.206151][ C1] vfree.part.0+0x12b/0x9d0 [ 517.206187][ C1] ? __pfx___might_resched+0x10/0x10 [ 517.206223][ C1] ? kcov_close+0x2b/0x60 [ 517.206251][ C1] ? __pfx_kcov_close+0x10/0x10 [ 517.206274][ C1] ? rcu_is_watching+0x12/0xc0 [ 517.206298][ C1] ? __pfx_kcov_close+0x10/0x10 [ 517.206322][ C1] vfree+0x55/0x80 [ 517.206357][ C1] kcov_close+0x34/0x60 [ 517.206379][ C1] __fput+0x3ff/0xb40 [ 517.206413][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.206439][ C1] task_work_run+0x150/0x240 [ 517.206476][ C1] ? __pfx_task_work_run+0x10/0x10 [ 517.206518][ C1] do_exit+0x829/0x2a30 [ 517.206549][ C1] ? _raw_read_unlock+0x28/0x50 [ 517.206577][ C1] ? __pfx_do_exit+0x10/0x10 [ 517.206611][ C1] ? do_raw_spin_lock+0x128/0x260 [ 517.206647][ C1] ? find_held_lock+0x2b/0x80 [ 517.206669][ C1] ? get_signal+0x7e0/0x21e0 [ 517.206700][ C1] do_group_exit+0xd5/0x2a0 [ 517.206736][ C1] get_signal+0x1ec7/0x21e0 [ 517.206767][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 517.206804][ C1] ? __pfx_get_signal+0x10/0x10 [ 517.206837][ C1] arch_do_signal_or_restart+0x91/0x770 [ 517.206872][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 517.206916][ C1] exit_to_user_mode_loop+0x86/0x4b0 [ 517.206950][ C1] ? rcu_is_watching+0x12/0xc0 [ 517.206974][ C1] do_syscall_64+0x4ea/0xf80 [ 517.207005][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.207029][ C1] RIP: 0033:0x7f49ae555ed7 [ 517.207052][ C1] Code: Unable to access opcode bytes at 0x7f49ae555ead. [ 517.207072][ C1] RSP: 002b:00007ffcd43e4a30 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 517.207095][ C1] RAX: fffffffffffffe00 RBX: 000055559224f500 RCX: 00007f49ae555ed7 [ 517.207112][ C1] RDX: 0000000040000000 RSI: 00007ffcd43e4a8c RDI: ffffffffffffffff [ 517.207128][ C1] RBP: 00007ffcd43e4a8c R08: 0000000000000000 R09: 0000000000000000 [ 517.207144][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 517.207160][ C1] R13: 0000000000000003 R14: 00007ffcd43e4ce8 R15: 0000000000000000 [ 517.207185][ C1] [ 517.212687][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 517.212716][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.212759][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.212771][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 517.212788][ T31] Call Trace: [ 517.212798][ T31] [ 517.212810][ T31] dump_stack_lvl+0x100/0x190 [ 517.212849][ T31] vpanic+0x20d/0x630 [ 517.212878][ T31] panic+0xd1/0xd1 [ 517.212903][ T31] ? __pfx_panic+0x10/0x10 [ 517.212932][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 517.212975][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 517.213023][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 517.213063][ T31] ? watchdog.cold+0x198/0x1ca [ 517.213092][ T31] ? watchdog+0xcd3/0xfe0 [ 517.213123][ T31] watchdog.cold+0x1a9/0x1ca [ 517.213161][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.213191][ T31] ? __kthread_parkme+0x18c/0x230 [ 517.213224][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.213255][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.213281][ T31] kthread+0x3b3/0x730 [ 517.213321][ T31] ? __pfx_kthread+0x10/0x10 [ 517.213356][ T31] ? ret_from_fork+0x79/0xaf0 [ 517.213382][ T31] ? ret_from_fork+0x79/0xaf0 [ 517.213408][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.213435][ T31] ? __pfx_kthread+0x10/0x10 [ 517.213475][ T31] ret_from_fork+0x754/0xaf0 [ 517.213502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 517.213532][ T31] ? __switch_to+0x7b9/0x10c0 [ 517.213566][ T31] ? __pfx_kthread+0x10/0x10 [ 517.213604][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.213660][ T31] [ 517.770922][ T31] Kernel Offset: disabled [ 517.775237][ T31] Rebooting in 86400 seconds..