last executing test programs: 6m5.203728331s ago: executing program 2 (id=1176): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/id\x00', 0x181400, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchmod$auto(r1, 0x2) ioctl$auto_TUNGETFILTER(r1, 0x801054db, &(0x7f00000001c0)={0x200, &(0x7f0000000140)={0xa13, 0x5, 0x80, @inferred=r0}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:14/power/runtime_active_time\x00', 0x49c3, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)='-7', 0xfffffc49) clock_nanosleep$auto(0x101, 0x4, &(0x7f00000000c0)={0x9, 0x7fffffff}, &(0x7f0000000100)={0x5, 0x5}) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/114, 0x72) 6m1.924318655s ago: executing program 2 (id=1183): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(r0, 0x0, 0x6) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0x2) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000340)={0x3, r0}) sendmsg$auto_NL80211_CMD_STOP_AP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008000) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000001c0), 0xd0e03, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000ffdbdf259500000004004600060098000300000080c7890a8fde08fa303e6b851dee70684432b926997933c195f1bb75429a63a46ad58d4f8ca554787bb66fc4cde51c7b9ded2cfed993f17c6ecd82e8bbcb95a4ab7f6d08970cc87d84929071e6ade7eeaffd4d"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x6f8d0aba2d5a98cd) 6m0.771305205s ago: executing program 2 (id=1186): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14008601", @ANYRES16=0x0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) ioctl$auto_IOC_PR_RELEASE(r1, 0x801070cf, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x4100, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x7, 0x8000, 0x2}) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0xffff, @rand_addr=0xfffffffe}, 0xfffffde1) accept$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x3c, r4, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)=0x9) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r5, 0x40084d02, r5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m0.193749168s ago: executing program 2 (id=1189): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x8000000000009b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) (async) io_uring_setup$auto(0xf00, 0x0) socket(0x28, 0x1, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_SCHED_CORE_CREATE(0x4, 0x1, 0x0, 0x6, 0x80000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) read$auto(r1, 0x0, 0x85) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) r2 = socket(0x23, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, 0x0, 0x8f) (async) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, 0x0, 0x8f) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) sendfile$auto(r3, r3, 0x0, 0x8) (async) sendfile$auto(r3, r3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 5m58.669036073s ago: executing program 2 (id=1193): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000029c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x25002200}, 0xc, &(0x7f0000002980)={&(0x7f0000002a00)=ANY=[@ANYBLOB='T%\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbd7257900000095052c80dac74bc484e7c695ff28b87de994a2fc08173c785b9745e83966e285784d263c07ba62f0b60b3667be53260346bf72f03f4da7a0a6899c0d82ff7714e1a60008b9fa4aa2366a626fe4b84ea3cdf722ee7bc2a858cf3e65256cfc0eb1104123284254266651c39477c28272b3c46102c4d6557c53665ea0fed28cc46e1433f4b64eb38fd2187d675f16aada296010a6954a04531baf31c4dab8bda3cbabe7c8e65babb12a9f94ea74ad06578406d135d6b83af41cebac78d48960a748c4ffd579ce6612ce016380597696477f6197e8f748a77dfd3e497276d5167afdbadcf85c882792693ecbc8603576288b2ebf601a0a423e9fcdd20d8de7e85fc7d1ef42595fbc0457d6472426caef93f3fbf1da45d2e6aff09d9b2c8fae76f5ef8450f4bb761a8a7bd4daa470414584f49c22d21bd7ac48664b68dce8b412d67272c126eac35ba4b85fb6bb1acaae51f4b4d6944989f4dfe930c4455e82626975a3fe790b8b4498c918672087f803369c9de4d2828e7de1bf41f6b1ff9861a4710d5b0251463bc803fc7de806b67db897b686dff9a802d583e613ab6bb4c915d5646ba1bce58820975e31da3272f72b9de4b845c79f4c78269b79ea714e3d685d8a3bf092296be2c0393aa80995951d0a5a503b0e5ec5ba7f2721c7c7a84326f807f5e941431971e58f24fcaabc8d077398a3851d11cf4958726f500a27c42ed79c7ef20ace3ec07031f08d00e8cc85b4186664b0625cf7124e3e99aa1b834a8429f1f91dccc5d68d8c4acc548061833fbfe1d7763172a22a66b18e35d59caef5b7d24dc2219c6701a913eac65622bed1ef777fbc457ff491f916789b9d2a49b2ad5dd3c4674266999fe1d03a446245f2275596fdbf0520228377ae0e6d045c37f885d53d54b08043599f3fea417e8f5a7a0400068000009d75f9f77262d554c484077afad168b06df6c943bfa0860099c3bac015a73ab87a64ae7beb72cf67c4b59c095c5c25020180ae13856970fb1638bed6611471261be35874ebd3c0b38c0cee0039cbebcfaed55b22f1e845aadca217a17f2f2ba945271371a6ab25de9a52923e96eaff569f45eaa7ba20752578f94ff7edf7113f91afd682a2632ac782683b6c93a2dc508a4727c4b0088815a8feada0d667e8cbb59471ee50dfdfed9485a45b4f0885c6c97a022c20b5dec328c6bfa4e2106e8884f40852e17011f9a34af8005316b85c882332c5f6ba7cd06efc303a6e004ba416209a812a44b1a59e44eeb22508c357b6cb6166d505da3313d91ce4fc92ba076ce77f8231a3fc7a295e62bb580400358005c0e1abe0277e04d06058a5e829c9355b24ef719d7268c96926a9645fad0df0c9409c55608ea5b59346ca0c4969a3180d41bc74bfdddbe4f82dd956757c98152c865e6aa51e41a601f906aa2e0c49291a3e3cf91a9cf8828f71fbe19bb707053c0036803f8b7e4aae2f001c433882eb9d0acc131c3c48355364d3d10f9191bae9d4279e6aa0555294476b821000e58004003d004cc1057a959dc6d73db4cf1f0ebfd9e7d5d6cf89974c6b0a9bd921fbb89f860d184e9b5c548ea6277848061246b7f2f379c3488aced2eabbd345158c409585af95ffb74486198f258559411fda22bcc71d9f23d62bf53aeb9c68c4c62aa445a75477b22679f93cb1457261ac112bb156a5556f1dd83a6877eb060f4e8c0a6c6aa092b88894d6caab939562b31de4831cac7b55a9d7fc22cafdbe1374ac1b32076058f866f61c5ec5c502ce639f2d000000a70065002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc0000000008005d00ff7f00000800c300000000800c0099000200000000000000801f318008000b0135000000ce070e000560c10fade4e686add7952aafc88260ad1f99ce57a850b945a50dcaffbecae49a49e85e710672bc421316e39034dabc3f49c1a2494bd977f99c12ece6874e5c693a4084a1fe6b483f19c7363df0fc1906ea69f4b0ac6c3c4d12dbff8b9634cb993dbad8b9ac9288757c46393119b46c9e9f418600f377a32709fb66a27b2e8ccf1928bbae8fa23b5fe649c995dde046c793a54ffcc6cfed1c475617d453d3e66dccb26d6757ff906a377873d179a8a82537648dbd74f8f4d0fc76e0b61b9b97dfe029c1dd2866622657cdc611a6e4833aae3d8217597b259c5197b997c76bc2730e88af7f6cd2b3301acd240659397ab515cf514ae074d769d46a7e89ea940b645eff79654b4586ef4fc01c26266faa8866b966f7d6ae1ce2d1c707c721314bc9d3c8fe2d05b640838541622a8d638078e013f5a7dba98bc983d08aa36d0fbfb46d221817c6e3eea47ffa7d9205c8f45d6241ebb2ae4794627d56c050d9e87fa978e64a9068b47172a089ac9294826a2e8d3ec5353e30cf3d449c55f80a0189426d29d8d26bfd137d4805b305288847db6b757c4a55b71b8365f98f8087d05a09101e7321e681a23331d396ac590269e624103987f67d84eaac5652958d41c547480e9082f860955c94c2a185fbc2f00f9206a3bb19daabd48803def1c2fd8ad9aacc16bc7fd1672caba024c303320b552b961d8649186548937dbe48ba761efed2c14aa6f4b871fa34d12891fd97b03e6cbe5871cb4261e5b415c2ea8ac59cbdc5cc6d44d9854e8e92a538bcbe33d8ff747801bd0619ec1215d2932fbdc3f61e262d784020e3c29dce38efd5b70f6fab2794cdd73daf73cc14c5f96e38bcce541f72eed09835f46cf8a80588d33a959e42463df3e021f9177f6b896a5d781cb317ebb0cba7fa72e353282d89d3c741d203107323ace3f7af9035eb3b5385f1821cef177bb59df6344a9b367f7ca0d7457204ce208d23cfb40f315f2de1259ba6a0fdcae5197ff20131e5886c49f9df6588cf0e83f99c879e57fb641cb3889109384eb5325e5439921e5198bbd208c41d7ef9c9dc8b6dedae82c3747797eaa0d80799fe7485da839cc1064e38f0629c56635f7fbf9ee8886d711587432d957691672e9b81d72e69b8b27a2669ce0e004bfa47e3c7bffe219f264c3d002881a7e78824f76e8fb94a06df39d8ec6938790ced777859b5f74d96074dc1d969c274cdaba0fa191cc49fc38d30eb1fdde344340d856ac57eb418c634ff7027b91f046967417443a921a47e58e19516ceddf0fcc60c938c7532c4f6b4decb9b99927baef51b2839079a8776a90dc7f10447e254c307a1c6c34a00748a0aec1067fc49502bbd9436d4ff966f3ebbc4f3b04b5429e566320816e9bc379d86de936dd33c4d8e61a279810d19d0a30b008da5fb63fd7fb5980aea79d79f8badd2208c2c11d53bf21ab05e2ea11f82196fce7901d0c5e84020f4f10ac52ff3139cdc79b6aae564f3e2781f33441d30129a83061ea508970ae9b55b8303f2bc916be96659e7aa1710046398272acd404a0f413234d6d37da5aa4186f502de849d82936388374ccd381d6c1126f1816830dfbe701a01e08b0412c65b7da954d9501a76e579a00a007bc9434acc43ab6c6dbc2f5a921e79e168fe7b5d9633b951eb1153dac5fc162a3f4db36f38d0922ea3b382aa083ea342c2f265e97b679c3ca27b00add29c01c6b1d73afbb8b7f81c9093bf4bfd9a8c9669b07557cd1616dac726226bccfe6c159632da0289cc105fca10b15aafa5405e01854e5c78bcaa058f475413967d7fec97304da8e0ad223bc22d4ec0647284da0912a8d42de3b051e14651f415a771c2b3263a73e40bf7147b80e6d6591b33b57377dc15a7d19c18952f4e0b9827dd564d3d480a95152143554c3df12b7665a3e0ed8fd185d5ad90b5c1a72bd30cde6c7c19301c0991c3e4d2d672f6ffdf9aac4df7bb5599936296f0740c54e6ab690e2785e9f4c5365bceffb9e984e5c59b52e44389416c6c69f7a96de4b1027aa69dd9d68e35a89d13f329d77b8c53d1e98ea39802abbccfd7e0f07d1d451ed5ea443cdc0f29883ff4cc28c259e4f207aa87317655ef137eebf78cb74ddf506601cd0bad5a97fc4c6ef770def5005cc9c579a822a80dc67f81ee2b65aa44d55d9b5c863a8de8e4ef66b8cd804b9cf5eb40868e5df398a854382d27d2954b0ab49e416e40e7a76a9d216c15d4f69c483e8dd7f5bb3c23301ba97ef30eeeb912a7a99457ecf8e92e7875a81923d4496f95a792ee5828c2e234a0cf1675d96a0300b258be914bbe72a557c600833ba8fc98f41e8d700b3ae13885d781af4f28a0e5438e8ec617ee9ab6c47531747b2af9ef4373f8dde16cf7b7f3ec3ae820426b8fdcac5747dbb06c39acb406eba01887d5f84b481b5c83378621b175bc3b03c3a09f21ab10aa289d3e3708bfafee3746ff61ee5603378dd2dc1845e79ea7d284fd08255174c12232beea59b4bc12e0fdc9486acb860af0cab59d5a09c4b8bafc73f405c65c92e0dd59ae25a2ad10b38379a05e4feb240950802c0833ce2e1d38f7b1f25dc859ab4fa171c8c1e71e93e5964a08f2e497b5be8078e9923740c39bb453230acfbec5f0407b748ea5699d5f5305ab1aa54971a5d97e04ef6d366bc7ee823fc23c01086f046f63fc65363ddd87dabc6b666579a123f6390d517751506e5aa845c7e4f046d84d01576785a944d39ab6056adbbfc036ce59a47f7f1352d64591b140e7768218fb493978da4bb9d132bd99e71861861aca6276ae1773246641746579376614fb6bf40000f100258018676543bc00d5287dcc03d5e3af0d89743ff7fdc32eab17ffd1238c972050ec68dab62d8f9cb594c6986d145aa36722405abbb28edea9c73284500c8ce501979ec9084fafb53a9ea2bff32f896ebddd3a5e15ac48444c54ca8db22125e27ee369b3b76c2a3b99fe800fc66efae76456b54c7b94022d78e9c787379d8d602dfc46b2dc8545712fa6da39e93efbfaaf8be6a88e2d610b914b843a092b560875109cb6d4a95da832973692b041f17bc949fc520ecf16c38f0c0d04edc08fde454f6481ea150cef57401045219851ee68f1a3fe530a3735dfe87d78c9efa9fa6834e9d902c9ab23e811bf12e3dd4c00000004003c00ac165a800b1984cfe470b3199e9ad3eca4d711532026ecec12968004001f8004002480cca734448b23663c51bc8066b0f5ea53efb03d9dddf339b08f1e846d8814ac2c07ada848f1a58ee7bdf94d91f73a2eea5d13e072ece889618a34f3725f371e2d08cf572ad6ea2b15944dba92efc438425130dcc03d46499f8781ad7f4234118165f458d892b9dff397d154eaec6db79b58ff770a8e14c51ab358422208fad3d8f562244bce71f37f542595d83c83bb2e9407cc508fad21434ec78875e3014f1f2247db558763e6e579e380ec56998397ed70f9e3b539ce55b3e390de2b392b71ebe272ce1b86e576f550c06527289557b35e46aefc17ee1c5d03a78166c1ca96c960faf2ec9b2b5429805527bbddf2448fef1636c9da19861c0b4ad30ab7d5464fcc2e07b100545eda6bcd614f32668e4da5123d319ec76b97dad55b2bc7542975a4a5160637a86a72f81920140e8caea5630f3ac65066dae93c74d152d76fb0163479890517fff7576e1a71aa0d576587e1aa5ae527a74a67a064928a9873cc24f267b906fe8ccf19131904bd6128426e19923a91471975db7578925e8db6fa23fae2df52cdd47d24a1eb638690628c5fe4ccf10245c31f7d3c923908a9280af9c87874a97beb54e9a3df4801fba88d4c852e3d1fcfb8de7a9be27f2b251bd2047401be095fdf3a98533bd6e246953f1b00b3bc772636423c2e7024e76583750a3d0825f3091e9285c7b5254c81de6ce9492dab7175c2d14390ac81f1989a274b15b158924f0bb4453c3ea1af491878bf6741b8b7398b40804b33d8acf01efb8479c2aae5eee0faacc5dd8fa18cc29049ed188ac9915fd2cd506a0e862f1a6aac32bd4d2a000d42dc27ffc62567311a79a819a61b6c24164eb53630bea1d89e2ac1961c919d5651a22f678bac7cb311eb268e1238fb20c0c14caf06b62a2c13dfcb89814760388859044a75405bad2fd651b205f2ab2d71428e5c7b8ea1f3318784f209fc62ce6c6ff946f072aa804a26f4ebaffdd64f97382194b48881e35782280b3c6f79d39b598add04c96019391c714293446ae00e8cf432109dbc0f7ec0ea9eb9ef31d304b75e4c73ba9293758717d448935c34f44d2f122454f5ae28dd13446e61917ddd85e4070b76e0e9e07e68b08c92bce793d8d539b5b7021ede61209734aa7a86a9070d17e27c6a2c4cb0aa917525d7828e28ede4726e6db2846e51175c4081444f0a34f0c83e082134b8e3892bf32dced66785785413e7076a9e8aa49b5b486eef3f9f0ac19b6c77bd65ab7a18325a7a5021ca1823cff985301440d5cfd95eac193967da3031636b83d509db3074fa8c74d43635ed50a95c61c59e1b50e6c202704c4e17ae2b3d719cc760f7076c121565113a502480bbc910f053559949d723a2131ee8c9418118e5f266f9e641d827c343f88ce945dfc6a32df7ada52fd1c9c4db7df678d4bc394b11f9f348e1fa2b9b7d2b08c85f0f7c3655cf19d0f021a9b9228b4fe2dc32704a0a5d3f6a893496f2de44ee66ebb0793c1c544af621d2d8e846944c60ecf93e4d4f8608fdb81f84c3b22c0121000ff0f401d5f6125492c1ccbbd35f593540b14231ef43aff767cc5a0162c740d3f34d5d735993d3446b7fbe9927ecba0dcb2092ab1fd6d87408388debc319cc6c815b57b8117058a7d4e63de06ab730ae988ae403e2913fde5f8dc784e59a987e5b6479c5b131daf79961bd8f4edf4e936c15817714545281a463da0f760faecbbcdbc8ed69905f93188ec977fd61df37b8b6ead1b2a005a0ff0150b6f3e9714b89e1506d4b6b435c8134d5f3194a3eee388bf41470850a20bd73bcf66201e982d01f08b881f3393854a4ace6a320f4785ce6cbce8df0ae8579a28d10a4b35a1f4cac43e564e71d6e5294af2cfbb55008edf20c6330218f6001e064dc79a5e91dfb78ff37ee3ff82f8b243c22ffa0bcb49485770cd61d8a6f88870ffbcef8b34fe3688e55755ea5417444523f086e3d21bcd4ccc523e6258f2bff5893d2dca4bc2baa81b342548052fab2409b03a5953799cd0b024987963029620f2bc5dd259d601cf9361a3fd1c022af98fb75aed8a09f901c5c4fdc2508c66fc94308a3f3369bd7b40c1cb0b09af094a27a1937ab1a427a40736882c2b90e68b0938f2030d8bce9cb2ba6827a634c193bb790241ad5b60db65a487cdf3de8f6090c28079ae74b9a519330c06ccc232ebf0b0d112d26f36de669af895f4b4dbab5e636c7a1af416cd61f24273985a81bb5abf96ef4dc37319eaadf4a28f59616d7a7b8e5fb30cf90200411d6506129c6bbe1d2f17aa6574689f82a3721f25a27a1682ac7ffcb30cbda4725a70eab1842a99a4bb0d5e5bf2e72eb95dfe7d9d76723972e6f59ee9af9f021101907f7671446ece033c89efb78fa07bc400ca0d7be646c9c25a6a5278dcfe0f85cdb29f2f51ee28a1f12654fa24de879ca36398d7db0fac3b581cceefd0376ef222191888408f030c2b0be562e82d3e2f424b9d37d7f6694e6a42d759a3251e4c12997a04b491a4abfcec862a0ecadbce660d9f1139d215128a2763930d3688b2374799fa68557eb779b07fdcd1265e882421030fe3d351bbbdce901bc5b50f90f1c78da1631b34715fe5a652b3d88c02ac73986f8d2a9946bba7ebd879fea1522a7a9296c09f0f1f6d434bbc3a590891bf60dd4e6bc1ee3bb734bc55fff0aeb646f7596060d44881e405bb2fc9a6837d32c884ea5524e4da6d022920314d6d3b24e3a6d86931f4d7e7846e1a65d21429f7a09d8ccf0bf92c950c316fbb0e847b46f98c413e0640c58d93a2a9e9aa6fe83cb63b001f1ecdb3d6ef6cedef7c2461e0bab7ee0bdb96801d63ea0bac3275c15b24d90e018dbcdd47fdb68d8e1c52762471e6b1318830c2a1d3dfa809d7bd87af153faaf770ff8705d2fe45bd607ec8ea78289890f12cf2ac94207568c2245b02c3ae968ea8dfbdead36deb1d92e16981d32a4d278566dc6d61f634230c4d2bbc92be18aaac0d478eeba433056e40b3a8e1453c1b062cdaf40718b74e1e866f5608f9f337832f88cde20ce0c56d651f6e8193b94f1ca2f10e267b8abc8af934bafbd304ced440c2acd81c8891bbe907159d5a404504cbd4282075430aef321fba7e551452d4c0448ae47d702ab6ef79201a3d094aec3b00c70a70aa0f3db1f68a7c9c0667b0b2b0c240a0505e5bf4d0c2fe3a5599b3d9cb0232e2541ca8ca22ef8e212a177eb29c2ef713891dbd341640c1961d6cdf80e95737b5462e09d0534031eddd080b5a8b2cf44cbca6196d8b4a4e3491892012f0bd6add1324450d123c735003a84d2c850f7b73f0acc7c446641b4bff1591a50ac9d03646085bc233a52f1b024390c3c12f34cba96931485fb5369762ba5f580a340505b30de13ca6b137f27f0e2018b70257aa15fdc6d0bda6fff36258b64a99393dcede0723e599406181779ca0c860bfae32314fbc1beb0c38ad46100355a0b8433ad0612dbe857abdfcd76ade4b777c13f8ff31ac315c8a5d1515a351f43d87c6a0b7d92358aeda0d58a8cb2917f2457350709abdf3f8fde3dd0ceaa042a6b68d6079f6d1d9379947d88f8a8e9e36cd3b53139179d3ff1696568a6c0c469a108d11895b21d73bb6de5e6519660c25e598976044b275174ccc732bd348d0d82edf9e265705f19a41754e53b046d3f9d02a48bc8f58b6eddce4516bdf4edd39f8e977103322991f6b3d295d8cd26efcf8705dc4525ac1f6a59bd04c9a745375950eecd57126c8f774f4e19ee3a9d65ded225ac3137cba171ee9d093603b12c55b32cd02e81211d3715586720b3864256c9718dc70f88d776c6abeb90cf38d35c2b5e2653d9cd7d87dba5147f22d4ad48c6c86403ea1d15766bfea17ed97b94f8e84cb470db81b976584504ca8c2eab21f84b776253e42b7307dc6a7c57e2a2618b10e1cfb83e2bee4d0e8abe12b72ef7ed305f225efd8eec4e3981d945652b657427e6df2c3999e7d7baaa96f2c50d18e8e0d3c304a9af745f3d799415466c320663296adf6b8ff83e8c2daec96099328cf3fec825be6c4887bdae8078a11e63cc27e6555597ba67bfe0e78da81dafc310c6294cd6748d9e1014a963d0dbbb624bdc68bce32be02289368d857e4ff8069d1bb92eedea20335b9866acef69a83c8ba357f18209ee69a7eed88e09cc02230cf3379dabc6875fecd44ac03a0332df5a2ed2138332c32a6777d0249d0c4ac7a9e5f4ba685fc9d1f152d0b974a277ed9921f94217b58829f693ee838064ebba7289ab90dde75c28758e6a902e36c13ffde62ce9a1ac78318b1e553488ddee9d45ae25dd9176efef7822708af36cc3b22b9a3772fe47553acc1caf2fbefddceca5031b01a342023eb82915e0b5359d8a83f45d66f88f97504ae9ca2c26946ac4680d6cd44a1efa6e360f5ad8b2f3cb010894926ce5b93701c510b656695b0ef119fd60fef2948923cd2886a85211beb895285cdb6a492ffb83f6663fc3933a15ebc1e0b3e335a0ade9bcf4c1128cd2e50080812a8e068e388740d46b1a2e07aae1166c4d7df1e6bcaebdabcc7bdc6b91bb7df66ac73dbc3b3182ac17e62ad2bae53673f8bfa29d1ce76c40786ad4659ab6763c0626f7d7181f0b400b57da814a134653300eb82776c700caf235acb99ee743b82db2fb1f7181dcaf1d16718c8bb18bad3b7279233fdd76af256c5c3a19fb6b02feaa0ffecb948da1935ea0b4897b8f9e228f14bdc1386d9a88aa52f5c5395974f6835db85a83bdf3a10f615796d5fa56b04a23029e2cb465220ec8f6f6d449dd2513750d487dc1cd6d90e0ebb93268b6f16a74a6863a47e9fbbc95c18219ffdd8d378b7b60de77be796d602aa69968eb608519be8f39fd8b7c8630c64078152bc01e732ede39176abd21acbe5ed9ff48a6e8fa4f16f636c14c0d3892d3d2c76cc2e53758a69d964b54e92ba07b58e4caccde54dbcd4fdae57df2a28c1d964df35723a0c4265375f1bfc863da03b66fa42af1472b32b186b7307500160ced6b37d53afc22ce649f8ed3be37d0c6911fe163f33a5a0b46cb9de9204951e7b9839e306d35a38ab6ad9b4c31b723e3feef256a5d74e0f01d64471535d68e4eab74d2b5d7173eb45427f11aed950c684fe5ea52dedf862de9ee4d22d8d0a0547c02e3f75dc3558dbd82e8eefffc653ca4f9266e9c0264866bed4bc1d95393165369dab538bfae72a3ea76a8f898826786340181cf39ca348af35874af0beaad9af6cee4ef1c6a08780329b110f1f42e4ee5ea76df19e264ee94ef1cb1edaec7f26c6b2e5f20fc1527ac8c2ba81c2aabd132c55f566e5b25ce243e9e65a7e435a4b4c034160e505fc3b619a8112db778df7701d78cc34daee24737044b9a49db84379a32307f80b37385f2d15f7cabf8235ab8b5c621b8d08c106b0ab029c98c448789a8a0af758b8ef3e28414f303361d2d7c5ed20a518af7f72606219751da5a3bf64c62348dfffb5d709ff0b720a294ffa5e06efe8d05b41e1927c7a734f3ab07129d4dfd51070a980c6493645b52e02a3d5670800332046ca7554a3a1561a8a7f8d17d9acdf9140c80aa628edc0fa6f28c6acaf681e7e03d7220faee5ebbc1fa2b85de88944df27d9567d606a2c0a7f1a71907f2bb96bcde25377a07e7c9782b0afdebec625f25bc017ffd9ca7e02fa95dd6a306a6375c11a748c0699f44abafc0fdebd2cf399d8d9dacfe904e7d9e9015454ed49d895d4e32a0d9d76e308e0b38204bbaa287c54c0559b009f822dacdde822d809676e934d2000af1507dbf8f1c9dec1ec75667d764543550a521710f5467fc7c7dc5667371d427a0119a841184a0fe9731a500e9b6ee69fc9a074afe65e7948d673f86b38de59f06c30e0dcbd4dfdd90cdf2a542f2d85e986dc5128c6b05d7a80998d2a8822dade54b14d67e5aab8b130bbae09fb9d80c6e1e1451ce1155465d8beb5e5b22b680f0dc878379a8638108aad50ed25860b60656ada0ac4c096464b67e3c40a06d38775b1ec28be805dd5c7f7819a5cd2534df448cc39e9aa6005073cd4c717ddbd390b3fb4a0a5f969552784921d3b9a0e142d12578ad308f37b507592cf5024cb7e93de9746c740561b8dd168d86004391ce05bc157881173a2d1f911cb569b6475fd0eb8e46fb3ea32a95bd22765f7a1c359c21b085ee730c4844967aa675cafc1a864ad631436a754cdc407c801c8201de19f11286e810644c4514ed37ed0188b3d71f3fe43196671541dbc47885ed624affe668c6809b0196615903104ca2022824b24d9c340bb54d34978bb42c9621b11b694152dc2db5dd9e02b106a6da6f5e487850471b748ad35d8649cefa126da1927087285a17620f0e5ff428f92007eafa01b5b3499a07b66bc01748a534d293c93b4900e15885e08f83e5c0fb18604a41ec33bb701741ce4987d9cd1bdf6aaf9f59edd675298c1739598793f4b38e40fd9220a4320e18cc03f9d7c15dd8535aaae5da1c867cf71c4f9af5b3be7a4b79977de81f756d049c8c454d1e356653ee3f0095ec1c9f444a61f2cecabf20e4bb7947d17082d945dc81e1231752735a4a9824dbeb76923f13d5398fae20f559700ea7fc4aa733cb07d40a60f2919e0b81d5b1ec1d665f16fd8c2b0f977890deb2c8be7584646dbac8ecc831676582f3a84995c1a103318832139a0bfc895337324ca07bc6f2dbc4e7829eeb68f510d60a669277b52fb002f212e43ad7b39a1931afa03c5b0837a83002b4a1e60057b875b00d8e20b92142114e3e69997552191da89fbaa3ab6c6c909a70239f9808867f5e92bb4511b675ccb9a7e3fc849bd0473723d3963af63237ec472b0400258008004000", @ANYRES32, @ANYBLOB='\b\x00+\x00', @ANYRES32=r1, @ANYBLOB="57026f8008000000", @ANYRES32, @ANYBLOB="3c067730c72f68be478cb848c3416c94c4c84162880dce786c3116b10f8b10808d67e025214905ac1dff30da8ce85b692bb68d7197fc5832c7c015c195c2df0860ce228901dcd520fef1c1e0f7d8f7a12baa510f604a5b554c69e5f4564a0d3c15fd6839493461bcd85742537f85b5622eac8fa7e9fefdabc4254ba963eccac3e5f45b3ba9005456a25e5c01fdab88d66ad104009d800400e08004004380a70088002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc000c00fc00000800000000000050470727928bb72bf4d9f0c8ed67edcecf33615c20eaec71aaa2a5181d09f593773e7ee96c14dee95c57372ce953166f5d07a68c5293106b999c330050139a6023ca5d2c62389640375557931fb9b26ca7438a854d18787594382f247017acc84cfd41f2540d6780f0bc43b4c994a31fa7faf5f8327d3d51989c2679ec5eb46815717eeaf8f00646a42f9a477905020cd617c6026b16269482a0eb1368e54e01cd10e6c756c54fcae5af566cb81f6655411f3c8c9254c3650a377137ebd47a88fe55df3d53f99434ee7ee2c415fbd14478ea11f91104e874ed470400bc8030519a8b9034d0d43427e1f33ab789b58b7605ce684dcfebdfeea1fc0cfbd87ecb094e293b2e71d91a98c13a4db70dbed266b488c18d3f8a039db1002005b5eda53747ca160d6e7b0d7cc31183ace06ae735d095b6cb365f02b9efd1a19b8c9333855866d2853a17e28bfa4545f616d4c5912021b365e41fe333ea321f36d466c96d780dc0970ceb06ca25c752656db801cc372b296cd0ac7bc25d88c32bd82cf11d26e4d1d4b90aa24138f46389db8d0fda4e83f7191c25b1a5032e52f38d069706792de5f7315238264fda0cfa2ab663ae73e7fca154e9854413983f5a74d5575d1e54d1ff33f16d2c8faa8d16245b1ba0cd377bde055b3382295d4632f3086de767f9749bcd23da89bd296d3ad83b98883bf8f520de8bcebdfe9d7d11c61f0622bfef2e48e1eb4c85e265aa2a1861a92ee1e565fd76e0b023ca184d396b544b138b410e3bff8c6566e512aa1156949f82da754931db613ae4009b44b9c0a9e004000e0059fdf4000800350001000000"], 0x2554}, 0x1, 0x0, 0x0, 0x10}, 0x15) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r5, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdb, 0xebf, r5, 0x8000) fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) read$auto(r0, 0x0, 0x20) r7 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80001, 0x0) writev$auto(r7, &(0x7f0000000340)={0x0, 0x2}, 0x7) 5m57.21919661s ago: executing program 2 (id=1199): madvise$auto(0x0, 0x7ffffffffffffffe, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50a01, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty18\x00', 0x220800, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x2000000001, 0x914c00000000, 0x4c, 0x40eb4, r2, 0x300200000000) socket(0xb, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x101842, 0x0) write$auto(r3, 0x0, 0x81) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x288ac1, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup$auto(0x59, 0x0) sendto$auto(r0, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x5) mmap$auto(0x0, 0x9, 0xdb, 0x9b72, 0xffffffffffffffff, 0x3b) sysfs$auto(0xffffffff, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m41.438937737s ago: executing program 32 (id=1199): madvise$auto(0x0, 0x7ffffffffffffffe, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50a01, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty18\x00', 0x220800, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x2000000001, 0x914c00000000, 0x4c, 0x40eb4, r2, 0x300200000000) socket(0xb, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x101842, 0x0) write$auto(r3, 0x0, 0x81) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x288ac1, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup$auto(0x59, 0x0) sendto$auto(r0, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x5) mmap$auto(0x0, 0x9, 0xdb, 0x9b72, 0xffffffffffffffff, 0x3b) sysfs$auto(0xffffffff, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m31.867812475s ago: executing program 4 (id=1766): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) (async) socket(0x2, 0x3, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3) (async) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = epoll_create$auto(0x7) epoll_wait$auto(r0, 0x0, 0xe007, 0xe8a4e409) unshare$auto(0x7) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2m29.541140896s ago: executing program 4 (id=1773): mmap$auto(0x9, 0x400008, 0x1, 0x9b72, 0x2, 0x7ba) (async) r0 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x32, 0x0, 0x7) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) 2m29.100910432s ago: executing program 4 (id=1776): mmap$auto(0x10001, 0xb0e, 0x8000000000000001, 0x8000017, 0xffffffffffffffff, 0x7ffc) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x8}, 0x80000001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000280)="b6430e05cc418dce02dc65d20009011f736fc6e93c3f8ace328de68d3c284bb8a9f0d9f6b85e3de515ec5eea4816a0fb8a2b58967852493736417327509d4f47cbdf2b0d1648d40109fe13586de8680b0b8f25906817012e1f616308f6960bea749d7af92c11324327acfd7d8703f0339faf52e6b0fb4ed99999612851e4d66981787dd658ae3154f95e3de047d5bfd741d9cc2d53bebc9e40b3df27a8dbe7f1ccc1c8281b361eeb4173", 0x800c000, 0x4800c000, 0x80000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) r0 = socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(r2, &(0x7f0000000340)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\xff\xcf\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44o\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\x03\x00@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xbb\x7f\xa5\x87\x02\x87\xbbR\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcau6^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1Tz\xc1;Pw!\x8b\xf5{\xc7Zf/7\xf7h\xe2f\x1d\xa2\x11U\x91v\xf8Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VEv\xeb>\xffY\xe7\xc7\xe1,\xe7`\xe3\xc4\x95\xe52\x9d\x1e`#\xd8\xd7M\xc7\x15\x00\x00\x00\x00\x00\x00E\xd0e\x0eM\xa9Q\xac\x0eX]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x00'/551, 0xcd) r3 = getpgid(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x3c4, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x34, 0x19, 0x0, 0x1, [@generic="fe299241fa553feeac4e5eff22e525ca52fb2e3433f687c02078af4871ce672ca5ced5b9a624e6c970b3fe0badd977b7"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5e}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x35c, 0x19, 0x0, 0x1, [@nested={0x34e, 0xc9, 0x0, 0x1, [@generic="f4acc5ff365ddfa57cd4a0f3f53424ddc49f2be3b34a990984d4ed092510e7b0b20ec2b2db33d4be486e8b4bd9f211fcaf249fc25b2ba0e1b35ff18b7c", @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r3}, @generic="a2ed79076256ccbf2f31aacfd32ca9a8005456fa9bb7d8", @generic="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", @nested={0x4, 0x60}, @nested={0x4, 0x3f}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@remote}, @generic="26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a0882da110a7ad5d2cf750b5219e5cf8e27", @nested={0x4, 0x113}]}, @typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000180)='!:-', 0x3) r5 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x20000, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r5, &(0x7f0000000140)=""/136, 0x88) r6 = getpid() ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r6, 0x80) prctl$auto(0x3e, 0x5, r6, 0x1, 0x6a02) unshare$auto(0x40000080) mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) 2m26.174612106s ago: executing program 4 (id=1786): mmap$auto(0x0, 0x4, 0x10000400, 0xeb1, 0xfffffffffffffffa, 0x10000) capset$auto(&(0x7f0000000100)={0x20080522, 0x0}, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$auto(0xfffffffd, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0x8, 0x5, 0x5, 0xffffffffffffffff, 0x6, "2af051b26b658a20c83ce63f00", r2, r1, 0x5, 0x7, 0x7, 0x6}, 0x12) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0800140000000010"], 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0xc000) unshare$auto(0x40000080) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, r0, 0x1, 0x4) write$auto(r6, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r7, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x4, 0x84) 2m25.399117763s ago: executing program 4 (id=1788): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x10, 0x0, 0x0) modify_ldt$auto(0x8, &(0x7f0000000200)="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", 0x400010000) 2m25.175600982s ago: executing program 4 (id=1791): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x9, 0x200000, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) (async) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x8, 0x9, 0x6}, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, 0x0, 0x50) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r4) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r5, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) (async) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r7, 0xc0189436, 0x3) (async) sysfs$auto(0x2, 0x10000000000002f, 0x0) (async) fsopen$auto(0x0, 0x1) (async) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) 2m10.107929528s ago: executing program 33 (id=1791): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x9, 0x200000, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) (async) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x8, 0x9, 0x6}, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, 0x0, 0x50) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r4) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r5, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) (async) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r7, 0xc0189436, 0x3) (async) sysfs$auto(0x2, 0x10000000000002f, 0x0) (async) fsopen$auto(0x0, 0x1) (async) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) 1m51.44110718s ago: executing program 1 (id=1861): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x1, 0x4, 0xeb1, 0x405, 0x8002) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0) sysfs$auto(0x2, 0x100000000000029, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda1\x00', 0x8800, 0x0) ioctl$auto_IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x81a0ae8c, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0) 1m51.149993131s ago: executing program 1 (id=1862): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/erspan0/address\x00', 0x189000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb8, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0xb, 0x8000000000000000}}) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@bpf_attr_4={0x180000001, r1, 0xa, r1}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) mmap$auto(0xfffffffffffff000, 0x507, 0x80001000e5, 0xeb1, 0xffffffffffffffff, 0x100007fff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2cd42, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffc, 0x25800000, 0x9, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x600401, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/sub4/info\x00', 0x606901, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x4942179b, 0x1, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) 1m50.430133009s ago: executing program 1 (id=1863): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x1, 0x0) close_range$auto(r2, r3, 0x800) r5 = open(0x0, 0x26241, 0x20) r6 = socket(0x8, 0x6, 0x406) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x5) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone(0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000000)="b68161a86e8da4110338a92ca863a91beaa8558206154cc5fbaf") listen$auto(0x3, 0x81) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000080)="3c6b0c7a07124370705185bb101bbfd62a987122e1d97f2a18560700d0e5c52b03a00666448fde68f7409966116b6a0dae2b85d6c5933e66736743ebdb8ed2513ad0b7ff9a5b8512bb48b0d50e3c4f6f6488bb1fc69ecc", 0x12, 0x0, 0x40000000009, 0x0, 0x21, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(r6, r5, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/maps\x00', 0x8e880, 0x0) 1m49.816759374s ago: executing program 1 (id=1866): r0 = landlock_create_ruleset$auto(&(0x7f0000000080)={0x3, 0x0, 0xffffffffffffff01}, 0x8, 0xfffffffb) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000000c0)="214f7e9402c6b28544bbd5c5ee3b85f15548b8eb34d357367e25475925208b16e84d2681b3eb653e99e0ceb57233287f96c4101ed33db19c0dd74467c94906d2573eea4bd2faa4961a1cd302b3d7f3768ef61a1a57d50b4393000d98793fed863aaf66aecee5c0edccf4bc83339c09b3946f1996fb5a9cb565893f6a3e828a2813538ce45e01bbbd2abfb49581fe314c4e3d1e50519f4d032dbcfcd1f63703bdd0f545970a", 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttynull\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000001840)="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", 0xe3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x40000e6) futex_waitv$auto(&(0x7f0000000000)={0x7, 0x5, 0x0, 0x8}, 0x7, 0x0, &(0x7f0000000040)={0x8000000000000001, 0x7ff800}, 0x1) r3 = socket(0x2, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2000000000000006, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r5) read$auto(r5, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r4, 0x3, 0x44, &(0x7f0000000040)='/dev/video1\x00', 0x4800000) close_range$auto(r3, 0x8, 0x0) open(0x0, 0x80000, 0x151) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x402, 0x0) 1m48.566640169s ago: executing program 1 (id=1867): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) 1m48.235397158s ago: executing program 1 (id=1868): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf250400c80004001900"], 0x18}, 0x1, 0x0, 0x0, 0x2400c8c8}, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000100), 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) fchown$auto(r2, 0x0, 0x0) io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000100)=""/192, 0xc0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5429, 0x0) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0x4, 0x15, 0x5) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) mmap$auto(0x7, 0x4020009, 0x10000df, 0xeb1, 0x401, 0x8000) landlock_restrict_self$auto(r4, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x21, 0x2, 0x2) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x0, 0x0, 0xd) clone$auto(0xfffffffffffffffb, 0x8, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x3, 0x4) mmap$auto(0x3ff, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) fcntl$auto(0x3, 0x8, 0x9ec0000000000000) rename$auto(0x0, 0x0) 1m36.016894464s ago: executing program 5 (id=1890): open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) unlink$auto(&(0x7f0000000380)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(0x0, 0x1652c2, 0xe1d2b27bdc14aa98) openat$dir(0xffffffffffffff9c, 0x0, 0x40342, 0x22) socket(0xa, 0x2, 0x73) bpf$auto(0x0, &(0x7f0000000600)=@bpf_attr_4={0x200, 0xffffffffffffffff, 0xffffffff}, 0xa) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x2, 0xa, 0x1}, {0x10100, 0x2, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000780)={0x8, 0x1, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffdfff8, 0x7, 0x2, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1c97, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0xffffffffffffcd54, 0x9, 0x0, 0x2, 0x3, [0x0, 0x0, 0x0, 0xfa, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb78a, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xadf3, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x10000000000000], "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"}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = getpid() sched_setaffinity$auto(r2, 0x5, 0x0) r3 = getpid() sched_setaffinity$auto(r3, 0x8, &(0x7f0000000740)=0x9) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100250600000000010000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x100020, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x8000000000000003, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x103]}, 0x1fe, 0x81) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x9a28) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) flock$auto(r5, 0xa) r6 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r6, &(0x7f0000000200)={0x8, 0xfe, "0200000000000000"}, 0x100004) 1m35.01354511s ago: executing program 5 (id=1891): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x161782, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x4000000003b, 0x8) 1m32.362231747s ago: executing program 34 (id=1868): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf250400c80004001900"], 0x18}, 0x1, 0x0, 0x0, 0x2400c8c8}, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000100), 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) fchown$auto(r2, 0x0, 0x0) io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000100)=""/192, 0xc0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5429, 0x0) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0x4, 0x15, 0x5) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) mmap$auto(0x7, 0x4020009, 0x10000df, 0xeb1, 0x401, 0x8000) landlock_restrict_self$auto(r4, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x21, 0x2, 0x2) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x0, 0x0, 0xd) clone$auto(0xfffffffffffffffb, 0x8, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x3, 0x4) mmap$auto(0x3ff, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) fcntl$auto(0x3, 0x8, 0x9ec0000000000000) rename$auto(0x0, 0x0) 1m32.250301521s ago: executing program 5 (id=1896): mmap$auto(0x0, 0x46, 0x4000000000e2, 0xeb3, 0xffffffffffffffff, 0x4008000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6a) madvise$auto(0x63f2, 0x6, 0x4) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, 0x0, 0xd) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) r0 = socket(0xa, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = epoll_create$auto(0x7) epoll_wait$auto(r1, 0x0, 0xe007, 0xe8a4e409) ioctl$auto(r0, 0x8982, 0x1) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) 1m30.098365071s ago: executing program 5 (id=1899): msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000200)={{0x7, 0xffffffffffffffff, 0xee01, 0x7, 0x2e, 0x9, 0x8}, 0x0, 0x0, 0x7657, 0x8, 0xbfe, 0x69a5, 0xa00000000000000, 0x79, 0x9, 0xffd}) msgctl$auto_IPC_INFO(0xfffffffb, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) 1m29.051713151s ago: executing program 5 (id=1900): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) r0 = open(0x0, 0x161340, 0x130) statx$auto(r0, 0x0, 0xb003, 0xda97, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r1, 0x84, 0x82, 0x0, &(0x7f0000000000)=0x7ffe) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) write$auto(0x3, 0x0, 0xfdef) 1m28.754233527s ago: executing program 5 (id=1901): r0 = socket(0x1d, 0x3, 0x1) getpeername$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) close_range$auto(r1, r2, 0x7f2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto(r1, 0x0, 0x1ff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf8, 0x5, "a401d243991a4de376cc2bd4db000000000000000f323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x1, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x60000, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x204, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0x7, 0x4]}, 0x0) open(0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/181, 0x9a) 1m13.596745703s ago: executing program 35 (id=1901): r0 = socket(0x1d, 0x3, 0x1) getpeername$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) close_range$auto(r1, r2, 0x7f2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto(r1, 0x0, 0x1ff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf8, 0x5, "a401d243991a4de376cc2bd4db000000000000000f323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x1, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x60000, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x204, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0x7, 0x4]}, 0x0) open(0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/181, 0x9a) 26.995499857s ago: executing program 7 (id=2047): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r2 = epoll_create$auto(0x1) r3 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r3, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) 25.511069489s ago: executing program 7 (id=2050): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sync_file_range$auto(r0, 0x7, 0x80000000, 0x5) mmap$auto(0x0, 0x1, 0x4, 0xeb1, 0x405, 0x8002) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0) sysfs$auto(0x2, 0x100000000000029, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda1\x00', 0x8800, 0x0) ioctl$auto_IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x81a0ae8c, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c06, 0x0) 24.929690765s ago: executing program 7 (id=2053): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sync_file_range$auto(r0, 0x7, 0x80000000, 0x5) mmap$auto(0x0, 0x1, 0x4, 0xeb1, 0x405, 0x8002) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x155) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0) sysfs$auto(0x2, 0x100000000000029, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda1\x00', 0x8800, 0x0) ioctl$auto_IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x28, 0x1, 0x0) getsockopt$auto(r3, 0x27, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x81a0ae8c, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c00, 0x0) ioctl$auto_TIOCSTI(r1, 0x5412, &(0x7f0000000000)="8fb7352040006cc6d09c5bf2af0b058d5274f3c2e3610e") 24.262508832s ago: executing program 7 (id=2055): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2f4f02, 0x0) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci7/hci7:200/power/autosuspend_delay_ms\x00', 0x0, 0x0) poll$auto(0x0, 0x2, 0x7) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffe, 0xa, 0x9, 0x17, r1, 0x8001) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x242a42, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x101000, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(r0, 0x7fff, 0x6ff, 0x0, 0x5) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x7fff) sendfile$auto(r4, r4, 0x0, 0x10000800000003) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000180)={0x7f, 0xfffffffd, 0x9, 0x5, 0x101, 0x80000001, r2, [0xa, 0x4, 0xb], {0x108, 0x7, 0x6, 0x0, 0x4, 0x99accf6b, 0x0, 0xc, 0xf943}, {0x13, 0x0, 0x1f3, 0x4, 0xfe, 0x1, 0x9, 0x400, 0x13}}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 22.718625839s ago: executing program 7 (id=2060): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000009c0)="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", 0xe64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv6/conf/wg0/force_mld_version\x00', 0x741a42, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0xcc, 0x2, 0xffffffffffffffff, 0x7fffffff, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket(0xa, 0x5, 0x84) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@llc={0x1a, 0x33a, 0xa, 0x10, 0xd, 0x6b, @broadcast}, 0x1c) socket(0x23, 0x6, 0x0) r2 = socket(0x25, 0x1, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x7, &(0x7f00000003c0)={0x0, 0x4}) socket(0x18, 0x4, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x5, 0x2, 0xffffffffffffffff, 0x3, 0x8) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) fcntl$auto_F_RDLCK(r2, 0x6, 0x0) setsockopt$auto_SO_BROADCAST(r2, 0x10001, 0x6, &(0x7f0000000100)='\xe7\x00', 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x34e8, 0x1, 0x2000000000000002, 0x3, 0x8, 0x5, 0x6, 0x100, 0x1, 0x7fff, 0x2, 0x3, 0x7, 0xffffffffffffffea, 0x0, 0x3, 0x40000000, 0xfff, 0x3bc, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfff, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x10000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x2]}, 0x9, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r1], 0x1ac}, 0x1, 0xffffff9e}, 0x2400c045) write$auto_tty_fops_tty_io(r0, &(0x7f0000000080)="40dcf0", 0x3) mmap$auto(0x6, 0x200000000f, 0xf3b, 0x7f, r0, 0x800005) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r6, &(0x7f0000000580)='+\x00\xa6\xcc\r\x91PU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\x06\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\xfc\xad\xc8M\xef\x19[\xba \xe6\xca\xb2\xc9\x1c+\xdf\xb9\\\xb4\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\xb4=^VJ\xbe\x87O\x88\xa4\x10\xf7B\xf2i\xd0\xa6B\x8b\"\x87\xa8\x14[\xde<\x01\xd7\x9d\x13\xcc\x14T\xd2\'\xe4\xcds\xf8\xcdh\xd1\x92\x85\xeanf\x98\xc4\xb7\xb2\xcb\f\x1f\bcG\x19\xdc\x06\x86.\x1c\x81X\x8f\x9bz\aP\xc7\x97(Z\xe7\xa0\xa9#\xe4\x18D\x951a\x12\xe6]\x8fR\xd6\x04\b}\xde\x88*\xc5\x1e\'\xcb2$\xbb\x02\xf6o\xe2f\xacG\x90\xea\xcf\bJ\x1e{\xf4,H8\x1b\xf2\x10X9\x91\fh{\x9a\x97\x19\x85\xd7\x00\x00\x00\x00\x00\x00\x00', 0x5) 19.659245423s ago: executing program 7 (id=2064): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) (async) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000140)={0x20000000000008, 0x8, 0x2, 0xffffffffffff9e27}) mmap$auto(0xfffffffffffffffd, 0x8, 0xdf, 0x9b72, r1, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x1000, 0x400050, 0x9) 15.334079851s ago: executing program 3 (id=2074): mmap$auto(0x0, 0x46, 0x4000000000e2, 0xeb3, 0xffffffffffffffff, 0x4008000) socket(0xa, 0x1, 0x84) madvise$auto(0x63f2, 0x6, 0x4) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121f01, 0x0) write$auto(r0, 0x0, 0xd) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe007, 0xe8a4e409) ioctl$auto(r1, 0x8982, 0x1) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) 13.144353032s ago: executing program 3 (id=2079): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = epoll_create$auto(0x1) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) socket(0x2c, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0) 11.239736768s ago: executing program 3 (id=2086): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x161782, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x43}, 0x40000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810003, 0xffb, 0x10, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) 10.793106226s ago: executing program 0 (id=2088): mmap$auto(0x0, 0x46, 0x4000000000e2, 0xeb3, 0xffffffffffffffff, 0x4008000) socket(0xa, 0x1, 0x84) madvise$auto(0x63f2, 0x6, 0x4) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121f01, 0x0) write$auto(r0, 0x0, 0xd) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe007, 0xe8a4e409) ioctl$auto(r1, 0x8982, 0x1) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) 7.371576801s ago: executing program 0 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x4, 0x8}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x40000) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/net/fib_triestat\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0xf429, 0x100) mmap$auto(0x4, 0x4, 0x6, 0x17, r2, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_BLKROTATIONAL(r3, 0x127e, 0x0) 7.19510664s ago: executing program 3 (id=2092): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffc) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0xe2}, 0x6, 0x5, 0x100000004, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r4) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES16=r5, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x40040) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0x0, &(0x7f0000000180)=@link_create={@prog_fd=r2, @target_ifindex, 0xd, 0x3420, @perf_event={0x1}}, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 6.764374407s ago: executing program 0 (id=2093): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x40850) io_uring_setup$auto(0x9, 0x0) (async) r1 = io_uring_setup$auto(0x9, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000100)={"e4cc9107f86a9f39bed9647575793cd27d1b52a1a90e85ba7f2b03e77937073b", 0x7, 0x9, 0x0, 0xc9d, 0x100000001, 0xffffffffffffffff}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) (async) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) fcntl$auto(0x8000000000000001, 0x5, r2) (async) fcntl$auto(0x8000000000000001, 0x5, r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="f420", @ANYBLOB='\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x5, 0x0, 0x1000000, 0x1}, 0x6}, 0x3, 0x0) (async) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x5, 0x0, 0x1000000, 0x1}, 0x6}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0/00:05/power/wakeup_expire_count\x00', 0x208001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0/00:05/power/wakeup_expire_count\x00', 0x208001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) 6.488998715s ago: executing program 6 (id=2094): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x82001, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x20) (async, rerun: 64) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x1cb842, 0x0) (rerun: 64) write$auto(r2, 0x0, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec28\x00', 0xc0, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) (async, rerun: 32) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) (rerun: 32) unshare$auto(0x40000080) (async) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x480, 0x29, &(0x7f0000000000)=']\x00', 0x8) (async) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) 6.164823058s ago: executing program 6 (id=2095): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(r3, &(0x7f0000000000)='SEG6\x00', 0x3ff) r4 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r5, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000015cf62859ae500"/20, @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf251700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xe040) sendmsg$auto_TIPC_NL_KEY_SET(r4, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x14, r6, 0x908, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x405, 0x200000008000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x8081, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x3ff000000000002, 0x7, 0xf) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi8\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r7, &(0x7f0000000100)=""/4096, 0x1000) 5.947735662s ago: executing program 0 (id=2096): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd ', 0xf, 0x0) 5.327036605s ago: executing program 0 (id=2097): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000001040)='./file0/file0\x00', 0x1000, 0x4) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0xf9) ppoll$auto(&(0x7f0000000180)={r0, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) creat$auto(&(0x7f0000000000)='./file0\x00', 0x43) r1 = open(0x0, 0x0, 0x57e) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fanotify_init$auto(0x8, 0x2000000000002) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') setsockopt$auto(0x3, 0x10000000084, 0x9, 0x0, 0x80000001) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/distance\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001080)=""/98, 0x62) r4 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000001200)={@siginfo_0_0={0x7ff, 0x6, 0x8, @_sigfault={&(0x7f0000001100)="953e5183574defb0127864048bee9549111d9c847dcc7ce9642c810a6025ac0b70f4b44f8c1031f2e93f8be7b78a72d437c9ce9d4248470eb7057b74616beb14c7f577b982f0020839f410afe98f7960bb6d1eb96a433f89fb1b5a1debeba13fc630d0552a7d6e9268cd9bca01aecc75ca7792e0c28d232548f4680ba1f584c42ee5b00240c5810f091040d4a0348f054869e187cc92931a1d8e1bb155a957655a1b6ffd4e51278ce68e30e4b935a518d0445d1595e17cd4c6ce9a47b4628bb6f960df06458c233a9375157f2e580436dc2770f257b6b841a885cfbd076f452dfbfee373d0159236b09ab22fc960f396aac726315f3a5892553b336a", @_perf={0x4, 0x6, 0x401}}}}, 0x18000000, &(0x7f0000001340)={{0x22b, 0x9c}, {0x4, 0x7}, 0x8d2, 0xab12, 0x0, 0x1, 0x1, 0x1, 0xfc, 0xfffffffffffffff7, 0xe, 0x7, 0x1, 0x10, 0x9, 0xfffffffffffffff7}) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000014c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r4}, @OVS_DP_ATTR_NAME={0x30, 0x1, '/sys/bus/usb/drivers/usbip-host/match_busid\x00'}, @OVS_DP_ATTR_NAME={0xc, 0x1, ':@:\x02!:!\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4054) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 5.300984358s ago: executing program 3 (id=2098): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x161782, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r4, r3, 0x5, 0x8) utimensat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x3, 0xa}, 0x11c) getsockopt$auto_SO_PEERNAME(r3, 0xe, 0x1c, &(0x7f0000000100)='[*\x00', &(0x7f0000000180)=0xd7e) fcntl$auto_F_SETOWN(r1, 0x8, r2) sysfs$auto(0x2, 0x4000000003b, 0x8) 4.559118598s ago: executing program 6 (id=2099): mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0xffffffffffffffff, 0x9) r0 = socket(0x27, 0x5, 0xfffffffe) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="5c0000a0", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf2501000000050007009300000005000800000000000c0003000400000000000000050007007f0000000c00010000000000000000000c00010001000000000000000c0003000300000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4c080}, 0x90) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000) wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={0x0}, 0x1, 0x0, 0x0, 0x2c00185c}, 0x400d4) write$auto(0x3, 0x0, 0x100000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto(0x3, 0x0, 0x8080) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x10052b) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x800688d, 0x9) read$auto(r3, 0x0, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 4.49633145s ago: executing program 36 (id=2064): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) (async) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000140)={0x20000000000008, 0x8, 0x2, 0xffffffffffff9e27}) mmap$auto(0xfffffffffffffffd, 0x8, 0xdf, 0x9b72, r1, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x1000, 0x400050, 0x9) 3.748672987s ago: executing program 6 (id=2101): mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0xffffffffffffffff, 0x9) r0 = socket(0x27, 0x5, 0xfffffffe) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="5c0000a0", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf2501000000050007009300000005000800000000000c0003000400000000000000050007007f0000000c00010000000000000000000c00010001000000000000000c0003000300000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4c080}, 0x90) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000) wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={0x0}, 0x1, 0x0, 0x0, 0x2c00185c}, 0x400d4) write$auto(0x3, 0x0, 0x100000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto(0x3, 0x0, 0x8080) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x10052b) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x800688d, 0x9) read$auto(r3, 0x0, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 3.184208194s ago: executing program 6 (id=2102): r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pidfd_open$auto(0x0, 0xfdfffffe) socket(0x200000000000011, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) write$auto(r0, &(0x7f00000010c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x3) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_suspend_late\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) 1.821431135s ago: executing program 6 (id=2103): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000002c0), 0x402000, 0x0) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x7, 0x80b, 0xffffffff, 0xfffffffe}, 0x20, 0x0, 0x8000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') mmap$auto(0x100, 0x4020029, 0xdf, 0x18, r0, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x1, 0x5, 0xffffffff, 0x2000000000210002, 0x0, 0x8007, 0x5, 0x2, 0x7, 0xaf, 0x4, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000007, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/vhci_hcd.13/usb35/dev\x00', 0xd1b680, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x3, 0xa) setsockopt$auto(r2, 0x0, 0x20, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r6, @ANYBLOB="0800050006000000110001006f76735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="7efdc1d855f01853d9af3a26401205fc2bd288d195f1ced393e5085c80c6ff605bf59e74d4a82ff902791119f91e21c233dca61d69dca40cfb3dcdd7b7e121a2c6264144fb6e6df340999c6ff42b7b9e378b375aa3a3066517811c60a537041d9d3bf6100d1db2e6dc5978a2f3d5f45b"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020000000800070009000000cd38edd1cf52304edf8c9e332ee05b24c4efac24eb72067d031d2a447d5655538dc555c9b2d6e872f5105cecd0317d31f6"], 0x24}, 0x1, 0x0, 0x0, 0x20004895}, 0x20008004) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) ioctl$auto(r7, 0x4b2f, r7) 25.054537ms ago: executing program 0 (id=2104): unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x4000000000, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) r1 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r1, 0x0, 0x101000000000009, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f00000001c0)="dd2fe40a09", 0x5ac, &(0x7f0000000100)={&(0x7f0000000340), 0x21}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r3, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) write$auto(r0, &(0x7f0000000000)='[-%\x00', 0x4) socket(0x2, 0x80002, 0x73) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) 0s ago: executing program 3 (id=2105): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @random="431396a271ac"}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ptys3/power/autosuspend_delay_ms\x00', 0x80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f00000002c0)=0x6) mkdir$auto(0x0, 0x7f) memfd_create$auto(0x0, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40e00, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): tributes in process `syz.4.1297'. [ 479.056005][T12994] team0: Port device team_slave_1 removed [ 480.503926][T12983] Process accounting resumed [ 481.708459][T12881] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 482.646168][T13034] FAULT_INJECTION: forcing a failure. [ 482.646168][T13034] name failslab, interval 1, probability 0, space 0, times 0 [ 482.716046][T12881] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 482.774597][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.3.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.774622][T13034] Tainted: [L]=SOFTLOCKUP [ 482.774627][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 482.774636][T13034] Call Trace: [ 482.774641][T13034] [ 482.774647][T13034] dump_stack_lvl+0x100/0x190 [ 482.774669][T13034] should_fail_ex.cold+0x5/0xa [ 482.774686][T13034] should_failslab+0xc2/0x120 [ 482.774706][T13034] kmem_cache_alloc_noprof+0x91/0x6a0 [ 482.774723][T13034] ? prepare_creds+0x2c/0x950 [ 482.774753][T13034] prepare_creds+0x2c/0x950 [ 482.774775][T13034] __sys_setfsuid+0xda/0x380 [ 482.774792][T13034] do_syscall_64+0x115/0x840 [ 482.774805][T13034] ? clear_bhb_loop+0x40/0x90 [ 482.774822][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.774837][T13034] RIP: 0033:0x7f193739de59 [ 482.774850][T13034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.774864][T13034] RSP: 002b:00007f193831e028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 482.774879][T13034] RAX: ffffffffffffffda RBX: 00007f1937625fa0 RCX: 00007f193739de59 [ 482.774888][T13034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 482.774897][T13034] RBP: 00007f1937433e6f R08: 0000000000000000 R09: 0000000000000000 [ 482.774905][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.774913][T13034] R13: 00007f1937626038 R14: 00007f1937625fa0 R15: 00007ffca28570e8 [ 482.774932][T13034] [ 483.478707][T13050] zswap: compressor not available [ 483.667621][T13061] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 483.835635][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 484.107223][T13071] tipc: Started in network mode [ 484.127082][T13071] tipc: Node identity ee00, cluster identity 4711 [ 484.171575][T13071] tipc: Node number set to 60928 [ 486.371545][T13096] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 486.946945][T13105] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 487.543255][T13109] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 487.773522][T13118] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 487.861129][T13112] [U] ^\ [ 488.329415][T13126] vhci_hcd: not connected 4 [ 488.359924][T13121] vhci_hcd: not connected 4 [ 488.428292][T13002] Bluetooth: hci3: command 0x0406 tx timeout [ 490.579668][T13172] vivid-007: ================= START STATUS ================= [ 490.622824][T13172] vivid-007: Generate PTS: true [ 490.654687][T13172] vivid-007: Generate SCR: true [ 490.686018][T13172] tpg source WxH: 320x240 (Y'CbCr) [ 490.726364][T13172] tpg field: 1 [ 490.753684][T13172] tpg crop: (0,0)/320x240 [ 490.779975][T13172] tpg compose: (0,0)/320x240 [ 490.860552][T13172] tpg colorspace: 8 [ 490.908552][T13172] tpg transfer function: 0/0 [ 490.934448][T13172] tpg Y'CbCr encoding: 0/0 [ 490.963324][T13172] tpg quantization: 0/0 [ 490.992276][T13172] tpg RGB range: 0/2 [ 491.012743][T13172] vivid-007: ================== END STATUS ================== [ 492.161428][T13190] blktrace: Concurrent blktraces are not allowed on ram11 [ 492.263671][T13195] blktrace: Concurrent blktraces are not allowed on ram11 [ 492.907537][T13208] random: crng reseeded on system resumption [ 493.450852][T13216] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 493.642803][T13216] File: /dev/nullb0 PID: 13216 Comm: syz.1.1336 [ 494.465712][T13241] vivid-007: ================= START STATUS ================= [ 494.579034][T13241] vivid-007: Generate PTS: true [ 494.657021][T13241] vivid-007: Generate SCR: true [ 494.740222][T13241] tpg source WxH: 320x240 (Y'CbCr) [ 494.786347][T13248] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1342'. [ 494.806478][T13241] tpg field: 1 [ 494.853096][T13241] tpg crop: (0,0)/320x240 [ 494.898528][T13241] tpg compose: (0,0)/320x240 [ 494.967777][T13241] tpg colorspace: 8 [ 495.025484][T13241] tpg transfer function: 0/0 [ 495.078898][T13241] tpg Y'CbCr encoding: 0/0 [ 495.132467][T13241] tpg quantization: 0/0 [ 495.196951][T13241] tpg RGB range: 0/2 [ 495.249761][T13241] vivid-007: ================== END STATUS ================== [ 495.400835][T13232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 495.526305][T13258] Process accounting paused [ 497.577652][T13299] netlink: 346 bytes leftover after parsing attributes in process `syz.4.1352'. [ 497.915046][T13304] [U] 0="/ [ 497.974603][T13304] [U] [ 498.032742][T13304] [U] EeQ@ [ 498.974088][T13300] [U]  [ 499.506269][T13301] kexec: Could not allocate control_code_buffer [ 500.407541][T13332] loop6: detected capacity change from 0 to 2097152 [ 500.931944][T13326] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 501.158545][ T30] audit: type=1800 audit(2147483827.790:54): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1362" name="members" dev="configfs" ino=58301 res=0 errno=0 [ 501.713717][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.725057][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.596155][T13344] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 502.863012][T13354] [U] ^\ [ 504.042678][T13388] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1373'. [ 505.376061][T13405] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 506.261981][T13380] Process accounting resumed [ 507.699624][T13435] ubi0: attaching mtd0 [ 507.727890][T13435] ubi0: scanning is finished [ 507.770352][T13431] FAULT_INJECTION: forcing a failure. [ 507.770352][T13431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 507.854115][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.0.1384 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.854141][T13431] Tainted: [L]=SOFTLOCKUP [ 507.854146][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 507.854155][T13431] Call Trace: [ 507.854160][T13431] [ 507.854166][T13431] dump_stack_lvl+0x100/0x190 [ 507.854191][T13431] should_fail_ex.cold+0x5/0xa [ 507.854210][T13431] get_futex_key+0x1d2/0x14f0 [ 507.854236][T13431] ? __pfx_get_futex_key+0x10/0x10 [ 507.854255][T13431] ? is_bpf_text_address+0x8a/0x1a0 [ 507.854275][T13431] ? bpf_ksym_find+0x124/0x1c0 [ 507.854290][T13431] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 507.854309][T13431] ? is_bpf_text_address+0x94/0x1a0 [ 507.854330][T13431] futex_wait_setup+0x91/0x540 [ 507.854351][T13431] __futex_wait+0x19f/0x300 [ 507.854370][T13431] ? __pfx___futex_wait+0x10/0x10 [ 507.854386][T13431] ? futex_hash+0x311/0x400 [ 507.854408][T13431] ? __pfx_futex_wake_mark+0x10/0x10 [ 507.854428][T13431] ? __pfx_futex_hash+0x10/0x10 [ 507.854447][T13431] ? __x64_sys_mount+0x239/0x310 [ 507.854462][T13431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.854483][T13431] futex_wait+0xe6/0x370 [ 507.854500][T13431] ? __pfx_futex_wait+0x10/0x10 [ 507.854526][T13431] do_futex+0x265/0x440 [ 507.854541][T13431] ? __pfx_do_futex+0x10/0x10 [ 507.854554][T13431] ? kasan_quarantine_put+0x104/0x240 [ 507.854570][T13431] ? lockdep_hardirqs_on+0x78/0x100 [ 507.854597][T13431] __x64_sys_futex+0x34f/0x4d0 [ 507.854614][T13431] ? __pfx___x64_sys_futex+0x10/0x10 [ 507.854629][T13431] ? __pfx___x64_sys_mount+0x10/0x10 [ 507.854649][T13431] do_syscall_64+0x115/0x840 [ 507.854662][T13431] ? clear_bhb_loop+0x40/0x90 [ 507.854678][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.854693][T13431] RIP: 0033:0x7f121619de59 [ 507.854706][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.854719][T13431] RSP: 002b:00007f121704f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 507.854734][T13431] RAX: ffffffffffffffda RBX: 00007f1216425fa8 RCX: 00007f121619de59 [ 507.854743][T13431] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1216425fa8 [ 507.854755][T13431] RBP: 00007f1216425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 507.854764][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.854772][T13431] R13: 00007f1216426038 R14: 00007ffd4afb3760 R15: 00007ffd4afb3848 [ 507.854791][T13431] [ 509.069281][T13435] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 509.350372][T13455] random: crng reseeded on system resumption [ 509.489778][T13457] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1390'. [ 509.781384][T13459] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 510.063645][T13472] futex_wake_op: syz.0.1392 tries to shift op by -2048; fix this program [ 510.106340][T13472] futex_wake_op: syz.0.1392 tries to shift op by -2048; fix this program [ 510.722767][T13474] Process accounting paused [ 511.076485][T13488] FAULT_INJECTION: forcing a failure. [ 511.076485][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 511.155150][T13488] CPU: 0 UID: 0 PID: 13488 Comm: syz.1.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.155177][T13488] Tainted: [L]=SOFTLOCKUP [ 511.155182][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 511.155191][T13488] Call Trace: [ 511.155196][T13488] [ 511.155202][T13488] dump_stack_lvl+0x100/0x190 [ 511.155224][T13488] should_fail_ex.cold+0x5/0xa [ 511.155241][T13488] should_failslab+0xc2/0x120 [ 511.155260][T13488] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 511.155279][T13488] ? __d_alloc+0x35/0xa50 [ 511.155297][T13488] __d_alloc+0x35/0xa50 [ 511.155313][T13488] d_alloc_pseudo+0x1c/0xc0 [ 511.155331][T13488] alloc_file_pseudo+0x118/0x290 [ 511.155349][T13488] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 511.155365][T13488] ? alloc_fd+0x471/0x7a0 [ 511.155389][T13488] sock_alloc_file+0x50/0x210 [ 511.155409][T13488] __sys_socket+0x1c0/0x260 [ 511.155430][T13488] ? __pfx___sys_socket+0x10/0x10 [ 511.155457][T13488] __x64_sys_socket+0x72/0xb0 [ 511.155477][T13488] ? lockdep_hardirqs_on+0x78/0x100 [ 511.155499][T13488] do_syscall_64+0x115/0x840 [ 511.155511][T13488] ? clear_bhb_loop+0x40/0x90 [ 511.155529][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.155544][T13488] RIP: 0033:0x7fcfebd9de59 [ 511.155557][T13488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.155571][T13488] RSP: 002b:00007fcfecc11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 511.155586][T13488] RAX: ffffffffffffffda RBX: 00007fcfec025fa0 RCX: 00007fcfebd9de59 [ 511.155595][T13488] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 511.155604][T13488] RBP: 00007fcfebe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 511.155612][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.155621][T13488] R13: 00007fcfec026038 R14: 00007fcfec025fa0 R15: 00007fffce4ede28 [ 511.155640][T13488] [ 512.006807][T13506] [U] ^\ [ 512.484674][T13520] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 513.115974][T13528] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1405'. [ 513.351129][T13531] vivid-007: ================= START STATUS ================= [ 513.400238][T13531] vivid-007: Generate PTS: true [ 513.435668][T13531] vivid-007: Generate SCR: true [ 513.468936][T13531] tpg source WxH: 320x240 (Y'CbCr) [ 513.496988][T13531] tpg field: 1 [ 513.533061][T13531] tpg crop: (0,0)/320x240 [ 513.562689][T13531] tpg compose: (0,0)/320x240 [ 513.625570][T13531] tpg colorspace: 8 [ 513.657576][T13531] tpg transfer function: 0/0 [ 513.701460][T13531] tpg Y'CbCr encoding: 0/0 [ 513.735511][T13531] tpg quantization: 0/0 [ 513.761039][T13531] tpg RGB range: 0/2 [ 513.783104][T13531] vivid-007: ================== END STATUS ================== [ 513.841316][T13537] [U] 0="/ [ 513.878629][T13537] [U] [ 513.937864][T13537] [U] EeQ@ [ 514.289958][T12881] Bluetooth: hci4: Unexpected cc 0x7c89 with no status [ 514.483708][T13534] [U]  [ 514.841179][T13559] [U] ^\ [ 514.924630][T13535] kexec: Could not allocate control_code_buffer [ 516.704440][T13574] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 517.586977][T13585] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 517.706100][T12881] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 519.751282][T13608] [U] ^\ [ 520.124562][T13618] [U] 0="/ [ 520.167338][T13618] [U] [ 520.206679][T13618] [U] EeQ@ [ 520.847081][T13611] [U]  [ 520.996486][T13617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.060713][T13617] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 521.142047][T13617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.186029][T13617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 521.225331][T13617] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 521.312140][T13617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 521.342570][T13617] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 521.402948][T13617] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 521.466496][T13612] kexec: Could not allocate control_code_buffer [ 521.549770][T13632] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1427: iget: checksum invalid [ 521.656238][T13632] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 521.731629][T13632] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1427: iget: checksum invalid [ 521.779368][T13632] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 521.805560][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1429'. [ 521.835755][T13632] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1427: iget: checksum invalid [ 521.899460][T13632] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 521.947131][T13632] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1427: iget: checksum invalid [ 521.969059][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1429'. [ 522.023675][T13632] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 522.078589][T13632] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 522.144434][T13632] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 522.428164][T12881] Bluetooth: hci0: command 0x0c1a tx timeout [ 523.148530][T12881] Bluetooth: hci1: command 0x0c1a tx timeout [ 523.228404][T12881] Bluetooth: hci3: command 0x0406 tx timeout [ 523.362848][T13644] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 523.388961][T12881] Bluetooth: hci4: command 0x0c1a tx timeout [ 523.750714][T13682] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1434: iget: checksum invalid [ 523.844913][T13682] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 523.991911][T13682] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1434: iget: checksum invalid [ 524.085390][T13682] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 524.164057][T13682] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1434: iget: checksum invalid [ 524.263096][T13682] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 524.356454][T13682] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1434: iget: checksum invalid [ 524.442749][T13682] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 524.502485][T13682] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 524.513459][T12881] Bluetooth: hci0: command 0x0c1a tx timeout [ 524.560766][T13682] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 525.062848][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'. [ 525.308240][T12881] Bluetooth: hci3: command 0x0406 tx timeout [ 525.469394][T12881] Bluetooth: hci4: command 0x0c1a tx timeout [ 525.721440][T13703] bond0: (slave bond_slave_0): Releasing backup interface [ 526.133025][T13713] nbd: nbd4129 already in use [ 526.317286][T13706] Process accounting resumed [ 527.548370][T12881] Bluetooth: hci4: command 0x0c1a tx timeout [ 527.694569][T13755] FAULT_INJECTION: forcing a failure. [ 527.694569][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 527.763489][T13756] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 527.785103][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.3.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.785128][T13755] Tainted: [L]=SOFTLOCKUP [ 527.785133][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 527.785143][T13755] Call Trace: [ 527.785148][T13755] [ 527.785154][T13755] dump_stack_lvl+0x100/0x190 [ 527.785177][T13755] should_fail_ex.cold+0x5/0xa [ 527.785193][T13755] should_failslab+0xc2/0x120 [ 527.785212][T13755] kmem_cache_alloc_noprof+0x91/0x6a0 [ 527.785228][T13755] ? stack_trace_save+0x8e/0xc0 [ 527.785246][T13755] ? alloc_empty_file+0x5b/0x1c0 [ 527.785266][T13755] alloc_empty_file+0x5b/0x1c0 [ 527.785283][T13755] path_openat+0xe7/0x4280 [ 527.785303][T13755] ? kasan_save_track+0x14/0x30 [ 527.785318][T13755] ? __kasan_slab_alloc+0x89/0x90 [ 527.785334][T13755] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 527.785349][T13755] ? do_getname+0x35/0x390 [ 527.785369][T13755] ? do_sys_openat2+0xc7/0x1e0 [ 527.785386][T13755] ? __x64_sys_open+0xfe/0x1d0 [ 527.785401][T13755] ? do_syscall_64+0x115/0x840 [ 527.785421][T13755] ? __pfx_path_openat+0x10/0x10 [ 527.785448][T13755] do_file_open+0x20e/0x430 [ 527.785468][T13755] ? __lock_acquire+0x49f/0x1a40 [ 527.785493][T13755] ? __pfx_do_file_open+0x10/0x10 [ 527.785526][T13755] ? _raw_spin_unlock+0x28/0x50 [ 527.785551][T13755] ? alloc_fd+0x471/0x7a0 [ 527.785577][T13755] do_sys_openat2+0x10f/0x1e0 [ 527.785595][T13755] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.785619][T13755] __x64_sys_open+0xfe/0x1d0 [ 527.785637][T13755] ? __pfx___x64_sys_open+0x10/0x10 [ 527.785661][T13755] do_syscall_64+0x115/0x840 [ 527.785673][T13755] ? clear_bhb_loop+0x40/0x90 [ 527.785690][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.785705][T13755] RIP: 0033:0x7f193739de59 [ 527.785717][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.785731][T13755] RSP: 002b:00007f193831e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 527.785745][T13755] RAX: ffffffffffffffda RBX: 00007f1937625fa0 RCX: 00007f193739de59 [ 527.785755][T13755] RDX: 000000000000057e RSI: 0000000000000000 RDI: 0000200000000100 [ 527.785763][T13755] RBP: 00007f1937433e6f R08: 0000000000000000 R09: 0000000000000000 [ 527.785772][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.785780][T13755] R13: 00007f1937626038 R14: 00007f1937625fa0 R15: 00007ffca28570e8 [ 527.785798][T13755] [ 528.938693][T13776] random: crng reseeded on system resumption [ 531.275414][T12881] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 531.427058][T13002] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 531.979432][T13827] [U] 0="/ [ 532.035250][T13827] [U] [ 532.090786][T13827] [U] EeQ@ [ 532.710054][T13825] [U]  [ 533.308705][T13002] Bluetooth: hci1: command 0x0c1a tx timeout [ 533.345666][T13826] kexec: Could not allocate control_code_buffer [ 535.388159][T12881] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.412799][T13857] Process accounting paused [ 536.547798][T13880] [U] ^\ [ 536.877119][T13888] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 536.992551][T13888] pci 0000:00:01.3: PCI INT A: no GSI [ 537.913942][T13898] [U] 0="/ [ 537.928608][T13898] [U] [ 537.942449][T13898] [U] EeQ@ [ 538.243694][ T30] audit: type=1800 audit(2147483864.870:55): pid=13903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1477" name="members" dev="configfs" ino=62294 res=0 errno=0 [ 538.488783][T13897] [U]  [ 538.707419][T13908] vivid-007: ================= START STATUS ================= [ 538.786207][T13908] vivid-007: Generate PTS: true [ 538.818958][T13908] vivid-007: Generate SCR: true [ 538.856164][T13908] tpg source WxH: 320x240 (Y'CbCr) [ 538.908257][T13908] tpg field: 1 [ 538.937545][T13908] tpg crop: (0,0)/320x240 [ 538.998234][T13908] tpg compose: (0,0)/320x240 [ 539.031953][T13908] tpg colorspace: 8 [ 539.056488][T13908] tpg transfer function: 0/0 [ 539.125763][T13908] tpg Y'CbCr encoding: 0/0 [ 539.136934][T13911] FAULT_INJECTION: forcing a failure. [ 539.136934][T13911] name failslab, interval 1, probability 0, space 0, times 0 [ 539.187955][T13908] tpg quantization: 0/0 [ 539.210702][T13908] tpg RGB range: 0/2 [ 539.240953][T13908] vivid-007: ================== END STATUS ================== [ 539.257126][T13911] CPU: 0 UID: 0 PID: 13911 Comm: syz.1.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.257153][T13911] Tainted: [L]=SOFTLOCKUP [ 539.257158][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 539.257167][T13911] Call Trace: [ 539.257172][T13911] [ 539.257178][T13911] dump_stack_lvl+0x100/0x190 [ 539.257200][T13911] should_fail_ex.cold+0x5/0xa [ 539.257217][T13911] should_failslab+0xc2/0x120 [ 539.257236][T13911] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 539.257255][T13911] ? __d_alloc+0x35/0xa50 [ 539.257272][T13911] __d_alloc+0x35/0xa50 [ 539.257287][T13911] d_alloc_pseudo+0x1c/0xc0 [ 539.257305][T13911] alloc_file_pseudo+0x118/0x290 [ 539.257323][T13911] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 539.257338][T13911] ? alloc_fd+0x471/0x7a0 [ 539.257369][T13911] ? do_raw_spin_unlock+0x145/0x1e0 [ 539.257395][T13911] __anon_inode_getfile+0xe8/0x280 [ 539.257479][T13911] anon_inode_getfile_fmode+0x37/0xa0 [ 539.257497][T13911] __do_sys_fanotify_init+0xa0d/0xe30 [ 539.257545][T13911] do_syscall_64+0x115/0x840 [ 539.257559][T13911] ? clear_bhb_loop+0x40/0x90 [ 539.257577][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.257592][T13911] RIP: 0033:0x7fcfebd9de59 [ 539.257606][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.257619][T13911] RSP: 002b:00007fcfecc11028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 539.257633][T13911] RAX: ffffffffffffffda RBX: 00007fcfec025fa0 RCX: 00007fcfebd9de59 [ 539.257643][T13911] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 539.257652][T13911] RBP: 00007fcfebe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 539.257660][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.257669][T13911] R13: 00007fcfec026038 R14: 00007fcfec025fa0 R15: 00007fffce4ede28 [ 539.257688][T13911] [ 541.319887][T13943] [U] ^\ [ 541.344746][T13949] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 542.133391][T13957] random: crng reseeded on system resumption [ 542.641392][T13962] [U] 0="/ [ 542.675484][T13962] [U] [ 542.699380][T13962] [U] EeQ@ [ 543.358005][T13961] [U]  [ 545.591716][T13996] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 548.426014][T14021] netlink: 'syz.1.1496': attribute type 4 has an invalid length. [ 548.545506][T14023] futex_wake_op: syz.1.1496 tries to shift op by -1; fix this program [ 549.235745][T14034] vivid-007: ================= START STATUS ================= [ 549.279919][T14034] vivid-007: Generate PTS: true [ 549.301833][T14034] vivid-007: Generate SCR: true [ 549.327913][T14034] tpg source WxH: 320x240 (Y'CbCr) [ 549.353732][T14034] tpg field: 1 [ 549.375495][T14034] tpg crop: (0,0)/320x240 [ 549.398960][T14034] tpg compose: (0,0)/320x240 [ 549.425288][T14034] tpg colorspace: 8 [ 549.456447][T14034] tpg transfer function: 0/0 [ 549.521518][T14034] tpg Y'CbCr encoding: 0/0 [ 549.548332][T14034] tpg quantization: 0/0 [ 549.592892][T14034] tpg RGB range: 0/2 [ 549.617431][T14034] vivid-007: ================== END STATUS ================== [ 549.773799][T14045] writes to the poll attribute are ignored. [ 549.838741][T14044] mmap: syz.1.1500 (14044): VmData 37593088 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 549.893372][T14048] FAULT_INJECTION: forcing a failure. [ 549.893372][T14048] name failslab, interval 1, probability 0, space 0, times 0 [ 549.929992][T14045] please use driver specific parameters instead. [ 549.961673][T14048] CPU: 0 UID: 0 PID: 14048 Comm: syz.3.1501 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.961699][T14048] Tainted: [L]=SOFTLOCKUP [ 549.961704][T14048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 549.961712][T14048] Call Trace: [ 549.961717][T14048] [ 549.961723][T14048] dump_stack_lvl+0x100/0x190 [ 549.961744][T14048] should_fail_ex.cold+0x5/0xa [ 549.961761][T14048] should_failslab+0xc2/0x120 [ 549.961780][T14048] __kmalloc_noprof+0xfc/0x820 [ 549.961795][T14048] ? rcu_is_watching+0x12/0xc0 [ 549.961811][T14048] ? tomoyo_realpath_from_path+0xb6/0x690 [ 549.961924][T14048] tomoyo_realpath_from_path+0xb6/0x690 [ 549.961948][T14048] tomoyo_path_number_perm+0x23c/0x580 [ 549.961965][T14048] ? tomoyo_path_number_perm+0x22e/0x580 [ 549.961982][T14048] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 549.962016][T14048] ? find_held_lock+0x2b/0x80 [ 549.962032][T14048] ? __fget_files+0x215/0x3d0 [ 549.962051][T14048] ? hook_file_ioctl_common+0x140/0x440 [ 549.962067][T14048] ? __fget_files+0x215/0x3d0 [ 549.962090][T14048] ? __fget_files+0x21f/0x3d0 [ 549.962113][T14048] security_file_ioctl+0xd3/0x230 [ 549.962153][T14048] __x64_sys_ioctl+0xb7/0x210 [ 549.962173][T14048] do_syscall_64+0x115/0x840 [ 549.962187][T14048] ? clear_bhb_loop+0x40/0x90 [ 549.962205][T14048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.962219][T14048] RIP: 0033:0x7f193739de59 [ 549.962231][T14048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.962245][T14048] RSP: 002b:00007f193831e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.962259][T14048] RAX: ffffffffffffffda RBX: 00007f1937625fa0 RCX: 00007f193739de59 [ 549.962269][T14048] RDX: 0000000000000000 RSI: 00000000401870cb RDI: 0000000000000003 [ 549.962277][T14048] RBP: 00007f193831e090 R08: 0000000000000000 R09: 0000000000000000 [ 549.962286][T14048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.962294][T14048] R13: 00007f1937626038 R14: 00007f1937625fa0 R15: 00007ffca28570e8 [ 549.962313][T14048] [ 549.962319][T14048] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.267067][T14040] bridge0: port 3(ipvlan1) entered blocking state [ 550.331688][T14040] bridge0: port 3(ipvlan1) entered disabled state [ 550.423933][T14040] ipvlan1: entered allmulticast mode [ 550.495108][T14040] veth0_vlan: entered allmulticast mode [ 550.567711][T14040] ipvlan1: left allmulticast mode [ 550.623998][T14040] veth0_vlan: left allmulticast mode [ 550.647679][T14050] kexec: Could not allocate control_code_buffer [ 551.092438][T14059] vivid-007: ================= START STATUS ================= [ 551.139636][T14059] vivid-007: Generate PTS: true [ 551.176191][T14059] vivid-007: Generate SCR: true [ 551.204595][T14059] tpg source WxH: 320x240 (Y'CbCr) [ 551.240446][T14059] tpg field: 1 [ 551.266111][T14059] tpg crop: (0,0)/320x240 [ 551.286339][T14059] tpg compose: (0,0)/320x240 [ 551.313686][T14059] tpg colorspace: 8 [ 551.393245][T14059] tpg transfer function: 0/0 [ 551.459695][T14059] tpg Y'CbCr encoding: 0/0 [ 551.514941][T14059] tpg quantization: 0/0 [ 551.549638][T14059] tpg RGB range: 0/2 [ 551.586650][T14059] vivid-007: ================== END STATUS ================== [ 551.971206][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1507'. [ 552.274473][T14082] bond0: invalid ARP target specified [ 553.053739][T14094] [U] ^\ [ 553.844455][T14119] vivid-007: ================= START STATUS ================= [ 553.919513][T14119] vivid-007: Generate PTS: true [ 553.945479][T14119] vivid-007: Generate SCR: true [ 553.976472][T14119] tpg source WxH: 320x240 (Y'CbCr) [ 554.009428][T14119] tpg field: 1 [ 554.041561][ T30] audit: type=1800 audit(2147483880.660:56): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1516" name="members" dev="configfs" ino=63585 res=0 errno=0 [ 554.087881][T14119] tpg crop: (0,0)/320x240 [ 554.117430][T14119] tpg compose: (0,0)/320x240 [ 554.148903][T14119] tpg colorspace: 8 [ 554.171504][T14119] tpg transfer function: 0/0 [ 554.195981][T14119] tpg Y'CbCr encoding: 0/0 [ 554.222678][T14119] tpg quantization: 0/0 [ 554.245776][T14119] tpg RGB range: 0/2 [ 554.269215][T14119] vivid-007: ================== END STATUS ================== [ 555.875364][T14124] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 556.457463][T14127] Process accounting paused [ 556.602081][T14133] vivid-007: ================= START STATUS ================= [ 556.656473][T14133] vivid-007: Generate PTS: true [ 556.691665][T14133] vivid-007: Generate SCR: true [ 556.724846][T14133] tpg source WxH: 320x240 (Y'CbCr) [ 556.762542][T14133] tpg field: 1 [ 556.809612][T14133] tpg crop: (0,0)/320x240 [ 556.850577][T14133] tpg compose: (0,0)/320x240 [ 556.873392][T14133] tpg colorspace: 8 [ 556.897019][T14133] tpg transfer function: 0/0 [ 556.922148][T14133] tpg Y'CbCr encoding: 0/0 [ 556.946454][T14133] tpg quantization: 0/0 [ 556.966988][T14133] tpg RGB range: 0/2 [ 556.994514][T14133] vivid-007: ================== END STATUS ================== [ 558.449568][ T30] audit: type=1800 audit(2147483885.080:57): pid=14168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1528" name="members" dev="configfs" ino=64086 res=0 errno=0 [ 558.656821][T14172] [U] ^\ [ 558.979082][T14180] vivid-007: ================= START STATUS ================= [ 559.020855][T14180] vivid-007: Generate PTS: true [ 559.049013][T14180] vivid-007: Generate SCR: true [ 559.077848][T14180] tpg source WxH: 320x240 (Y'CbCr) [ 559.110756][T14180] tpg field: 1 [ 559.139740][T14180] tpg crop: (0,0)/320x240 [ 559.167971][T14182] can: request_module (can-proto-0) failed. [ 559.182085][T14180] tpg compose: (0,0)/320x240 [ 559.221666][T14180] tpg colorspace: 8 [ 559.237978][T14187] FAULT_INJECTION: forcing a failure. [ 559.237978][T14187] name failslab, interval 1, probability 0, space 0, times 0 [ 559.261559][T14180] tpg transfer function: 0/0 [ 559.279908][T14180] tpg Y'CbCr encoding: 0/0 [ 559.291741][T14180] tpg quantization: 0/0 [ 559.300840][T14187] CPU: 0 UID: 0 PID: 14187 Comm: syz.1.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.300864][T14187] Tainted: [L]=SOFTLOCKUP [ 559.300870][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 559.300879][T14187] Call Trace: [ 559.300884][T14187] [ 559.300890][T14187] dump_stack_lvl+0x100/0x190 [ 559.300919][T14187] should_fail_ex.cold+0x5/0xa [ 559.300937][T14187] should_failslab+0xc2/0x120 [ 559.300956][T14187] __kmalloc_cache_noprof+0x91/0x6c0 [ 559.300980][T14187] ? cachefiles_daemon_open+0xa0/0x550 [ 559.301105][T14187] cachefiles_daemon_open+0xa0/0x550 [ 559.301126][T14187] ? __pfx_cachefiles_daemon_open+0x10/0x10 [ 559.301145][T14187] misc_open+0x26d/0x450 [ 559.301200][T14187] ? __pfx_misc_open+0x10/0x10 [ 559.301222][T14187] chrdev_open+0x234/0x6a0 [ 559.301236][T14187] ? __pfx_apparmor_file_open+0x10/0x10 [ 559.301251][T14187] ? __pfx_chrdev_open+0x10/0x10 [ 559.301273][T14187] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 559.301293][T14187] do_dentry_open+0x6ab/0x14d0 [ 559.301315][T14187] ? __pfx_chrdev_open+0x10/0x10 [ 559.301341][T14187] vfs_open+0x82/0x3f0 [ 559.301359][T14187] path_openat+0x2873/0x4280 [ 559.301389][T14187] ? __pfx_path_openat+0x10/0x10 [ 559.301415][T14187] do_file_open+0x20e/0x430 [ 559.301439][T14187] ? __pfx_do_file_open+0x10/0x10 [ 559.301473][T14187] ? alloc_fd+0x471/0x7a0 [ 559.301496][T14187] ? do_getname+0x191/0x390 [ 559.301513][T14187] do_sys_openat2+0x10f/0x1e0 [ 559.301530][T14187] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.301548][T14187] ? __fget_files+0x21f/0x3d0 [ 559.301572][T14187] __x64_sys_openat+0x12d/0x210 [ 559.301590][T14187] ? __pfx___x64_sys_openat+0x10/0x10 [ 559.301614][T14187] do_syscall_64+0x115/0x840 [ 559.301628][T14187] ? clear_bhb_loop+0x40/0x90 [ 559.301646][T14187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.301660][T14187] RIP: 0033:0x7fcfebd9de59 [ 559.301674][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.301687][T14187] RSP: 002b:00007fcfecc11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 559.301702][T14187] RAX: ffffffffffffffda RBX: 00007fcfec025fa0 RCX: 00007fcfebd9de59 [ 559.301712][T14187] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 559.301721][T14187] RBP: 00007fcfebe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 559.301729][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.301738][T14187] R13: 00007fcfec026038 R14: 00007fcfec025fa0 R15: 00007fffce4ede28 [ 559.301759][T14187] [ 559.657518][T14169] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 559.678350][T14180] tpg RGB range: 0/2 [ 559.682349][T14180] vivid-007: ================== END STATUS ================== [ 561.235903][T14220] can: request_module (can-proto-0) failed. [ 561.625001][ T30] audit: type=1800 audit(2147483888.250:58): pid=14232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1543" name="members" dev="configfs" ino=64445 res=0 errno=0 [ 562.375025][T14244] FAULT_INJECTION: forcing a failure. [ 562.375025][T14244] name failslab, interval 1, probability 0, space 0, times 0 [ 562.460205][T14244] CPU: 0 UID: 0 PID: 14244 Comm: syz.1.1545 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.460232][T14244] Tainted: [L]=SOFTLOCKUP [ 562.460237][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 562.460246][T14244] Call Trace: [ 562.460251][T14244] [ 562.460258][T14244] dump_stack_lvl+0x100/0x190 [ 562.460280][T14244] should_fail_ex.cold+0x5/0xa [ 562.460297][T14244] should_failslab+0xc2/0x120 [ 562.460316][T14244] __kmalloc_noprof+0xfc/0x820 [ 562.460332][T14244] ? rcu_is_watching+0x12/0xc0 [ 562.460348][T14244] ? tomoyo_realpath_from_path+0xb6/0x690 [ 562.460372][T14244] tomoyo_realpath_from_path+0xb6/0x690 [ 562.460396][T14244] tomoyo_check_open_permission+0x2af/0x3c0 [ 562.460414][T14244] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 562.460437][T14244] ? hook_file_open+0x24f/0x8f0 [ 562.460467][T14244] ? path_get+0x61/0x80 [ 562.460483][T14244] tomoyo_file_open+0x6b/0x90 [ 562.460505][T14244] security_file_open+0xb5/0x1e0 [ 562.460523][T14244] do_dentry_open+0x588/0x14d0 [ 562.460552][T14244] vfs_open+0x82/0x3f0 [ 562.460570][T14244] path_openat+0x2873/0x4280 [ 562.460600][T14244] ? __pfx_path_openat+0x10/0x10 [ 562.460635][T14244] do_file_open+0x20e/0x430 [ 562.460659][T14244] ? __pfx_do_file_open+0x10/0x10 [ 562.460695][T14244] ? alloc_fd+0x471/0x7a0 [ 562.460718][T14244] ? do_getname+0x191/0x390 [ 562.460735][T14244] do_sys_openat2+0x10f/0x1e0 [ 562.460753][T14244] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.460771][T14244] ? __fget_files+0x21f/0x3d0 [ 562.460795][T14244] __x64_sys_openat+0x12d/0x210 [ 562.460812][T14244] ? __pfx___x64_sys_openat+0x10/0x10 [ 562.460837][T14244] do_syscall_64+0x115/0x840 [ 562.460850][T14244] ? clear_bhb_loop+0x40/0x90 [ 562.460868][T14244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.460883][T14244] RIP: 0033:0x7fcfebd9de59 [ 562.460895][T14244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.460910][T14244] RSP: 002b:00007fcfecc11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.460924][T14244] RAX: ffffffffffffffda RBX: 00007fcfec025fa0 RCX: 00007fcfebd9de59 [ 562.460933][T14244] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 562.460942][T14244] RBP: 00007fcfebe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 562.460951][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.460959][T14244] R13: 00007fcfec026038 R14: 00007fcfec025fa0 R15: 00007fffce4ede28 [ 562.460979][T14244] [ 562.963070][T14244] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.026128][T14233] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 563.192645][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.204109][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.075082][T14251] vhci_hcd: not connected 4 [ 564.282877][T14257] [U] 0="/ [ 564.306339][T14257] [U] [ 564.321378][T14257] [U] EeQ@ [ 565.069258][T14256] [U]  [ 565.167633][T14282] FAULT_INJECTION: forcing a failure. [ 565.167633][T14282] name failslab, interval 1, probability 0, space 0, times 0 [ 565.267614][T14282] CPU: 0 UID: 0 PID: 14282 Comm: syz.4.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.267640][T14282] Tainted: [L]=SOFTLOCKUP [ 565.267645][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 565.267654][T14282] Call Trace: [ 565.267660][T14282] [ 565.267666][T14282] dump_stack_lvl+0x100/0x190 [ 565.267687][T14282] should_fail_ex.cold+0x5/0xa [ 565.267704][T14282] should_failslab+0xc2/0x120 [ 565.267724][T14282] __kmalloc_cache_noprof+0x91/0x6c0 [ 565.267747][T14282] ? cachefiles_daemon_open+0xa0/0x550 [ 565.267771][T14282] cachefiles_daemon_open+0xa0/0x550 [ 565.267790][T14282] ? __pfx_cachefiles_daemon_open+0x10/0x10 [ 565.267810][T14282] misc_open+0x26d/0x450 [ 565.267833][T14282] ? __pfx_misc_open+0x10/0x10 [ 565.267853][T14282] chrdev_open+0x234/0x6a0 [ 565.267867][T14282] ? __pfx_apparmor_file_open+0x10/0x10 [ 565.267881][T14282] ? __pfx_chrdev_open+0x10/0x10 [ 565.267904][T14282] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 565.267922][T14282] do_dentry_open+0x6ab/0x14d0 [ 565.267944][T14282] ? __pfx_chrdev_open+0x10/0x10 [ 565.267970][T14282] vfs_open+0x82/0x3f0 [ 565.267989][T14282] path_openat+0x2873/0x4280 [ 565.268028][T14282] ? __pfx_path_openat+0x10/0x10 [ 565.268056][T14282] do_file_open+0x20e/0x430 [ 565.268079][T14282] ? __pfx_do_file_open+0x10/0x10 [ 565.268115][T14282] ? alloc_fd+0x471/0x7a0 [ 565.268138][T14282] ? do_getname+0x191/0x390 [ 565.268155][T14282] do_sys_openat2+0x10f/0x1e0 [ 565.268172][T14282] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.268191][T14282] ? __fget_files+0x21f/0x3d0 [ 565.268215][T14282] __x64_sys_openat+0x12d/0x210 [ 565.268232][T14282] ? __pfx___x64_sys_openat+0x10/0x10 [ 565.268257][T14282] do_syscall_64+0x115/0x840 [ 565.268270][T14282] ? clear_bhb_loop+0x40/0x90 [ 565.268287][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.268302][T14282] RIP: 0033:0x7f392e99de59 [ 565.268316][T14282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.268330][T14282] RSP: 002b:00007f392f87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.268344][T14282] RAX: ffffffffffffffda RBX: 00007f392ec25fa0 RCX: 00007f392e99de59 [ 565.268354][T14282] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 565.268363][T14282] RBP: 00007f392ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 565.268372][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.268380][T14282] R13: 00007f392ec26038 R14: 00007f392ec25fa0 R15: 00007ffca0d52698 [ 565.268400][T14282] [ 566.019567][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 566.364904][T14293] FAULT_INJECTION: forcing a failure. [ 566.364904][T14293] name failslab, interval 1, probability 0, space 0, times 0 [ 566.437461][T14297] FAULT_INJECTION: forcing a failure. [ 566.437461][T14297] name failslab, interval 1, probability 0, space 0, times 0 [ 566.468183][T14293] CPU: 0 UID: 0 PID: 14293 Comm: syz.4.1556 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.468208][T14293] Tainted: [L]=SOFTLOCKUP [ 566.468214][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 566.468223][T14293] Call Trace: [ 566.468228][T14293] [ 566.468233][T14293] dump_stack_lvl+0x100/0x190 [ 566.468256][T14293] should_fail_ex.cold+0x5/0xa [ 566.468273][T14293] should_failslab+0xc2/0x120 [ 566.468293][T14293] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 566.468321][T14293] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 566.468404][T14293] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 566.468419][T14293] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 566.468436][T14293] alloc_inode+0x68/0x250 [ 566.468454][T14293] new_inode+0x22/0x1c0 [ 566.468474][T14293] hugetlbfs_get_inode+0x39a/0x700 [ 566.468493][T14293] hugetlb_file_setup+0x15b/0x5b0 [ 566.468511][T14293] ksys_mmap_pgoff+0x242/0x610 [ 566.468532][T14293] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 566.468549][T14293] ? xfd_validate_state+0x129/0x190 [ 566.468568][T14293] __x64_sys_mmap+0x125/0x190 [ 566.468586][T14293] do_syscall_64+0x115/0x840 [ 566.468600][T14293] ? clear_bhb_loop+0x40/0x90 [ 566.468618][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.468633][T14293] RIP: 0033:0x7f392e99de59 [ 566.468647][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.468661][T14293] RSP: 002b:00007f392f85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 566.468675][T14293] RAX: ffffffffffffffda RBX: 00007f392ec26090 RCX: 00007f392e99de59 [ 566.468684][T14293] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 566.468692][T14293] RBP: 00007f392ea33e6f R08: ffffffffffffffff R09: 0000308000000000 [ 566.468701][T14293] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 566.468711][T14293] R13: 00007f392ec26128 R14: 00007f392ec26090 R15: 00007ffca0d52698 [ 566.468730][T14293] [ 566.910003][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.3.1557 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.910030][T14297] Tainted: [L]=SOFTLOCKUP [ 566.910036][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 566.910045][T14297] Call Trace: [ 566.910050][T14297] [ 566.910056][T14297] dump_stack_lvl+0x100/0x190 [ 566.910077][T14297] should_fail_ex.cold+0x5/0xa [ 566.910093][T14297] should_failslab+0xc2/0x120 [ 566.910112][T14297] kmem_cache_alloc_noprof+0x91/0x6a0 [ 566.910129][T14297] ? trace_kmem_cache_alloc+0xdd/0x100 [ 566.910147][T14297] ? security_file_alloc+0x34/0x2c0 [ 566.910168][T14297] security_file_alloc+0x34/0x2c0 [ 566.910186][T14297] init_file+0x95/0x480 [ 566.910202][T14297] alloc_empty_file+0x79/0x1c0 [ 566.910218][T14297] alloc_file_pseudo+0x183/0x290 [ 566.910236][T14297] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 566.910252][T14297] ? alloc_fd+0x471/0x7a0 [ 566.910276][T14297] sock_alloc_file+0x50/0x210 [ 566.910301][T14297] __sys_socket+0x1c0/0x260 [ 566.910324][T14297] ? __pfx___sys_socket+0x10/0x10 [ 566.910351][T14297] __x64_sys_socket+0x72/0xb0 [ 566.910372][T14297] ? lockdep_hardirqs_on+0x78/0x100 [ 566.910394][T14297] do_syscall_64+0x115/0x840 [ 566.910407][T14297] ? clear_bhb_loop+0x40/0x90 [ 566.910424][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.910440][T14297] RIP: 0033:0x7f193739de59 [ 566.910453][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.910467][T14297] RSP: 002b:00007f19382dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 566.910481][T14297] RAX: ffffffffffffffda RBX: 00007f1937626180 RCX: 00007f193739de59 [ 566.910491][T14297] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000000010 [ 566.910499][T14297] RBP: 00007f1937433e6f R08: 0000000000000000 R09: 0000000000000000 [ 566.910508][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.910517][T14297] R13: 00007f1937626218 R14: 00007f1937626180 R15: 00007ffca28570e8 [ 566.910536][T14297] [ 567.992114][ T30] audit: type=1800 audit(2147483894.624:59): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1559" name="members" dev="configfs" ino=64992 res=0 errno=0 [ 569.384403][T14305] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 570.131208][T14340] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1569'. [ 570.691700][T14354] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1573'. [ 571.147199][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 573.061633][T13002] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 573.889240][ T30] audit: type=1800 audit(2147483900.516:60): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1588" name="members" dev="configfs" ino=65771 res=0 errno=0 [ 573.958673][T14396] [U] ^\ [ 575.014306][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1592'. [ 575.074786][T14425] bridge_slave_1: left allmulticast mode [ 575.093829][T14425] bridge_slave_1: left promiscuous mode [ 575.106642][T14408] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 575.121228][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.142460][T14425] bridge_slave_0: left allmulticast mode [ 575.153685][T14425] bridge_slave_0: left promiscuous mode [ 575.166024][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.204362][T14461] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 580.467525][T14490] vivid-007: ================= START STATUS ================= [ 580.520052][T14490] vivid-007: Generate PTS: true [ 580.536745][T14490] vivid-007: Generate SCR: true [ 580.563179][T14490] tpg source WxH: 320x240 (Y'CbCr) [ 580.600667][T14490] tpg field: 1 [ 580.616569][T14490] tpg crop: (0,0)/320x240 [ 580.645131][T14490] tpg compose: (0,0)/320x240 [ 580.676170][T14490] tpg colorspace: 8 [ 580.698352][T14490] tpg transfer function: 0/0 [ 580.718708][T14490] tpg Y'CbCr encoding: 0/0 [ 580.750187][T14490] tpg quantization: 0/0 [ 580.787887][T14490] tpg RGB range: 0/2 [ 580.806796][T14490] vivid-007: ================== END STATUS ================== [ 581.432631][T14512] [U] ^\ [ 582.419731][T14535] random: crng reseeded on system resumption [ 585.304153][T14568] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1618'. [ 586.480772][T14589] futex_wake_op: syz.1.1623 tries to shift op by -2048; fix this program [ 586.846354][T14589] FAULT_INJECTION: forcing a failure. [ 586.846354][T14589] name failslab, interval 1, probability 0, space 0, times 0 [ 586.916132][T14589] CPU: 0 UID: 0 PID: 14589 Comm: syz.1.1623 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.916158][T14589] Tainted: [L]=SOFTLOCKUP [ 586.916163][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 586.916173][T14589] Call Trace: [ 586.916178][T14589] [ 586.916184][T14589] dump_stack_lvl+0x100/0x190 [ 586.916206][T14589] should_fail_ex.cold+0x5/0xa [ 586.916223][T14589] should_failslab+0xc2/0x120 [ 586.916243][T14589] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 586.916260][T14589] ? do_futex+0x190/0x440 [ 586.916274][T14589] ? alloc_inode+0x183/0x250 [ 586.916294][T14589] alloc_inode+0x183/0x250 [ 586.916310][T14589] create_pipe_files+0x4c/0x970 [ 586.916326][T14589] do_pipe2+0xbd/0x1e0 [ 586.916339][T14589] ? __pfx_do_pipe2+0x10/0x10 [ 586.916359][T14589] __x64_sys_pipe+0x33/0x50 [ 586.916371][T14589] do_syscall_64+0x115/0x840 [ 586.916385][T14589] ? clear_bhb_loop+0x40/0x90 [ 586.916402][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.916417][T14589] RIP: 0033:0x7fcfebd9de59 [ 586.916430][T14589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.916443][T14589] RSP: 002b:00007fcfecc11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 586.916458][T14589] RAX: ffffffffffffffda RBX: 00007fcfec025fa0 RCX: 00007fcfebd9de59 [ 586.916468][T14589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 586.916476][T14589] RBP: 00007fcfebe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 586.916485][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.916493][T14589] R13: 00007fcfec026038 R14: 00007fcfec025fa0 R15: 00007fffce4ede28 [ 586.916512][T14589] [ 587.509337][T14592] Process accounting resumed [ 587.630942][T14602] FAULT_INJECTION: forcing a failure. [ 587.630942][T14602] name failslab, interval 1, probability 0, space 0, times 0 [ 587.682812][T14588] Process accounting resumed [ 587.804611][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.4.1625 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.804638][T14602] Tainted: [L]=SOFTLOCKUP [ 587.804643][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 587.804653][T14602] Call Trace: [ 587.804658][T14602] [ 587.804664][T14602] dump_stack_lvl+0x100/0x190 [ 587.804686][T14602] should_fail_ex.cold+0x5/0xa [ 587.804703][T14602] should_failslab+0xc2/0x120 [ 587.804722][T14602] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 587.804742][T14602] ? kasprintf+0xc7/0x100 [ 587.804765][T14602] kvasprintf+0xbc/0x150 [ 587.804784][T14602] ? __pfx_kvasprintf+0x10/0x10 [ 587.804810][T14602] kasprintf+0xc7/0x100 [ 587.804829][T14602] ? __pfx_kasprintf+0x10/0x10 [ 587.804851][T14602] ? rcu_is_watching+0x12/0xc0 [ 587.804867][T14602] ? lockdep_init_map_type+0x5c/0x250 [ 587.804891][T14602] drm_debugfs_clients_add+0x48/0x210 [ 587.804910][T14602] drm_file_alloc+0x5c6/0xb40 [ 587.804930][T14602] drm_open_helper+0x1fc/0x540 [ 587.804950][T14602] drm_open+0x1a0/0x3e0 [ 587.804967][T14602] ? __pfx_drm_open+0x10/0x10 [ 587.804984][T14602] drm_stub_open+0x20f/0x380 [ 587.805003][T14602] ? __pfx_drm_stub_open+0x10/0x10 [ 587.805019][T14602] chrdev_open+0x234/0x6a0 [ 587.805032][T14602] ? __pfx_apparmor_file_open+0x10/0x10 [ 587.805046][T14602] ? __pfx_chrdev_open+0x10/0x10 [ 587.805068][T14602] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 587.805087][T14602] do_dentry_open+0x6ab/0x14d0 [ 587.805108][T14602] ? __pfx_chrdev_open+0x10/0x10 [ 587.805145][T14602] vfs_open+0x82/0x3f0 [ 587.805164][T14602] path_openat+0x2873/0x4280 [ 587.805194][T14602] ? __pfx_path_openat+0x10/0x10 [ 587.805221][T14602] do_file_open+0x20e/0x430 [ 587.805246][T14602] ? __pfx_do_file_open+0x10/0x10 [ 587.805280][T14602] ? alloc_fd+0x471/0x7a0 [ 587.805303][T14602] ? do_getname+0x191/0x390 [ 587.805320][T14602] do_sys_openat2+0x10f/0x1e0 [ 587.805336][T14602] ? __pfx_do_sys_openat2+0x10/0x10 [ 587.805355][T14602] ? __fget_files+0x21f/0x3d0 [ 587.805395][T14602] __x64_sys_openat+0x12d/0x210 [ 587.805414][T14602] ? __pfx___x64_sys_openat+0x10/0x10 [ 587.805439][T14602] do_syscall_64+0x115/0x840 [ 587.805453][T14602] ? clear_bhb_loop+0x40/0x90 [ 587.805471][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.805487][T14602] RIP: 0033:0x7f392e99de59 [ 587.805500][T14602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.805514][T14602] RSP: 002b:00007f392f87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 587.805529][T14602] RAX: ffffffffffffffda RBX: 00007f392ec25fa0 RCX: 00007f392e99de59 [ 587.805539][T14602] RDX: 0000000000008000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 587.805548][T14602] RBP: 00007f392ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 587.805557][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.805566][T14602] R13: 00007f392ec26038 R14: 00007f392ec25fa0 R15: 00007ffca0d52698 [ 587.805585][T14602] [ 590.543714][T14655] net_ratelimit: 14 callbacks suppressed [ 590.543731][T14655] openvswitch: netlink: Duplicate key (type 15). [ 593.232604][T14692] FAULT_INJECTION: forcing a failure. [ 593.232604][T14692] name failslab, interval 1, probability 0, space 0, times 0 [ 593.323308][T14692] CPU: 0 UID: 0 PID: 14692 Comm: syz.3.1641 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.323334][T14692] Tainted: [L]=SOFTLOCKUP [ 593.323339][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 593.323348][T14692] Call Trace: [ 593.323353][T14692] [ 593.323358][T14692] dump_stack_lvl+0x100/0x190 [ 593.323379][T14692] should_fail_ex.cold+0x5/0xa [ 593.323396][T14692] should_failslab+0xc2/0x120 [ 593.323415][T14692] __kmalloc_noprof+0xfc/0x820 [ 593.323430][T14692] ? rcu_is_watching+0x12/0xc0 [ 593.323446][T14692] ? tomoyo_realpath_from_path+0xb6/0x690 [ 593.323470][T14692] tomoyo_realpath_from_path+0xb6/0x690 [ 593.323493][T14692] tomoyo_path_number_perm+0x23c/0x580 [ 593.323509][T14692] ? tomoyo_path_number_perm+0x22e/0x580 [ 593.323526][T14692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 593.323549][T14692] ? rcu_read_lock_any_held+0x6a/0xa0 [ 593.323577][T14692] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.323597][T14692] ? hook_file_ioctl_common+0x140/0x440 [ 593.323622][T14692] security_file_ioctl+0xd3/0x230 [ 593.323640][T14692] __x64_sys_ioctl+0xb7/0x210 [ 593.323661][T14692] do_syscall_64+0x115/0x840 [ 593.323673][T14692] ? clear_bhb_loop+0x40/0x90 [ 593.323690][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.323705][T14692] RIP: 0033:0x7f193739de59 [ 593.323718][T14692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.323731][T14692] RSP: 002b:00007f193831e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.323745][T14692] RAX: ffffffffffffffda RBX: 00007f1937625fa0 RCX: 00007f193739de59 [ 593.323755][T14692] RDX: 0000000000000000 RSI: 0000000040045613 RDI: 0000000000000003 [ 593.323763][T14692] RBP: 00007f193831e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.323771][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.323780][T14692] R13: 00007f1937626038 R14: 00007f1937625fa0 R15: 00007ffca28570e8 [ 593.323798][T14692] [ 593.323805][T14692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 593.968723][ T30] audit: type=1800 audit(2147483920.556:61): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1642" name="members" dev="configfs" ino=67494 res=0 errno=0 [ 596.689163][T14734] futex_wake_op: syz.1.1650 tries to shift op by -2048; fix this program [ 596.750015][T14737] 0x000000000001-0x000000020000 : "" [ 596.828628][T14737] ftl_cs: FTL header corrupt! [ 598.207475][T14744] [U] ^\ [ 598.647740][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 600.540829][T14765] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1654: bg 1: bad block bitmap checksum [ 600.588271][T14765] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 600.994473][T14781] [U] 0="/ [ 601.037282][T14781] [U] [ 601.090997][T14781] [U] EeQ@ [ 601.373419][T14776] [U]  [ 601.793275][T14777] kexec: Could not allocate control_code_buffer [ 603.109831][T14811] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.4.1664: bg 2: bad block bitmap checksum [ 603.183504][T14811] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 4678 with max blocks 1 with error 74 [ 603.274735][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 603.352921][T14811] EXT4-fs (sda1): This should not happen!! Data will be lost [ 603.352921][T14811] [ 604.631741][T14822] zswap: compressor not available [ 607.557925][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 611.108602][T14928] blktrace: Concurrent blktraces are not allowed on loop2 [ 611.300184][T14928] FAULT_INJECTION: forcing a failure. [ 611.300184][T14928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.610383][T14928] CPU: 0 UID: 0 PID: 14928 Comm: syz.1.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.610409][T14928] Tainted: [L]=SOFTLOCKUP [ 611.610414][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 611.610429][T14928] Call Trace: [ 611.610434][T14928] [ 611.610440][T14928] dump_stack_lvl+0x100/0x190 [ 611.610462][T14928] should_fail_ex.cold+0x5/0xa [ 611.610480][T14928] _copy_to_user+0x32/0xd0 [ 611.610501][T14928] drm_ioctl+0x608/0xc60 [ 611.610521][T14928] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 611.610537][T14928] ? __pfx_drm_ioctl+0x10/0x10 [ 611.610553][T14928] ? find_held_lock+0x2b/0x80 [ 611.610579][T14928] ? __pfx_drm_ioctl+0x10/0x10 [ 611.610595][T14928] __x64_sys_ioctl+0x18e/0x210 [ 611.610615][T14928] do_syscall_64+0x115/0x840 [ 611.610629][T14928] ? clear_bhb_loop+0x40/0x90 [ 611.610646][T14928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.610660][T14928] RIP: 0033:0x7fcfebd9de59 [ 611.610673][T14928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.610686][T14928] RSP: 002b:00007fcfecbcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.610702][T14928] RAX: ffffffffffffffda RBX: 00007fcfec026180 RCX: 00007fcfebd9de59 [ 611.610711][T14928] RDX: 020000000020000a RSI: 00000000921064a2 RDI: 0000000000000004 [ 611.610720][T14928] RBP: 00007fcfebe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 611.610728][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.610737][T14928] R13: 00007fcfec026218 R14: 00007fcfec026180 R15: 00007fffce4ede28 [ 611.610755][T14928] [ 612.043661][ T30] audit: type=1800 audit(2147483938.696:62): pid=14936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1690" name="members" dev="configfs" ino=69032 res=0 errno=0 [ 614.046288][T14953] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.1693'. [ 614.287225][T14949] blktrace: Concurrent blktraces are not allowed on loop2 [ 615.104655][T14969] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1696'. [ 616.686964][T14983] [U] ^\ [ 617.462450][T14993] [U] 0="/ [ 617.583432][T14993] [U] [ 617.696112][T14993] [U] EeQ@ [ 618.116740][T14989] [U]  [ 618.684723][T14990] kexec: Could not allocate control_code_buffer [ 620.018476][T14992] Process accounting paused [ 621.058076][T14997] Process accounting paused [ 621.517513][T13002] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 621.527337][T12881] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 621.598809][T15005] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 621.680877][T15006] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 621.759435][T15013] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 621.766863][T15007] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 621.776691][T15014] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 621.783769][T12876] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 621.794487][T15016] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 621.800996][T15015] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 621.837356][T15018] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 621.845049][T15022] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 621.853541][T15019] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 621.860028][T15017] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 621.921644][T15025] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 621.928150][T15028] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 621.936227][T15023] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 621.942610][T15027] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 621.950017][T15026] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 621.997402][T15024] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 622.005036][T15032] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 622.012798][T15030] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 622.020045][T15029] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 622.079627][T15034] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 622.108122][T15102] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[11033] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15102] [ 622.167297][T15033] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 622.174456][T15036] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 622.239078][T15041] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 622.246437][T15035] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 622.253608][T15037] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 622.260045][T15039] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 622.319318][T15043] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 622.327357][T15046] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 622.397772][T15048] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 622.405979][T15040] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 622.557935][T15050] Bluetooth: hci45: Opcode 0x0c03 failed: -110 [ 622.638924][T15063] Bluetooth: hci47: Opcode 0x0c03 failed: -110 [ 622.646830][T15062] Bluetooth: hci46: Opcode 0x0c03 failed: -110 [ 622.655059][T15049] Bluetooth: hci48: Opcode 0x0c03 failed: -110 [ 622.661443][T15061] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 622.716838][T15067] Bluetooth: hci52: Opcode 0x0c03 failed: -110 [ 622.724510][T15066] Bluetooth: hci51: Opcode 0x0c03 failed: -110 [ 622.732258][T15065] Bluetooth: hci50: Opcode 0x0c03 failed: -110 [ 622.738707][T15064] Bluetooth: hci49: Opcode 0x0c03 failed: -110 [ 622.746724][T15068] Bluetooth: hci54: Opcode 0x0c03 failed: -110 [ 622.754439][T15071] Bluetooth: hci41: Opcode 0x0c03 failed: -110 [ 622.762087][T15070] Bluetooth: hci53: Opcode 0x0c03 failed: -110 [ 622.797366][T15072] Bluetooth: hci42: Opcode 0x0c03 failed: -110 [ 622.804512][T15075] Bluetooth: hci44: Opcode 0x0c03 failed: -110 [ 622.811768][T15074] Bluetooth: hci43: Opcode 0x0c03 failed: -110 [ 622.819311][T15076] Bluetooth: hci55: Opcode 0x0c03 failed: -110 [ 622.827145][T15078] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 622.877030][T15080] Bluetooth: hci57: Opcode 0x0c03 failed: -110 [ 622.883653][T15079] Bluetooth: hci56: Opcode 0x0c03 failed: -110 [ 622.890281][T15083] Bluetooth: hci58: Opcode 0x0c03 failed: -110 [ 623.230819][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 623.354414][ T30] audit: type=1800 audit(2147483950.021:63): pid=15128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1715" name="members" dev="configfs" ino=70026 res=0 errno=0 [ 624.559069][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.565420][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.609847][T15130] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 626.888599][T15148] ubi0: attaching mtd0 [ 626.924476][T15148] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 626.986453][T15148] eraseblock attaching information dump: [ 627.032324][T15148] ec 1 [ 627.062119][T15148] pnum 0 [ 627.101722][T15148] lnum 0 [ 627.141665][T15148] scrub 0 [ 627.202655][T15148] sqnum 1 [ 627.221264][T15148] Volume identifier header dump: [ 627.266072][T15148] magic 55424921 [ 627.297678][T15163] nfs: Unknown parameter 'u' [ 627.307812][T15148] version 1 [ 627.319432][T15148] vol_type 1 [ 627.358371][T15148] copy_flag 0 [ 627.378511][T15148] compat 5 [ 627.393627][T15148] vol_id 2147479551 [ 627.428783][T15148] lnum 0 [ 627.442396][T15148] data_size 0 [ 627.455594][T15148] used_ebs 0 [ 627.485051][T15148] data_pad 0 [ 627.504216][T15148] sqnum 1 [ 627.521453][T15148] hdr_crc 65b3bd2d [ 627.556213][T15148] Volume identifier header hexdump: [ 627.707946][T15148] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 628.962548][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 629.111378][T15192] No such timeout policy "" [ 629.142275][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1728'. [ 629.223335][T15192] netlink: Failed to associated timeout policy '' [ 629.318775][T15193] team0 (unregistering): Port device team_slave_0 removed [ 629.391705][T15193] team0 (unregistering): Port device team_slave_1 removed [ 630.917642][T15083] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 633.406711][T15289] FAULT_INJECTION: forcing a failure. [ 633.406711][T15289] name fail_futex, interval 1, probability 0, space 0, times 0 [ 633.539117][T15289] CPU: 0 UID: 0 PID: 15289 Comm: syz.3.1748 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.539161][T15289] Tainted: [L]=SOFTLOCKUP [ 633.539167][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 633.539176][T15289] Call Trace: [ 633.539181][T15289] [ 633.539187][T15289] dump_stack_lvl+0x100/0x190 [ 633.539211][T15289] should_fail_ex.cold+0x5/0xa [ 633.539231][T15289] get_futex_key+0x1d2/0x14f0 [ 633.539257][T15289] ? __pfx_get_futex_key+0x10/0x10 [ 633.539285][T15289] futex_wake+0xf4/0x5e0 [ 633.539304][T15289] ? __pfx_futex_wake+0x10/0x10 [ 633.539320][T15289] ? kasan_quarantine_put+0x104/0x240 [ 633.539340][T15289] ? putname+0xb1/0x110 [ 633.539353][T15289] ? kmem_cache_free+0x127/0x6b0 [ 633.539378][T15289] do_futex+0x2b2/0x440 [ 633.539393][T15289] ? __pfx_do_futex+0x10/0x10 [ 633.539405][T15289] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.539423][T15289] ? __fget_files+0x21f/0x3d0 [ 633.539445][T15289] __x64_sys_futex+0x34f/0x4d0 [ 633.539460][T15289] ? __x64_sys_openat+0x12d/0x210 [ 633.539477][T15289] ? __pfx___x64_sys_futex+0x10/0x10 [ 633.539498][T15289] do_syscall_64+0x115/0x840 [ 633.539514][T15289] ? clear_bhb_loop+0x40/0x90 [ 633.539531][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.539546][T15289] RIP: 0033:0x7f193739de59 [ 633.539558][T15289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.539572][T15289] RSP: 002b:00007f193831e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 633.539587][T15289] RAX: ffffffffffffffda RBX: 00007f1937625fa8 RCX: 00007f193739de59 [ 633.539597][T15289] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1937625fac [ 633.539606][T15289] RBP: 00007f1937625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 633.539614][T15289] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 633.539622][T15289] R13: 00007f1937626038 R14: 00007ffca2857000 R15: 00007ffca28570e8 [ 633.539640][T15289] [ 634.336786][T15279] kexec: Could not allocate control_code_buffer [ 636.654094][T15322] vivid-007: ================= START STATUS ================= [ 636.716865][T15322] vivid-007: Generate PTS: true [ 636.760780][T15322] vivid-007: Generate SCR: true [ 636.790365][T15322] tpg source WxH: 320x240 (Y'CbCr) [ 636.863794][T15322] tpg field: 1 [ 636.892628][T15322] tpg crop: (0,0)/320x240 [ 636.916703][T15322] tpg compose: (0,0)/320x240 [ 636.962892][T15322] tpg colorspace: 8 [ 636.982487][T15322] tpg transfer function: 0/0 [ 637.010433][T15322] tpg Y'CbCr encoding: 0/0 [ 637.035901][T15322] tpg quantization: 0/0 [ 637.060298][T15322] tpg RGB range: 0/2 [ 637.085295][T15322] vivid-007: ================== END STATUS ================== [ 637.762849][T15341] [U] 0="/ [ 637.816547][T15341] [U] [ 637.857591][T15341] [U] EeQ@ [ 638.479775][T15338] [U]  [ 639.136860][T15340] kexec: Could not allocate control_code_buffer [ 639.900306][T15387] FAULT_INJECTION: forcing a failure. [ 639.900306][T15387] name fail_futex, interval 1, probability 0, space 0, times 0 [ 640.079732][T15387] CPU: 0 UID: 0 PID: 15387 Comm: syz.1.1769 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.079758][T15387] Tainted: [L]=SOFTLOCKUP [ 640.079764][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 640.079775][T15387] Call Trace: [ 640.079781][T15387] [ 640.079787][T15387] dump_stack_lvl+0x100/0x190 [ 640.079809][T15387] should_fail_ex.cold+0x5/0xa [ 640.079826][T15387] get_futex_key+0x1d2/0x14f0 [ 640.079852][T15387] ? __pfx_get_futex_key+0x10/0x10 [ 640.079879][T15387] futex_wake+0xf4/0x5e0 [ 640.079899][T15387] ? __pfx_futex_wake+0x10/0x10 [ 640.079914][T15387] ? kasan_quarantine_put+0x104/0x240 [ 640.079934][T15387] ? putname+0xb1/0x110 [ 640.079946][T15387] ? kmem_cache_free+0x127/0x6b0 [ 640.079971][T15387] do_futex+0x2b2/0x440 [ 640.079986][T15387] ? __pfx_do_futex+0x10/0x10 [ 640.079999][T15387] ? __pfx_do_sys_openat2+0x10/0x10 [ 640.080017][T15387] ? __fget_files+0x21f/0x3d0 [ 640.080039][T15387] __x64_sys_futex+0x34f/0x4d0 [ 640.080054][T15387] ? __x64_sys_openat+0x12d/0x210 [ 640.080071][T15387] ? __pfx___x64_sys_futex+0x10/0x10 [ 640.080092][T15387] do_syscall_64+0x115/0x840 [ 640.080106][T15387] ? clear_bhb_loop+0x40/0x90 [ 640.080123][T15387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.080138][T15387] RIP: 0033:0x7fcfebd9de59 [ 640.080150][T15387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.080165][T15387] RSP: 002b:00007fcfecc110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 640.080179][T15387] RAX: ffffffffffffffda RBX: 00007fcfec025fa8 RCX: 00007fcfebd9de59 [ 640.080188][T15387] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcfec025fac [ 640.080197][T15387] RBP: 00007fcfec025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 640.080206][T15387] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 640.080214][T15387] R13: 00007fcfec026038 R14: 00007fffce4edd40 R15: 00007fffce4ede28 [ 640.080234][T15387] [ 642.439624][ T30] audit: type=1800 audit(2147483969.101:64): pid=15425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1778" name="features" dev="configfs" ino=71311 res=0 errno=0 [ 642.755724][T15419] [U] 0="/ [ 642.797318][T15419] [U] [ 642.842235][T15419] [U] EeQ@ [ 643.144794][T15416] [U]  [ 643.856749][T15418] kexec: Could not allocate control_code_buffer [ 644.567756][T15431] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 645.831026][T15083] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 648.197705][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 648.263763][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1796'. [ 649.610326][T15527] kexec: Could not allocate control_code_buffer [ 650.953519][T15539] Process accounting resumed [ 652.316639][ T30] audit: type=1800 audit(2147483978.996:65): pid=15584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1806" name="members" dev="configfs" ino=72449 res=0 errno=0 [ 652.346767][T15558] kexec: Could not allocate control_code_buffer [ 653.302467][T15585] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 653.626234][T15591] sysfs_service_op_show: Client not running :-5: [ 654.138224][T15607] bridge0: port 3(netdevsim3) entered blocking state [ 654.171246][T15607] bridge0: port 3(netdevsim3) entered disabled state [ 654.231769][T15607] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 654.289664][T15607] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 654.353007][T15607] bridge0: port 3(netdevsim3) entered blocking state [ 654.359824][T15607] bridge0: port 3(netdevsim3) entered forwarding state [ 659.062038][ T30] audit: type=1800 audit(2147483985.739:66): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1817" name="members" dev="configfs" ino=72922 res=0 errno=0 [ 660.461395][T15646] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 660.964080][T12615] Process accounting resumed [ 661.036785][T15653] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 661.102626][T15653] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 661.167954][T15653] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 661.585040][T15080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 661.607469][T15080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 661.622498][T15080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 661.635510][T15080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 661.644471][T15080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.820612][T15672] netlink: 298 bytes leftover after parsing attributes in process `syz.0.1819'. [ 663.736547][T15080] Bluetooth: hci5: command tx timeout [ 664.253960][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.304316][T15658] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.342737][T15658] bridge_slave_0: entered allmulticast mode [ 664.391908][T15658] bridge_slave_0: entered promiscuous mode [ 664.445264][T15658] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.491670][T15658] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.523943][T15658] bridge_slave_1: entered allmulticast mode [ 664.560797][T15658] bridge_slave_1: entered promiscuous mode [ 664.781826][T15658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.983493][T15658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.145732][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.257138][T15658] team0: Port device team_slave_0 added [ 665.282359][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.303032][T15658] team0: Port device team_slave_1 added [ 665.394866][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.544695][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.626203][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.666983][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.704412][T15716] vhci_hcd vhci_hcd.2: default hub control req: 1000 v0000 i0000 l0 [ 665.731816][T15658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.760483][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.821801][T15080] Bluetooth: hci5: command tx timeout [ 665.907985][T15658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.990273][T15658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.028489][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.138282][T15658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.443677][T15658] hsr_slave_0: entered promiscuous mode [ 666.486050][T15658] hsr_slave_1: entered promiscuous mode [ 666.529115][T15658] debugfs: 'hsr0' already exists in 'hsr' [ 666.568361][T15658] Cannot create hsr debugfs directory [ 667.894536][T15080] Bluetooth: hci5: command tx timeout [ 669.104631][T15658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 669.247590][T15658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.297364][T15658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 669.373816][T15658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.425898][T15658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 669.504506][T15658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.542894][T15658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 669.608418][T15658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.973511][T15080] Bluetooth: hci5: command tx timeout [ 670.204186][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.514780][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.609706][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.616892][T13157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.757959][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.765142][T13157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.900976][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.329908][T15658] veth0_vlan: entered promiscuous mode [ 674.393859][T15658] veth1_vlan: entered promiscuous mode [ 674.777212][T15658] veth0_macvtap: entered promiscuous mode [ 674.835677][T15658] veth1_macvtap: entered promiscuous mode [ 675.143152][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.162005][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.189512][T13153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.189580][T13153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.189606][T13153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.189630][T13153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.795575][T12907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.795631][T12907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.956834][T12907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.956853][T12907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.367314][T15867] vivid-007: ================= START STATUS ================= [ 676.367335][T15867] vivid-007: Generate PTS: true [ 676.367355][T15867] vivid-007: Generate SCR: true [ 676.367371][T15867] tpg source WxH: 320x240 (Y'CbCr) [ 676.367381][T15867] tpg field: 1 [ 676.367386][T15867] tpg crop: (0,0)/320x240 [ 676.367403][T15867] tpg compose: (0,0)/320x240 [ 676.367413][T15867] tpg colorspace: 8 [ 676.367419][T15867] tpg transfer function: 0/0 [ 676.367427][T15867] tpg Y'CbCr encoding: 0/0 [ 676.367434][T15867] tpg quantization: 0/0 [ 676.367440][T15867] tpg RGB range: 0/2 [ 676.367447][T15867] vivid-007: ================== END STATUS ================== [ 676.932077][T15872] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1852: iget: checksum invalid [ 676.932907][T15872] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 676.933060][T15872] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1852: iget: checksum invalid [ 676.938093][T15872] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 676.938228][T15872] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1852: iget: checksum invalid [ 676.938344][T15872] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 677.028875][T15872] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1852: iget: checksum invalid [ 677.029055][T15872] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 677.029081][T15872] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 677.029096][T15872] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 681.001739][T15920] Process accounting paused [ 681.676127][T15932] netlink: 'syz.1.1866': attribute type 15 has an invalid length. [ 681.784516][T15932] netlink: 'syz.1.1866': attribute type 16 has an invalid length. [ 681.874323][T15932] netlink: 194 bytes leftover after parsing attributes in process `syz.1.1866'. [ 684.170700][ T30] audit: type=1800 audit(2147484010.862:67): pid=15945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1871" name="members" dev="configfs" ino=75257 res=0 errno=0 [ 684.765380][T15950] zswap: compressor not available [ 685.967937][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.974559][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.621545][T15948] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 695.260872][T16048] FAULT_INJECTION: forcing a failure. [ 695.260872][T16048] name failslab, interval 1, probability 0, space 0, times 0 [ 695.373984][T16048] CPU: 0 UID: 0 PID: 16048 Comm: syz.5.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.374012][T16048] Tainted: [L]=SOFTLOCKUP [ 695.374017][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 695.374026][T16048] Call Trace: [ 695.374031][T16048] [ 695.374038][T16048] dump_stack_lvl+0x100/0x190 [ 695.374059][T16048] should_fail_ex.cold+0x5/0xa [ 695.374077][T16048] should_failslab+0xc2/0x120 [ 695.374095][T16048] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 695.374113][T16048] ? alloc_inode+0x183/0x250 [ 695.374134][T16048] alloc_inode+0x183/0x250 [ 695.374151][T16048] iget_locked+0x1d9/0x6d0 [ 695.374168][T16048] ? __pfx_iget_locked+0x10/0x10 [ 695.374183][T16048] ? find_held_lock+0x2b/0x80 [ 695.374200][T16048] ? kernfs_find_and_get_node_by_id+0x1be/0x3e0 [ 695.374223][T16048] ? kernfs_find_and_get_node_by_id+0x1be/0x3e0 [ 695.374249][T16048] kernfs_get_inode+0x46/0x470 [ 695.374268][T16048] kernfs_fh_to_dentry+0xf3/0x250 [ 695.374286][T16048] exportfs_decode_fh_raw+0x167/0x760 [ 695.374402][T16048] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 695.374422][T16048] ? __pfx_kernfs_fh_to_dentry+0x10/0x10 [ 695.374440][T16048] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 695.374490][T16048] do_handle_open+0x7e9/0xf20 [ 695.374509][T16048] ? __pfx_do_handle_open+0x10/0x10 [ 695.374525][T16048] ? __x64_sys_futex+0x34f/0x4d0 [ 695.374543][T16048] ? xfd_validate_state+0x129/0x190 [ 695.374566][T16048] ? do_syscall_64+0x115/0x840 [ 695.374579][T16048] do_syscall_64+0x115/0x840 [ 695.374591][T16048] ? clear_bhb_loop+0x40/0x90 [ 695.374609][T16048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.374625][T16048] RIP: 0033:0x7f8f3979de59 [ 695.374639][T16048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.374653][T16048] RSP: 002b:00007f8f3a6f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 695.374667][T16048] RAX: ffffffffffffffda RBX: 00007f8f39a25fa0 RCX: 00007f8f3979de59 [ 695.374677][T16048] RDX: 0000000000100004 RSI: 0000200000000200 RDI: 0000000000000005 [ 695.374686][T16048] RBP: 00007f8f39833e6f R08: 0000000000000000 R09: 0000000000000000 [ 695.374695][T16048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.374704][T16048] R13: 00007f8f39a26038 R14: 00007f8f39a25fa0 R15: 00007ffca118b768 [ 695.374723][T16048] [ 699.142433][T15083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.167513][T15083] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.177280][T15083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.185253][T15083] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.194491][T15083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 700.152086][T16082] kexec: Could not allocate control_code_buffer [ 701.189419][T16116] FAULT_INJECTION: forcing a failure. [ 701.189419][T16116] name failslab, interval 1, probability 0, space 0, times 0 [ 701.240396][T15083] Bluetooth: hci6: command tx timeout [ 701.340372][T16116] CPU: 0 UID: 0 PID: 16116 Comm: syz.5.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.340400][T16116] Tainted: [L]=SOFTLOCKUP [ 701.340406][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 701.340415][T16116] Call Trace: [ 701.340421][T16116] [ 701.340428][T16116] dump_stack_lvl+0x100/0x190 [ 701.340450][T16116] should_fail_ex.cold+0x5/0xa [ 701.340468][T16116] should_failslab+0xc2/0x120 [ 701.340488][T16116] __kmalloc_cache_noprof+0x91/0x6c0 [ 701.340511][T16116] ? cachefiles_daemon_open+0xa0/0x550 [ 701.340537][T16116] cachefiles_daemon_open+0xa0/0x550 [ 701.340556][T16116] ? __pfx_cachefiles_daemon_open+0x10/0x10 [ 701.340575][T16116] misc_open+0x26d/0x450 [ 701.340600][T16116] ? __pfx_misc_open+0x10/0x10 [ 701.340622][T16116] chrdev_open+0x234/0x6a0 [ 701.340639][T16116] ? __pfx_apparmor_file_open+0x10/0x10 [ 701.340656][T16116] ? __pfx_chrdev_open+0x10/0x10 [ 701.340679][T16116] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 701.340699][T16116] do_dentry_open+0x6ab/0x14d0 [ 701.340721][T16116] ? __pfx_chrdev_open+0x10/0x10 [ 701.340747][T16116] vfs_open+0x82/0x3f0 [ 701.340766][T16116] path_openat+0x2873/0x4280 [ 701.340796][T16116] ? __pfx_path_openat+0x10/0x10 [ 701.340823][T16116] do_file_open+0x20e/0x430 [ 701.340846][T16116] ? __pfx_do_file_open+0x10/0x10 [ 701.340880][T16116] ? alloc_fd+0x471/0x7a0 [ 701.340903][T16116] ? do_getname+0x191/0x390 [ 701.340921][T16116] do_sys_openat2+0x10f/0x1e0 [ 701.340939][T16116] ? __pfx_do_sys_openat2+0x10/0x10 [ 701.340957][T16116] ? __fget_files+0x21f/0x3d0 [ 701.340980][T16116] __x64_sys_openat+0x12d/0x210 [ 701.340998][T16116] ? __pfx___x64_sys_openat+0x10/0x10 [ 701.341023][T16116] do_syscall_64+0x115/0x840 [ 701.341037][T16116] ? clear_bhb_loop+0x40/0x90 [ 701.341057][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.341073][T16116] RIP: 0033:0x7f8f3979de59 [ 701.341086][T16116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.341099][T16116] RSP: 002b:00007f8f3a6f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 701.341115][T16116] RAX: ffffffffffffffda RBX: 00007f8f39a25fa0 RCX: 00007f8f3979de59 [ 701.341125][T16116] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 701.341146][T16116] RBP: 00007f8f39833e6f R08: 0000000000000000 R09: 0000000000000000 [ 701.341156][T16116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.341166][T16116] R13: 00007f8f39a26038 R14: 00007f8f39a25fa0 R15: 00007ffca118b768 [ 701.341187][T16116] [ 702.091466][T16118] raw_sendmsg: syz.5.1900 forgot to set AF_INET. Fix it! [ 702.439967][T16122] FAULT_INJECTION: forcing a failure. [ 702.439967][T16122] name failslab, interval 1, probability 0, space 0, times 0 [ 702.561923][T16122] CPU: 0 UID: 0 PID: 16122 Comm: syz.5.1901 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.561950][T16122] Tainted: [L]=SOFTLOCKUP [ 702.561955][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 702.561965][T16122] Call Trace: [ 702.561970][T16122] [ 702.561977][T16122] dump_stack_lvl+0x100/0x190 [ 702.562000][T16122] should_fail_ex.cold+0x5/0xa [ 702.562018][T16122] should_failslab+0xc2/0x120 [ 702.562038][T16122] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 702.562054][T16122] ? inode_set_ctime_current+0x283/0x850 [ 702.562069][T16122] ? find_held_lock+0x2b/0x80 [ 702.562085][T16122] ? __d_alloc+0x35/0xa50 [ 702.562101][T16122] __d_alloc+0x35/0xa50 [ 702.562114][T16122] ? _raw_spin_unlock+0x28/0x50 [ 702.562136][T16122] d_make_root+0x3e/0x90 [ 702.562150][T16122] simple_fill_super+0x278/0x680 [ 702.562166][T16122] ? __pfx_nfsd_fill_super+0x10/0x10 [ 702.562186][T16122] ? __pfx_nfsd_fill_super+0x10/0x10 [ 702.562205][T16122] nfsd_fill_super+0x98/0x560 [ 702.562224][T16122] ? __pfx_nfsd_fill_super+0x10/0x10 [ 702.562243][T16122] get_tree_keyed+0x10e/0x1d0 [ 702.562265][T16122] vfs_get_tree+0x92/0x320 [ 702.562282][T16122] path_mount+0x7d0/0x23d0 [ 702.562301][T16122] ? __pfx_path_mount+0x10/0x10 [ 702.562314][T16122] ? lockdep_hardirqs_on+0x78/0x100 [ 702.562342][T16122] ? putname+0xb1/0x110 [ 702.562355][T16122] ? kmem_cache_free+0x127/0x6b0 [ 702.562383][T16122] ? __x64_sys_mount+0x293/0x310 [ 702.562398][T16122] __x64_sys_mount+0x293/0x310 [ 702.562414][T16122] ? __pfx___x64_sys_mount+0x10/0x10 [ 702.562436][T16122] do_syscall_64+0x115/0x840 [ 702.562449][T16122] ? clear_bhb_loop+0x40/0x90 [ 702.562467][T16122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.562482][T16122] RIP: 0033:0x7f8f3979de59 [ 702.562496][T16122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.562509][T16122] RSP: 002b:00007f8f3a6d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 702.562524][T16122] RAX: ffffffffffffffda RBX: 00007f8f39a26090 RCX: 00007f8f3979de59 [ 702.562533][T16122] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 702.562542][T16122] RBP: 00007f8f39833e6f R08: 0000000000000000 R09: 0000000000000000 [ 702.562551][T16122] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 702.562559][T16122] R13: 00007f8f39a26128 R14: 00007f8f39a26090 R15: 00007ffca118b768 [ 702.562578][T16122] [ 703.381397][T15083] Bluetooth: hci6: command tx timeout [ 704.778084][T16087] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.820557][T16087] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.859097][T16087] bridge_slave_0: entered allmulticast mode [ 704.895872][T16087] bridge_slave_0: entered promiscuous mode [ 704.937574][T16087] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.972984][T16087] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.005290][T16087] bridge_slave_1: entered allmulticast mode [ 705.035314][T16087] bridge_slave_1: entered promiscuous mode [ 705.277764][T16087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.395587][T15083] Bluetooth: hci6: command tx timeout [ 705.505883][T16087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.789805][ T30] audit: type=1800 audit(2147484032.492:68): pid=16159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1905" name="lu_gp_id" dev="configfs" ino=76731 res=0 errno=0 [ 705.959116][T16087] team0: Port device team_slave_0 added [ 706.142431][T16087] team0: Port device team_slave_1 added [ 706.511185][T16087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.538258][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.597976][T16087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.717850][T16087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.736640][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.794676][T16087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.969191][T16087] hsr_slave_0: entered promiscuous mode [ 706.985350][T16087] hsr_slave_1: entered promiscuous mode [ 706.998784][T16087] debugfs: 'hsr0' already exists in 'hsr' [ 707.014587][T16087] Cannot create hsr debugfs directory [ 707.474398][T15083] Bluetooth: hci6: command tx timeout [ 707.942970][T16087] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 707.989393][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.018456][T16087] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 708.062637][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.095032][T16087] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 708.128984][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.167358][T16087] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 708.220752][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.494323][T16087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.513283][T16165] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 708.563529][T16087] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.613126][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.620350][T13157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.696656][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.703857][T12907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.968486][T16181] kexec: Could not allocate control_code_buffer [ 710.561925][T16087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.088348][T16226] FAULT_INJECTION: forcing a failure. [ 711.088348][T16226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.121820][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 711.278946][T16226] CPU: 0 UID: 0 PID: 16226 Comm: syz.3.1914 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.278973][T16226] Tainted: [L]=SOFTLOCKUP [ 711.278979][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 711.278988][T16226] Call Trace: [ 711.278994][T16226] [ 711.279000][T16226] dump_stack_lvl+0x100/0x190 [ 711.279021][T16226] should_fail_ex.cold+0x5/0xa [ 711.279039][T16226] _copy_from_iter+0x1f4/0x1690 [ 711.279064][T16226] ? kmalloc_reserve+0xf9/0x350 [ 711.279087][T16226] ? __pfx__copy_from_iter+0x10/0x10 [ 711.279107][T16226] ? __alloc_skb+0x4e9/0x710 [ 711.279120][T16226] ? __alloc_skb+0x5b7/0x710 [ 711.279135][T16226] ? __pfx___alloc_skb+0x10/0x10 [ 711.279151][T16226] ? apparmor_file_permission+0x13f/0x1c0 [ 711.279171][T16226] vhci_write+0x150/0x490 [ 711.279195][T16226] vfs_write+0x6ac/0x1050 [ 711.279219][T16226] ? __pfx_vhci_write+0x10/0x10 [ 711.279235][T16226] ? __pfx_vfs_write+0x10/0x10 [ 711.279254][T16226] ? find_held_lock+0x2b/0x80 [ 711.279283][T16226] ksys_write+0x12a/0x250 [ 711.279303][T16226] ? __pfx_ksys_write+0x10/0x10 [ 711.279328][T16226] do_syscall_64+0x115/0x840 [ 711.279342][T16226] ? clear_bhb_loop+0x40/0x90 [ 711.279359][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.279374][T16226] RIP: 0033:0x7f193739de59 [ 711.279387][T16226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.279401][T16226] RSP: 002b:00007f19382dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 711.279416][T16226] RAX: ffffffffffffffda RBX: 00007f1937626180 RCX: 00007f193739de59 [ 711.279426][T16226] RDX: 000000000000007f RSI: 00002000000002c0 RDI: 00000000000000ca [ 711.279435][T16226] RBP: 00007f1937433e6f R08: 0000000000000000 R09: 0000000000000000 [ 711.279443][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.279451][T16226] R13: 00007f1937626218 R14: 00007f1937626180 R15: 00007ffca28570e8 [ 711.279470][T16226] [ 712.401148][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 712.481505][T16240] can: request_module (can-proto-3) failed. [ 712.536484][T16087] veth0_vlan: entered promiscuous mode [ 712.604847][T16087] veth1_vlan: entered promiscuous mode [ 712.741346][T16087] veth0_macvtap: entered promiscuous mode [ 712.784926][T16087] veth1_macvtap: entered promiscuous mode [ 712.877927][T16087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.910198][T16087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.967427][T13157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.999779][T13157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.079444][T13157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.118580][T13157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.480762][T13156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.518908][T13156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.788240][ T30] audit: type=1800 audit(2147484040.486:69): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1919" name="nullb0" dev="tmpfs" ino=888 res=0 errno=0 [ 713.824048][T13156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.899395][T13156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.431128][T16266] bridge0: port 4(syz_tun) entered blocking state [ 714.462851][T16266] bridge0: port 4(syz_tun) entered disabled state [ 714.500367][T16266] syz_tun: entered allmulticast mode [ 714.532628][T16266] syz_tun: entered promiscuous mode [ 714.557423][T16266] bridge0: port 4(syz_tun) entered blocking state [ 714.564026][T16266] bridge0: port 4(syz_tun) entered forwarding state [ 715.138005][T16281] FAULT_INJECTION: forcing a failure. [ 715.138005][T16281] name failslab, interval 1, probability 0, space 0, times 0 [ 715.150946][T16281] CPU: 0 UID: 0 PID: 16281 Comm: syz.3.1922 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.150972][T16281] Tainted: [L]=SOFTLOCKUP [ 715.150977][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 715.150986][T16281] Call Trace: [ 715.150993][T16281] [ 715.150999][T16281] dump_stack_lvl+0x100/0x190 [ 715.151021][T16281] should_fail_ex.cold+0x5/0xa [ 715.151038][T16281] should_failslab+0xc2/0x120 [ 715.151057][T16281] kmem_cache_alloc_noprof+0x91/0x6a0 [ 715.151074][T16281] ? __send_signal_locked+0x155/0x12d0 [ 715.151100][T16281] __send_signal_locked+0x155/0x12d0 [ 715.151120][T16281] ? send_signal_locked+0x479/0x850 [ 715.151141][T16281] ? lock_task_sighand+0x146/0x340 [ 715.151163][T16281] do_send_specific+0x1e8/0x360 [ 715.151179][T16281] ? __pfx_do_send_specific+0x10/0x10 [ 715.151200][T16281] do_rt_tgsigqueueinfo+0xa9/0x100 [ 715.151217][T16281] __x64_sys_rt_tgsigqueueinfo+0x17a/0x210 [ 715.151236][T16281] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 715.151263][T16281] do_syscall_64+0x115/0x840 [ 715.151277][T16281] ? clear_bhb_loop+0x40/0x90 [ 715.151294][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.151309][T16281] RIP: 0033:0x7f193739de59 [ 715.151324][T16281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.151338][T16281] RSP: 002b:00007f19382fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 715.151352][T16281] RAX: ffffffffffffffda RBX: 00007f1937626090 RCX: 00007f193739de59 [ 715.151362][T16281] RDX: 0000000000000021 RSI: 0000000000000882 RDI: 000000000000087f [ 715.151371][T16281] RBP: 00007f1937433e6f R08: 0000000000000000 R09: 0000000000000000 [ 715.151380][T16281] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 715.151389][T16281] R13: 00007f1937626128 R14: 00007f1937626090 R15: 00007ffca28570e8 [ 715.151409][T16281] [ 716.530797][T16286] kexec: Could not allocate control_code_buffer [ 717.305141][T15083] block nbd0: Receive control failed (result -32) [ 717.896078][T15080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 717.913082][T15080] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 717.921330][T15080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 717.931605][T15080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 717.944359][T15080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 720.028192][T15083] Bluetooth: hci7: command tx timeout [ 720.317351][T16349] can: request_module (can-proto-3) failed. [ 720.383691][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 720.569304][T16315] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.606046][T16315] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.639240][T16335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 720.647012][T16315] bridge_slave_0: entered allmulticast mode [ 720.677494][T16315] bridge_slave_0: entered promiscuous mode [ 720.699653][T16335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 720.750978][T16335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 720.790693][T16335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 720.819955][T16335] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 720.835982][T16315] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.870180][T16335] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 720.890643][T16315] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.921448][T16315] bridge_slave_1: entered allmulticast mode [ 720.929373][T16335] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 720.972993][T16315] bridge_slave_1: entered promiscuous mode [ 720.993820][T16335] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 721.006975][T16335] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 721.074010][T16335] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 721.107341][T16335] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 721.135283][T16335] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 721.165683][T16315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.200271][T16335] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 721.216323][T16315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.396409][T16315] team0: Port device team_slave_0 added [ 721.446289][T16315] team0: Port device team_slave_1 added [ 721.572367][T16315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.614049][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.760295][T16315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.859217][T16370] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1937: iget: checksum invalid [ 721.872190][T15083] Bluetooth: hci0: command 0x0c1a tx timeout [ 721.883854][T16315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.918784][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.948753][T16370] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 722.004778][T16370] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1937: iget: checksum invalid [ 722.051154][T16370] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 722.066052][T16315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.109002][T16370] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1937: iget: checksum invalid [ 722.171002][T16370] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 722.260005][T16370] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1937: iget: checksum invalid [ 722.323631][T16315] hsr_slave_0: entered promiscuous mode [ 722.369581][T16315] hsr_slave_1: entered promiscuous mode [ 722.385557][T16370] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 722.411616][T16315] debugfs: 'hsr0' already exists in 'hsr' [ 722.435570][T16315] Cannot create hsr debugfs directory [ 722.493383][T16370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 722.561042][T16370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 722.746928][T15083] Bluetooth: hci1: command 0x0c1a tx timeout [ 722.827539][T15083] Bluetooth: hci5: command 0x0c1a tx timeout [ 722.833652][T15080] Bluetooth: hci4: command 0x0c1a tx timeout [ 722.840137][T15080] Bluetooth: hci3: command 0x0406 tx timeout [ 723.068022][T15080] Bluetooth: hci6: command 0x0c1a tx timeout [ 723.146776][T15080] Bluetooth: hci7: command 0x040f tx timeout [ 723.912044][T16315] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 723.989930][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.034165][T16315] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 724.091075][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.138454][T16315] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 724.206779][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.261011][T16315] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 724.384049][T16394] [U] 0="/ [ 724.417086][T16394] [U] [ 724.445056][T16315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.457166][T16394] [U] EeQ@ [ 724.828687][T16408] [U]  [ 724.851706][T16408] [U] [ 724.871108][T16408] [U] EeQ@ [ 724.905977][T15080] Bluetooth: hci5: command 0x0c1a tx timeout [ 725.145868][T15080] Bluetooth: hci6: command 0x0c1a tx timeout [ 725.225790][T15080] Bluetooth: hci7: command 0x040f tx timeout [ 725.572074][T16407] [U]  [ 725.639152][T16392] kexec: Could not allocate control_code_buffer [ 725.830697][T16315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.929940][T16315] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.039650][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.046830][T12875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.087615][T16415] FAULT_INJECTION: forcing a failure. [ 726.087615][T16415] name failslab, interval 1, probability 0, space 0, times 0 [ 726.142578][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.149736][T12875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.174833][T16415] CPU: 0 UID: 0 PID: 16415 Comm: syz.3.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.174861][T16415] Tainted: [L]=SOFTLOCKUP [ 726.174866][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 726.174876][T16415] Call Trace: [ 726.174881][T16415] [ 726.174887][T16415] dump_stack_lvl+0x100/0x190 [ 726.174908][T16415] should_fail_ex.cold+0x5/0xa [ 726.174925][T16415] should_failslab+0xc2/0x120 [ 726.174944][T16415] __kmalloc_noprof+0xfc/0x820 [ 726.174959][T16415] ? lockdep_init_map_type+0x5c/0x250 [ 726.174982][T16415] ? tomoyo_open_control+0x618/0xa20 [ 726.175007][T16415] tomoyo_open_control+0x618/0xa20 [ 726.175031][T16415] do_dentry_open+0x6ab/0x14d0 [ 726.175054][T16415] ? __pfx_tomoyo_open+0x10/0x10 [ 726.175077][T16415] vfs_open+0x82/0x3f0 [ 726.175097][T16415] path_openat+0x2873/0x4280 [ 726.175126][T16415] ? __pfx_path_openat+0x10/0x10 [ 726.175152][T16415] do_file_open+0x20e/0x430 [ 726.175175][T16415] ? __pfx_do_file_open+0x10/0x10 [ 726.175209][T16415] ? alloc_fd+0x471/0x7a0 [ 726.175232][T16415] ? do_getname+0x191/0x390 [ 726.175249][T16415] do_sys_openat2+0x10f/0x1e0 [ 726.175266][T16415] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.175284][T16415] ? __fget_files+0x21f/0x3d0 [ 726.175308][T16415] __x64_sys_openat+0x12d/0x210 [ 726.175325][T16415] ? __pfx___x64_sys_openat+0x10/0x10 [ 726.175350][T16415] do_syscall_64+0x115/0x840 [ 726.175363][T16415] ? clear_bhb_loop+0x40/0x90 [ 726.175381][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.175395][T16415] RIP: 0033:0x7f193739de59 [ 726.175407][T16415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.175421][T16415] RSP: 002b:00007f193831e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.175435][T16415] RAX: ffffffffffffffda RBX: 00007f1937625fa0 RCX: 00007f193739de59 [ 726.175444][T16415] RDX: 0000000000040802 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 726.175453][T16415] RBP: 00007f1937433e6f R08: 0000000000000000 R09: 0000000000000000 [ 726.175462][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.175470][T16415] R13: 00007f1937626038 R14: 00007f1937625fa0 R15: 00007ffca28570e8 [ 726.175489][T16415] [ 727.050532][T15080] Bluetooth: hci5: command 0x0c1a tx timeout [ 727.179453][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 727.251287][T15080] Bluetooth: hci6: command 0x0c1a tx timeout [ 727.268514][T16430] HfR: entered promiscuous mode [ 727.317949][T15080] Bluetooth: hci7: command 0x040f tx timeout [ 728.780113][T16315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.383565][T15080] Bluetooth: hci7: command 0x040f tx timeout [ 729.845994][T16480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1955'. [ 730.232657][T16484] hub 1-0:1.0: USB hub found [ 730.264109][T16484] hub 1-0:1.0: 1 port detected [ 730.631161][T16315] veth0_vlan: entered promiscuous mode [ 730.710332][T16315] veth1_vlan: entered promiscuous mode [ 730.817247][T16315] veth0_macvtap: entered promiscuous mode [ 730.860077][T16315] veth1_macvtap: entered promiscuous mode [ 730.970260][T16315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.199460][T16315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.354655][T13153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.408036][T13153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.463469][T15080] Bluetooth: hci7: command 0x040f tx timeout [ 731.472133][T13153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.518521][T13153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.826177][T13151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.864830][T13151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.987305][T13153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.046906][T13153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.136715][ T30] audit: type=1800 audit(2147484058.856:70): pid=16505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1962" name="lu_gp_id" dev="configfs" ino=80052 res=0 errno=0 [ 732.779344][T16518] netlink: 'syz.3.1965': attribute type 15 has an invalid length. [ 732.842566][T16518] netlink: 'syz.3.1965': attribute type 16 has an invalid length. [ 732.902267][T16518] netlink: 194 bytes leftover after parsing attributes in process `syz.3.1965'. [ 732.929131][T16524] random: crng reseeded on system resumption [ 739.535836][T16619] kexec: Could not allocate control_code_buffer [ 740.294628][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 740.372680][T16656] can: request_module (can-proto-3) failed. [ 741.522503][T16667] FAULT_INJECTION: forcing a failure. [ 741.522503][T16667] name failslab, interval 1, probability 0, space 0, times 0 [ 741.789504][T16667] CPU: 0 UID: 0 PID: 16667 Comm: syz.6.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.789530][T16667] Tainted: [L]=SOFTLOCKUP [ 741.789537][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 741.789546][T16667] Call Trace: [ 741.789551][T16667] [ 741.789558][T16667] dump_stack_lvl+0x100/0x190 [ 741.789582][T16667] should_fail_ex.cold+0x5/0xa [ 741.789601][T16667] should_failslab+0xc2/0x120 [ 741.789621][T16667] kmem_cache_alloc_noprof+0x91/0x6a0 [ 741.789638][T16667] ? __pfx_map_id_range_down+0x10/0x10 [ 741.789658][T16667] ? rcu_is_watching+0x12/0xc0 [ 741.789673][T16667] ? security_inode_alloc+0x3b/0x2c0 [ 741.789694][T16667] security_inode_alloc+0x3b/0x2c0 [ 741.789709][T16667] inode_init_always_gfp+0xc77/0xfb0 [ 741.789735][T16667] alloc_inode+0x8e/0x250 [ 741.789752][T16667] new_inode+0x22/0x1c0 [ 741.789770][T16667] proc_pid_make_inode+0x22/0x160 [ 741.789792][T16667] proc_ns_dir_lookup+0x25b/0x390 [ 741.789812][T16667] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 741.789832][T16667] path_openat+0x241f/0x4280 [ 741.789862][T16667] ? __pfx_path_openat+0x10/0x10 [ 741.789889][T16667] do_file_open+0x20e/0x430 [ 741.789919][T16667] ? __pfx_do_file_open+0x10/0x10 [ 741.789948][T16667] ? __pfx_kfree_link+0x10/0x10 [ 741.789974][T16667] ? alloc_fd+0x471/0x7a0 [ 741.789997][T16667] ? do_getname+0x191/0x390 [ 741.790015][T16667] do_sys_openat2+0x10f/0x1e0 [ 741.790033][T16667] ? __pfx_do_sys_openat2+0x10/0x10 [ 741.790051][T16667] ? __fget_files+0x21f/0x3d0 [ 741.790075][T16667] __x64_sys_openat+0x12d/0x210 [ 741.790093][T16667] ? __pfx___x64_sys_openat+0x10/0x10 [ 741.790117][T16667] do_syscall_64+0x115/0x840 [ 741.790131][T16667] ? clear_bhb_loop+0x40/0x90 [ 741.790149][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.790163][T16667] RIP: 0033:0x7feb3d35e68e [ 741.790177][T16667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.790191][T16667] RSP: 002b:00007feb3e1c8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 741.790206][T16667] RAX: ffffffffffffffda RBX: 00007feb3e1c96c0 RCX: 00007feb3d35e68e [ 741.790216][T16667] RDX: 0000000000000002 RSI: 00007feb3e1c8f90 RDI: ffffffffffffff9c [ 741.790225][T16667] RBP: 00007feb3d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 741.790233][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.790242][T16667] R13: 00007feb3d626128 R14: 00007feb3d626090 R15: 00007fffd0ae16a8 [ 741.790262][T16667] [ 742.334907][T16678] mmap: syz.3.1995 (16678) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 743.378899][T16683] FAULT_INJECTION: forcing a failure. [ 743.378899][T16683] name failslab, interval 1, probability 0, space 0, times 0 [ 743.509084][T16683] CPU: 0 UID: 0 PID: 16683 Comm: syz.6.1996 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.509110][T16683] Tainted: [L]=SOFTLOCKUP [ 743.509116][T16683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 743.509125][T16683] Call Trace: [ 743.509131][T16683] [ 743.509137][T16683] dump_stack_lvl+0x100/0x190 [ 743.509160][T16683] should_fail_ex.cold+0x5/0xa [ 743.509177][T16683] should_failslab+0xc2/0x120 [ 743.509197][T16683] __kvmalloc_node_noprof+0x116/0x970 [ 743.509216][T16683] ? proc_sys_call_handler+0x2c7/0x5a0 [ 743.509242][T16683] proc_sys_call_handler+0x2c7/0x5a0 [ 743.509265][T16683] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 743.509292][T16683] vfs_write+0x6ac/0x1050 [ 743.509314][T16683] ? __pfx_proc_sys_write+0x10/0x10 [ 743.509336][T16683] ? __pfx_vfs_write+0x10/0x10 [ 743.509355][T16683] ? find_held_lock+0x2b/0x80 [ 743.509384][T16683] __x64_sys_pwrite64+0x1eb/0x250 [ 743.509406][T16683] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 743.509427][T16683] ? trace_hardirqs_off+0x70/0x170 [ 743.509453][T16683] do_syscall_64+0x115/0x840 [ 743.509470][T16683] ? clear_bhb_loop+0x40/0x90 [ 743.509487][T16683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.509502][T16683] RIP: 0033:0x7feb3d39de59 [ 743.509515][T16683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.509529][T16683] RSP: 002b:00007feb3e1ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 743.509543][T16683] RAX: ffffffffffffffda RBX: 00007feb3d625fa0 RCX: 00007feb3d39de59 [ 743.509553][T16683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 743.509561][T16683] RBP: 00007feb3d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 743.509570][T16683] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 743.509578][T16683] R13: 00007feb3d626038 R14: 00007feb3d625fa0 R15: 00007fffd0ae16a8 [ 743.509597][T16683] [ 745.820778][T16719] ovs_?: entered promiscuous mode [ 747.376617][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.391015][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.601915][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2015'. [ 749.902924][T16775] team0: Port device team_slave_1 removed [ 751.408711][T16798] vivid-007: ================= START STATUS ================= [ 751.527008][T16798] vivid-007: Generate PTS: true [ 751.592239][T16798] vivid-007: Generate SCR: true [ 751.691536][T16798] tpg source WxH: 320x240 (Y'CbCr) [ 751.732937][T16799] Process accounting resumed [ 751.774707][T16798] tpg field: 1 [ 751.814066][T16798] tpg crop: (0,0)/320x240 [ 751.860322][T16798] tpg compose: (0,0)/320x240 [ 751.918991][T16798] tpg colorspace: 8 [ 751.960169][T16798] tpg transfer function: 0/0 [ 752.020079][T16798] tpg Y'CbCr encoding: 0/0 [ 752.067536][T16798] tpg quantization: 0/0 [ 752.128404][T16798] tpg RGB range: 0/2 [ 752.177040][T16798] vivid-007: ================== END STATUS ================== [ 752.651798][T15080] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 760.948007][T16851] process 'syz.0.2031' launched './file0' with NULL argv: empty string added [ 761.116522][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2037'. [ 761.176325][T16888] can: request_module (can-proto-3) failed. [ 761.424418][T16879] kexec: Could not allocate control_code_buffer [ 762.320068][T16911] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 763.238162][T16930] vivid-007: ================= START STATUS ================= [ 763.322716][T16930] vivid-007: Generate PTS: true [ 763.370616][T16930] vivid-007: Generate SCR: true [ 763.428079][T16930] tpg source WxH: 320x240 (Y'CbCr) [ 763.476112][T16930] tpg field: 1 [ 763.545918][T16930] tpg crop: (0,0)/320x240 [ 763.600906][T16930] tpg compose: (0,0)/320x240 [ 763.649853][T16930] tpg colorspace: 8 [ 763.685619][T16930] tpg transfer function: 0/0 [ 763.721528][T16930] tpg Y'CbCr encoding: 0/0 [ 763.759149][T16930] tpg quantization: 0/0 [ 763.793142][T16930] tpg RGB range: 0/2 [ 763.822544][T16930] vivid-007: ================== END STATUS ================== [ 765.159244][T16940] [U] [ 765.751233][T16941] kexec: Could not allocate control_code_buffer [ 765.914314][T16962] Zero length message leads to an empty skb [ 765.980316][T16962] netlink: 'syz.3.2051': attribute type 11 has an invalid length. [ 766.065647][T16962] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2051: iget: checksum invalid [ 766.279631][T16962] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 766.482224][T16972] loop6: detected capacity change from 0 to 2097152 [ 766.507707][T16962] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2051: iget: checksum invalid [ 766.694020][T16962] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 766.874873][T16962] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2051: iget: checksum invalid [ 767.080729][T16962] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 767.164042][T16962] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2051: iget: checksum invalid [ 767.231487][T16962] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 767.324977][T16962] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 767.400121][T16962] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 771.086723][T17027] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 771.140680][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'. [ 771.201800][T17035] can: request_module (can-proto-3) failed. [ 772.151418][T17053] program syz.3.2067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.659555][T17125] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 778.801130][T17125] File: /dev/nullb0 PID: 17125 Comm: syz.6.2080 [ 783.962463][T17181] openvswitch: netlink: Multiple metadata blocks provided [ 785.908387][T17207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.598943][T17227] vivid-007: ================= START STATUS ================= [ 786.655246][T17227] vivid-007: Generate PTS: true [ 786.685934][T17227] vivid-007: Generate SCR: true [ 786.724246][T17227] tpg source WxH: 320x240 (Y'CbCr) [ 786.751719][T17227] tpg field: 1 [ 786.788325][T17227] tpg crop: (0,0)/320x240 [ 786.832406][T17227] tpg compose: (0,0)/320x240 [ 786.859321][T17227] tpg colorspace: 8 [ 786.899171][T17227] tpg transfer function: 0/0 [ 786.932616][T17227] tpg Y'CbCr encoding: 0/0 [ 786.956626][T17227] tpg quantization: 0/0 [ 786.989812][T15079] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 787.003526][T15079] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 787.011833][T15079] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 787.020801][T15079] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 787.029239][T15079] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 787.068271][T17227] tpg RGB range: 0/2 [ 787.092024][T17227] vivid-007: ================== END STATUS ================== [ 787.389883][T17239] vivid-007: ================= START STATUS ================= [ 787.424833][T17239] vivid-007: Generate PTS: true [ 787.444498][T17239] vivid-007: Generate SCR: true [ 787.478484][T17239] tpg source WxH: 320x240 (Y'CbCr) [ 787.500793][T17239] tpg field: 1 [ 787.513418][T17239] tpg crop: (0,0)/320x240 [ 787.540511][T17239] tpg compose: (0,0)/320x240 [ 787.560995][T17239] tpg colorspace: 8 [ 787.577144][T17239] tpg transfer function: 0/0 [ 787.622932][T17239] tpg Y'CbCr encoding: 0/0 [ 787.648696][T17239] tpg quantization: 0/0 [ 787.669003][T17239] tpg RGB range: 0/2 [ 787.700451][T17239] vivid-007: ================== END STATUS ================== [ 787.961863][T17246] FAULT_INJECTION: forcing a failure. [ 787.961863][T17246] name failslab, interval 1, probability 0, space 0, times 0 [ 788.037196][T17246] CPU: 0 UID: 0 PID: 17246 Comm: syz.6.2102 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.037222][T17246] Tainted: [L]=SOFTLOCKUP [ 788.037227][T17246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 788.037236][T17246] Call Trace: [ 788.037241][T17246] [ 788.037247][T17246] dump_stack_lvl+0x100/0x190 [ 788.037268][T17246] should_fail_ex.cold+0x5/0xa [ 788.037286][T17246] should_failslab+0xc2/0x120 [ 788.037305][T17246] __kmalloc_noprof+0xfc/0x820 [ 788.037356][T17246] ? security_inode_alloc+0x3b/0x2c0 [ 788.037372][T17246] ? sk_prot_alloc+0x10b/0x2a0 [ 788.037397][T17246] sk_prot_alloc+0x10b/0x2a0 [ 788.037419][T17246] sk_alloc+0x36/0xe80 [ 788.037434][T17246] packet_create+0x127/0x8e0 [ 788.037462][T17246] __sock_create+0x339/0x860 [ 788.037486][T17246] __sys_socket+0x14d/0x260 [ 788.037506][T17246] ? __pfx___sys_socket+0x10/0x10 [ 788.037532][T17246] __x64_sys_socket+0x72/0xb0 [ 788.037552][T17246] ? lockdep_hardirqs_on+0x78/0x100 [ 788.037576][T17246] do_syscall_64+0x115/0x840 [ 788.037588][T17246] ? clear_bhb_loop+0x40/0x90 [ 788.037606][T17246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.037621][T17246] RIP: 0033:0x7feb3d39de59 [ 788.037633][T17246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.037648][T17246] RSP: 002b:00007feb3e1ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 788.037662][T17246] RAX: ffffffffffffffda RBX: 00007feb3d625fa0 RCX: 00007feb3d39de59 [ 788.037672][T17246] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 788.037682][T17246] RBP: 00007feb3d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 788.037690][T17246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.037699][T17246] R13: 00007feb3d626038 R14: 00007feb3d625fa0 R15: 00007fffd0ae16a8 [ 788.037718][T17246] [ 789.163967][T15079] Bluetooth: hci8: command tx timeout [ 791.193296][T15079] Bluetooth: hci8: command tx timeout [ 791.512772][ T31] INFO: task syz.4.1791:15494 blocked for more than 143 seconds. [ 791.520812][ T31] Tainted: G L syzkaller #0 [ 791.552777][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 791.606189][ T31] task:syz.4.1791 state:D stack:27448 pid:15494 tgid:15489 ppid:12615 task_flags:0x400140 flags:0x00080002 [ 791.672427][ T31] Call Trace: [ 791.694241][ T31] [ 791.716368][ T31] __schedule+0x125c/0x6730 [ 791.752382][ T31] ? do_raw_spin_lock+0x128/0x260 [ 791.791291][ T31] ? __pfx___schedule+0x10/0x10 [ 791.821108][ T31] ? find_held_lock+0x2b/0x80 [ 791.849210][ T31] ? schedule+0x225/0x2c0 [ 791.874036][ T31] schedule+0xdd/0x2c0 [ 791.898898][ T31] schedule_preempt_disabled+0x13/0x30 [ 791.937375][ T31] __mutex_lock+0xccc/0x1bd0 [ 791.960309][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 792.004889][ T31] ? __lock_acquire+0x49f/0x1a40 [ 792.036554][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 792.073661][ T31] ? net_generic+0xea/0x2a0 [ 792.121606][ T31] ? net_generic+0xea/0x2a0 [ 792.162456][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 792.202006][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 792.233874][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 792.254362][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 792.278333][ T31] ? genl_get_cmd+0x3e7/0x760 [ 792.300359][ T31] ? bpf_lsm_capable+0x9/0x10 [ 792.329461][ T31] ? security_capable+0x80/0x260 [ 792.356270][ T31] genl_rcv_msg+0x560/0x800 [ 792.381870][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.410359][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 792.435831][ T31] netlink_rcv_skb+0x159/0x420 [ 792.459290][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.477881][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.504758][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 792.524344][ T31] genl_rcv+0x28/0x40 [ 792.547874][ T31] netlink_unicast+0x585/0x850 [ 792.573176][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 792.598371][ T31] netlink_sendmsg+0x8b0/0xda0 [ 792.622153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.649017][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 792.672848][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 792.694551][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.717489][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.743275][ T31] ___sys_sendmsg+0x190/0x1e0 [ 792.761643][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.784903][ T31] ? __lock_acquire+0x49f/0x1a40 [ 792.810798][ T31] __sys_sendmsg+0x160/0x210 [ 792.827724][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.849538][ T31] do_syscall_64+0x115/0x840 [ 792.870371][ T31] ? clear_bhb_loop+0x40/0x90 [ 792.895851][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.922627][ T31] RIP: 0033:0x7f392e99de59 [ 792.940674][ T31] RSP: 002b:00007f392f85d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.986930][ T31] RAX: ffffffffffffffda RBX: 00007f392ec26090 RCX: 00007f392e99de59 [ 793.023020][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000008 [ 793.062137][ T31] RBP: 00007f392ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 793.104073][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.134989][ T31] R13: 00007f392ec26128 R14: 00007f392ec26090 R15: 00007ffca0d52698 [ 793.176098][ T31] [ 793.188157][ T31] [ 793.188157][ T31] Showing all locks held in the system: [ 793.238115][ T31] 1 lock held by khungtaskd/31: [ 793.271800][T15079] Bluetooth: hci8: command tx timeout [ 793.308648][ T31] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 793.367037][ T31] 2 locks held by syz-executor/5630: [ 793.413843][ T31] #0: ffff8880237d00d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 793.486421][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 793.547790][ T31] 2 locks held by syz.3.348/7600: [ 793.571951][ T31] #0: ffff8880571ee0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 793.636671][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 793.678266][ T31] 1 lock held by syz.3.1090/11826: [ 793.700300][ T31] #0: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 793.739100][ T31] 1 lock held by syz.2.1199/12431: [ 793.772296][ T31] 5 locks held by kworker/u11:11/13156: [ 793.789961][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 793.822635][ T31] #1: ffffc90004edfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 793.861118][ T31] #2: ffffffff90a86148 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 793.891125][ T31] #3: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 793.921287][ T31] #4: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 793.953219][ T31] 3 locks held by kworker/0:6/15008: [ 793.971060][ T31] #0: ffff88801bc05d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 794.022473][ T31] #1: ffffc90006227d08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 794.054501][ T31] #2: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x8a/0x12e0 [ 794.087952][ T31] 3 locks held by kworker/0:11/15020: [ 794.107517][ T31] #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 794.142450][ T31] #1: ffffc90005d17d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 794.172268][ T31] #2: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 794.207286][ T31] 2 locks held by syz.4.1791/15491: [ 794.223620][ T31] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 794.250919][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 794.283506][ T31] 2 locks held by syz.4.1791/15494: [ 794.300712][ T31] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 794.327577][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 794.362346][ T31] 2 locks held by syz-executor/16087: [ 794.379813][ T31] #0: ffff88802d5940d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 794.412836][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 794.441969][ T31] 2 locks held by syz.5.1901/16122: [ 794.460806][ T31] #0: ffff888077ede0d8 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 794.480809][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 794.500768][ T31] 2 locks held by syz-executor/16315: [ 794.512499][ T31] #0: ffff8880438420d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 794.531318][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 794.560749][ T31] 1 lock held by syz-executor/17233: [ 794.566064][ T31] #0: ffff888043ce4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 794.653270][ T31] [ 794.659790][ T31] ============================================= [ 794.659790][ T31] [ 794.701498][ T31] NMI backtrace for cpu 0 [ 794.701516][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 794.701536][ T31] Tainted: [L]=SOFTLOCKUP [ 794.701542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 794.701551][ T31] Call Trace: [ 794.701555][ T31] [ 794.701562][ T31] dump_stack_lvl+0x100/0x190 [ 794.701584][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 794.701602][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.701620][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 794.701642][ T31] sys_info+0x141/0x190 [ 794.701658][ T31] watchdog+0xcb1/0x1030 [ 794.701680][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 794.701702][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.701720][ T31] ? __kthread_parkme+0x18c/0x230 [ 794.701737][ T31] ? kthread+0x13a/0x450 [ 794.701754][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.701771][ T31] kthread+0x370/0x450 [ 794.701787][ T31] ? __pfx_kthread+0x10/0x10 [ 794.701804][ T31] ret_from_fork+0x72b/0xd50 [ 794.701821][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 794.701838][ T31] ? __switch_to+0x800/0x10f0 [ 794.701863][ T31] ? __switch_to_asm+0x39/0x70 [ 794.701881][ T31] ? __pfx_kthread+0x10/0x10 [ 794.701899][ T31] ret_from_fork_asm+0x1a/0x30 [ 794.701927][ T31] [ 795.133904][T11826] bridge0: port 4(syz_tun) entered disabled state [ 795.216087][T11826] syz_tun (unregistering): left allmulticast mode [ 795.231166][T11826] syz_tun (unregistering): left promiscuous mode [ 795.260547][T11826] bridge0: port 4(syz_tun) entered disabled state [ 795.329036][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 795.335925][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 795.346594][ T31] Tainted: [L]=SOFTLOCKUP [ 795.350910][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 795.360944][ T31] Call Trace: [ 795.364217][ T31] [ 795.367132][ T31] dump_stack_lvl+0x100/0x190 [ 795.371802][ T31] vpanic+0x552/0x970 [ 795.375769][ T31] ? __pfx_vpanic+0x10/0x10 [ 795.380254][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 795.386397][ T31] panic+0xd1/0xe0 [ 795.390115][ T31] ? __pfx_panic+0x10/0x10 [ 795.394515][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 795.400654][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 795.406796][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 795.412935][ T31] ? watchdog.cold+0x1ec/0x234 [ 795.417680][ T31] ? watchdog+0xcc1/0x1030 [ 795.422082][ T31] watchdog.cold+0x1fd/0x234 [ 795.426657][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 795.432452][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.437112][ T31] ? __kthread_parkme+0x18c/0x230 [ 795.442121][ T31] ? kthread+0x13a/0x450 [ 795.446346][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.451007][ T31] kthread+0x370/0x450 [ 795.455060][ T31] ? __pfx_kthread+0x10/0x10 [ 795.459651][ T31] ret_from_fork+0x72b/0xd50 [ 795.464226][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 795.469318][ T31] ? __switch_to+0x800/0x10f0 [ 795.473984][ T31] ? __switch_to_asm+0x39/0x70 [ 795.478737][ T31] ? __pfx_kthread+0x10/0x10 [ 795.483339][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.488098][ T31] [ 795.491158][ T31] Kernel Offset: disabled [ 795.495475][ T31] Rebooting in 86400 seconds..