last executing test programs: 9m56.124329289s ago: executing program 32 (id=1564): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x7, 0xa00006, 0x400002, 0x40fbe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) mmap$auto(0x9, 0x80000001, 0x6, 0x50eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000080)='/dev/ttyS2\x00', 0xe) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 7m57.05748659s ago: executing program 33 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DETACH_FILTER(r0, 0x1, 0x19, &(0x7f00000061c0)='ethtool\x00', 0x5) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x200000000, 0x4000000000df, 0x40eb1, r0, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x4, 0x1010003, 0x90ea) madvise$auto(0x1000, 0x400050, 0x9) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, 0x0, 0x6, 0xe27c, 0x8) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x92602, 0x0) mmap$auto(0x7fffffffc, 0x694, 0x5, 0xd494, 0xfffffffffffffffa, 0x8002) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) munmap$auto(0x8000, 0xffffffff) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r3, 0x0, 0x9a28) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x155841, 0x0) 5m55.258347955s ago: executing program 34 (id=2303): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x88) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x3a141, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) shutdown$auto(0x200000003, 0xfffffffe) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x20000000006, 0x6, 0xe1, 0x19, 0x401, 0xfffffffffffffff9) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) 2m39.114710865s ago: executing program 35 (id=2915): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x3, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) bpf$auto(0x3, &(0x7f0000000380)=@test={r0, 0x7, 0x653c, 0x1, 0x30000, 0x9, 0x8, 0x9, 0x8, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff}, 0x78) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) 2m38.55354387s ago: executing program 5 (id=2958): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x10, 0x8000000}, 0xed7138c}, 0x6, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_ep0_operations_inode(r2, &(0x7f0000000280)=""/96, 0x60) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r3, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, 0x0, 0x81) r4 = socket(0x2, 0x2, 0x88) ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x19300, 0x0) r5 = syz_clone(0xa00000, &(0x7f0000000540)="0134ef90c39ddd41ffff72dcbe5381db31812248a9375efba600ad10f75b89b18919e6ca1f2b775adcf79567ea296469321b283c8bc29f04ce4ff00c923675f1fa97e61fbe5caef49a6ebf77a49b3b56bbc8c5b8e031da04d77ecb9c457e3f64908584d1c13980ea4df1b1a92fb0aee2b4b7ae94cc43d497c9ffe49c0b5367abede4936b3b1d4ca5ba9f7c65608c564e8764be6dc828c1fba19c2b3b81f1462c9a093c01bd0ae92ef5508cb78f18b18c602a13f20fefb8aa3c065d1330a04853d3277f024a70b4a8a3ce11455fa0b919576c24fd22", 0xd5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000640)="6dfe99d05b9fae67fa0be35d0dbaab412874c20b790fdb8727aed338c1e5ed25770d7d47504acc45cd1f5d17a003105a652702d4dddacabf591175226876f8958b41d97b1da85bf604c94cb872dd04f11322cef6c145b6b89cd6b6f354c17390fe30eb12ed4a32708eda4216b26adce916baa766131311") r6 = getpgid(r5) kill$auto(r6, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) preadv2$auto(0x3, &(0x7f0000001000)={0x0}, 0x5, 0xffffffffffffffff, 0x7, 0x31) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r4) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002cbd7000fddbdf250400000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0d000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4048095}, 0x404c080) 2m37.971143918s ago: executing program 5 (id=2960): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0x3) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(r3, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x4048010) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r6, 0x0, 0x6) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000180)={0x0, 0x4}, 0x3fffffffffe, &(0x7f0000000100)={&(0x7f00000001c0)="91d04987a19757812fbdb6db03347f6aaee89e8ac11f7775e9ea495cee156d0dc6f75fb1417c663a75c133c23cf585c90c18d5ff4bd7751b9abff424fd08bb67455464c3d31a775c24f35f50124395125a806e9cc938903fecb6ce122a424beb1d7f4fa8abf5dc3ea60ed2784bdd9ad7f69a85b14e613b7144fb9d2fe154f6bc6780183fa4061c2a1de30ab681f3e5a0dd", 0x40000000001243}, 0xb, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r7 = memfd_create$auto(0x0, 0xe) open_tree_attr$auto(r7, &(0x7f0000000340)='./file0\x00', 0x4d, &(0x7f00000003c0)={0x85, 0x9550, 0xffffffffffffffff, @raw=0xfffffffffffffffd}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000280)='\x90\x96\xd1\x00\xe4\xd2\xab1\xc7\xe8\xad\x83\xb7=\x89Z;\xa3\f\x13A\x1c\xdc\x9a\x89\x98\x12\xb4\xbb\'\x1eu@\xe1=A\xbe\xaaa\xabA\xea\x147\xa6\xb2\x1d,\xafD\xcd\xa1\x8c\xd2\xc1R\xeb\x01\x86\xf8\x92ys&\xcf\x83\b&s\x04\x9b\xd6\xe9\xb0\x82_\xd2\xb9\x8a\xcd\x87jY\x03\xe7\xedW\x17<\xca\xef\xc2\x97\xdb\x91Pk\xd3\x01!\xba\x04\x951B\xa1\xc7ue&vU\xbc\xcesG\xea\x01\xd1\x8c\xca\xb3{\x1c7^gk&\x85\x95k4\xc3\xf4\x1fC\xceN\xcc\x16@\x1f\x0e\r', 0x80000000) 2m36.89489276s ago: executing program 5 (id=2963): r0 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/README\x00', 0xa4220, 0x0) unshare$auto(0x40000080) r1 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x7}) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES8=r3], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'pimreg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f00000009c0)={0xb34, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3f6, 0x2, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="d649bf2208318a0fb84add5c925ae0b80a8c9d2fa294812187935222134e3451e9ecdb0a9ce365fd88ba93e50f64", @nested={0x14c, 0xb5, 0x0, 0x1, [@nested={0x4, 0xca}, @generic="502f8d6ce75f0bea10adc058795eee2674cf58157c7eeb6696fd8bff18abc2f302337fabe128a703fdf9151e51220acfce8262d15c16a30c596c", @nested={0x4, 0x10a}, @generic="f4bb1c9cbeff1e2de79e9166458799fbde7e47b36b3a30c6474ccc957818905231f2b999b5d31a9f237f2be0bb928dda202061343b1ebddfc19608a54426e70a97f99c2c", @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@local}, @generic="74bb1efeceaa87f212eb02d44c9cb7f9ef79dd6683a789c64a99767a6628b5acaa8ccaade78849efd51985cbf1468b9bbb1f89d93885e6d24830263eb8c032806f9c10c884230cea9e6f6ff25d4b8d556297a8f1f810e00b8e624fb591f1d5841613517a8d804698aa4824fac09367b27026b2689d446cbb29fad238b348d66bddb7f66704a88d646c245aba0883cfd9287e3d16e30dd3490ece1a2a14df79d2ab16a6c0fa025625f4438ab3e355"]}, @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x8, 0x6f, 0x0, 0x1, [@nested={0x4, 0x3f}]}, @typed={0xa7, 0x51, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @nested={0x1b5, 0x70, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @uid}, @nested={0x4, 0xf7}, @generic="ab80bb82a59d0d750df740079813c570694fb4026144758ba410b4457e57b8c65917822dcc1ff8c221bc1f08625906fcc8c3aec6115a4b07b06a922368824ae617fe088ad4ab9a743cef9b109d4213fac61e3f78565fe17aeffcb8446637397a8be450a91cf43ca80d4f6f29e1c8876b7018d50a2e57cd2fa9100aacd916ee46a4a10abc9aeea31631b0e79c8d017a33692416235cedb4a45544f0b2d59f1add5dbc0bec24383b9ca0aeebae22f5b624ed1f60a525bd13f38b3eebf2774a219f4d7aade469c20f47755a9e2f74fa4ca00cc16914942747d388029a1f7c986adee2dba7bfdf30c42bbb5538dc00152bc0", @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x4}, @generic="0d82f4e5695d26f3579db39a8722c90d806e4c2c1a628f0c1a6b3cc8f7ec8e2740bdc5e5c3fd422b3cc870402f5396669501139c2528054d7c132793639ef34f7f3a57df3c07313c8d4e2c7bc747fa10dd5cfed33e2c8c8edb034843ff7b267f91aed45c3800e9a9df54dda3b71877d2de2770b8d74107e3315a94cdc7c6f52a3e91e7c715da763f232a5f173cf43f4e6a27f4bf7501c06cc9149c364d0bf29be2cbbbb2e2", @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x200}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x302, 0x2, 0x0, 0x1, [@nested={0x10, 0x60, 0x0, 0x1, [@nested={0x4, 0x131}, @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x16f, 0x4, 0x0, 0x1, [@generic="34f66e013e55a5f8f14bf2c8de95b2dfc5266a04263122d29603d39ff0c76c28baccf32c4e27f714e5788fc13de3f0832a12aef0d3b919dd475b5450b9721c512a58ac94ff3c2226917127cf8fc1975491273550c6c3063c08ea7b01e26b05955e2ed9d3b1f310f881a8faad6c72c8b69283f90b494c23cc9573170db469cbdb81f3f249e7dc119eee5dac95691130f9ffab47697af8fd26eb94b39aca908aa3f14fec33cfc54509638bacaafe53f347d93fd28f33b1f05b7c6757b03114293113382b9d2dd2eb817760eefe184d45394439cb6ca31a25331d069f05036fe2277518a31b2a562b841518ef", @generic="81a7f3657a5c7bfa5c3634a2f60e340c9acbfc55513a521fed5f0149f15d5ba3f012d8582fa99ddf0491a61441a9edccb51384eae47ef8b2700dc40d4df43f3e41190c238e0273c48196435a72dc6149a45997bf39f6c45bbbb4fcc4f3bf2f9b4dc310098971c0bb915b0392875290f44a891c2b14285b6b285aaad3", @nested={0x4, 0x143}]}, @generic="4381d0367f4824deaf146dd8583e38d13b0efa42910b9847d8b64729074e665e9edbe90077c5fb13486d9180457a3913281739be", @generic="482f293b0001d2588f0774f1f963d0a4d71311bbbf40cb5fc4ab562c5793bae0e895639d167bcbd55403a6178f1f2461b5f2a2adaafd578eb2d467ccf99a21b85de0b8f6a1964fae752f2b4506cbeccfe824f05d3b67264ad1d9441927a77c97b808342a1a52e717c6e7b3be453e0de907533c8061d3296924ac40733e379f5ed2e5919a721bafe7278e25d3dc750ca6c58858aec25c978bd75b165216229dbd1d6d039f33aa2f063f423af2358782ba7f0ac7c766b383a7f55b65e842d30faf87303b5a7d3dbe5d7d73e7332afbcbdf0b7e626a28eccce026f68065c0b9", @typed={0x8, 0x124, 0x0, 0x0, @pid}, @nested={0x58, 0x60, 0x0, 0x1, [@generic="3d38b71ce11c4bf9827b523d74e6b9b0f5539de25c5ddf8cd53f76d25fc0f73314add2317c3faeb5692982ea6db747891fcfa91e6d9babd1e9ec424c9ff7569d8b71a590af7d3babf9da5b1f2e7e384ea52ba177"]}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0xffffffffffff0001}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10a, 0x2, 0x0, 0x1, [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x1}, @nested={0xc3, 0x22, 0x0, 0x1, [@nested={0x4, 0xa}, @nested={0x4, 0x14c}, @nested={0x4, 0x9b}, @generic="79f79d9ddee3485fdbe929a8a6cbf85a97e89f48319d5558fa930529edca8b02ccab71b226744408ee6e0df126ecbf3027520257ca0a1a516994c993de893bb2648e4b5090cedaa5c5edb69b9384c6532b46e1be22e80a71340059bf7a5af367215c21d3dc94526c8f4dfa4db803b38fb7bed30daa6602d5d403b15035b61dc4a77a84cda25203cb5b868979a646fc1bc8c75dd36d2f0c84321817b0ede0250afc1459865dd7617bd3a1ce", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@local}]}, @generic="e11af6a838f8af62ecfd39a44a25f34c81e1711e4aac", @generic="27e137395821a253fc23a30571f5a94b771f0a97bae4b17e14a5a7f701be5c6e"]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18b, 0x2, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @pid}, @typed={0x8, 0x111, 0x0, 0x0, @u32=0x47}, @typed={0x8, 0xca, 0x0, 0x0, @u32=0x6}, @generic="105ca8a3867fd7eb56b750c96f05e3370e6710375e7be3f7dfbcaaf7f6fb55c237f9b495274948aa2f8bbf111edcc5b1159a33f082ea17a9018955c656b6cad7d75d8f5f9b1011a3b75a6d7a98b9a69500aa0cd5c764a202eb0af308b86424183ff78a", @typed={0xc, 0x102, 0x0, 0x0, @u64=0x8000}, @nested={0xf1, 0x50, 0x0, 0x1, [@nested={0x4, 0x4f}, @nested={0x4, 0x154}, @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x6c}, @typed={0xc, 0x12d, 0x0, 0x0, @u64=0xbe7}, @generic="c6ae14becded138b41500c9ae6c696bbf55a3432398e44a621cf", @generic="4d785b49f9a29f55e9cfde67574ef24dfd8f297ec8bae5fc56476aca42e04da08500d65135d4f7e6b8050a43e8b57af171376408139dba459c1900d3bedcd354c7d2f200a94a0b028bb619e35f336cf90e54a2a33b1150e7e1e4fb70181da5e72d3d3aeecb39b94829d3001cccacab6041b0d1c72e675ed5f1473a0baa61", @nested={0x4, 0x14e}, @generic="9c7110a20594d4f37e3afdbf760240adc2aa8a9267f7b62d5f01d1d0d84d62019d90aca8fa0495e9cc45f6df94810b3e4a"]}, @nested={0x4, 0x5f}, @typed={0x6, 0x5d, 0x0, 0x0, @str=',\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffff612}]}]}, 0xb34}, 0x1, 0x0, 0x0, 0x50}, 0x4) read$auto(r6, 0x0, 0x20) r8 = waitid$auto_P_ALL(0x0, 0xd7c, &(0x7f0000000340)={@_si_pad}, 0x9, &(0x7f00000004c0)={{0x2, 0x9}, {0x8, 0x9}, 0x0, 0x1ff, 0x2, 0x6, 0x7, 0x1a43, 0x0, 0xe, 0x9, 0x9, 0x7, 0x1, 0x8, 0x40}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=r8, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x10000, 0x5, 0x4, @inferred=r8, @integer64={0xd, 0x4, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) read$auto_tracing_readme_fops_trace(r0, 0x0, 0x0) 2m35.354733686s ago: executing program 5 (id=2969): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred=0x0, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) prctl$auto_PR_SET_MM_START_STACK(0x4, 0x5, r0, 0x7, 0xfffffffeffffffff) 2m35.297101947s ago: executing program 5 (id=2970): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2935, 0xffffffffffff0005, 0x17) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x0) mmap$auto(0x200000000, 0x5, 0xa, 0x40009b72, 0x2, 0x8000) (async) r2 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r3, @ANYBLOB="020029bd7100fedbdf25590000000800350107000000080027000900000080004e01a75ee966bb4e07e64012e5c11e03d05f852c67d8e238c861023c06a39deeff4c1298de726063c7671f306af2bf11901ff7392cf2ab13136fddbf22df1a418303dd8deaf09b5fe37cbab0c73636adfb6a0ff4e3f693ba3a018850ce1dac063865a5368d15450e4c7da519796a11b834b4b2098830a4a1e112b9ac28ba0400e2005800150184862451deafea6f76a8053574615face8d827b86d00e33737fa83129736592a0700000000000000ec97b09e7568e64ab863e9ff94e41a8397a917762c48628aeca69b9708db71ae7ad5866cdbbb5cb4431c0eb41c00e700a683deda8da05395c7785d540971eb30c83838cdb45d036b1400f90000d7262f7ee54dfc39157babd4a00acf0c0058000500000000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4891) (async) close_range$auto(0x2, 0xa, 0x0) (async) setsockopt$auto_SO_RCVTIMEO_NEW(r1, 0x1ff, 0x42, &(0x7f0000000040)=']J\x00', 0x2) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/net/rose8/carrier_changes\x00', 0x1d9103, 0x0) (rerun: 64) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r4) sendmsg$auto_IPVS_CMD_GET_DEST(r4, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r5, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x7}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) (async) socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) (async) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r7, 0x1269, 0x0) (async) read$auto(0x3, 0x0, 0x8080) 2m34.004379924s ago: executing program 5 (id=2973): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420007, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram5/queue/hw_sector_size\x00', 0x20400, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000680), 0x1}, 0xfffffffffbfffa00) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 2m18.359591664s ago: executing program 36 (id=2973): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420007, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram5/queue/hw_sector_size\x00', 0x20400, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000680), 0x1}, 0xfffffffffbfffa00) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 1m57.441450981s ago: executing program 6 (id=3070): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x0, 0xbd1a1717121636e7, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x7}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) socket(0xa, 0x801, 0x84) connect$auto(r2, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x33, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x10000, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x1, 0x101, [0x0, 0x0, 0x2c4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x76, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x20, 0x9, 0x80000, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x7fffffff, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000044) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) setsockopt$auto(r0, 0xa, 0x9, &(0x7f0000000080)='/dev/sg0\x00', 0x0) 1m56.832558636s ago: executing program 6 (id=3072): mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x23a, 0xfffffffffffffffa, 0x1ffde, 0x820d, 0x6, 0x82, 0x9, 0x2, 0x6, 0x1, 0xb4, 0x9, 0x4002, 0x18000, 0x80, 0x7, 0x2d7d01bf, 0x6, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x75, 0x0, 0x6, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x10e, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fb, 0x200d) socket(0x2c, 0x2, 0x0) socket(0x2, 0xa, 0x8) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x80002001, 0x0) mmap$auto(0x200, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x1e, 0x801, 0x9) setsockopt$auto(r0, 0x7, 0x21, 0x0, 0x91) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x2087c2, 0x0) ioctl$auto_BLKPBSZGET(r2, 0x127b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r3) sendmsg$auto_OVS_VPORT_CMD_SET(r3, 0x0, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x202801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1m55.982232621s ago: executing program 6 (id=3077): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8008000) socket(0x2, 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC1\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) ioperm$auto(0x1, 0x697, 0x7f) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) seccomp$auto(0x1, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0xffffffffffffffff, 0xe8) write$auto(0x3, 0x0, 0xfdef) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x2c, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) 1m54.97571027s ago: executing program 6 (id=3080): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) set_mempolicy$auto(0x1, &(0x7f0000000000)=0x4, 0x21) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x200, 0x402000d, 0xd38, 0x100000000001fc, 0xffffffffffffffff, 0x8000) getresgid$auto(&(0x7f00000001c0)=0xffff, &(0x7f00000000c0)=0x6, 0x0) write$auto(0x3, 0x0, 0x10007e) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, 0x54) mmap$auto(0x0, 0x8, 0x2, 0x9b75, 0x5, 0x0) socketpair$auto(0x4000001e, 0x2d2c, 0xb30, 0x0) r1 = socket(0x1f, 0x3, 0x2) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000003240), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x6, 0x4) 1m54.031556004s ago: executing program 6 (id=3082): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/lru_gen_full\x00', 0xc2883, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D2\x00', 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) clone$auto(0xbca0, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffff) syz_clone(0x0, 0x0, 0x1f, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r4) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYBLOB="d3b2bc67127b3adb6caa55f465701fc416335826d5feed441da1f62352412820a45f489fdb6f7f3df3c51664f1654014efb3a120fd36d07c9d3283ca383b10276b55516cb033b0e91aa9daf749bbccc3c79fcc16445ba1f840f5c417988c9af0ebbaf224c41d10f91cf5f29ef6b7dba3c3928684a2e70787fa9e516db9c9171d1579268540aec33fcb140b5c11a66a05733f2c06b5233174d553342d76438a338df951b590b467b05edc60d080ee35466ccbe84d52b71a8e3b"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x20000840) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/ib_srp/parameters/indirect_sg_entries\x00', 0x80800, 0x0) name_to_handle_at$auto(r5, &(0x7f0000000400)='./Pgroue.ne\xc6\x94blkio.bfq.dequeue\x00', &(0x7f00000003c0)={0x4e, 0x20009314, "c9a56e7349fbfc83cdd8c5fbaa06382467d778e994a79971b2b09ec4dce0071490aa6b11"}, &(0x7f0000000580)="c5cf4e0ac16e9bf61db263810a431537f7fcaee6f30f8a9347c131dc8a00f7979b9eef43934138126cdb645f5bdb547ff8796ac98d8b8c2f048eff978c450763cdf302aae4e2e20b0d209b05decd117ab0b8b91b647156641744b6ca7aa6711a848ac73bce218da05b6b2ba11c7b3ef7ece67cb4e92df74cc2fc80705565d94147c0ebafdd2674983fb8583181d9cd0feb57785d093c719dcbe990226104a2e7e017155c0641cb1d851d22c1eac48df75bfd9489e90b543c6ef673af37962547f03100d0988c4cbcdd929b02ba0cc094bff9546d228e097d41e6877fd0", 0x368) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0xfffffffe, 0x0, 0x4dd1670) socket(0x2, 0x1, 0x106) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cmdline\x00', 0x103882, 0x0) 1m52.946394075s ago: executing program 6 (id=3086): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000000c0)="bcc80870bdaed75579ed73e757d91f5431b1599ef167732f5d37f90459c5d1b312fabe99f0ff875334e5932353a98678379cfc436160dd172e9669c1140d225f2085cafc15bb48c8c4d34a641e99b64c9d2ee89526c9bbb5febafc7302de", 0x5e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FIOQSIZE(r1, 0x5460, 0x1ff) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000140), r1) sendmsg$auto_VDPA_CMD_DEV_GET(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x1}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x10000}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xed, 0xa, "dbd9129c4c78e72339949d3ed7819c6c60892a7ab97376ffc9c35e99526790378424abfd8186f19f39d0886d6c53e2fefc9d88826ca54334baf57389c3758d9af372d8e3108c358660db1a8662c0cc009dbe604dc27b061e9e4bbd36f2b091737884744f6ee34f33032d7bee016a565e1e4ea6a52a08e8b93c83040c00606e3020bb92b2c3fe983c9562a92cec2a3f6fa5b0484aba25190f89d8481099235f8bf38170074a94887a1557cd0b1722500cb4ca2cb1d59c706019db1a6f5a14834a132b3038470fdc9814345fc210800c15db17df220ab58e64e8d98bd506d235a82ad1058f272af511cc"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000040}, 0x44844) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/tty10/uevent\x00', 0xf07601, 0x0) write$auto(r4, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 1m37.726488896s ago: executing program 37 (id=3086): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000000c0)="bcc80870bdaed75579ed73e757d91f5431b1599ef167732f5d37f90459c5d1b312fabe99f0ff875334e5932353a98678379cfc436160dd172e9669c1140d225f2085cafc15bb48c8c4d34a641e99b64c9d2ee89526c9bbb5febafc7302de", 0x5e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FIOQSIZE(r1, 0x5460, 0x1ff) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000140), r1) sendmsg$auto_VDPA_CMD_DEV_GET(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x1}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x10000}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xed, 0xa, "dbd9129c4c78e72339949d3ed7819c6c60892a7ab97376ffc9c35e99526790378424abfd8186f19f39d0886d6c53e2fefc9d88826ca54334baf57389c3758d9af372d8e3108c358660db1a8662c0cc009dbe604dc27b061e9e4bbd36f2b091737884744f6ee34f33032d7bee016a565e1e4ea6a52a08e8b93c83040c00606e3020bb92b2c3fe983c9562a92cec2a3f6fa5b0484aba25190f89d8481099235f8bf38170074a94887a1557cd0b1722500cb4ca2cb1d59c706019db1a6f5a14834a132b3038470fdc9814345fc210800c15db17df220ab58e64e8d98bd506d235a82ad1058f272af511cc"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000040}, 0x44844) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/tty10/uevent\x00', 0xf07601, 0x0) write$auto(r4, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 1m32.898063115s ago: executing program 0 (id=3161): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0) sendfile$auto(r0, r0, 0x0, 0x7cc) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/fib/nexthop_bucket_activity\x00', 0x622640, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f0000001300)={@inferred=r1, "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"}) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) preadv$auto(r2, &(0x7f0000000200)={&(0x7f00000000c0)="b146d91bdffe756873c7833623f881b8f8f22f9f693fd4003a75ab8bb324b746e1123e3ff7af2d2fac7bc0ec6818d9da", 0x81}, 0x4, 0x2, 0xe) write$auto(r3, 0x0, 0x91) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/wg0/stable_secret\x00', 0x101202, 0x0) pread64$auto(r4, 0x0, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.throttle.write_bps_device\x00', 0x101000, 0x0) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0xfffffdef) bind$auto(0x3, 0x0, 0x6e) r5 = socket(0x29, 0x80000, 0xade) socket(0x27, 0x2, 0x5) socket(0x29, 0x6, 0x0) getsockopt$auto_SO_TXREHASH(r5, 0x1, 0x4a, &(0x7f0000000100)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0x17, 0xfffffffffffffffa, 0x4) 1m31.919092324s ago: executing program 0 (id=3165): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000005f80)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x106) setuid$auto(0xe) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x6) sync_file_range$auto(r0, 0xfff, 0x1, 0x3) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x7, 0x6, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x302, 0xe0, 0xe6, 0x1, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4055) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_BATADV_CMD_GET_HARDIF(r2, 0x0, 0x4008000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x22a02, 0x0) semctl$auto_SETVAL(0x14, 0x1, 0x10, 0x11cd808f5) r4 = socket(0xa, 0x801, 0x106) getsockopt$auto(r4, 0x6, 0x19, 0x0, &(0x7f0000000040)=0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000140)='7\x00\x06\x00\x00\x00\x01\xcb\x12\xfa\br\xc6\xb30\x99\xab%?\x94.\x1bIP<\xc7k', 0x81) unshare$auto(0x40000080) 1m31.220574991s ago: executing program 0 (id=3167): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xcc9749e2a29edf4, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r2 = io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) select$auto(0xd9cb, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffffff8, 0x1e, 0x1, 0x1948d, 0x5, 0x10015f4da0a, 0x10, 0x55daad93, 0x7926, 0x8000001f, 0x2, 0xde, 0xc, 0x2, 0x1]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a1d9) socket(0x0, 0x80000, 0x200) ioctl$auto(0x3, 0x8905, 0x38) r4 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv$auto(r4, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) ioctl$auto_SNAPSHOT_FREE(r5, 0x3314, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/fua\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x7, r2) close_range$auto(r4, r1, 0x9adb) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m30.118517855s ago: executing program 0 (id=3170): bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) io_submit$auto(0x7, 0x7, &(0x7f0000000040)=&(0x7f0000000000)={0x7, 0x6, 0x0, 0x2, 0xe7, 0xffffffffffffffff, 0x0, 0x3, 0xffff, 0x0, 0xfffffffe}) bpf$auto(0x0, &(0x7f0000000000)=@raw_tracepoint={0x1a, 0xffffffffffffffff, 0x0, 0x4}, 0x7f) bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_ifindex, 0x2001, 0x183, 0xc, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x5, 0x400000d, 0x5}, 0x4c) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x28c02, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0x40000, 0x0) ioctl$auto_FIOASYNC(r0, 0x5452, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) prctl$auto(0x4, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy14/rc/fixed_rate_idx\x00', 0xeabef41bcf98527c, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/aud\xb0F\x9c\xffWk\xa4\x98\xb1;\x9d\x7f\n8\xc9\x84\xcd\x88\xfe\xe0\x97\xcd\'\x9e\x9bDJ\xc6\xc0\'\xdbV\xd4\xee\xc2\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw2\xdaz\xd7s\xc6!#6\xe8\xcb?(\xfaI\xe2\xae,\x95k\xa9\x80\xe4\xdb\x15\xc7\x87q\x04>\xeb\'\xf9K\xce\x8d\"\xa18\xec\xaes\x90\x9d&\x18\r\xd8\xa5ff\xbe\xb9\xe9\x10s\x1f/\xcas\xab\xe3\x94\x16\x05', 0x8f60) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0x2000001b, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setsockopt$auto(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m29.187580782s ago: executing program 0 (id=3173): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101540, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x3) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xc6982, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) socketpair$auto(0x5, 0x9, 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) ioctl$auto(r0, 0x540a, r0) 1m27.986975214s ago: executing program 0 (id=3177): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) open(0x0, 0x261c2, 0x84) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3) mmap$auto(0xffffffff, 0x9, 0xb, 0x410, r1, 0x8000) r3 = socket(0x23, 0x80805, 0x0) io_uring_setup$auto(0x80000000, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x7, 0x8}, 0x80, 0x400400) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_TXREHASH(r5, 0x1, 0x4a, &(0x7f0000000040)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9) setsockopt$auto(r4, 0x113, 0x1, 0x0, 0x81) 1m25.908742097s ago: executing program 9 (id=3185): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x80000541b, r1) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) 1m24.847426383s ago: executing program 9 (id=3187): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4", 0x144) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$auto_EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x7b, 0x6e1]) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) r3 = eventfd$auto(0x34b) write$auto(r3, 0x0, 0x8) read$auto_ptdump_fops_(r3, &(0x7f00000000c0)=""/32, 0x20) sendfile$auto(r2, r2, 0x0, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x4080033, r1, 0x3) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) 1m23.480035493s ago: executing program 9 (id=3192): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x208, 0x5, 0xffff0054, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='\xe8\x9d\xf2\x00\xad\xa8]\xaa\xc2\x06\a\xf2\b\x81$\xa9\aKz\xc0\xcaf\xf3\xad c\x8a\xc6\x1f\x10\a\x00S\xc7R\xd0\xf3_\xa3\x15\xf59\x14\xb1t', 0x100000001) getrlimit$auto(0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0x74, 0xfffffffffffffffb) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) io_setup$auto(0x1, 0x0) socket(0xf, 0x2, 0x3ec4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x809b72, 0x7, 0x28000) r3 = open(&(0x7f0000000000)='&&\x00', 0x595082, 0x0) write$auto(r3, 0x0, 0xfffffdf4) linkat$auto(r3, 0x0, r3, &(0x7f0000000080)='&&\x00', 0xffc) fsetxattr$auto(r3, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x8, 0x0) ioctl$auto_USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) 1m22.219170467s ago: executing program 9 (id=3195): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) acct$auto(&(0x7f0000000300)='/proc/thread-self/net/unix\x00') r1 = socket(0x10, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xf0, 0x400009, 0xdf, 0x9b72, r1, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x31f882, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x400000b5, 0x2, 0x6}]}) msync$auto(0x7, 0x8, 0x400000004) open(0x0, 0x163340, 0x2c) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000280)="34516f7276dfaacf46facb8323edc3f98472075577769a1f838e20ecf400bfb58bb5") prctl$auto(0x35, 0x0, 0x8, 0x0, 0x400) prctl$auto(0x34, 0x0, 0x0, 0x3999, 0x3ff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/037/001\x00', 0xa02, 0x0) 1m21.164479468s ago: executing program 9 (id=3199): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101540, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x3) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xc6982, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) socketpair$auto(0x5, 0x9, 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) ioctl$auto(r0, 0x540a, r0) 1m20.102088007s ago: executing program 9 (id=3201): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x24000000) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0x25, 0x800, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f00000037c0)={0x1afc, 0x0, 0x46d5d89b86dd8d14, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24a, 0x25, 0x0, 0x1, [@generic="7b7a5c72be361025fdf2305a732c2830c09841c2f27c4200df8e3ef5629ed8848a7c69bd1b4cb5cd813df0e131decc90048353068590487bb2ed2ec7b4acb5083f6011af693c8f7918c17e033e9547b9314160983d4161cd1703a6ee962cc04c008d6ff4509abf4994e6c01f72c06f5ad32f53eb3194ebf5c826fb5784ceeda55e6273d38a052413181c40f785794e3eab", @generic="ed64615191c3f6ae25824f323a25315e327a2ee15aa0d3231ba0c5b84e7f8537c74685450a8328c5114386607d5eb69a868f8e4f39881db6d46acf0ca069ea4e2e867764a94877bbfbead38bef7d78574399a118c7bb908dcf48a072a78a7f53fb901378df8f9a57094e7989059d2113c120b665bc0272882689ede7d93482b0dcf2730714ccd982e29eaffea151b2e01ad5dc23c5823428d8b5d6d76bd609ddfc76e6c7d4068f608f4ae6183781ea29bbfd94e5a98e72a59352326f990c831982635aa01b562beccdb884903738f95c02a5061b458a96bc4e4b4ea7eb", @nested={0xc, 0x147, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}]}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="64ee2c79a42338096ba5188e5a90bcdec6f972912f581466e82593c479d67bce9f643d264208d163e99cbbf40c3b2ef467af941b3161a4cfd4c149698aa9ff642cb14446b6858a86b009b107ce03dec5f4b62ee9bbf14166f8e5cdf0cbb322213f8b61cdd457bb79f78bba74307c5aec0712ca7db00e4f56839f7e68606bcbe6dc74c2a303984ec07bcbb4d94a792bae17282aa38a177caa2264368061f02a82c0177466c3b8734feb3b303e26d0abe81cd6e7c76901e4ad"]}, @NL80211_ATTR_CSA_IES={0x1899, 0xb9, 0x0, 0x1, [@nested={0x17d, 0x87, 0x0, 0x1, [@nested={0x4, 0x43}, @typed={0x5, 0x31, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7c}, @nested={0x4, 0xce}, @nested={0xc0, 0xda, 0x0, 0x1, [@nested={0xbb, 0xe8, 0x0, 0x1, [@nested={0xb4, 0x6e, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0xe3}, @nested={0x4, 0x24}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x4a}, @generic="57efb104c81ff266b1b49925402c270eb365e5b8daf4e9d9922c1735903739804f37c7c7eb23b8e903fdd68d911de54e7c7883bf7eb4941364867a190bea317342896fd3610c3fb942e79e46bc61f5a8b3e5dd76a4d32c96e23e08ae2b8028b92925c608577cef67a48671793250d088e2e034bfc4535162d8b22d1f"]}, @generic="149c38"]}]}, @nested={0x4, 0x8b}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x1}, @generic="be6b84eb886148a8f8d4f5485978b0149db3c8b7078d9b315628f25f89a4d71797f04b61bf4691f8653440bdaaa61f81b6ea310d6894ac7f32d084549fc6a55c916596a4c8822b7dcb6e0a0556b892abfb5d0eef61f15bc713c709fc9ce5932172fde9095783b1e39576899207f32b7303d6c42300326e374b92568c3c20674c925f310d48362b26d4f2b529df4f6315d4043f2158"]}, @generic="cea5cd70bb0addc3a6", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @nested={0xbf, 0x112, 0x0, 0x1, [@generic="c2f530ad30c55c6f45f9314f4710a7a71a947f9f509a9d9e36cdecfa9028235f69c806b8c5abe267e381fde43966c8da4a8a81a98fe67d1d943751f92da5675072115bb738d7ae264003bfcc937424c99fe87f1bf0bf6eeeacefd7d0742e5430bd8dd7233e3ef423f872eb91f26aa7b6f9ec2a892335a2b7321175690a115a6e7db53c4279ec0d4ef15edd3568ea8f5e0d5057e8bee26ca65a35c29a9c236ccf933ec7f58a95db5815c1b6686c67deac58ae31ff3bae2d33908b31"]}, @typed={0xfa, 0xed, 0x0, 0x0, @binary="9f5d06c5184a8a4a8a6b7eecced433c11ed528eb50525b6d12d05191dd9efdafd4c012fb51c62c0ef40b5b108fd8f1ea85330ddbf3fd0e8f88ea4d3a09b540a5dd1d41733846019d961a5731b9e415d8769337d186a19f7abc2281b26729e13626a45f7e559d038d010f236bc470c1743ddbab32d85a09a39ee892b57a42966ab3209892e38e937be2bfa1d592a3337c32b33343083ffa008d4ff0b108d77955ee3cfd26739ae743185dd448effbf2fb50b186a8999171eb2d908109029383e63397a895722843d570b63904a7817e6db9c93c7ab50d0f1ca0ad6c5d60d506c600a97711e60fd32c8d8871564ab5a28eec6580949282"}, @typed={0x6, 0x2, 0x0, 0x0, @str='{\x00'}, @typed={0xc, 0xdb, 0x0, 0x0, @u64=0x100000000}, @nested={0x12d7, 0x100, 0x0, 0x1, [@generic="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", @nested={0x8, 0x85, 0x0, 0x1, [@nested={0x4, 0xf5}]}, @generic="6ce10bcaf5dc256c9c2f62c0d6fae8f0164c74b7815e26dbdc1c2ebcf48b5bd77290f98065acff284038391a556f664216ebc2c6282dce679287f9af02", @nested={0xb0, 0x51, 0x0, 0x1, [@generic="287b9c4938b0a2ed3fa55631ab67182120a43c2a826d48b85c7954a4a6c14b8eb94e0492967ab033bdf46052a226a32c1011abd32d34f99b42b16bb0791012c5b6e05cb4c33a74e74c5917e68881e8824f62ceaed9191a61073a00586268ba9733eeefe328072ef4ff19d036e9f921d33daaf47c066f752d5835911c5e964dfabd13a9ea7250b817", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, @nested={0x8f, 0x66, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x14c}, @generic="23a645f63647a254584404d7c62cd344d2b01f2891cdce0b44cf23a8f411aafb26765765b0dda59825dab1440ae5466a0f25d5a711c638aff8928b66a363bc0988d4853c66054b6d9eee58b6bc50cccf061886cbb0db73d47598c44de2560aa488edf1666f56c64f23c3b79dc5272e", @typed={0x8, 0x1c, 0x0, 0x0, @uid}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0x101}]}, @typed={0x8, 0xb0, 0x0, 0x0, @uid}, @generic="683f2a0ea6c15d9cf4738e836bae513a973f8153bbb6c3f6a1d06600bce6ea33acf7987c06befffcaa64bcc0d9b74e61a6c3be06db26f31de7737a87b3301fc255a2ef7744c98939bdf3c971ec90cec2d076c41a3a5decbd53bffff2b8b90bd8d2cc79", @generic="8ed65da7c4399c5154e5cae8b4d4a27d68cbf5809d0a185fa4b78fbcaecfd8bb40716a63e99433eae38cc61bef4db933f0bb40a33939eda2bd4fb72cca0406e656f6d40ec31674e79809cb5028bcf5106c78a0d67db6871152de187a34a610a72ea3205c94d957c0557986fe58f87ef293a27bb7f2fa9a78ef12e305953c74ddfbc48c7ac7632984d3e5443896eb03602d37d35fbdbcb9c1cf4e71f720d57b343cfa05f42d7f79e547932a70b0fe8b79adcd489aea03d59d7e555a6a03c4a365dec3463ea0eb9fd9f0fbb902eaf04f2576ea2e6ce1fd901c4eae41c8ea1877ace9def5"]}, @nested={0x24e, 0x9a, 0x0, 0x1, [@nested={0x4, 0xda}, @generic="eea9d60285f79778d3fcdc561b1b0a72093bbb310c75ec1ac11bc546e660e69ad444312d3346e1ecd422a28a2eacc2214842d4f85253197b5ce4342f54d15b4771b644fe8fab3c7d7253aaf95f1507d9dc30f57a2868006133e717d8c8200ef708f0baa842afe5a7e462aa20cd471692b23088273773584b35d6f7181e0e5b6a93305a4d3492a4c1888307e47818776a4d7a4f431ade81443ee25ab113f8034b4b7d8a9d919c218f51b73176cb0aaffdbabd896a63fd1f49cd267247bbca8cbcf0a88d87", @generic="72f141bc027df579f31f9f79611c5e2e7e218b5f64b6f26e9046a03f5482df284276b1c562b31a", @generic="6528e7b6082414b6616c3e793fa68768b9bc769cf17b571358dbfef2a192563717ecab733b319c20547b4a0fe4578527174ad7d1bae14a7a97228b468fd8f780e4175dbbbbb837378ac431", @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x2c, 0x97, 0x0, 0x0, @str='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00'}, @nested={0x4, 0xff}, @nested={0x4, 0x14f}, @generic="af34add9ed7687b1ac0efd52dc0503a209efd9f9f55182998cb3e7832b17f64be0568b43bfe68cdc5dd57d184dc590449428568ca4971eb0a1aa86ad6a32a6a3e53cc2afb97a626b195ad300f1669ea31d4ffbbf4d954a6abf08ae5535dd4059f53930dcb637750aad41c5233e8a2fe32cc3f928c33030b64a7c6975b9f460c9b592b6572ab3337fb42028c816e39511dbc58ade5b1f0357f50b4cd5b00b59687a7dab22b0de53dd", @typed={0x2c, 0xd4, 0x0, 0x0, @str='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00'}]}]}]}, 0x1afc}, 0x1, 0x0, 0x0, 0x40}, 0x800) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r4, 0x0, 0x80000001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) fcntl$auto(r7, 0x400, 0x1) close_range$auto(0x2, 0x8, 0x0) 1m12.576434125s ago: executing program 38 (id=3177): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) open(0x0, 0x261c2, 0x84) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3) mmap$auto(0xffffffff, 0x9, 0xb, 0x410, r1, 0x8000) r3 = socket(0x23, 0x80805, 0x0) io_uring_setup$auto(0x80000000, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x7, 0x8}, 0x80, 0x400400) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_TXREHASH(r5, 0x1, 0x4a, &(0x7f0000000040)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9) setsockopt$auto(r4, 0x113, 0x1, 0x0, 0x81) 1m9.020274733s ago: executing program 7 (id=3232): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x7f, 0x1, 0x0, 0x40005, 0xfffffffffffffff8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2584000000080017000800000004000e00a21ab5bb99d9cb067df031c8af9dcea5fd82417cb14dc9425dc2addda107edfe1c834ab295c679ea4520c8d6f2c4237455ab15efbd443af8f467f261b769a2ef1112e2bd90995f6e30537cf97f2c15a1e8"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x98, 0x80000001, 0xe, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a3, 0x7000001) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0xfffffffffffffffe, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd700007dcdf2515eaaea20c00010007000000000000000c0001000400000a000000000c00010040000000000000000200200004000000000000000c000100000000000000000000000100fd00000000000000d8ce6e30792706f8feff2e904237ce53797fe97fba5a4c0d2e79311036cabd555daf57b9e26933417e0d8b0e001238ad0cac4171ab89ed674c202a20645a4bd5753426915a6c1ae1914ca9c469404da215b6a42bfaaeeaae3f092a3d2febc4ec29e777fec8e1c496eebe7452bacb5de16c64aaf06ac5e36416135fdeb3ebff08ae2993055ae6a351706f44"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) getsockopt$auto_SO_TIMESTAMPNS_NEW(r2, 0xffdff1e0, 0x40, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xe8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000400)={0x200000000000004, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8005, 0x7ffffff8, 0x5, 0x8, 0x2, 0x61, 0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/etherd/interfaces\x00', 0x8405, 0x0) 1m7.615793956s ago: executing program 7 (id=3235): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x20004) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380090012"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x3, 0x5, 0x0) ioctl$auto(0xffffffffffffffff, 0x8982, 0x1) r0 = prctl$auto(0x3a, 0x2, 0x0, 0x5, 0x800007) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) write$auto(0xffffffffffffffff, 0x0, 0x81) r1 = prctl$auto(0x5, 0x39a, 0x0, 0x9, 0x20000000000001ff) ioctl$auto_BLKROSET(r1, 0x125d, 0x0) io_setup$auto(0xb, &(0x7f0000000080)) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309, 0x0) 1m5.369020949s ago: executing program 7 (id=3242): unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e00a7619b4e04d05ce0f5757c36be6aa1e270af87"], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) read$auto(r0, &(0x7f00000000c0)='\x00', 0x2) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x3, 0x2003f2, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/net/snmp\x00', 0x101100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)=""/87, 0x57) 1m4.957373382s ago: executing program 39 (id=3201): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x24000000) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0x25, 0x800, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f00000037c0)={0x1afc, 0x0, 0x46d5d89b86dd8d14, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24a, 0x25, 0x0, 0x1, [@generic="7b7a5c72be361025fdf2305a732c2830c09841c2f27c4200df8e3ef5629ed8848a7c69bd1b4cb5cd813df0e131decc90048353068590487bb2ed2ec7b4acb5083f6011af693c8f7918c17e033e9547b9314160983d4161cd1703a6ee962cc04c008d6ff4509abf4994e6c01f72c06f5ad32f53eb3194ebf5c826fb5784ceeda55e6273d38a052413181c40f785794e3eab", @generic="ed64615191c3f6ae25824f323a25315e327a2ee15aa0d3231ba0c5b84e7f8537c74685450a8328c5114386607d5eb69a868f8e4f39881db6d46acf0ca069ea4e2e867764a94877bbfbead38bef7d78574399a118c7bb908dcf48a072a78a7f53fb901378df8f9a57094e7989059d2113c120b665bc0272882689ede7d93482b0dcf2730714ccd982e29eaffea151b2e01ad5dc23c5823428d8b5d6d76bd609ddfc76e6c7d4068f608f4ae6183781ea29bbfd94e5a98e72a59352326f990c831982635aa01b562beccdb884903738f95c02a5061b458a96bc4e4b4ea7eb", @nested={0xc, 0x147, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}]}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="64ee2c79a42338096ba5188e5a90bcdec6f972912f581466e82593c479d67bce9f643d264208d163e99cbbf40c3b2ef467af941b3161a4cfd4c149698aa9ff642cb14446b6858a86b009b107ce03dec5f4b62ee9bbf14166f8e5cdf0cbb322213f8b61cdd457bb79f78bba74307c5aec0712ca7db00e4f56839f7e68606bcbe6dc74c2a303984ec07bcbb4d94a792bae17282aa38a177caa2264368061f02a82c0177466c3b8734feb3b303e26d0abe81cd6e7c76901e4ad"]}, @NL80211_ATTR_CSA_IES={0x1899, 0xb9, 0x0, 0x1, [@nested={0x17d, 0x87, 0x0, 0x1, [@nested={0x4, 0x43}, @typed={0x5, 0x31, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7c}, @nested={0x4, 0xce}, @nested={0xc0, 0xda, 0x0, 0x1, [@nested={0xbb, 0xe8, 0x0, 0x1, [@nested={0xb4, 0x6e, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0xe3}, @nested={0x4, 0x24}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x4a}, @generic="57efb104c81ff266b1b49925402c270eb365e5b8daf4e9d9922c1735903739804f37c7c7eb23b8e903fdd68d911de54e7c7883bf7eb4941364867a190bea317342896fd3610c3fb942e79e46bc61f5a8b3e5dd76a4d32c96e23e08ae2b8028b92925c608577cef67a48671793250d088e2e034bfc4535162d8b22d1f"]}, @generic="149c38"]}]}, @nested={0x4, 0x8b}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x1}, @generic="be6b84eb886148a8f8d4f5485978b0149db3c8b7078d9b315628f25f89a4d71797f04b61bf4691f8653440bdaaa61f81b6ea310d6894ac7f32d084549fc6a55c916596a4c8822b7dcb6e0a0556b892abfb5d0eef61f15bc713c709fc9ce5932172fde9095783b1e39576899207f32b7303d6c42300326e374b92568c3c20674c925f310d48362b26d4f2b529df4f6315d4043f2158"]}, @generic="cea5cd70bb0addc3a6", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @nested={0xbf, 0x112, 0x0, 0x1, [@generic="c2f530ad30c55c6f45f9314f4710a7a71a947f9f509a9d9e36cdecfa9028235f69c806b8c5abe267e381fde43966c8da4a8a81a98fe67d1d943751f92da5675072115bb738d7ae264003bfcc937424c99fe87f1bf0bf6eeeacefd7d0742e5430bd8dd7233e3ef423f872eb91f26aa7b6f9ec2a892335a2b7321175690a115a6e7db53c4279ec0d4ef15edd3568ea8f5e0d5057e8bee26ca65a35c29a9c236ccf933ec7f58a95db5815c1b6686c67deac58ae31ff3bae2d33908b31"]}, @typed={0xfa, 0xed, 0x0, 0x0, @binary="9f5d06c5184a8a4a8a6b7eecced433c11ed528eb50525b6d12d05191dd9efdafd4c012fb51c62c0ef40b5b108fd8f1ea85330ddbf3fd0e8f88ea4d3a09b540a5dd1d41733846019d961a5731b9e415d8769337d186a19f7abc2281b26729e13626a45f7e559d038d010f236bc470c1743ddbab32d85a09a39ee892b57a42966ab3209892e38e937be2bfa1d592a3337c32b33343083ffa008d4ff0b108d77955ee3cfd26739ae743185dd448effbf2fb50b186a8999171eb2d908109029383e63397a895722843d570b63904a7817e6db9c93c7ab50d0f1ca0ad6c5d60d506c600a97711e60fd32c8d8871564ab5a28eec6580949282"}, @typed={0x6, 0x2, 0x0, 0x0, @str='{\x00'}, @typed={0xc, 0xdb, 0x0, 0x0, @u64=0x100000000}, @nested={0x12d7, 0x100, 0x0, 0x1, [@generic="855692009020148a8cf08fb38619295d8e8d654e4bef97e7801ac42c135f13cef95472730d7ff6d281639a3f2d5166799d3c0ed4852c0a0370ee6e00e98e4609b414489c7c2e245d9ede3ef7bb0e97d4725c56eb2120b788cd689a4816e4bd908bf3821973099b6b225c285d9ca53b78965b0b8dc069f748e67d5dc74d04436f12761cc32f28a57c24b4c03bf074bf37abe4d5b25da814b53c89678bacfc86e1a80eb9046eaab0fa92f949bf48c2a7d04375f260e6072a8b1b5bcad3c61aaf6bb11b71cebedc4dc449e0549a0e2cfb08d7157e128be7b6b2da07afcac50f36d37d7d5afc79d17866d72595aa11e82bf0d225bacecb4965957c2ffe7daebdfdf513ee26d8edcc08f2ff929978bf61297cd876b25914572a11277284b025830233b5123f49e3c1782aee73453830ea2336ce2cc2a9bf9fd6830fa1cae7d28d8274c2d46735a978e234e2c05284d4edcd6761063e186fda888432b82e7d9bcf19d18d37f2623f7b816886a6f3f4b35da952f9017ea064cefb9dc33b7e2314bb0b01caf6b2d3adbc116d58786ef9d7ed94b9bb6c61d8657e25da0e9b2cae3bbe769a634c59a86ee4720815cab367c9742d033997c0becd8d9c16ab46926fff75e9b583a95aaa3adbf0041d4872ff64fd532fbbe8e238b9e29436c846b6e22c2c124a8550983e903f7cca166181c9d5af41a91506ed2d5e861032a9bfc4dc6772ded4a3b70231729f75fb78ba37ada82ee5b61e38b42e3069bc7097860313ab1031b15fb8ab711e67a98de9da9fa39b97413afcb926db818ceef8a017cf44321253b3451cc53b8a007d3edc30be224e22d7ee6e1df6c6339621bd3baf84559e626453bdf406ce3984641574c16bb497c52da85ef2863e52d66201834bd20753c72ba3a66b748b1f5ba17d005e7bac747a34a93dd9cb37ffb8bf825cc77857871df649cd0409dd0789dcc4b84d93e8bdd393e8f7ba387ac9256d4070b013c94c8704b9f6bcb033c768f9be72d4a32f143bed7f118f361a143223d7817b0fc004a76c66a6d7ab12615e5eb9eb8882a756eb64bd2f5a02f6e6a4f4b8537dec2dc55c91e9b8ce0b5bd70e80a22cf37e0d9e0e4321499617e9399d2a9157428dfdc7579a97d19007730b7d2e0550eb20123fa61808c6decb3659d419849499a465b2d16abeb856b5a0adf9f3c61d36c2e12d5e0225d800eb9184ef95fa6edaad6ddf4b18eadc94f5e4933b89214fd42744b6c7de3dc96f4e1a2663958c87f97291379af8e2ba9e3c6affcb005174c98303f176fef9cf6915332bf6deb11eca454d39f7eef67da50e74b0e2eda243ae4b4d45558558500b1d78b78f0d0e7de6cb2eb7d6a42020ea1c77f54a8ef3e664a4c626f6d9fdba755c1502c305bdfaf1f7b8eb1f3cb876c362e4d726a07b4ff074e7ae996027d307af119187396d551737bd66cc86c70a880271da59ad0a8306e5b6a2f360ca81788cd8e974242be8bf627e8288c4c6cba44152c529a148d9ca42f2fa1b87557fb4c9c155a0b3f64c07cd4d3e52f19d585f1c5b76d59e2fe516637a14f47a7fc4a5841326bd2b9c85e21229540b32a6dddb325d30faea0db4a587559bc501372391c3264e4fab20a753e7d254e8793df674e16c81d0f17f66279c0d2879d4f49be07abdf6eec3a169440db515452a441695a49f34a835bbe1ddec937011e55d14746c420bd19f2851c804e9afaaa8434c57da56fd1ca582cfe99a62f3e57e0213a6286f4d584c123eb96cf88e519980692e007c71a440061b759d6c321fc87a9142fb629d96a8fc42c748fc05a5e32e2bdce5b79a6d4bf1bae8fff490f9b57d814202cc9747991eba96d0313da6ac578632ac5441e23297008cee76b96f07d55601bf5684e90123c3e98b479966812d2d2bc62a20b4599f7fceaf2438a20f20f85b5503006b8ef2add24429d6a5de334ed0015c22a760588f03efb138972d7c3df5c56bfb5a8c425042a24fad365cd3c72b05cea37c54fc0cc86527796df0401cc1ab3a409a5485180a8c4fde93378c4a518127b6eab4e1d72c253a13186b03440126298ec9a2a3958e4accdf88fbc2f20a58ff7d94f2effd790cbbb18ee872b39a7101ba92a92c7b417ad2fcebc839a04f10283a4eaac0dcc2bc5e6f8c4a69e97e622c7250555fd161c3d76421164620a0b6ab458a39ebaa8e158e518afd333949559d46a87cc9d78617b7ca351ad5679ebaf816263b80835f5df62717a467cce347af18479f2c88f745d996f6287e99b8e6967c2464501337d139e1fa8e5535dd3c58b25921aeb6b68c16f0bf691aa8facd305cae7611f89288e61d37705fabdba8ead047d24917f2827139fc5ef8207e478a959ca2650c93349c6b348bdb8891ed5b6f5773a104da15a4796a0a499f381d2210dfca399b7c84a0435912fc32ce65a7e5e28639c3ea55794546bf49df765f562379d757481de4e591e1bf1f53b530a64e29b59a42e54c61a32bccdfe69407f3d1ab110f53184fa34bd1e0641a1a0c0716feef1405ea78d2a399d160fe8e1e96d4a70b373cbdf533e8497e2bbb8ce2c17ce5b38bb3af77c439f9ce4a8a149f52baec2b4cb272e80a9c49372d7b900d075162387939ef57eb48c1980e96cd5fb954584dbba1266477f95f70b9c0941b832c2421a7185b33d6dec428ba311b94d6c5fe4bdc96b5aa1d10a53deb5dabc76478f6cd30a8c8c4c68cca8ef691582feacd02dfd3d605683be140d1b4fadfd4cc7396c0664f97dbce03ec62b9064ebc0d0fc8f7f26fb4fe4e46898b02a5f53b1e8e9ed1770bdfa55b46218c61cc332b874e453b163db39b8e1072c2fc3ea4e25ab1b0bb279aeb6d921bedb4874a5884d423a326c162a80dc6ce946be8a092cf488e25302a1ae0672d36835e2ab59b42c3f1cae0c7402a248cea0f9c156224b7ac60774aa1c68689d4bce40b7035148b60566fd4b104c06a2953216b81e5fc1559e56318a78e2c45e5f66483d87c8cb84856fb23143cf64dc678932a828df8f9d10aaab71e1d65fdc89810a6915a763f600e6510cc362dea8561dcf8620387b8db7f42c72362ad6d75522a7ba58917a4dd8ab376509005bfecde31315bd9d90848316d2e67ca1bdfff3209bf6b6de07550f1d8e6d39e20d1bcc89142989643a76e673176ada9fbcaef0db0a433fd722698cc04b0ca0a94c5c392b681383c751efbcf218f5208bf24d48a6f6be37b862e77f75415c8bbce88d8c7a7c93c1837b3f32c96442a9c784c8731d9de0b21beb5e027595ecca69e81aa87497f90f91b4227a67804a4b196a46ad2aa587b8cc17bdb2637cf93bfaa6c1bb57b035e2565bbda8a0b0a179751210e541f005216ecf0e605f6726cbfddd091b7d7c89df38994ce47460f28feb4c8f16049f42910ab8fce7915e1f4dc1298e612173b621d3d38bc45c2f0c47badf2237e30268276a2d973c7aa8e79964bb809bf8a58f735971ff540c32db040e7f107ad773fc72839935ca07e29d08e2f93d95fa2c37fff8964a2751280fe2fd2f7b080f14b74b42a1a6c6cb30d0d635418db954b9b01dfc4d79e8f9a355892ce5b528d20ad12916c5fecfdaef4655871fb06155c2365c34f52a20db7ba6560969d8bc52a60d08bd545c3bb2389b4de9bc79310bcdc83005ddc437ff9d06aac4cfac7cc14aa4bc424a3916de18f41574d24b5dd95a696206e1c2c8be25f697e2c3d87086a034db7aa39de7db0cd6dc0a417f0a2bf07a1e5e5347e0b36218c4c260b071415017e39364d8599270d50532340b300fc5f564dc858f046c4b7a77a66e754ca1d877076a99d8e2c1a73f584e5d74544eab10b7f8bfcbed6e0511ca6db30af6d4363d483ede075f163d869a78dae699ad8f9ccc0210b9d06589c46358cf82cea05331df63fe9720886dfb62c1957598c78534efb6d0699af34d670bbd0ca6b0510f0251983a2625106eac55e52bb3984be7b87ec99b490592c16bf8138712d0fd4c7914638a0447af38b58863252651d07c3f6133243adf432d133afa98ad443b5f0d9f626f5a9482fc3dbff710f8c7d4e4de6c1e22072b3fc3397007c21af244978221d4ee51380a1ab1a380604042fd1a71c856b9d6675c2db6ae50c2b49c980cb285f9ac65cd76a02c82bcdd1925093a5fb997c5df3fe9ecbbfe6f78e135d5978ec18c8a47e2715577652e6819dd0cd7cadd63183289a36320a47a6f42c64453cc8f86f7201b5494c11f9766de78636e0565e17bc27bb018cd71e6f7e0eb38e020a7850f084b2e74c7959ce720b432668515b2ffb2f35f94a5a641e3dd689b3fbcaf1d4e0cd443dad6cbb74da8af55d0725bc3879e2267eb62aad4f5969b0c486a4c07ff5540f82fda4ef1411d0cfd354c71aaadb1657faf2bb2b7de2d356697b77212d9fb06001403487c8841f1fdfb7d09ecec485437d8856aa5ac49dad2b61de5220ce1d20a8628b09fc82360c48ae3b716ff1f3cb3b060bb0d592ca2e90a133f1cb2e5989ff76b905aca03c05a503cb853cde4555a8d5ae1525959ea7fadf6a203c0dcbd58de0230c0bad6ca804f0985b34f52f61867ed5a28f6e8908d31b3457101001d868a3f2af5f9696ec6ce722ad2ced7e38d7d59937047d81fd88b4198cab9d564fc951e0fb5f237f0b13e54fd3d04036486a8fc7df41223c29ca97defaf9be2749a8eece403c6381c03bbf7a55ee93b6ad96595348ec2448cd58328b139cad6a46fee75db85cb9f441aa9047c6cb1cfcadacc93231e840fcd603f14b06041de39c36b11ed582d76e4caab776e427c74ee43772fc0551348a300f04d0544030168b2d43e6a86594485c29b24d7806b1284a3767e3c37a29920bd4daf57412b46be656948c3d033aafd2f187b5653478228c5a3226638f81e3f1f67ffaf27be526741983d42024b213ecf4e1a04c40afc1c70825e19f2ebad2b521260de7404876d10ca1b6dca7939d5bafefa19ff57686c4b3d288ffdba86016b79546bd7488c5e93a9f01660997ce15a3834e96ea9f9bf51b8937d88a7280d983fffd18774f684b9fe0e1ad61def20aa5776d107e21595d7bb335753468c8c7fd03b7e9c8f048fff9a753cab5d3aa7eaeaf91a3d0c4696bd3d506cd376a6d8244b50897b650cfe4fa252200a3f383223e554c7a013352dde690153c125860224774a94bc4f50b8b92a42d70dfdb29e73735c108cd2356944258f13502ce440ce2ce72cd6e5bc0aa47db57f8d54bf965609bf49f4f280b66d912bf0a20d791184d68a8e305e5d924cd8fbaefe7afa1c3a8c61dc8b70128a4fd6f2d2ee4c2603e4dd334c11b5dd0692a942edd2265c61a645c987dd83413b2d718528b6e71c22dfde2e06ccd4f00853a6dd8359f17ae061a831b839bb9de6dbee9b527fca73fc9f40da38ba3b57429d53e964285f61a85c91c5a310ea7b0efca7582711beae6c626dacf7e2080fac1016e63940cca5434ae1fb1e3d7462820d593df584837d13333c83c3c41261333bdb3d165f1b67680689388d9d8ed993973c1056323e01c4eba1c504539297dfbccb5d151a094199be1c2ca97df7ba2a2e5e6ec199527a8821ac3485db63869547c9f104deff610ef9d29943ee96a096c747a0d3f39d221fd56aba1f8bd33c54217f7e742e18f233cd0c44dd0aa54c91096c9940b2371dfb1c7791a5ef9cd8c56e8e31893c32d1e8af09b4b3b7243a807d10e58a906b4709af459d1aa31431b6a46645556c61d43b3b5b24815e4efdc5bb860d168b68309a48515769768c22df8f19309dada0f9434ab955ae43a647d7d4eb6dec4fd57ac3babd603", @nested={0x8, 0x85, 0x0, 0x1, [@nested={0x4, 0xf5}]}, @generic="6ce10bcaf5dc256c9c2f62c0d6fae8f0164c74b7815e26dbdc1c2ebcf48b5bd77290f98065acff284038391a556f664216ebc2c6282dce679287f9af02", @nested={0xb0, 0x51, 0x0, 0x1, [@generic="287b9c4938b0a2ed3fa55631ab67182120a43c2a826d48b85c7954a4a6c14b8eb94e0492967ab033bdf46052a226a32c1011abd32d34f99b42b16bb0791012c5b6e05cb4c33a74e74c5917e68881e8824f62ceaed9191a61073a00586268ba9733eeefe328072ef4ff19d036e9f921d33daaf47c066f752d5835911c5e964dfabd13a9ea7250b817", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, @nested={0x8f, 0x66, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x14c}, @generic="23a645f63647a254584404d7c62cd344d2b01f2891cdce0b44cf23a8f411aafb26765765b0dda59825dab1440ae5466a0f25d5a711c638aff8928b66a363bc0988d4853c66054b6d9eee58b6bc50cccf061886cbb0db73d47598c44de2560aa488edf1666f56c64f23c3b79dc5272e", @typed={0x8, 0x1c, 0x0, 0x0, @uid}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0x101}]}, @typed={0x8, 0xb0, 0x0, 0x0, @uid}, @generic="683f2a0ea6c15d9cf4738e836bae513a973f8153bbb6c3f6a1d06600bce6ea33acf7987c06befffcaa64bcc0d9b74e61a6c3be06db26f31de7737a87b3301fc255a2ef7744c98939bdf3c971ec90cec2d076c41a3a5decbd53bffff2b8b90bd8d2cc79", @generic="8ed65da7c4399c5154e5cae8b4d4a27d68cbf5809d0a185fa4b78fbcaecfd8bb40716a63e99433eae38cc61bef4db933f0bb40a33939eda2bd4fb72cca0406e656f6d40ec31674e79809cb5028bcf5106c78a0d67db6871152de187a34a610a72ea3205c94d957c0557986fe58f87ef293a27bb7f2fa9a78ef12e305953c74ddfbc48c7ac7632984d3e5443896eb03602d37d35fbdbcb9c1cf4e71f720d57b343cfa05f42d7f79e547932a70b0fe8b79adcd489aea03d59d7e555a6a03c4a365dec3463ea0eb9fd9f0fbb902eaf04f2576ea2e6ce1fd901c4eae41c8ea1877ace9def5"]}, @nested={0x24e, 0x9a, 0x0, 0x1, [@nested={0x4, 0xda}, @generic="eea9d60285f79778d3fcdc561b1b0a72093bbb310c75ec1ac11bc546e660e69ad444312d3346e1ecd422a28a2eacc2214842d4f85253197b5ce4342f54d15b4771b644fe8fab3c7d7253aaf95f1507d9dc30f57a2868006133e717d8c8200ef708f0baa842afe5a7e462aa20cd471692b23088273773584b35d6f7181e0e5b6a93305a4d3492a4c1888307e47818776a4d7a4f431ade81443ee25ab113f8034b4b7d8a9d919c218f51b73176cb0aaffdbabd896a63fd1f49cd267247bbca8cbcf0a88d87", @generic="72f141bc027df579f31f9f79611c5e2e7e218b5f64b6f26e9046a03f5482df284276b1c562b31a", @generic="6528e7b6082414b6616c3e793fa68768b9bc769cf17b571358dbfef2a192563717ecab733b319c20547b4a0fe4578527174ad7d1bae14a7a97228b468fd8f780e4175dbbbbb837378ac431", @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x2c, 0x97, 0x0, 0x0, @str='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00'}, @nested={0x4, 0xff}, @nested={0x4, 0x14f}, @generic="af34add9ed7687b1ac0efd52dc0503a209efd9f9f55182998cb3e7832b17f64be0568b43bfe68cdc5dd57d184dc590449428568ca4971eb0a1aa86ad6a32a6a3e53cc2afb97a626b195ad300f1669ea31d4ffbbf4d954a6abf08ae5535dd4059f53930dcb637750aad41c5233e8a2fe32cc3f928c33030b64a7c6975b9f460c9b592b6572ab3337fb42028c816e39511dbc58ade5b1f0357f50b4cd5b00b59687a7dab22b0de53dd", @typed={0x2c, 0xd4, 0x0, 0x0, @str='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00'}]}]}]}, 0x1afc}, 0x1, 0x0, 0x0, 0x40}, 0x800) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r4, 0x0, 0x80000001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) fcntl$auto(r7, 0x400, 0x1) close_range$auto(0x2, 0x8, 0x0) 1m3.077682228s ago: executing program 7 (id=3250): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(r0, 0x9, r1) 1m2.173830015s ago: executing program 7 (id=3251): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_MM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) 1m0.871256987s ago: executing program 7 (id=3255): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000a40)='/Ee}/audio1\x00\x16>\xef\x12VI\xa3\xaa\xb1\x0e\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee;\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\xa2U\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4>Y\x00\x00\x00\x00\x00\x00\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}m^\b8f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\x06C\x1aHyz3\xd3y\x80\xb7\xff\xa7\xbc\x8b\xd3J\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xffe\x9a\x9cVv\x98\xba\xf6\x10a\x95\xe0\xd1\fX\xfd\x8b\x8aQ\x9c\xa7\x81H\xdbY\xd3;\xc9\xf7PR6dQ\x03\x00M\x1bFA\x96\xdf1\x9f5^\xc6\xed\xfa\xd1x\xc7\xe2U\x03\x04Yloi\x9b\xa6\xaa \xf3\xd4\xc9\xf3\\\xc3', 0x100000a3db) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) keyctl$auto(0x8, r1, r1, 0x0, 0x3ff) madvise$auto(0xa1ae, 0x2003f2, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a54001e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0xe8, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x2, 0xb74, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRESHEX, @ANYRESHEX=r0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 49.724000666s ago: executing program 1 (id=3282): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x80000541b, r1) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) 47.58096267s ago: executing program 1 (id=3287): r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x4, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(0xffffffffffffffff, 0x4144, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004014) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1d, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/pci0000:00/0000:00:03.0/irq\x00', 0x80100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) io_uring_setup$auto(0x14e, 0x0) 46.450503304s ago: executing program 1 (id=3290): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x10, 0x8000000}, 0xed7138c}, 0x6, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_ep0_operations_inode(r2, &(0x7f0000000280)=""/96, 0x60) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r3, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, 0x0, 0x81) r4 = socket(0x2, 0x2, 0x88) ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x19300, 0x0) r5 = syz_clone(0xa00000, &(0x7f0000000540)="0134ef90c39ddd41ffff72dcbe5381db31812248a9375efba600ad10f75b89b18919e6ca1f2b775adcf79567ea296469321b283c8bc29f04ce4ff00c923675f1fa97e61fbe5caef49a6ebf77a49b3b56bbc8c5b8e031da04d77ecb9c457e3f64908584d1c13980ea4df1b1a92fb0aee2b4b7ae94cc43d497c9ffe49c0b5367abede4936b3b1d4ca5ba9f7c65608c564e8764be6dc828c1fba19c2b3b81f1462c9a093c01bd0ae92ef5508cb78f18b18c602a13f20fefb8aa3c065d1330a04853d3277f024a70b4a8a3ce11455fa0b919576c24fd22", 0xd5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000640)="6dfe99d05b9fae67fa0be35d0dbaab412874c20b790fdb8727aed338c1e5ed25770d7d47504acc45cd1f5d17a003105a652702d4dddacabf591175226876f8958b41d97b1da85bf604c94cb872dd04f11322cef6c145b6b89cd6b6f354c17390fe30eb12ed4a32708eda4216b26adce916baa7661313113d6bb1bde297699da867e62798003bf1cb36036dfe382c04ac8b0bb6b702d8956723178e14f8d386bc6bd9a307b9d172c5705103bb238aa4e9def80c6d2f834e1ad3431ebd02e7527726ee6c7d843d489be9e0952d67901b446aacf1e063022a4e3fd26e10906c81df1b8d4d6bda0f") r6 = getpgid(r5) kill$auto(r6, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) preadv2$auto(0x3, &(0x7f0000001000)={0x0}, 0x5, 0xffffffffffffffff, 0x7, 0x31) syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r4) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4048095}, 0x404c080) 45.669146379s ago: executing program 40 (id=3255): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000a40)='/Ee}/audio1\x00\x16>\xef\x12VI\xa3\xaa\xb1\x0e\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee;\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\xa2U\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4>Y\x00\x00\x00\x00\x00\x00\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}m^\b8f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\x06C\x1aHyz3\xd3y\x80\xb7\xff\xa7\xbc\x8b\xd3J\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xffe\x9a\x9cVv\x98\xba\xf6\x10a\x95\xe0\xd1\fX\xfd\x8b\x8aQ\x9c\xa7\x81H\xdbY\xd3;\xc9\xf7PR6dQ\x03\x00M\x1bFA\x96\xdf1\x9f5^\xc6\xed\xfa\xd1x\xc7\xe2U\x03\x04Yloi\x9b\xa6\xaa \xf3\xd4\xc9\xf3\\\xc3', 0x100000a3db) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) keyctl$auto(0x8, r1, r1, 0x0, 0x3ff) madvise$auto(0xa1ae, 0x2003f2, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a54001e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0xe8, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x2, 0xb74, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRESHEX, @ANYRESHEX=r0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 45.657714318s ago: executing program 1 (id=3292): ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x9, 0x81, 0xa006, 0x401}) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x0, 0x32, 0xfff) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 45.391121137s ago: executing program 1 (id=3294): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) pread64$auto(r0, &(0x7f0000000000)='\xd0\xbd/c\x82l\x02\xd2\xf4\x06\x135\x00\t\r\xe3\r\x1fU\\_\x00\x00\x00\x00\x00!\xd1\x9b\xb6\xf74\'?\v\xf1\xbf\x8e\xacj.\xc1pI[\xd2\x88\xa9\x98%9\xf380l\xf7\xa1\x9dZ\x1b\x048\xb8\xd2\xc8-\xe2\x8au]9\xc0E\xe7\xf2\x01\xc2Q&\xb9k\xc0\r\xa5)\xbbG1\xa8\xdc\xba\xb99\xf4\xc40\xb3\xe5', 0x100000004, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e5b725bd7000fcdbdd25190000000c00"/26], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) socket(0x2, 0xa, 0x106) (async) r3 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r3) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0xfffffffffffffffd) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x9000000, 0x5, 0x6, 0x7, 0x400b, r5, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r6, 0x0, 0x0) select$auto(0xd9cb, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffffffffffff8, 0x6, 0x1, 0xffff, 0x0, 0x10015f4da0a, 0x10, 0x400, 0x7926, 0x8000001f, 0x2, 0x4, 0xd, 0x2, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x6, 0x7) ioctl$auto(0x3, 0x8905, 0x38) r7 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x2) (async) readv$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) (async) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) 44.142869033s ago: executing program 1 (id=3297): mmap$auto(0x1, 0x400008, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f00000005c0)="0b76838e60f90a9d3ea8db8c04f238c5abf8394386c7f0780069c8911703a48abe16817317a6c35ea4833cdb79453bf16a9686610ab0103ec05bf73e1fb7fd025a71d56fecb9783b4deff5c02f504d9eae2cf9611854da70158b64b6783a73a19a63e0023fa5d20b17c6e93f2c23c9d1eba6b4d103a5116878719f127cc7f8d5aa27083b90540d909c2b3da1ca5a017235e9b4c33a073a0c7fab8b23bc14a56462d82256fc31e3b8e952e03a62622fe5af187e87f2574d427874d50fc5524b404c9901851e32ca0d5af44bae5fc86e30e7a2a4016bab24e0ffef0950a35cf446cfe61782ca", 0xe5) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0x1, 0x4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x518, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_rt={0x0, 0x0, @sival_int=0xc}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x4, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x5, 0x3, 0x14, r3, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000780)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x20100000a3da) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/state\x00', 0x20800, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) 29.104698528s ago: executing program 41 (id=3297): mmap$auto(0x1, 0x400008, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f00000005c0)="0b76838e60f90a9d3ea8db8c04f238c5abf8394386c7f0780069c8911703a48abe16817317a6c35ea4833cdb79453bf16a9686610ab0103ec05bf73e1fb7fd025a71d56fecb9783b4deff5c02f504d9eae2cf9611854da70158b64b6783a73a19a63e0023fa5d20b17c6e93f2c23c9d1eba6b4d103a5116878719f127cc7f8d5aa27083b90540d909c2b3da1ca5a017235e9b4c33a073a0c7fab8b23bc14a56462d82256fc31e3b8e952e03a62622fe5af187e87f2574d427874d50fc5524b404c9901851e32ca0d5af44bae5fc86e30e7a2a4016bab24e0ffef0950a35cf446cfe61782ca", 0xe5) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0x1, 0x4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x518, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_rt={0x0, 0x0, @sival_int=0xc}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x4, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x5, 0x3, 0x14, r3, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000780)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x20100000a3da) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/state\x00', 0x20800, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) 19.284628137s ago: executing program 3 (id=3378): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/crash_elfcorehdr_size\x00', 0x688140, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x3, 0x3, 0x7c) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x4, 0x3, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 18.244501888s ago: executing program 3 (id=3380): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) socket(0x21, 0x2, 0x3a) socket(0x23, 0x80805, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x3d, 0x1, 0xffffffffffffffff, 0xfffffffffffffefa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@xdp={0x2c, 0x1, 0x0, 0x24}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@xdp={0x2c, 0x1, 0x0, 0x24}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyb1/dev\x00', 0x48500, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyb1/dev\x00', 0x48500, 0x0) timerfd_settime$auto(r1, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getpid() (async) getpid() ioctl$auto(r2, 0x400454ca, 0x38) mmap$auto(0x3ff, 0x4020009, 0xdf, 0xeb1, r2, 0xfff) (async) mmap$auto(0x3ff, 0x4020009, 0xdf, 0xeb1, r2, 0xfff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/dbroot\x00', 0x600080, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0x15, r3, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2b, 0x5, 0x3a) (async) socket(0x2b, 0x5, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r0, 0x6, 0x35, 0x0, 0x0) 16.066224572s ago: executing program 3 (id=3386): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) (async) ioctl$auto(0x3, 0x4040ae79, 0xffffffffffffffff) (async) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvme_core/parameters/iopolicy\x00', 0x2400, 0x0) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec7\x00', 0x10b101, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async, rerun: 64) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async, rerun: 64) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) (async) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) (async) dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x1, 0x0) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 64) shmctl$auto_SHM_STAT_ANY(0x1, 0xf, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x3, 0x10000, 0x6, 0x8, 0x3, 0xa, 0x7, 0x1a4, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x80000000000000, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xe157, 0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000000000, 0x0, 0x0, 0x4, 0x0, 0x2, 0x200000000000000, 0x0, 0x200]}, 0x1fe, 0x81) 15.008736833s ago: executing program 3 (id=3391): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) 14.888539502s ago: executing program 3 (id=3393): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x6, 0x4) (async) socket(0x2, 0x1, 0x84) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0x3) (async) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(r3, 0xffffffffffffbaeb, 0xcd06) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x4048010) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) (async) write$auto(r5, 0x0, 0x6) (async) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000180)={0x0, 0x4}, 0x3fffffffffe, &(0x7f0000000100)={&(0x7f00000001c0)="91d04987a19757812fbdb6db03347f6aaee89e8ac11f7775e9ea495cee156d0dc6f75fb1417c663a75c133c23cf585c90c18d5ff4bd7751b9abff424fd08bb67455464c3d31a775c24f35f50124395125a806e9cc938903fecb6ce122a424beb1d7f4fa8abf5dc3ea60ed2784bdd9ad7f69a85b14e613b7144fb9d2fe154f6bc6780183fa4061c2a1de30ab681f3e5a0dd", 0x40000000001243}, 0xb, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) close_range$auto(0x2, 0x8, 0x0) 13.692305428s ago: executing program 3 (id=3395): ioctl$auto_BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) mmap$auto(0x0, 0x20009, 0x7fb, 0xfffffffffdfffff8, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x42062, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x33) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000280)=':,\x00', &(0x7f0000000340)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\x00\x00I\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83G\x9fO\x14\xe8\x81lI\xb5\xa5\xf4e\xb8\xa0\xfa\xb7\xc10\xe7\xe3\x96g>!\n.\xc8-Z\x9b\v\x9eN$\xaa\xff\xbc\xaenF,\xf6\xc1', 0x7, 0x0) mount$auto(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_DEL(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) 4.006205227s ago: executing program 8 (id=3433): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) (async) inotify_init1$auto(0x7fff) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=0xb7) getsockopt$auto_SO_MAX_PACING_RATE(r1, 0xf, 0x2f, &(0x7f0000000180)='TIPCv2\x00', &(0x7f00000001c0)=0x8) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) (rerun: 64) ioctl$auto_SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)="351547") (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) (async, rerun: 64) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) (rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) (rerun: 32) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r4, 0x4143, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r5) mmap$auto(0x80, 0x7f, 0x4000000000df, 0xfb0, 0x401, 0x7ffc) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.weight_device\x00', 0xca401, 0x0) (rerun: 32) unshare$auto(0x40000085) (async) madvise$auto(0x0, 0x2003f0, 0x17) 2.968709543s ago: executing program 2 (id=3438): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80080, 0x0) (async) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x88) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x208800, 0x0) ioctl$auto_UI_SET_ABSBIT(r1, 0x40045567, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @empty}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7000000) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0) open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/25/node\x00', 0x408000, 0x0) mmap$auto(0x1, 0x202000d, 0x103, 0xa00010, r2, 0x7ffe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x420009, 0xdf, 0x100000011, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) adjtimex$auto(0x0) (async) adjtimex$auto(0x0) write$auto(0x3, 0x0, 0xfffffdef) 2.795220162s ago: executing program 2 (id=3439): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0x7, 0x2, '\'}\x00'}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a040}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd15\x00', 0x400000, 0x0) shmctl$auto_IPC_SET(0xffffffff, 0x1, &(0x7f0000000540)={{0xb, 0xee01, 0x0, 0x1000, 0x9, 0x8, 0x3}, 0x9ae, 0x8, 0xcb, 0x6, @inferred=0xffffffffffffffff, @raw=0x1, 0x5, 0x0, &(0x7f0000000380)="51230d19ab76a459fe376b98dd8ced5a763314992016554242b3507399fd6a48da966bc5764fff83de55c1158f1fcbacf47418ae4ee79e94a44d97b1cac4e720be0e5218e78e26d9445eeb3849ca415cd97a8fecb3501191b39fc8c857059e4cd63664a93c81728470756d3b59607c1c9eb636e6e172135590f075a319541d2914101b1fc8920795b6486828cadf4c66526b4351f647bc7d8e258d73cd105857cab7be087c991ab4311f052b5737c2883fce7c8b8de6dfc8b25e84bdc266ee5ac527ae76ec93e6", &(0x7f0000000480)="92e90799e62a3665736bbd47634bb81a87819ff972846f9ba2040b08cae0e68f94845e6038ffa0a0344911094a0050605b5a075ea12874997baba29165be1d68795ec8dcb487e279130187ab5be6c38344916b31ce40aff5efe7239b191b83619f9de4b9ab44f711bd905ccd3b919c535c80fc2b39a2f0a17e7ab59439ba3ce6749ce3e3bbfeb352212a51a91949ec86c5551d086d2b89e254405ebdd85692ae1629db0b37a5bf6caa5f"}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x10}, @NL802154_ATTR_COORDINATOR={0x81, 0x1e, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @uid=r4}, @generic="609d913a63d136936430bb9d0abe14322224a1668decfa75f0a7ca575f7cf0fb4089d4197a80ad9dcc7a8ce12e2218a9485bcc56ec8491ec307c0278bc5fd01d925d063fa714f197c722079533a86abfa0342648515aa1f4293140bf296dba2004e124bf0a50e9a8fc6052fddf4bf6638519314f11"]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x45}, 0xc040) r6 = open(&(0x7f0000000700)='./file0\x00', 0x101000, 0x42) getsockopt$auto_SO_BSDCOMPAT(r0, 0x4, 0xe, &(0x7f0000000740)='.:[\x00', &(0x7f0000000780)=0x3) r7 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000800), r6) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80842100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HSR_A_NODE_ADDR_B={0xa, 0x5, @local}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000900)={0x6, "eac499e062ba894371666bbd13f1c34755dfb62249cfc071265cbb2cfaf2a70f", @inferred=r2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'rose0\x00', 0x0}) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)=@link_create={@prog_fd=r8, @target_ifindex=r10, 0x7ff, 0x7, @target_btf_id=0x10000}, 0xc45b) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000a80), r9) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(r12, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r13, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r10}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x4001) r14 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000bc0), r6) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000001000)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c00)={0x38c, r14, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x55c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8}, @NLBL_CIPSOV4_A_TAGLST={0x164, 0x4, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @u32=0x1}, @generic="70d164e1f244ca1791cda1f95e569a2c9de08c17e1d97f9c234a301763ee938ff684d55e96d4d9bd6355b1dff80c0773bcc2d1a67628eaba7a572b4ac4320becee4cb9a83c63b4437048d846eee91223fbcc853c5b03376624354fd0502948925aec2e2a3eab5f181f5ea99955a8e166f8addc8a31a09a5d51253175803a679dcb2aed7a936c3b042604ac3dd4ec52b9f16674cf06d90bb912e17a541d37cb7f2e04f9bb8d0bcda00a922a36133aa7fb658664c702aac762a233c0205c50979c105a74ba762082ae95f358877fe7def0eb42579d9e9a2e2698470d7b99e01be37092774ee6abdaa9ed8da8612bb969349bcf7ac79e220e80", @generic="8fee108408722547b8f2748959400e4bd9c92e5e27f6e5ce92b6309eb6d51428e7c485d443c1b8cb50b0c13c392667bb9683210285533ed9b514b81da97dd57c0e9a2507fa1bcc3d3e16f9ff3de404fe06d43fa06495706ee1dff5ee423d56b5"]}, @NLBL_CIPSOV4_A_MLSCAT={0x1f2, 0xb, 0x0, 0x1, [@generic="a01bc3003945e1f74a3aafe00d3e4bc8e1ff1ae9f6bfae6d0da46812a658532ca1f0d1e8a377c92cfda55ec146605cb2f0f914b89f5d68668b92855870d8aede37c6f5", @generic="a08264c4978850a5174f6e1ee5c6534b0c3f269aec228e2c13985b53b80857628cd97eb1006b2016a0f0f1f25904c61db260eac5651c1c011eb5e238df47e451f896965258e4f1d0432890718f3ba151d4c982ce5158a0261bad3230cd1b4a787ed4b9382aabcc61945568b1dd31073147385a47e478cc4854c3b935ec0b88dcf867bac1f4dd0e896191ca476cc6415b3c972772df86e0ce77011f900b633b92b8c74f0823cc8dcef1fed055cfd9a2e6fa1236cf8f381136fa516026a90d800fdf5013edb3251c3c088024799a60248376f85b39", @generic="9114a95fb6d9d74d4c708d6619abdcce6929f9a2cada8c62faa213f02fb14bb0921a04ee53ae5829e735af5574a5a9543c5dea3a3afd5c540f2370d38e0d2ae33dd3428d197efde5b2f4a595ce7b521a3b099ec9fbee16597c94025ab8189d374b041b835d2e5d2bcacaf035d6171f0e8275eebcbc439859c6cc4db3cd1dd813f6cafeb69b3e2f46347b0bddbd764cbd268be2afddf82fbe7d389e310acfc6bb27d54fcb88338cc6fb89ceb84225d4630ea0f262546312a4d0e973009bdcd84ea100b077762115b3ce049ec3e1db1421af493e9f419f8b"]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8}]}, 0x38c}, 0x1, 0x0, 0x0, 0x850}, 0x20) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x8, 0x3, 'HSR\x00'}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x8, 0x4, '.:[\x00'}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r5}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x24000081) r15 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001180), r2) r16 = fcntl$auto_F_WRLCK(r6, 0x2, 0x1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002480)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002440)={&(0x7f00000011c0)={0x1244, r15, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r16}]}, @ETHTOOL_A_FEATURES_WANTED={0x1222, 0x3, 0x0, 0x1, [@generic="bec2f49b4d3cdafcf3880a77d1804865d2a09eacf72fc323677f5b031c220a16895ac97b0f150de917874b57ae74ea9977bce0756bff6a792f787868e14cda7361228ef1c20075d0b1ba7c730f3f2e3ea377a05f5ebb182e62a779c246ab7ed8656c1b7e50c12c20861bf5daaf8bd3670a756927478c303698c058042af11998ec48c2f040b5f04386ca286483c355a79ce7b20f402c90691bbf1f7638aa526cd3519c9846456ff90971201cfa3f836f89e2257f3fcc264cb26e", @generic="3be1769b247082b8c47469914aab3d6dc44c70813e6edaf40e30ea194de23294c47290802c6036f8f7e2937643e361f7a3c61f0c58679d1a673c7f76b64fa7c6816223d3068f5b3ce2e430a0cf40954109a0751d122606401d264dfd8e64e2c57281f9dd48c2b460c63362e6485a7024cc6c48b6caf955de800855a0761578976189948abd9c098f1c313e5595a72f97d751677bf1e7eed457383ce64b7d735ae34787708a2e74e6eafa25a9", @generic="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", @nested={0x10, 0x89, 0x0, 0x1, [@nested={0x4, 0x58}, @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0xa5, 0x90, 0x0, 0x1, [@generic="6daf07887b771c3892e8e9fb0411778fb19ad695a62afca0197955b48f1b37af7f56b70ab06bdb8cd4f2d04b6654befd722da5a68b5ec900aad1b8967c75c27d1e9eb7", @generic="0b5fab0a30ae199ab866de74004558b67cd36fc987d08da4544efe8dc0cf93add50324b91f4fd69a40f26e7a4aff6a575dabbafb1d395d2662f193fb4d84459adf8dfdeb7f57b7a53919ed717355", @typed={0x8, 0x107, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x9b}, @nested={0x4, 0xe4}]}]}]}, 0x1244}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000024c0)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x8000, 0x0) fcntl$auto_F_UNLCK(r9, 0xd, 0x2) fcntl$auto_F_UNLCK(r0, 0x6, 0x2) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f00000037c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x420c}, 0xc, &(0x7f0000003780)={&(0x7f0000002540)={0x1218, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_SEC_KEY={0x11e8, 0x30, 0x0, 0x1, [@generic="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", @nested={0x1db, 0xb8, 0x0, 0x1, [@generic="80da4ed8136bf9df9b00ae270bd73828d2db3a5e1d3d54a9832f1e6468a3e1712dd7a2cf22943325aa8bf0041c753ab5f528971d84434bdfe459a8407dc619c6045beb4771570a6ab5c72a8fc3e0991c5fc65a3574901a01108ec738d116be9788de03c49316926fdb9e7c6ab3bb130542a372", @typed={0x8, 0x4c, 0x0, 0x0, @u32=0x7fff}, @generic="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", @generic="fe0af741d7288472af1db8b8c0d966bf06a764a4dd13ad0abf2788409db30925b2467b785bc8911e21a887602a1dcf3c999068a1fca4764b06d6349780caf816bd3b8fa5bc6ddb1655f3deb2fb25c467e878d3d6faabaf5ff17e0f4837a32383693d"]}, @nested={0x8, 0xc5, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xb}]}, 0x1218}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.571807231s ago: executing program 8 (id=3440): socket(0x2c, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x424041, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r1, 0x0, 0x200c) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r0, 0x4018bc0e, &(0x7f0000000080)={0x5, 0x0, 0x5, 0x1}) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r3) pread64$auto(r0, &(0x7f0000000540)='%!:{\x14.*\x00', 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_MPATH_NEXT_HOP={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x4084) socket(0xf, 0x3, 0x3) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf03, 0x5, 0x2e, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) 2.553121949s ago: executing program 2 (id=3441): mmap$auto(0x0, 0x400007, 0xe1, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x2, 0xc, 0xbc5, 0x12, r0, 0x8000) 2.445662332s ago: executing program 2 (id=3442): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x3, 0x3a) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) r1 = io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000002c0)={0x14, r2, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x4040) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x8, 0xe27c, 0x8) (async) r3 = socket(0x1f, 0x5, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) write$auto(r4, &(0x7f0000000340)=',02.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) mmap$auto(0x0, 0x2020006, 0x4, 0x17, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x89a0, 0x4) ioctl$auto(r0, 0x8936, 0x1) 2.066385777s ago: executing program 4 (id=3443): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80026f48, r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) migrate_pages$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x161782, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r1, 0x0, 0x2) getrlimit$auto(0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0x0, 0x1, 0x84) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x5, &(0x7f0000000300)=@token_create={0x40, r3}, 0x47) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) getdents$auto(r3, 0x0, 0x18) 2.056702979s ago: executing program 8 (id=3444): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) mmap$auto(0xfffffffffffffffe, 0x9, 0x3, 0xeb1, r0, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D3\x00', 0x70543, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x80000007, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) exit$auto(0x1003) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mq_unlink$auto(0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x8000, 0x5, 0x0, 0x1, 0xfffffffffffffffc) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x924) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/igmp\x00', 0x7b78c3, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2402, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x200000b, 0x110, r3, 0xffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x40800) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, 0x0, &(0x7f0000000080)=0x6f5, 0x4) unshare$auto(0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0xb, 0x4cbd5d) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x81, 0x0) 1.696117477s ago: executing program 2 (id=3445): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r1 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r1, 0x0, 0x80000001, 0x9) 1.56962848s ago: executing program 4 (id=3446): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x443) r1 = socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x202000a, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) (async) fsopen$auto(0x0, 0x1) (async) fsconfig$auto(r0, 0x8d, 0x0, 0x0, 0x0) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) madvise$auto(0x80000001, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) (async) bpf$auto(0x0, 0x0, 0x4f4) (async) madvise$auto(0x0, 0x6, 0x2) (async) memfd_secret$auto(0x0) (async) getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x81, 0x3, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x4, &(0x7f0000000100)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\x00\x00\x01\x00\x00\x00\x00\x00\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x000\x7f\xc5o\b\xa7\xb2r\xe6\xfd\xa9\x00 \x00\x00\x00\x00\x00d\x18\xb8\xf9GUU\x8c\x9d\x97\xe5ADApa\xbd\xb4L\xf2K\xc3\xdfk\x1d4:\x17\xf2\x13\xec\x06\rd\xa9\x8e\xe9\xf4$\xb2;\x8c\xbf\xa9\x8eI5^^\xff+\xa4', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, &(0x7f0000000080)) socket(0xa, 0x2, 0x3a) 1.275704305s ago: executing program 4 (id=3447): arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0xffffffff00000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x21a, 0x6, 0xffffffff, 0xeb1, 0x401, 0x9) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) statmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000007, 0x1ff, 0x8000000000000000}, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r3, &(0x7f0000000240)=""/80, 0x50) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900), 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r0) sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x0, 0x66a) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "58f19cac1370aa83"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x28}}, 0x40) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r6, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast2}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @local}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @empty}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, 0x58}, 0x1, 0x0, 0x0, 0x42000}, 0x400c000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) msync$auto(0x110c230000, 0x200001, 0x6) 1.080491763s ago: executing program 8 (id=3448): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x1, 0x106) socket(0x2, 0x801, 0x6) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x100, 0x2, 0x4, 0x200009b71, 0x2, 0x9) sendmmsg$auto(r1, 0x0, 0x109, 0x20020000) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x5c1, 0xdf, 0xebd, r2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 921.275455ms ago: executing program 4 (id=3449): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c07, 0x0) acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00') 822.50909ms ago: executing program 4 (id=3450): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = socket(0xa, 0x3, 0x3a) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) close_range$auto(0x2, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)={0x1c, r2, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x6, 0xf, 'P\r'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) socket(0x29, 0x6, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7fffffff, 0x8fb, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000000000000005, 0x62, 0x8000001f, 0x4, 0x2, 0x9, 0x2, 0x6]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x4020009, 0xc, 0x12, 0xffffffffffffffff, 0x800000008000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x400e42, 0x0) pread64$auto(r4, 0x0, 0x80000006, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000280)={{0xf, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x1}, 0x0, 0x0, 0x80000003, 0x9, 0x8000006, 0xffffffff, 0x3, 0x7ffe, 0xfc4, 0x400}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r5, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r5, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 774.137813ms ago: executing program 2 (id=3451): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f00000000c0)={0x4, &(0x7f0000000080)={0x4, 0x9, 0x1, @raw=0x2}}) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)="da518ed75fcc9f1a8be03501757c05ab6f5a5b36148695b3115a77b09872bf8a5e4c18ed50fc7653bb12525189093819ba59de56fb2504684cfb4f2a2fd2f9f6e2b9418bd2758adb0f57e8ddd982db4206c2b33c55455cfc5dfe1ddc725fd46849d1dcb59678cc1f78ecec38868c1f514ed226e66821923de93165e2805e2e89f8c1d14629e9cea74e8bb76297e617accc6b9d824259b5bd3f6c8068692e8580b1ad399ee8818c436111bd3f", 0xac) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0) writev$auto(r0, &(0x7f0000000c00)={&(0x7f0000000180), 0x7}, 0x4) mmap$auto(0x0, 0x6, 0x1ff, 0x14, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) kill$auto_SIGCONT(0x0, 0x12) socket(0x10, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x67) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) unshare$auto(0x40000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r7, 0xc1b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x7a5}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x7}, @GTPA_TID={0xc, 0x3, 0x8000000000000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x800) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r9, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) 542.197974ms ago: executing program 8 (id=3452): r0 = socket(0xb, 0x3, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x9, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x9}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x5}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth0\x00'}, @THERMAL_GENL_ATTR_THRESHOLD={0xfe, 0x18, 0x0, 0x1, [@generic="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"]}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x8}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0xc, 0x14, 0x0, 0x1, [@typed={0x7, 0xc8, 0x0, 0x0, @str='(@\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x20008085) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010b0bbd7000fcdbff7f05"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040084) unshare$auto(0x40000080) memfd_create$auto(0x0, 0x101) read$auto(r1, 0x0, 0x1000000000000013) 333.861697ms ago: executing program 4 (id=3453): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r3, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) r4 = socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0x1) 0s ago: executing program 8 (id=3454): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x1, 0x0) socket(0x2c, 0x3, 0x0) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0xa, 0x801, 0x84) (async) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) (async) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x3, 0x7) (async) syz_clone3(&(0x7f0000000300)={0x10120000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x3a) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x8, @old_prog_fd=r1}, 0xa3) bpf$auto(0x2, &(0x7f0000000040)=@query={@target_ifindex, 0xff, 0x7, 0x9, 0x7f, @count=0xfffffff1, 0x0, 0x80000000, 0xc, 0xb, 0x7}, 0x9) r3 = socketcall$auto(0x4, 0x0) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 32) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000140)={0x0, r2, 0x6426, "59acc8028618adcb4c9a87bdc6daf712"}) (async, rerun: 32) socket(0x2, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) kernel console output (not intermixed with test programs): fedf0808c1f R08: 0000000000000000 R09: 0000000000000000 [ 891.301286][T21451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.301294][T21451] R13: 00007fedf0a16038 R14: 00007fedf0a15fa0 R15: 00007ffff3706e28 [ 891.301315][T21451] [ 891.645147][T21451] kobject: kobject_add_internal failed for tx-0 (error: -12 parent: queues) [ 891.755303][T21459] vhci_hcd vhci_hcd.2: invalid port number 252 [ 891.761621][T21459] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 892.356815][T21474] FAULT_INJECTION: forcing a failure. [ 892.356815][T21474] name failslab, interval 1, probability 0, space 0, times 0 [ 892.397666][T21474] CPU: 0 UID: 0 PID: 21474 Comm: syz.6.2925 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 892.397722][T21474] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 892.397736][T21474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 892.397750][T21474] Call Trace: [ 892.397759][T21474] [ 892.397769][T21474] dump_stack_lvl+0x100/0x190 [ 892.397812][T21474] should_fail_ex.cold+0x5/0xa [ 892.397853][T21474] should_failslab+0xc2/0x120 [ 892.397888][T21474] ? lsm_blob_alloc+0x68/0x90 [ 892.397915][T21474] __kmalloc_noprof+0xf6/0x9c0 [ 892.397939][T21474] ? sk_prot_alloc+0x10b/0x2a0 [ 892.397965][T21474] ? rcu_is_watching+0x12/0xc0 [ 892.397995][T21474] ? sk_prot_alloc+0x10b/0x2a0 [ 892.398026][T21474] ? lsm_blob_alloc+0x68/0x90 [ 892.398052][T21474] lsm_blob_alloc+0x68/0x90 [ 892.398079][T21474] security_sk_alloc+0x2d/0x290 [ 892.398113][T21474] sk_prot_alloc+0x12a/0x2a0 [ 892.398141][T21474] sk_alloc+0x36/0xe80 [ 892.398176][T21474] __netlink_create+0x5e/0x2c0 [ 892.398207][T21474] ? __wake_up+0x3f/0x60 [ 892.398242][T21474] netlink_create+0x293/0x610 [ 892.398276][T21474] ? __pfx_genl_bind+0x10/0x10 [ 892.398300][T21474] ? __pfx_genl_unbind+0x10/0x10 [ 892.398322][T21474] ? __pfx_genl_release+0x10/0x10 [ 892.398350][T21474] __sock_create+0x339/0x860 [ 892.398385][T21474] __sys_socket+0x14d/0x260 [ 892.398415][T21474] ? __pfx___sys_socket+0x10/0x10 [ 892.398444][T21474] ? xfd_validate_state+0x129/0x190 [ 892.398491][T21474] __x64_sys_socket+0x72/0xb0 [ 892.398519][T21474] ? lockdep_hardirqs_on+0x78/0x100 [ 892.398549][T21474] do_syscall_64+0xc9/0xf80 [ 892.398582][T21474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.398609][T21474] RIP: 0033:0x7f044bb9aeb9 [ 892.398629][T21474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.398654][T21474] RSP: 002b:00007f0449dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 892.398678][T21474] RAX: ffffffffffffffda RBX: 00007f044be16090 RCX: 00007f044bb9aeb9 [ 892.398696][T21474] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 892.398712][T21474] RBP: 00007f044bc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 892.398729][T21474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.398744][T21474] R13: 00007f044be16128 R14: 00007f044be16090 R15: 00007fff8745c2a8 [ 892.398779][T21474] [ 893.172912][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e1a0400: rx timeout, send abort [ 893.181325][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e1a0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 893.342478][T21491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2928'. [ 894.090132][ T30] audit: type=1800 audit(4294988482.585:124): pid=21504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2929" name="lu_gp_id" dev="configfs" ino=96820 res=0 errno=0 [ 894.909022][T21513] netlink: 'syz.6.2932': attribute type 1 has an invalid length. [ 898.690731][T16546] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 899.222942][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2942'. [ 900.444558][T21582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2945'. [ 901.518070][T21589] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2946'. [ 903.435718][T21618] FAULT_INJECTION: forcing a failure. [ 903.435718][T21618] name failslab, interval 1, probability 0, space 0, times 0 [ 903.462954][T21614] FAULT_INJECTION: forcing a failure. [ 903.462954][T21614] name failslab, interval 1, probability 0, space 0, times 0 [ 903.477526][T21614] CPU: 1 UID: 0 PID: 21614 Comm: syz.5.2953 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 903.477561][T21614] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 903.477570][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 903.477580][T21614] Call Trace: [ 903.477586][T21614] [ 903.477592][T21614] dump_stack_lvl+0x100/0x190 [ 903.477617][T21614] should_fail_ex.cold+0x5/0xa [ 903.477642][T21614] should_failslab+0xc2/0x120 [ 903.477664][T21614] __kmalloc_cache_noprof+0x80/0x810 [ 903.477680][T21614] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 903.477704][T21614] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 903.477723][T21614] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 903.477745][T21614] ? __mutex_lock+0x26a/0x1b90 [ 903.477771][T21614] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 903.477792][T21614] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 903.477811][T21614] ? __pfx___mutex_lock+0x10/0x10 [ 903.477836][T21614] ? __fsnotify_parent+0x2b4/0xca0 [ 903.477859][T21614] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 903.477884][T21614] snd_pcm_oss_sync+0x1de/0x840 [ 903.477905][T21614] snd_pcm_oss_release+0x238/0x300 [ 903.477923][T21614] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 903.477942][T21614] __fput+0x3ff/0xb40 [ 903.477970][T21614] task_work_run+0x150/0x240 [ 903.477993][T21614] ? __pfx_task_work_run+0x10/0x10 [ 903.478021][T21614] exit_to_user_mode_loop+0x100/0x4b0 [ 903.478043][T21614] ? rcu_is_watching+0x12/0xc0 [ 903.478059][T21614] do_syscall_64+0x4ea/0xf80 [ 903.478079][T21614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.478094][T21614] RIP: 0033:0x7fedf079aeb9 [ 903.478108][T21614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.478123][T21614] RSP: 002b:00007fedf1676028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 903.478138][T21614] RAX: 0000000000000000 RBX: 00007fedf0a15fa0 RCX: 00007fedf079aeb9 [ 903.478148][T21614] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 903.478158][T21614] RBP: 00007fedf0808c1f R08: 0000000000000000 R09: 0000000000000000 [ 903.478168][T21614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.478177][T21614] R13: 00007fedf0a16038 R14: 00007fedf0a15fa0 R15: 00007ffff3706e28 [ 903.478197][T21614] [ 903.737352][T21618] CPU: 0 UID: 0 PID: 21618 Comm: syz.6.2954 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 903.737421][T21618] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 903.737439][T21618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 903.737457][T21618] Call Trace: [ 903.737467][T21618] [ 903.737479][T21618] dump_stack_lvl+0x100/0x190 [ 903.737522][T21618] should_fail_ex.cold+0x5/0xa [ 903.737572][T21618] should_failslab+0xc2/0x120 [ 903.737613][T21618] kmem_cache_alloc_noprof+0x83/0x780 [ 903.737652][T21618] ? __pfx_map_id_range_down+0x10/0x10 [ 903.737680][T21618] ? security_inode_alloc+0x3b/0x2c0 [ 903.737724][T21618] ? security_inode_alloc+0x3b/0x2c0 [ 903.737760][T21618] security_inode_alloc+0x3b/0x2c0 [ 903.737796][T21618] inode_init_always_gfp+0xced/0x1040 [ 903.737832][T21618] alloc_inode+0x8e/0x250 [ 903.737870][T21618] new_inode+0x22/0x1c0 [ 903.737913][T21618] shmem_get_inode+0x197/0xf30 [ 903.737947][T21618] ? __vm_enough_memory+0x184/0x390 [ 903.737990][T21618] __shmem_file_setup+0x279/0x330 [ 903.738021][T21618] shmem_zero_setup+0x93/0x1b0 [ 903.738057][T21618] __mmap_region+0x2101/0x2820 [ 903.738094][T21618] ? __pfx___mmap_region+0x10/0x10 [ 903.738148][T21618] ? finish_task_switch.isra.0+0x204/0xb70 [ 903.738177][T21618] ? lockdep_hardirqs_on+0x78/0x100 [ 903.738208][T21618] ? finish_task_switch.isra.0+0x204/0xb70 [ 903.738297][T21618] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 903.738337][T21618] ? rcu_is_watching+0x12/0xc0 [ 903.738378][T21618] mmap_region+0x180/0x3e0 [ 903.738416][T21618] do_mmap+0xc63/0x12f0 [ 903.738461][T21618] ? __pfx_do_mmap+0x10/0x10 [ 903.738500][T21618] ? __pfx_down_write_killable+0x10/0x10 [ 903.738541][T21618] vm_mmap_pgoff+0x29e/0x470 [ 903.738585][T21618] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 903.738630][T21618] ? __x64_sys_futex+0x34f/0x4d0 [ 903.738664][T21618] ? __x64_sys_futex+0x358/0x4d0 [ 903.738703][T21618] ksys_mmap_pgoff+0x7d/0x5b0 [ 903.738739][T21618] ? __pfx_do_writev+0x10/0x10 [ 903.738770][T21618] __x64_sys_mmap+0x125/0x190 [ 903.738799][T21618] do_syscall_64+0xc9/0xf80 [ 903.738832][T21618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.738859][T21618] RIP: 0033:0x7f044bb9aeb9 [ 903.738880][T21618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.738907][T21618] RSP: 002b:00007f0449df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 903.738941][T21618] RAX: ffffffffffffffda RBX: 00007f044be15fa0 RCX: 00007f044bb9aeb9 [ 903.738960][T21618] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 903.738977][T21618] RBP: 00007f044bc08c1f R08: 0000000000000401 R09: 0000000400008000 [ 903.738995][T21618] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 903.739012][T21618] R13: 00007f044be16038 R14: 00007f044be15fa0 R15: 00007fff8745c2a8 [ 903.739047][T21618] [ 904.615053][ T6911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 904.626697][ T6911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 904.634660][ T6911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 904.642503][ T6911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 904.655047][ T6911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 905.447839][T21627] chnl_net:caif_netlink_parms(): no params data found [ 905.863467][T21627] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.881321][T21627] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.915694][T21627] bridge_slave_0: entered allmulticast mode [ 905.942389][T21627] bridge_slave_0: entered promiscuous mode [ 905.972781][T21627] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.998371][T21627] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.026057][T21627] bridge_slave_1: entered allmulticast mode [ 906.056259][T21627] bridge_slave_1: entered promiscuous mode [ 906.451271][T21627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.560613][T21627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.672689][T21627] team0: Port device team_slave_0 added [ 906.719828][T21627] team0: Port device team_slave_1 added [ 906.759100][ T6911] Bluetooth: hci2: command tx timeout [ 906.955907][T21627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.969708][T21627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.008243][T21627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.130389][T21627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.154138][T21627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.187487][T21627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.391293][T21627] hsr_slave_0: entered promiscuous mode [ 907.404540][T21627] hsr_slave_1: entered promiscuous mode [ 907.437585][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 907.453479][T21682] netlink: 22748 bytes leftover after parsing attributes in process `syz.0.2965'. [ 907.569221][T21685] FAULT_INJECTION: forcing a failure. [ 907.569221][T21685] name failslab, interval 1, probability 0, space 0, times 0 [ 907.605004][T21685] CPU: 1 UID: 0 PID: 21685 Comm: syz.6.2966 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 907.605068][T21685] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 907.605085][T21685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 907.605101][T21685] Call Trace: [ 907.605110][T21685] [ 907.605121][T21685] dump_stack_lvl+0x100/0x190 [ 907.605160][T21685] should_fail_ex.cold+0x5/0xa [ 907.605207][T21685] should_failslab+0xc2/0x120 [ 907.605248][T21685] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 907.605285][T21685] ? lockdep_init_map_type+0x5c/0x250 [ 907.605326][T21685] ? __d_alloc+0x34/0xa80 [ 907.605366][T21685] ? __d_alloc+0x34/0xa80 [ 907.605398][T21685] __d_alloc+0x34/0xa80 [ 907.605437][T21685] d_alloc_pseudo+0x1c/0xc0 [ 907.605480][T21685] alloc_file_pseudo+0xcf/0x230 [ 907.605521][T21685] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 907.605566][T21685] ? alloc_fd+0x476/0x790 [ 907.605602][T21685] sock_alloc_file+0x50/0x210 [ 907.605650][T21685] __sys_socket+0x1c0/0x260 [ 907.605678][T21685] ? fput+0x79/0x100 [ 907.605715][T21685] ? __pfx___sys_socket+0x10/0x10 [ 907.605748][T21685] ? xfd_validate_state+0x129/0x190 [ 907.605802][T21685] __x64_sys_socket+0x72/0xb0 [ 907.605835][T21685] ? lockdep_hardirqs_on+0x78/0x100 [ 907.605869][T21685] do_syscall_64+0xc9/0xf80 [ 907.605906][T21685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.605942][T21685] RIP: 0033:0x7f044bb9aeb9 [ 907.605966][T21685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.605994][T21685] RSP: 002b:00007f0449df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 907.606022][T21685] RAX: ffffffffffffffda RBX: 00007f044be15fa0 RCX: 00007f044bb9aeb9 [ 907.606043][T21685] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 907.606061][T21685] RBP: 00007f044bc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 907.606080][T21685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.606098][T21685] R13: 00007f044be16038 R14: 00007f044be15fa0 R15: 00007fff8745c2a8 [ 907.606138][T21685] [ 908.040149][T21627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 908.066870][T21627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 908.191953][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 908.232809][T21627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 908.246345][T21627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 908.579533][T21627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.629314][T21627] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.665880][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.673093][ T7051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.691967][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.699168][ T7051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.755885][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.770933][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.780800][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.788606][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.795389][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.805028][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.812958][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.821038][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.828103][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.835511][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.842829][T21721] Bluetooth: hci2: command tx timeout [ 908.852056][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.860168][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.867880][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.877520][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.884257][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.891722][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.898557][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.907064][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.917801][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.930975][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.937750][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.945147][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.951973][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.960431][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.967682][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.975086][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.981993][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 908.989418][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 908.996096][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.003536][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.010950][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.020079][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.026761][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.034316][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.041075][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.050160][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.059350][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.066859][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.074138][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.081634][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.089248][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.096647][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.103565][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.112502][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.119220][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.127356][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.134018][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.141481][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.148150][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.155528][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.164405][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.174300][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.181029][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.188615][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.195242][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.205534][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.213405][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.221047][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.228319][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.235721][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.243325][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.250770][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.258783][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.266184][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 909.277400][ T6911] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 909.287261][ T6911] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 910.036874][T21627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.917559][ T6911] Bluetooth: hci2: command tx timeout [ 911.151866][T21627] veth0_vlan: entered promiscuous mode [ 911.175848][T21627] veth1_vlan: entered promiscuous mode [ 911.256496][T21627] veth0_macvtap: entered promiscuous mode [ 911.280019][T21627] veth1_macvtap: entered promiscuous mode [ 911.334270][T21627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.358200][T21627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.418034][ T7057] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.546922][ T7057] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.604023][ T7057] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.634827][T21795] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 911.675710][ T7057] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.698264][T21796] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 911.792197][T10691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.803007][T10691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.114242][T10676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.139776][T10676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.997800][ T6911] Bluetooth: hci2: command tx timeout [ 913.077571][T21812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 914.035911][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059d70800: rx timeout, send abort [ 914.544148][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059d70800: abort rx timeout. Force session deactivation [ 916.479652][T21854] binder: 21853:21854 ioctl c018620c 0 returned -1 [ 916.520648][T21854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2989'. [ 917.889886][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b733c00: rx timeout, send abort [ 917.903175][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b733c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 917.940735][T21884] futex_wake_op: syz.0.2995 tries to shift op by -2048; fix this program [ 917.979207][T21881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 917.979268][T21884] futex_wake_op: syz.0.2995 tries to shift op by -2048; fix this program [ 918.069061][T21881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.073463][T21889] netlink: 'syz.7.2997': attribute type 33 has an invalid length. [ 918.075855][T21884] 0x000000000001-0x000000020000 : "" [ 918.111712][T21891] bridge0: port 3(hsr0) entered blocking state [ 918.118335][T21881] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 918.124571][T21881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 918.140708][T21891] bridge0: port 3(hsr0) entered disabled state [ 918.149131][T21881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 918.149312][T21884] ftl_cs: FTL header corrupt! [ 918.166418][T21891] hsr0: entered allmulticast mode [ 918.223303][T21881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 918.238865][T21891] hsr_slave_0: entered allmulticast mode [ 918.289127][T21891] hsr_slave_1: entered allmulticast mode [ 918.452168][T21891] hsr0: entered promiscuous mode [ 918.484028][T21891] bridge0: port 3(hsr0) entered blocking state [ 918.490397][T21891] bridge0: port 3(hsr0) entered forwarding state [ 918.500683][T21881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 918.977506][T21902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2999'. [ 919.208697][T21900] random: crng reseeded on system resumption [ 919.958349][T21912] Process accounting paused [ 920.047357][ T6911] Bluetooth: hci1: command 0x0c1a tx timeout [ 920.117274][ T6911] Bluetooth: hci3: command 0x0c1a tx timeout [ 920.205873][T21721] Bluetooth: hci0: command 0x0406 tx timeout [ 920.212326][T16546] Bluetooth: hci5: command 0x0406 tx timeout [ 920.219745][ T6911] Bluetooth: hci2: command 0x0c1a tx timeout [ 921.064782][T21950] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 921.264618][ T6911] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 921.264647][ T6911] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 921.281403][ T6911] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 921.282605][ T6911] Bluetooth: hci1: adv larger than maximum supported [ 921.289676][ T6911] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 921.297379][ T6911] Bluetooth: hci1: adv larger than maximum supported [ 921.304909][ T6911] Bluetooth: hci1: adv larger than maximum supported [ 921.312524][ T6911] Bluetooth: hci1: adv larger than maximum supported [ 921.319395][ T6911] Bluetooth: hci1: Malformed LE Event: 0x0d [ 921.337580][ T6911] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 921.337600][ T6911] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 921.352407][ T6911] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 921.352435][ T6911] Bluetooth: hci1: adv larger than maximum supported [ 921.359909][ T6911] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 921.366573][ T6911] Bluetooth: hci1: adv larger than maximum supported [ 921.373673][ T6911] Bluetooth: hci1: Malformed LE Event: 0x0d [ 921.545457][T21957] random: crng reseeded on system resumption [ 922.277601][ T6911] Bluetooth: hci2: command 0x0c1a tx timeout [ 923.430860][T21984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.230998][T21984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.371218][ T6911] Bluetooth: hci2: command 0x0c1a tx timeout [ 924.477828][T21984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.255214][T22010] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 925.442138][T21721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 925.459052][T21721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 925.466987][T21721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 925.475585][T21721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 925.486627][T21721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 926.272742][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3019'. [ 926.419013][T22036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.419453][T22036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.549588][T22012] chnl_net:caif_netlink_parms(): no params data found [ 927.065677][T22012] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.107441][T22012] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.129130][T22012] bridge_slave_0: entered allmulticast mode [ 927.136994][T22012] bridge_slave_0: entered promiscuous mode [ 927.198302][T22012] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.209584][T22054] random: crng reseeded on system resumption [ 927.244837][T22012] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.267468][T22012] bridge_slave_1: entered allmulticast mode [ 927.275223][T22012] bridge_slave_1: entered promiscuous mode [ 927.504705][T22012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.547035][T22012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.637719][ T6911] Bluetooth: hci4: command tx timeout [ 927.675076][T22012] team0: Port device team_slave_0 added [ 927.690261][T22012] team0: Port device team_slave_1 added [ 927.738519][T22012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.748458][T22012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.784192][T22012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.799142][T22012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.806245][T22012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.858175][T22012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.978542][T22069] cougar: G6 mapped to F18 [ 927.992484][T22069] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.6.3022: 7 [ 928.229858][T22012] hsr_slave_0: entered promiscuous mode [ 928.248555][T22012] hsr_slave_1: entered promiscuous mode [ 928.254922][T22012] debugfs: 'hsr0' already exists in 'hsr' [ 928.288537][T22012] Cannot create hsr debugfs directory [ 928.939120][T22012] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 928.984509][T22012] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 929.028576][T22012] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 929.052970][T22012] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 929.312423][T22012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.381128][T22012] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.403817][T16750] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.410989][T16750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.453187][T16750] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.460384][T16750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.728815][ T6911] Bluetooth: hci4: command tx timeout [ 929.819455][ T5830] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 929.882244][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 929.882307][ T5830] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 929.882322][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 929.882339][ T5830] Call Trace: [ 929.882349][ T5830] [ 929.882360][ T5830] dump_stack_lvl+0x100/0x190 [ 929.882400][ T5830] dump_header+0xfb/0x606 [ 929.882431][ T5830] oom_kill_process.cold+0xd/0x321 [ 929.882464][ T5830] out_of_memory+0x340/0x14f0 [ 929.882509][ T5830] ? __pfx_out_of_memory+0x10/0x10 [ 929.882556][ T5830] mem_cgroup_out_of_memory+0xc6/0x130 [ 929.882587][ T5830] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 929.882615][ T5830] ? find_held_lock+0x2b/0x80 [ 929.882652][ T5830] ? do_raw_spin_unlock+0x145/0x1e0 [ 929.882695][ T5830] ? _raw_spin_unlock+0x28/0x50 [ 929.882728][ T5830] try_charge_memcg+0x652/0xc90 [ 929.882775][ T5830] ? __pfx_try_charge_memcg+0x10/0x10 [ 929.882822][ T5830] ? find_held_lock+0x2b/0x80 [ 929.882856][ T5830] ? rcu_read_unlock+0x17/0x60 [ 929.882894][ T5830] ? rcu_read_unlock+0x17/0x60 [ 929.882939][ T5830] charge_memcg+0xa6/0x280 [ 929.882977][ T5830] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 929.883026][ T5830] __read_swap_cache_async+0x449/0x610 [ 929.883064][ T5830] ? __pfx___read_swap_cache_async+0x10/0x10 [ 929.883095][ T5830] ? __lock_acquire+0x4a5/0x2630 [ 929.883135][ T5830] ? __xa_erase+0xec/0x150 [ 929.883170][ T5830] ? __pfx___xa_erase+0x10/0x10 [ 929.883210][ T5830] swap_cluster_readahead+0x541/0x770 [ 929.883253][ T5830] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 929.883287][ T5830] ? __lock_acquire+0x4a5/0x2630 [ 929.883324][ T5830] ? _raw_spin_unlock+0x28/0x50 [ 929.883351][ T5830] ? move_cluster+0x1f7/0x570 [ 929.883397][ T5830] ? get_vma_policy+0x23f/0x3b0 [ 929.883442][ T5830] swapin_readahead+0x14b/0x12e0 [ 929.883486][ T5830] ? __pfx_swapin_readahead+0x10/0x10 [ 929.883519][ T5830] ? find_held_lock+0x2b/0x80 [ 929.883548][ T5830] ? swap_cache_get_folio+0x272/0x920 [ 929.883582][ T5830] ? swap_cache_get_folio+0x272/0x920 [ 929.883610][ T5830] ? swap_cache_get_folio+0x1f/0x920 [ 929.883638][ T5830] ? swap_cache_get_folio+0x2a2/0x920 [ 929.883671][ T5830] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 929.883699][ T5830] ? __pfx_get_swap_device+0x10/0x10 [ 929.883746][ T5830] ? do_swap_page+0x9ba/0x6810 [ 929.883773][ T5830] do_swap_page+0x9ba/0x6810 [ 929.883808][ T5830] ? __lock_acquire+0x4a5/0x2630 [ 929.883860][ T5830] ? __pfx_do_swap_page+0x10/0x10 [ 929.883894][ T5830] ? __pfx_default_wake_function+0x10/0x10 [ 929.883938][ T5830] ? rcu_is_watching+0x12/0xc0 [ 929.883967][ T5830] ? ___pte_offset_map+0x179/0x310 [ 929.884011][ T5830] __handle_mm_fault+0x18b9/0x2b50 [ 929.884051][ T5830] ? reacquire_held_locks+0xce/0x1e0 [ 929.884089][ T5830] ? __pfx___handle_mm_fault+0x10/0x10 [ 929.884128][ T5830] ? lock_vma_under_rcu+0x17c/0x5a0 [ 929.884182][ T5830] handle_mm_fault+0x36d/0xa20 [ 929.884219][ T5830] do_user_addr_fault+0x5a3/0x12f0 [ 929.884261][ T5830] exc_page_fault+0x6f/0xd0 [ 929.884293][ T5830] asm_exc_page_fault+0x26/0x30 [ 929.884319][ T5830] RIP: 0033:0x7f8c0f35ecb8 [ 929.884348][ T5830] Code: 55 41 54 49 89 f4 55 48 89 fd 53 48 8d 5e 17 48 83 ec 18 48 83 fb 1f 0f 86 fd 03 00 00 48 83 e3 f0 48 85 ff 0f 84 05 07 00 00 <0f> b6 05 31 db de 00 48 39 d8 0f 82 18 01 00 00 41 89 dd 41 c1 ed [ 929.884375][ T5830] RSP: 002b:00007ffeff15bad0 EFLAGS: 00010206 [ 929.884398][ T5830] RAX: 0000000000000000 RBX: 0000000000008040 RCX: 00007ffeff15bb70 [ 929.884416][ T5830] RDX: 0000000000000001 RSI: 0000000000008030 RDI: 00007f8c0f5e4cc0 [ 929.884434][ T5830] RBP: 00007f8c0f5e4cc0 R08: 0000000000000000 R09: 0000000000000000 [ 929.884452][ T5830] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000008030 [ 929.884469][ T5830] R13: 0000000000000000 R14: 00000000000e2120 R15: 00007ffeff15bcc0 [ 929.884508][ T5830] [ 929.884519][ T5830] memory: usage 3072kB, limit 3072kB, failcnt 219882 [ 929.954454][T22012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.980735][ T5830] memory+swap: usage 41572kB, limit 9007199254740988kB, failcnt 0 [ 930.340372][ T5830] kmem: usage 2692kB, limit 9007199254740988kB, failcnt 0 [ 930.347616][ T5830] Memory cgroup stats for /syz0: [ 930.347794][ T5830] cache 0 [ 930.355668][ T5830] rss 0 [ 930.371595][ T5830] rss_huge 0 [ 930.374837][ T5830] shmem 0 [ 930.419748][ T5830] mapped_file 0 [ 930.423243][ T5830] dirty 0 [ 930.426185][ T5830] writeback 0 [ 930.433691][ T5830] workingset_refault_anon 36703 [ 930.439471][ T5830] workingset_refault_file 10481 [ 930.444454][ T5830] swap 39424000 [ 930.448317][ T5830] swapcached 389120 [ 930.452131][ T5830] pgpgin 577888 [ 930.455687][ T5830] pgpgout 592612 [ 930.460997][ T5830] pgfault 476862 [ 930.464555][ T5830] pgmajfault 19068 [ 930.476016][ T5830] inactive_anon 24576 [ 930.485082][ T5830] active_anon 364544 [ 930.489359][ T5830] inactive_file 0 [ 930.493091][ T5830] active_file 0 [ 930.496640][ T5830] unevictable 0 [ 930.547282][ T5830] hierarchical_memory_limit 3145728 [ 930.552560][ T5830] hierarchical_memsw_limit 9223372036854771712 [ 930.569847][ T5830] total_cache 0 [ 930.573359][ T5830] total_rss 0 [ 930.576644][ T5830] total_rss_huge 0 [ 930.590364][ T5830] total_shmem 0 [ 930.597915][ T5830] total_mapped_file 0 [ 930.601914][ T5830] total_dirty 0 [ 930.605378][ T5830] total_writeback 0 [ 930.619496][ T5830] total_workingset_refault_anon 36703 [ 930.637405][ T5830] total_workingset_refault_file 10481 [ 930.750282][ T5830] total_swap 39424000 [ 930.754300][ T5830] total_swapcached 389120 [ 930.799834][ T5830] total_pgpgin 577888 [ 930.803844][ T5830] total_pgpgout 592612 [ 930.861132][ T5830] total_pgfault 476862 [ 930.875445][ T5830] total_pgmajfault 19068 [ 930.904220][ T5830] total_inactive_anon 24576 [ 930.932709][ T5830] total_active_anon 364544 [ 930.960056][ T5830] total_inactive_file 0 [ 930.982496][ T5830] total_active_file 0 [ 931.005231][ T5830] total_unevictable 0 [ 931.035853][ T5830] anon_cost 0 [ 931.056333][ T5830] file_cost 0 [ 931.074460][ T5830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3004,pid=21944,uid=0 [ 931.162138][ T5830] Memory cgroup out of memory: Killed process 21944 (syz.0.3004) total-vm:102852kB, anon-rss:1356kB, file-rss:32384kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 931.423935][T22012] veth0_vlan: entered promiscuous mode [ 931.624821][T22012] veth1_vlan: entered promiscuous mode [ 931.804193][ T6911] Bluetooth: hci4: command tx timeout [ 931.892566][T22012] veth0_macvtap: entered promiscuous mode [ 931.940112][T22012] veth1_macvtap: entered promiscuous mode [ 931.976009][T22012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.034401][T22012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.072231][ T7051] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.108137][ T7051] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.141285][ T7051] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.170708][ T7051] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.548292][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.581388][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.759994][ T7057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.799810][ T7057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.878050][ T6911] Bluetooth: hci4: command tx timeout [ 934.653754][T22229] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3037'. [ 934.760783][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3036'. [ 935.032838][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ed9e400: rx timeout, send abort [ 935.041486][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ed9e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 935.370462][T21721] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 935.387540][T21721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 935.396946][T21721] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 935.410991][T21721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 935.419359][T21721] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 935.462571][T21721] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 936.843966][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.850726][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.286539][T22222] Process accounting resumed [ 937.481885][ T6911] Bluetooth: hci6: command tx timeout [ 937.698060][T22242] chnl_net:caif_netlink_parms(): no params data found [ 938.155058][T22242] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.172597][T22242] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.224301][T22242] bridge_slave_0: entered allmulticast mode [ 938.251319][T22242] bridge_slave_0: entered promiscuous mode [ 938.443965][T22242] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.451787][T22242] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.464403][T22242] bridge_slave_1: entered allmulticast mode [ 938.497551][T22242] bridge_slave_1: entered promiscuous mode [ 938.557451][T22297] zswap: compressor  not available [ 938.865817][T22307] random: crng reseeded on system resumption [ 938.920079][T22242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.943006][T22325] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3046'. [ 938.977849][T22242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.153328][T22242] team0: Port device team_slave_0 added [ 939.156462][T22242] team0: Port device team_slave_1 added [ 939.214399][T22242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.214420][T22242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.214455][T22242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.216420][T22242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.216438][T22242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.216473][T22242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.424755][T22242] hsr_slave_0: entered promiscuous mode [ 939.425381][T22242] hsr_slave_1: entered promiscuous mode [ 939.425781][T22242] debugfs: 'hsr0' already exists in 'hsr' [ 939.425795][T22242] Cannot create hsr debugfs directory [ 939.560519][ T6911] Bluetooth: hci6: command tx timeout [ 940.218786][T22350] vivid-007: ================= START STATUS ================= [ 940.244590][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3049'. [ 940.263876][T22350] vivid-007: Generate PTS: true [ 940.279757][T22350] vivid-007: Generate SCR: true [ 940.291516][T22350] tpg source WxH: 320x240 (Y'CbCr) [ 940.302094][T22352] ipvlan0: entered promiscuous mode [ 940.314949][T22350] tpg field: 1 [ 940.328621][T22350] tpg crop: (0,0)/320x240 [ 940.333167][T22352] ipvlan0: entered allmulticast mode [ 940.337468][T22350] tpg compose: (0,0)/320x240 [ 940.346982][T22350] tpg colorspace: 8 [ 940.367166][T22350] tpg transfer function: 0/0 [ 940.368460][T22352] veth0_vlan: entered allmulticast mode [ 940.380325][T22350] tpg Y'CbCr encoding: 0/0 [ 940.391438][T22350] tpg quantization: 0/0 [ 940.395707][T22350] tpg RGB range: 0/2 [ 940.417789][T22350] vivid-007: ================== END STATUS ================== [ 940.973877][T22242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 941.068901][T22242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 941.104872][T22376] openvswitch: netlink: IP tunnel dst address not specified [ 941.121149][T22242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 941.165012][T22242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 941.464272][T22242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.531011][T22242] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.594544][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.601664][ T7495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.616328][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.623457][ T7495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.637783][ T6911] Bluetooth: hci6: command tx timeout [ 941.907811][T22389] program syz.7.3053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 942.265240][T22242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.302433][T22410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 942.328982][T22410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 942.335369][T22410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 942.349109][T22410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 942.363286][T22242] veth0_vlan: entered promiscuous mode [ 942.401689][T22242] veth1_vlan: entered promiscuous mode [ 942.420755][T22410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 942.430871][T22410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 942.439186][T22410] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 942.500884][T22410] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 942.541323][T22410] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 942.569094][T22410] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 942.569189][T22410] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 942.586349][T22242] veth0_macvtap: entered promiscuous mode [ 942.620203][T22242] veth1_macvtap: entered promiscuous mode [ 942.676074][T22410] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 942.716230][T22242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.744845][T22242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.789645][ T7051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.790436][ T7051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.790633][ T7051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.790820][ T7051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.044629][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.044663][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.141026][T10676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.141054][T10676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.843038][T22455] random: crng reseeded on system resumption [ 944.357573][T21721] Bluetooth: hci0: command 0x0406 tx timeout [ 944.363627][T21721] Bluetooth: hci5: command 0x0406 tx timeout [ 944.369816][ T6911] Bluetooth: hci3: command 0x0c1a tx timeout [ 944.375836][ T6911] Bluetooth: hci1: command 0x0c1a tx timeout [ 944.437705][T21721] Bluetooth: hci4: command 0x0c1a tx timeout [ 944.443763][T21721] Bluetooth: hci2: command 0x0c1a tx timeout [ 944.597533][T21721] Bluetooth: hci6: command 0x0c1a tx timeout [ 945.758240][T22488] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 946.072159][T22494] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3070'. [ 946.212949][T22490] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 946.521632][T21721] Bluetooth: hci4: command 0x0c1a tx timeout [ 946.678760][T21721] Bluetooth: hci6: command 0x0c1a tx timeout [ 947.568940][T22504] binder: BINDER_SET_CONTEXT_MGR already set [ 947.575856][T22504] binder: 22501:22504 ioctl 4018620d 9 returned -16 [ 947.620645][T22525] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3074'. [ 948.620848][T21721] Bluetooth: hci4: command 0x0c1a tx timeout [ 948.760957][T21721] Bluetooth: hci6: command 0x0c1a tx timeout [ 950.677510][T21721] Bluetooth: hci4: command 0x0c1a tx timeout [ 951.519705][T22582] FAULT_INJECTION: forcing a failure. [ 951.519705][T22582] name failslab, interval 1, probability 0, space 0, times 0 [ 951.587812][T22582] CPU: 1 UID: 0 PID: 22582 Comm: syz.7.3088 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 951.587878][T22582] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 951.587901][T22582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 951.587919][T22582] Call Trace: [ 951.587929][T22582] [ 951.587941][T22582] dump_stack_lvl+0x100/0x190 [ 951.587982][T22582] should_fail_ex.cold+0x5/0xa [ 951.588031][T22582] should_failslab+0xc2/0x120 [ 951.588072][T22582] kmem_cache_alloc_noprof+0x83/0x780 [ 951.588111][T22582] ? copy_pid_ns+0x32b/0x1090 [ 951.588152][T22582] ? copy_pid_ns+0x32b/0x1090 [ 951.588185][T22582] copy_pid_ns+0x32b/0x1090 [ 951.588220][T22582] ? __memcg_slab_post_alloc_hook+0x473/0x880 [ 951.588264][T22582] ? __pfx_copy_pid_ns+0x10/0x10 [ 951.588305][T22582] ? copy_mnt_ns+0x10b/0xc40 [ 951.588341][T22582] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 951.588378][T22582] ? create_new_namespaces+0x30/0xab0 [ 951.588418][T22582] create_new_namespaces+0x2aa/0xab0 [ 951.588457][T22582] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 951.588492][T22582] ksys_unshare+0x455/0xab0 [ 951.588535][T22582] ? __pfx_ksys_unshare+0x10/0x10 [ 951.588577][T22582] ? xfd_validate_state+0x129/0x190 [ 951.588633][T22582] __x64_sys_unshare+0x31/0x40 [ 951.588671][T22582] do_syscall_64+0xc9/0xf80 [ 951.588706][T22582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.588735][T22582] RIP: 0033:0x7fb94239aeb9 [ 951.588760][T22582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.588790][T22582] RSP: 002b:00007fb943229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 951.588819][T22582] RAX: ffffffffffffffda RBX: 00007fb942616180 RCX: 00007fb94239aeb9 [ 951.588839][T22582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 951.588858][T22582] RBP: 00007fb942408c1f R08: 0000000000000000 R09: 0000000000000000 [ 951.588877][T22582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.588902][T22582] R13: 00007fb942616218 R14: 00007fb942616180 R15: 00007ffff4536388 [ 951.588943][T22582] [ 952.194873][T22594] netlink: 266 bytes leftover after parsing attributes in process `syz.7.3091'. [ 952.263885][T22594] IPv6: NLM_F_CREATE should be specified when creating new route [ 952.695581][T22601] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3093'. [ 953.226442][T22606] random: crng reseeded on system resumption [ 955.342122][T22643] usb usb36: usbfs: process 22643 (syz.8.3103) did not claim interface 0 before use [ 956.316666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bd15c00: rx timeout, send abort [ 956.325136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bd15c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 957.535413][T22674] zero sized request [ 958.741772][T22698] FAULT_INJECTION: forcing a failure. [ 958.741772][T22698] name fail_futex, interval 1, probability 0, space 0, times 0 [ 958.755627][T22698] CPU: 1 UID: 0 PID: 22698 Comm: syz.0.3113 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 958.755683][T22698] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 958.755698][T22698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 958.755714][T22698] Call Trace: [ 958.755723][T22698] [ 958.755734][T22698] dump_stack_lvl+0x100/0x190 [ 958.755772][T22698] should_fail_ex.cold+0x5/0xa [ 958.755818][T22698] get_futex_key+0x106f/0x1620 [ 958.755857][T22698] ? __pfx_get_futex_key+0x10/0x10 [ 958.755905][T22698] futex_wake+0xea/0x530 [ 958.755950][T22698] ? __pfx_futex_wake+0x10/0x10 [ 958.756000][T22698] ? exit_mm_release+0x19/0x30 [ 958.756048][T22698] do_futex+0x32b/0x350 [ 958.756084][T22698] ? __pfx_do_futex+0x10/0x10 [ 958.756116][T22698] ? __might_fault+0xc5/0x140 [ 958.756139][T22698] mm_release+0x24a/0x2f0 [ 958.756157][T22698] do_exit+0x675/0x2a30 [ 958.756182][T22698] ? __pfx_do_exit+0x10/0x10 [ 958.756214][T22698] ? do_raw_spin_lock+0x128/0x260 [ 958.756237][T22698] ? find_held_lock+0x2b/0x80 [ 958.756251][T22698] ? get_signal+0x7e0/0x21e0 [ 958.756270][T22698] do_group_exit+0xd5/0x2a0 [ 958.756294][T22698] get_signal+0x1ec7/0x21e0 [ 958.756324][T22698] ? __pfx_get_signal+0x10/0x10 [ 958.756356][T22698] ? do_futex+0x192/0x350 [ 958.756394][T22698] arch_do_signal_or_restart+0x91/0x770 [ 958.756421][T22698] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 958.756447][T22698] ? __pfx___x64_sys_futex+0x10/0x10 [ 958.756467][T22698] ? xfd_validate_state+0x129/0x190 [ 958.756494][T22698] exit_to_user_mode_loop+0x86/0x4b0 [ 958.756515][T22698] ? rcu_is_watching+0x12/0xc0 [ 958.756531][T22698] do_syscall_64+0x4ea/0xf80 [ 958.756551][T22698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.756567][T22698] RIP: 0033:0x7f13b4d9aeb9 [ 958.756580][T22698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.756602][T22698] RSP: 002b:00007f13b5bf20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 958.756617][T22698] RAX: fffffffffffffe00 RBX: 00007f13b5016278 RCX: 00007f13b4d9aeb9 [ 958.756627][T22698] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13b5016278 [ 958.756637][T22698] RBP: 00007f13b5016270 R08: 0000000000000000 R09: 0000000000000000 [ 958.756646][T22698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.756655][T22698] R13: 00007f13b5016308 R14: 00007fff22f80900 R15: 00007fff22f809e8 [ 958.756674][T22698] [ 960.479854][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 961.393311][T22761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3126'. [ 961.429422][T22763] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3127'. [ 962.160505][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 962.747135][T22781] random: crng reseeded on system resumption [ 963.256059][T22794] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3134: iget: checksum invalid [ 963.296163][T22794] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 963.339656][T22794] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3134: iget: checksum invalid [ 963.371382][T22794] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 963.414415][T22794] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3134: iget: checksum invalid [ 963.479008][T22794] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 963.501403][T22794] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.3134: iget: checksum invalid [ 963.518423][T22794] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 963.528407][T22794] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 963.551315][T22794] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 965.576712][T22836] __vm_enough_memory: pid: 22836, comm: syz.0.3145, bytes: 4398046511104 not enough memory for the allocation [ 965.771698][T22836] FAULT_INJECTION: forcing a failure. [ 965.771698][T22836] name failslab, interval 1, probability 0, space 0, times 0 [ 965.847706][T22836] CPU: 1 UID: 0 PID: 22836 Comm: syz.0.3145 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 965.847769][T22836] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 965.847787][T22836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 965.847805][T22836] Call Trace: [ 965.847815][T22836] [ 965.847826][T22836] dump_stack_lvl+0x100/0x190 [ 965.847867][T22836] should_fail_ex.cold+0x5/0xa [ 965.847915][T22836] should_failslab+0xc2/0x120 [ 965.847958][T22836] __kmalloc_cache_noprof+0x80/0x810 [ 965.847988][T22836] ? fput+0x79/0x100 [ 965.848026][T22836] ? do_epoll_create+0x62/0x4b0 [ 965.848065][T22836] ? do_epoll_create+0x62/0x4b0 [ 965.848098][T22836] do_epoll_create+0x62/0x4b0 [ 965.848133][T22836] __x64_sys_epoll_create+0x45/0x70 [ 965.848168][T22836] do_syscall_64+0xc9/0xf80 [ 965.848205][T22836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.848235][T22836] RIP: 0033:0x7f13b4d9aeb9 [ 965.848256][T22836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.848284][T22836] RSP: 002b:00007f13b5c34028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 965.848299][T22836] RAX: ffffffffffffffda RBX: 00007f13b5016090 RCX: 00007f13b4d9aeb9 [ 965.848309][T22836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 965.848320][T22836] RBP: 00007f13b4e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 965.848330][T22836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.848340][T22836] R13: 00007f13b5016128 R14: 00007f13b5016090 R15: 00007fff22f809e8 [ 965.848362][T22836] [ 966.116403][ T6911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 966.131856][ T6911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 966.142586][ T6911] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 966.152770][ T6911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 966.161666][ T6911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 966.967468][T22842] chnl_net:caif_netlink_parms(): no params data found [ 967.131382][T22855] openvswitch: netlink: Key type 49 is out of range max 32 [ 967.196427][T22859] netlink: 330 bytes leftover after parsing attributes in process `syz.8.3150'. [ 967.209915][T22859] netlink: 'syz.8.3150': attribute type 4 has an invalid length. [ 967.394635][T22851] Process accounting paused [ 967.494772][T22842] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.514952][T22842] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.528718][T22842] bridge_slave_0: entered allmulticast mode [ 967.538345][T22842] bridge_slave_0: entered promiscuous mode [ 967.551789][T22842] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.663360][T22842] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.690175][T22842] bridge_slave_1: entered allmulticast mode [ 967.712405][T22842] bridge_slave_1: entered promiscuous mode [ 967.922882][T22842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.984860][T22842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.148858][T22842] team0: Port device team_slave_0 added [ 968.171945][T22842] team0: Port device team_slave_1 added [ 968.198320][ T6911] Bluetooth: hci7: command tx timeout [ 968.278743][T22842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.304925][T22842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.427309][T22842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.454695][T22842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.470560][T22842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.536180][T22842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.718855][T22842] hsr_slave_0: entered promiscuous mode [ 968.746203][T22842] hsr_slave_1: entered promiscuous mode [ 968.772928][T22878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 968.778255][T22842] debugfs: 'hsr0' already exists in 'hsr' [ 968.803867][T22842] Cannot create hsr debugfs directory [ 969.588813][T22886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.277597][ T6911] Bluetooth: hci7: command tx timeout [ 970.320881][T22908] bridge0: port 3(netdevsim1) entered blocking state [ 970.336636][T22908] bridge0: port 3(netdevsim1) entered disabled state [ 970.344189][T22908] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 970.363279][T22908] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 970.371112][T22908] bridge0: port 3(netdevsim1) entered blocking state [ 970.377899][T22908] bridge0: port 3(netdevsim1) entered forwarding state [ 970.453153][T22842] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 970.478900][T22842] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 970.500011][T22842] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 970.523872][T22842] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 970.726396][T22842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.797905][T22842] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.033511][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.040680][ T7495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.116810][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.123992][ T7495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.785801][T22842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.888773][T22933] random: crng reseeded on system resumption [ 972.357579][ T6911] Bluetooth: hci7: command tx timeout [ 972.915494][T22842] veth0_vlan: entered promiscuous mode [ 972.952714][T22842] veth1_vlan: entered promiscuous mode [ 973.124721][T22963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 973.133604][T22963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 973.154758][T22963] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 973.176435][T22963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 973.184028][T22963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 973.194193][T22963] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 973.201783][T22963] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 973.208364][T22963] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 973.225183][T22963] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 973.233084][T22963] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 973.335522][T22978] FAULT_INJECTION: forcing a failure. [ 973.335522][T22978] name fail_futex, interval 1, probability 0, space 0, times 0 [ 973.338690][T22842] veth0_macvtap: entered promiscuous mode [ 973.354862][T22978] CPU: 0 UID: 0 PID: 22978 Comm: syz.0.3170 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 973.354894][T22978] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 973.354905][T22978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 973.354916][T22978] Call Trace: [ 973.354921][T22978] [ 973.354927][T22978] dump_stack_lvl+0x100/0x190 [ 973.354949][T22978] should_fail_ex.cold+0x5/0xa [ 973.354981][T22978] get_futex_key+0x1d2/0x1620 [ 973.355002][T22978] ? __pfx_get_futex_key+0x10/0x10 [ 973.355027][T22978] futex_wait_setup+0x81/0x500 [ 973.355046][T22978] __futex_wait+0x19f/0x300 [ 973.355061][T22978] ? __pfx___futex_wait+0x10/0x10 [ 973.355085][T22978] ? __pfx_futex_wake_mark+0x10/0x10 [ 973.355129][T22978] ? __hrtimer_setup+0x178/0x280 [ 973.355170][T22978] ? ktime_add_safe+0x60/0x70 [ 973.355195][T22978] futex_wait+0xed/0x380 [ 973.355209][T22978] ? __pfx_futex_wait+0x10/0x10 [ 973.355222][T22978] ? __lock_acquire+0x4a5/0x2630 [ 973.355244][T22978] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 973.355272][T22978] do_futex+0x1ef/0x350 [ 973.355292][T22978] ? __pfx_do_futex+0x10/0x10 [ 973.355311][T22978] ? rcu_is_watching+0x12/0xc0 [ 973.355325][T22978] ? ktime_get+0x200/0x300 [ 973.355342][T22978] ? lockdep_hardirqs_on+0x78/0x100 [ 973.355360][T22978] ? read_tsc+0x9/0x20 [ 973.355381][T22978] __x64_sys_futex+0x34f/0x4d0 [ 973.355404][T22978] ? __pfx___x64_sys_futex+0x10/0x10 [ 973.355424][T22978] ? xfd_validate_state+0x129/0x190 [ 973.355458][T22978] do_syscall_64+0xc9/0xf80 [ 973.355477][T22978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.355493][T22978] RIP: 0033:0x7f13b4d9aeb9 [ 973.355506][T22978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.355520][T22978] RSP: 002b:00007fff22f80b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 973.355535][T22978] RAX: ffffffffffffffda RBX: 00000000000ed948 RCX: 00007f13b4d9aeb9 [ 973.355545][T22978] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13b5015fac [ 973.355554][T22978] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 973.355563][T22978] R10: 00007fff22f80c50 R11: 0000000000000246 R12: 00007fff22f80c70 [ 973.355572][T22978] R13: 00007f13b5015fac R14: 00000000000ed97a R15: 00007fff22f80c50 [ 973.355591][T22978] [ 973.595389][T22842] veth1_macvtap: entered promiscuous mode [ 973.931117][T22842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.980145][T22842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.101630][ T7492] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.135582][T22993] __vm_enough_memory: pid: 22993, comm: syz.7.3172, bytes: 4398046511104 not enough memory for the allocation [ 974.154667][ T7492] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.184748][ T7492] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.377951][ T7492] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.599449][ T6911] Bluetooth: hci1: command 0x0c1a tx timeout [ 975.064053][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.099415][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.161367][ T6911] Bluetooth: hci5: command 0x0406 tx timeout [ 975.167505][T21721] Bluetooth: hci3: command 0x0c1a tx timeout [ 975.239635][ T6911] Bluetooth: hci7: command 0x0c1a tx timeout [ 975.245693][T21721] Bluetooth: hci6: command 0x0c1a tx timeout [ 975.251791][T16546] Bluetooth: hci4: command 0x0c1a tx timeout [ 975.260972][T16546] Bluetooth: hci2: command 0x0c1a tx timeout [ 975.267398][T21721] Bluetooth: hci0: command 0x0406 tx timeout [ 975.511376][T10675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.540142][T10675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.106802][T23025] bridge0: port 4(team0) entered blocking state [ 976.140214][T23025] bridge0: port 4(team0) entered disabled state [ 976.151080][T23025] team0: entered allmulticast mode [ 976.156241][T23025] team_slave_0: entered allmulticast mode [ 976.162156][T23025] team_slave_1: entered allmulticast mode [ 976.176452][T23025] team0: entered promiscuous mode [ 976.187838][T23025] team_slave_0: entered promiscuous mode [ 976.231836][T23025] team_slave_1: entered promiscuous mode [ 976.242149][T23025] bridge0: port 4(team0) entered blocking state [ 976.248555][T23025] bridge0: port 4(team0) entered forwarding state [ 977.317598][T23017] Bluetooth: hci7: command 0x0c1a tx timeout [ 977.673750][T23062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3184'. [ 977.818728][T23062] ipvlan0: entered promiscuous mode [ 977.986109][T23062] ipvlan0: entered allmulticast mode [ 977.991868][T23062] veth0_vlan: entered allmulticast mode [ 978.703753][T23073] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 979.397903][T23017] Bluetooth: hci7: command 0x0c1a tx timeout [ 979.424396][T23081] warning: `syz.8.3188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 980.193507][T23106] __vm_enough_memory: pid: 23106, comm: syz.9.3192, bytes: 4398046511104 not enough memory for the allocation [ 981.082049][T23114] random: crng reseeded on system resumption [ 981.315936][T23120] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3195'. [ 981.384993][T23120] ipvlan0: entered promiscuous mode [ 981.404737][T23120] ipvlan0: entered allmulticast mode [ 981.410262][T23120] veth0_vlan: entered allmulticast mode [ 984.056265][T23166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 984.226029][T23166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 984.292649][T23166] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 984.317510][T23166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 984.477400][T23166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 984.498766][T23166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 984.512017][T23166] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 984.546207][T23166] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 985.977448][T23184] random: crng reseeded on system resumption [ 986.130077][T23017] Bluetooth: hci1: command 0x0c1a tx timeout [ 986.277524][T23017] Bluetooth: hci5: command 0x0406 tx timeout [ 986.287590][T21929] Bluetooth: hci3: command 0x0c1a tx timeout [ 986.299921][ T2154] Process accounting resumed [ 986.357305][T21929] Bluetooth: hci0: command 0x0406 tx timeout [ 986.521014][T21929] Bluetooth: hci6: command 0x0c1a tx timeout [ 986.528712][T23017] Bluetooth: hci4: command 0x0c1a tx timeout [ 986.536823][T21721] Bluetooth: hci2: command 0x0c1a tx timeout [ 986.597533][T23017] Bluetooth: hci7: command 0x0c1a tx timeout [ 987.740934][T23203] zswap: compressor not available [ 988.049464][T23200] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 988.342929][T23211] FAULT_INJECTION: forcing a failure. [ 988.342929][T23211] name failslab, interval 1, probability 0, space 0, times 0 [ 988.357063][T23211] CPU: 0 UID: 0 PID: 23211 Comm: syz.7.3212 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 988.357125][T23211] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 988.357142][T23211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 988.357164][T23211] Call Trace: [ 988.357172][T23211] [ 988.357183][T23211] dump_stack_lvl+0x100/0x190 [ 988.357224][T23211] should_fail_ex.cold+0x5/0xa [ 988.357272][T23211] should_failslab+0xc2/0x120 [ 988.357311][T23211] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 988.357348][T23211] ? dquot_alloc_inode+0x51b/0xb10 [ 988.357388][T23211] ? __d_alloc+0x34/0xa80 [ 988.357427][T23211] ? __d_alloc+0x34/0xa80 [ 988.357458][T23211] __d_alloc+0x34/0xa80 [ 988.357496][T23211] d_alloc_pseudo+0x1c/0xc0 [ 988.357541][T23211] alloc_file_pseudo+0xcf/0x230 [ 988.357584][T23211] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 988.357637][T23211] __shmem_file_setup+0x1a3/0x330 [ 988.357678][T23211] shmem_zero_setup+0x93/0x1b0 [ 988.357718][T23211] __mmap_region+0x2101/0x2820 [ 988.357756][T23211] ? __pfx___mmap_region+0x10/0x10 [ 988.357818][T23211] ? finish_task_switch.isra.0+0x204/0xb70 [ 988.357849][T23211] ? lockdep_hardirqs_on+0x78/0x100 [ 988.357882][T23211] ? finish_task_switch.isra.0+0x204/0xb70 [ 988.357973][T23211] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 988.358022][T23211] ? rcu_is_watching+0x12/0xc0 [ 988.358059][T23211] mmap_region+0x180/0x3e0 [ 988.358101][T23211] do_mmap+0xc63/0x12f0 [ 988.358159][T23211] ? __pfx_do_mmap+0x10/0x10 [ 988.358203][T23211] ? __pfx_down_write_killable+0x10/0x10 [ 988.358253][T23211] vm_mmap_pgoff+0x29e/0x470 [ 988.358303][T23211] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 988.358354][T23211] ? __x64_sys_futex+0x34f/0x4d0 [ 988.358391][T23211] ? __x64_sys_futex+0x358/0x4d0 [ 988.358434][T23211] ksys_mmap_pgoff+0x7d/0x5b0 [ 988.358481][T23211] __x64_sys_mmap+0x125/0x190 [ 988.358514][T23211] do_syscall_64+0xc9/0xf80 [ 988.358553][T23211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.358583][T23211] RIP: 0033:0x7fb94239aeb9 [ 988.358607][T23211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.358635][T23211] RSP: 002b:00007fb94326b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 988.358677][T23211] RAX: ffffffffffffffda RBX: 00007fb942615fa0 RCX: 00007fb94239aeb9 [ 988.358697][T23211] RDX: 00000000000000df RSI: 0000000000008000 RDI: 0000000000000000 [ 988.358715][T23211] RBP: 00007fb942408c1f R08: 0000000000000401 R09: 0000000000008000 [ 988.358733][T23211] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 988.358751][T23211] R13: 00007fb942616038 R14: 00007fb942615fa0 R15: 00007ffff4536388 [ 988.358791][T23211] [ 988.376033][T23212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.593389][T23211] zswap: compressor not available [ 988.854227][T23218] Invalid ELF header magic: != ELF [ 989.165495][T23232] FAULT_INJECTION: forcing a failure. [ 989.165495][T23232] name failslab, interval 1, probability 0, space 0, times 0 [ 989.306537][T23232] CPU: 0 UID: 0 PID: 23232 Comm: syz.7.3218 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 989.306598][T23232] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 989.306614][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 989.306631][T23232] Call Trace: [ 989.306640][T23232] [ 989.306651][T23232] dump_stack_lvl+0x100/0x190 [ 989.306690][T23232] should_fail_ex.cold+0x5/0xa [ 989.306735][T23232] should_failslab+0xc2/0x120 [ 989.306775][T23232] kmem_cache_alloc_noprof+0x83/0x780 [ 989.306813][T23232] ? getname_flags.part.0+0x4c/0x540 [ 989.306861][T23232] ? getname_flags.part.0+0x4c/0x540 [ 989.306900][T23232] getname_flags.part.0+0x4c/0x540 [ 989.306945][T23232] getname_flags+0x93/0xf0 [ 989.306975][T23232] do_sys_openat2+0xc5/0x220 [ 989.307016][T23232] ? __pfx_do_sys_openat2+0x10/0x10 [ 989.307069][T23232] __x64_sys_openat+0x12d/0x210 [ 989.307109][T23232] ? __pfx___x64_sys_openat+0x10/0x10 [ 989.307151][T23232] ? xfd_validate_state+0x129/0x190 [ 989.307203][T23232] do_syscall_64+0xc9/0xf80 [ 989.307245][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.307272][T23232] RIP: 0033:0x7fb94239aeb9 [ 989.307293][T23232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.307319][T23232] RSP: 002b:00007fb94326b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 989.307348][T23232] RAX: ffffffffffffffda RBX: 00007fb942615fa0 RCX: 00007fb94239aeb9 [ 989.307367][T23232] RDX: 0000000000000800 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 989.307385][T23232] RBP: 00007fb942408c1f R08: 0000000000000000 R09: 0000000000000000 [ 989.307402][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.307419][T23232] R13: 00007fb942616038 R14: 00007fb942615fa0 R15: 00007ffff4536388 [ 989.307456][T23232] [ 990.386214][T23270] sp0: Synchronizing with TNC [ 990.576675][T23268] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3222'. [ 990.596938][T23268] vlan1: entered promiscuous mode [ 990.621013][T23268] vlan1: entered allmulticast mode [ 991.024788][T21721] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 991.048171][T21721] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 991.058007][T21721] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 991.066374][T21721] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 991.075143][T21721] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 991.414717][T23279] chnl_net:caif_netlink_parms(): no params data found [ 991.676231][T23279] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.687515][T23279] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.694774][T23279] bridge_slave_0: entered allmulticast mode [ 991.702662][T23279] bridge_slave_0: entered promiscuous mode [ 991.712089][T23279] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.719624][T23279] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.727103][T23279] bridge_slave_1: entered allmulticast mode [ 991.734906][T23279] bridge_slave_1: entered promiscuous mode [ 991.774518][T23279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.787469][T23279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.015478][T23279] team0: Port device team_slave_0 added [ 992.030605][T23279] team0: Port device team_slave_1 added [ 992.076581][T23279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.097216][T23279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.237442][T23279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.318079][T23279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.325089][T23279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.377216][T23279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.458721][T23279] hsr_slave_0: entered promiscuous mode [ 992.465419][T23279] hsr_slave_1: entered promiscuous mode [ 992.488297][T23279] debugfs: 'hsr0' already exists in 'hsr' [ 992.497246][T23279] Cannot create hsr debugfs directory [ 992.821735][T23311] netlink: 115 bytes leftover after parsing attributes in process `syz.8.3237'. [ 993.165053][T21721] Bluetooth: hci8: command tx timeout [ 993.221453][T23319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 993.359697][T23319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 993.455792][T23319] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 993.577527][T23319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 993.667388][T23319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 993.678833][T23319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 993.694219][T23319] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 993.755900][T23319] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 993.827309][T23319] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 993.847130][T23319] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 994.105348][T23279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 994.119644][T23319] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 994.143977][T23279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 994.184873][T23279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 994.220554][T23279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 994.432691][T23279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.538907][T23279] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.684713][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.691923][ T7051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.712883][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3233'. [ 994.744101][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.751245][ T7051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.238925][T21721] Bluetooth: hci1: command 0x0c1a tx timeout [ 995.256847][T23279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.343031][T23279] veth0_vlan: entered promiscuous mode [ 995.371906][T23279] veth1_vlan: entered promiscuous mode [ 995.399057][T21721] Bluetooth: hci3: command 0x0c1a tx timeout [ 995.469637][T23279] veth0_macvtap: entered promiscuous mode [ 995.480850][T21721] Bluetooth: hci5: command 0x0406 tx timeout [ 995.530581][T23279] veth1_macvtap: entered promiscuous mode [ 995.601791][T23279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.641802][T21721] Bluetooth: hci0: command 0x0406 tx timeout [ 995.651653][T23279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.693770][ T7051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.719000][T21721] Bluetooth: hci6: command 0x0c1a tx timeout [ 995.725122][T23017] Bluetooth: hci4: command 0x0c1a tx timeout [ 995.731523][T21929] Bluetooth: hci2: command 0x0c1a tx timeout [ 995.767803][ T7051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.776548][ T7051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.803057][T23017] Bluetooth: hci7: command 0x0c1a tx timeout [ 995.881898][T23017] Bluetooth: hci8: command 0x040f tx timeout [ 995.908870][ T7051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.154449][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.186807][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.274246][ T7492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.295537][ T7492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.776155][T23394] random: crng reseeded on system resumption [ 997.596023][T23392] Process accounting resumed [ 997.805149][T23442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 997.957615][T23017] Bluetooth: hci8: command 0x040f tx timeout [ 998.307723][T23449] zswap: compressor not available [ 998.313427][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.327593][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.001939][T23490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 999.071903][T23490] ipvlan0: entered promiscuous mode [ 999.077348][T23490] ipvlan0: entered allmulticast mode [ 999.083935][T23490] veth0_vlan: entered allmulticast mode [ 999.113800][T21721] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 999.152091][T21721] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 999.164359][T21721] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 999.174600][T21721] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 999.187408][T21721] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1000.040544][T21721] Bluetooth: hci8: command 0x040f tx timeout [ 1000.164443][T23494] chnl_net:caif_netlink_parms(): no params data found [ 1001.094047][T23494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.126088][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.158339][T23494] bridge_slave_0: entered allmulticast mode [ 1001.198349][T23494] bridge_slave_0: entered promiscuous mode [ 1001.241008][T21721] Bluetooth: hci9: command tx timeout [ 1001.345161][T23494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.357470][T23494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.364776][T23494] bridge_slave_1: entered allmulticast mode [ 1001.415531][T23494] bridge_slave_1: entered promiscuous mode [ 1001.539022][T23494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.608633][T23541] futex_wake_op: syz.8.3252 tries to shift op by -2048; fix this program [ 1001.647466][T23541] futex_wake_op: syz.8.3252 tries to shift op by -2048; fix this program [ 1001.671652][T23494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.677793][T23541] ubi1: attaching mtd0 [ 1001.701424][T23541] ubi1: scanning is finished [ 1001.706083][T23541] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 1001.799557][T23541] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1001.815287][T23494] team0: Port device team_slave_0 added [ 1001.865813][T23494] team0: Port device team_slave_1 added [ 1001.961279][T23537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.967467][T23537] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1001.983039][T23537] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1001.995310][T23494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.004158][T23537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1002.004284][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.010891][T23494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.086744][T23494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.105078][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.136096][T23017] Bluetooth: hci8: command 0x040f tx timeout [ 1002.144544][T23494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.149989][T23537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1002.178395][T23537] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1002.220028][T23537] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1002.231284][T23537] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1002.267975][T23537] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1002.296758][T23494] hsr_slave_0: entered promiscuous mode [ 1002.303276][T23494] hsr_slave_1: entered promiscuous mode [ 1002.313827][T23494] debugfs: 'hsr0' already exists in 'hsr' [ 1002.319471][T23537] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1002.325618][T23494] Cannot create hsr debugfs directory [ 1002.337451][T23537] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1002.380945][T23537] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1002.691072][T23564] Invalid ELF header magic: != ELF [ 1004.039383][T23017] Bluetooth: hci0: command 0x0406 tx timeout [ 1004.045642][T23017] Bluetooth: hci5: command 0x0406 tx timeout [ 1004.053771][T21721] Bluetooth: hci3: command 0x0c1a tx timeout [ 1004.060763][T21929] Bluetooth: hci1: command 0x0c1a tx timeout [ 1004.197452][T21721] Bluetooth: hci4: command 0x0c1a tx timeout [ 1004.204123][T21721] Bluetooth: hci2: command 0x0c1a tx timeout [ 1004.277391][T21721] Bluetooth: hci8: command 0x040f tx timeout [ 1004.283570][T23017] Bluetooth: hci7: command 0x0c1a tx timeout [ 1004.289792][T23017] Bluetooth: hci6: command 0x0c1a tx timeout [ 1004.360788][T21721] Bluetooth: hci9: command 0x040f tx timeout [ 1004.464505][T23494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1004.580095][T23494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1004.611034][T23494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1004.686756][T23494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1004.969614][T23494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.012125][T23494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.053453][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.060591][ T7057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.098611][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.105748][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.867011][T23494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.023484][T23651] Invalid ELF header magic: != ELF [ 1006.055415][T23494] veth0_vlan: entered promiscuous mode [ 1006.097656][T23494] veth1_vlan: entered promiscuous mode [ 1006.232859][T23494] veth0_macvtap: entered promiscuous mode [ 1006.312764][T23494] veth1_macvtap: entered promiscuous mode [ 1006.376943][T23494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.411218][T23494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.440235][T21721] Bluetooth: hci9: command 0x040f tx timeout [ 1006.473629][ T7492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.496400][ T7492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.513950][ T7492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.533905][T23651] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input54 [ 1006.541108][ T7492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.572199][T23651] FAULT_INJECTION: forcing a failure. [ 1006.572199][T23651] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.608695][T23651] CPU: 1 UID: 0 PID: 23651 Comm: syz.8.3264 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1006.608757][T23651] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1006.608773][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1006.608790][T23651] Call Trace: [ 1006.608799][T23651] [ 1006.608811][T23651] dump_stack_lvl+0x100/0x190 [ 1006.608848][T23651] should_fail_ex.cold+0x5/0xa [ 1006.608896][T23651] should_failslab+0xc2/0x120 [ 1006.608935][T23651] kmem_cache_alloc_noprof+0x83/0x780 [ 1006.608974][T23651] ? __kernfs_new_node+0xd2/0x960 [ 1006.609021][T23651] ? __kernfs_new_node+0xd2/0x960 [ 1006.609055][T23651] __kernfs_new_node+0xd2/0x960 [ 1006.609099][T23651] ? __pfx___kernfs_new_node+0x10/0x10 [ 1006.609147][T23651] ? find_held_lock+0x2b/0x80 [ 1006.609175][T23651] ? kernfs_root+0xee/0x2a0 [ 1006.609210][T23651] ? kernfs_root+0xee/0x2a0 [ 1006.609254][T23651] kernfs_new_node+0x11b/0x1a0 [ 1006.609303][T23651] __kernfs_create_file+0x53/0x350 [ 1006.609339][T23651] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1006.609386][T23651] sysfs_merge_group+0x194/0x340 [ 1006.609429][T23651] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1006.609474][T23651] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1006.609514][T23651] ? bus_to_subsys+0x114/0x150 [ 1006.609561][T23651] dpm_sysfs_add+0x237/0x280 [ 1006.609600][T23651] device_add+0x9ef/0x1950 [ 1006.609644][T23651] ? __pfx_device_add+0x10/0x10 [ 1006.609704][T23651] ? kobject_get+0xbb/0x150 [ 1006.609745][T23651] cdev_device_add+0x12b/0x270 [ 1006.609792][T23651] evdev_connect+0x3a8/0x4b0 [ 1006.609835][T23651] input_attach_handler.isra.0+0x177/0x1e0 [ 1006.609875][T23651] input_register_device.cold+0x139/0x375 [ 1006.609928][T23651] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 1006.609976][T23651] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1006.610022][T23651] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1006.610077][T23651] ? find_held_lock+0x2b/0x80 [ 1006.610105][T23651] ? hook_file_ioctl_common+0x146/0x410 [ 1006.610164][T23651] ? __pfx_uinput_ioctl+0x10/0x10 [ 1006.610210][T23651] __x64_sys_ioctl+0x18e/0x210 [ 1006.610255][T23651] do_syscall_64+0xc9/0xf80 [ 1006.610292][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.610322][T23651] RIP: 0033:0x7f11f6f9aeb9 [ 1006.610344][T23651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.610372][T23651] RSP: 002b:00007f11f7e11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.610400][T23651] RAX: ffffffffffffffda RBX: 00007f11f7215fa0 RCX: 00007f11f6f9aeb9 [ 1006.610418][T23651] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 1006.610433][T23651] RBP: 00007f11f7008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1006.610451][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.610469][T23651] R13: 00007f11f7216038 R14: 00007f11f7215fa0 R15: 00007fff550e5018 [ 1006.610507][T23651] [ 1006.931883][T23651] input: failed to attach handler evdev to device input54, error: -12 [ 1007.111767][ T30] audit: type=1800 audit(1130797340.350:125): pid=23671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3266" name="lu_gp_id" dev="configfs" ino=110843 res=0 errno=0 [ 1007.593732][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.624902][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.984118][T10676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.015335][T10676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.526697][T21721] Bluetooth: hci9: command 0x040f tx timeout [ 1009.561207][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808cbf3000: rx timeout, send abort [ 1009.569672][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88808cbf3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1010.361138][T23724] random: crng reseeded on system resumption [ 1010.597406][T21721] Bluetooth: hci9: command 0x040f tx timeout [ 1011.545585][T23762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 1012.678153][T21721] Bluetooth: hci9: command 0x040f tx timeout [ 1013.245101][T23804] zswap: compressor not available [ 1014.878433][T23872] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3284'. [ 1015.101052][T23874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1017.027377][T23922] input: f as /devices/virtual/input/input55 [ 1018.182174][T23017] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1018.196579][T23017] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1018.205270][T23017] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1018.213717][T23017] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1018.225816][T23017] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1018.242113][T23950] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3295'. [ 1019.339035][T23943] chnl_net:caif_netlink_parms(): no params data found [ 1019.729722][T23943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.739050][T23943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.746338][T23943] bridge_slave_0: entered allmulticast mode [ 1019.773849][T23943] bridge_slave_0: entered promiscuous mode [ 1019.798580][T23943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.826537][T23943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.851794][T23943] bridge_slave_1: entered allmulticast mode [ 1019.885138][T23943] bridge_slave_1: entered promiscuous mode [ 1020.056336][T23943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.079421][T23943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.161581][T23994] random: crng reseeded on system resumption [ 1020.165206][T23943] team0: Port device team_slave_0 added [ 1020.185620][T23943] team0: Port device team_slave_1 added [ 1020.308343][T23943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.347331][T23943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.359347][T23017] Bluetooth: hci10: command tx timeout [ 1020.449887][T23943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.501210][T23943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.537734][T23943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.601935][T23943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.682152][T23943] hsr_slave_0: entered promiscuous mode [ 1020.690246][T23943] hsr_slave_1: entered promiscuous mode [ 1020.696317][T23943] debugfs: 'hsr0' already exists in 'hsr' [ 1020.702900][T23943] Cannot create hsr debugfs directory [ 1021.225673][T23943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1021.229379][T23017] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1021.276779][T23943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1021.358723][T23943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1021.412223][T23943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1021.599761][T24023] random: crng reseeded on system resumption [ 1021.670355][T23943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.724442][T23943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.786875][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.794086][T10676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.906919][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.914058][ T7060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.059942][T24036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3303: iget: checksum invalid [ 1022.090225][T24036] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1022.128980][T24036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3303: iget: checksum invalid [ 1022.146139][T23943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1022.165680][T24036] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1022.186346][T24036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3303: iget: checksum invalid [ 1022.213469][T24036] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1022.226522][T24036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3303: iget: checksum invalid [ 1022.237862][T24036] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1022.249370][T24036] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1022.259172][T24036] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1022.437538][T23017] Bluetooth: hci10: command tx timeout [ 1022.748178][T23943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.914770][T24064] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1023.107776][T24069] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3305'. [ 1023.977651][T23943] veth0_vlan: entered promiscuous mode [ 1024.030698][T23943] veth1_vlan: entered promiscuous mode [ 1024.142093][T23943] veth0_macvtap: entered promiscuous mode [ 1024.204044][T23943] veth1_macvtap: entered promiscuous mode [ 1024.226238][T24094] netlink: 'syz.8.3307': attribute type 33 has an invalid length. [ 1024.234253][T24094] netlink: 322 bytes leftover after parsing attributes in process `syz.8.3307'. [ 1024.409422][T23943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.443868][T23943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.496537][ T7057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.519033][T23017] Bluetooth: hci10: command tx timeout [ 1024.533647][ T7057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.581285][ T7057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.590908][ T7057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.987474][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.995432][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.141727][T24113] input: f as /devices/virtual/input/input56 [ 1025.179562][ T7495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.193153][ T7495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.314743][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1026.597251][T23017] Bluetooth: hci10: command tx timeout [ 1028.534535][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804230b400: rx timeout, send abort [ 1028.542905][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804230b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1029.371590][T24178] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 1029.520452][T24176] zswap: compressor not available [ 1030.057453][T24196] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1030.478428][T24197] random: crng reseeded on system resumption [ 1030.836598][T24199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 1033.120116][T24252] Invalid ELF header magic: != ELF [ 1034.748592][T21721] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1034.781491][T21721] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1034.790096][T21721] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1034.800704][T21721] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1034.812185][T21721] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1035.723032][T24298] zswap: compressor not available [ 1036.371460][T24286] chnl_net:caif_netlink_parms(): no params data found [ 1036.882235][T24286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.902167][T24286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.910214][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880af5f3c00: rx timeout, send abort [ 1036.919327][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880af5f3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1036.927587][T21721] Bluetooth: hci11: command tx timeout [ 1036.948911][T24286] bridge_slave_0: entered allmulticast mode [ 1036.968827][T24286] bridge_slave_0: entered promiscuous mode [ 1036.989236][T24286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.999067][T24286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.006332][T24286] bridge_slave_1: entered allmulticast mode [ 1037.029097][T24286] bridge_slave_1: entered promiscuous mode [ 1037.168106][T24325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3355'. [ 1037.205950][T24286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.231345][T24286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.402612][T24286] team0: Port device team_slave_0 added [ 1037.424808][T24286] team0: Port device team_slave_1 added [ 1037.516103][T24286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.533449][T24286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.593723][T24286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.675912][T24286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.693842][T24286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.757930][T24286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.910389][T24286] hsr_slave_0: entered promiscuous mode [ 1037.925936][T24286] hsr_slave_1: entered promiscuous mode [ 1037.941120][T24286] debugfs: 'hsr0' already exists in 'hsr' [ 1037.957763][T24286] Cannot create hsr debugfs directory [ 1038.364769][T24286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.600550][T24286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.962178][T24286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.997850][T21721] Bluetooth: hci11: command tx timeout [ 1039.219835][T24286] bridge0: port 3(netdevsim0) entered disabled state [ 1039.287641][T24286] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1039.296745][T24286] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1039.316317][T24286] bridge0: port 3(netdevsim0) entered disabled state [ 1039.392067][T24286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.806836][T24286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1039.827988][T24286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1039.846774][T24286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1039.865703][T24286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1040.034694][T24286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.073749][T24286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.098858][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.105968][ T7057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.121320][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880331dd000: rx timeout, send abort [ 1040.129952][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880331dd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1040.171428][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.178655][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.450268][T24383] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3366: iget: checksum invalid [ 1040.490893][T24383] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1040.507108][T24383] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3366: iget: checksum invalid [ 1040.556372][T24383] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1040.566968][T24383] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3366: iget: checksum invalid [ 1040.639045][T24383] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1040.660094][T24383] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3366: iget: checksum invalid [ 1040.675349][T24383] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1040.685804][T24383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1040.741093][T24383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1041.078007][T21721] Bluetooth: hci11: command tx timeout [ 1041.680332][T24286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.789985][T24286] veth0_vlan: entered promiscuous mode [ 1041.846153][T24286] veth1_vlan: entered promiscuous mode [ 1042.295165][T24286] veth0_macvtap: entered promiscuous mode [ 1042.305655][T24423] futex_wake_op: syz.4.3373 tries to shift op by -2048; fix this program [ 1042.368198][T24286] veth1_macvtap: entered promiscuous mode [ 1042.695747][T24286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.742208][T24286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.806817][ T7060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.826122][ T7060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.861386][ T7060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.872775][ T7060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.157845][T21721] Bluetooth: hci11: command tx timeout [ 1043.589339][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.629550][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.744382][T24440] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3375: iget: checksum invalid [ 1043.764848][T24451] input: jJǸ-9%v as /devices/virtual/input/input59 [ 1043.913449][ T7492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.931427][T24440] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1043.952683][ T7492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.996140][T24440] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3375: iget: checksum invalid [ 1044.021259][T24440] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1044.054606][T24440] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3375: iget: checksum invalid [ 1044.066351][T24440] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1044.101980][T24440] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3375: iget: checksum invalid [ 1044.134563][T24440] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1044.161358][T24440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1044.191432][T24440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1045.493554][T24481] ima: policy update failed [ 1045.538076][ T30] audit: type=1802 audit(1130797378.770:126): pid=24481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3381" res=0 errno=0 [ 1045.941139][T24499] random: crng reseeded on system resumption [ 1048.161553][T24528] netlink: 186 bytes leftover after parsing attributes in process `syz.8.3388'. [ 1048.684501][T24539] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1050.344160][T24567] random: crng reseeded on system resumption [ 1050.640082][T24589] [U]  [ 1050.642901][T24589] [U] [ 1050.645619][T24589] [U] [ 1050.648295][T24589] [U] [ 1050.702008][T24589] [U] [ 1050.704708][T24589] [U] [ 1050.707403][T24589] [U] [ 1050.710114][T24589] [U] [ 1050.787575][T24589] [U] [ 1050.790311][T24589] [U] [ 1050.793031][T24589] [U] [ 1050.795780][T24589] [U] [ 1050.873117][T24589] [U] [ 1050.875833][T24589] [U] [ 1050.878513][T24589] [U] [ 1050.881198][T24589] [U] [ 1050.891896][T24584] FAULT_INJECTION: forcing a failure. [ 1050.891896][T24584] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.935684][T24589] [U] [ 1050.938392][T24589] [U] [ 1050.941066][T24589] [U] [ 1050.943736][T24589] [U] [ 1050.971068][T24584] CPU: 1 UID: 0 PID: 24584 Comm: syz.2.3399 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1050.971134][T24584] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1050.971151][T24584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1050.971173][T24584] Call Trace: [ 1050.971183][T24584] [ 1050.971195][T24584] dump_stack_lvl+0x100/0x190 [ 1050.971238][T24584] should_fail_ex.cold+0x5/0xa [ 1050.971285][T24584] should_failslab+0xc2/0x120 [ 1050.971326][T24584] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1050.971368][T24584] ? kstrdup_const+0x63/0x80 [ 1050.971411][T24584] ? kstrdup+0x51/0xe0 [ 1050.971444][T24584] kstrdup+0x51/0xe0 [ 1050.971480][T24584] kstrdup_const+0x63/0x80 [ 1050.971517][T24584] __kernfs_new_node+0x9b/0x960 [ 1050.971562][T24584] ? __pfx___kernfs_new_node+0x10/0x10 [ 1050.971612][T24584] ? find_held_lock+0x2b/0x80 [ 1050.971640][T24584] ? kernfs_root+0xee/0x2a0 [ 1050.971685][T24584] ? kernfs_root+0xee/0x2a0 [ 1050.971733][T24584] kernfs_new_node+0x11b/0x1a0 [ 1050.971785][T24584] __kernfs_create_file+0x53/0x350 [ 1050.971822][T24584] cgroup_addrm_files+0x4d8/0xb90 [ 1050.971867][T24584] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1050.971895][T24584] ? __pfx___xa_store+0x10/0x10 [ 1050.971946][T24584] ? do_raw_spin_unlock+0x145/0x1e0 [ 1050.971997][T24584] css_populate_dir+0x161/0x590 [ 1050.972039][T24584] cgroup_apply_control_enable+0x3f0/0xbc0 [ 1050.972100][T24584] cgroup_mkdir+0x57f/0x12d0 [ 1050.972134][T24584] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1050.972164][T24584] kernfs_iop_mkdir+0x111/0x190 [ 1050.972205][T24584] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1050.972244][T24584] vfs_mkdir+0x729/0xb50 [ 1050.972296][T24584] do_mkdirat+0x435/0x590 [ 1050.972333][T24584] ? __pfx_do_mkdirat+0x10/0x10 [ 1050.972368][T24584] ? strncpy_from_user+0x19d/0x2d0 [ 1050.972412][T24584] ? getname_flags.part.0+0x1c5/0x540 [ 1050.972459][T24584] __x64_sys_mkdir+0xef/0x140 [ 1050.972495][T24584] do_syscall_64+0xc9/0xf80 [ 1050.972532][T24584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.972562][T24584] RIP: 0033:0x7fae0219aeb9 [ 1050.972585][T24584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.972614][T24584] RSP: 002b:00007fae003f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1050.972642][T24584] RAX: ffffffffffffffda RBX: 00007fae02415fa0 RCX: 00007fae0219aeb9 [ 1050.972671][T24584] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1050.972689][T24584] RBP: 00007fae02208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1050.972707][T24584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.972726][T24584] R13: 00007fae02416038 R14: 00007fae02415fa0 R15: 00007ffd2aa25578 [ 1050.972767][T24584] [ 1050.974896][T24584] cgroup: cgroup_addrm_files: failed to add kmem.tcp.failcnt, err=-12 [ 1051.119448][T24589] [U] [ 1051.119519][T24589] [U] [ 1051.119563][T24589] [U] [ 1051.119608][T24589] [U] [ 1051.303923][T24589] [U] [ 1051.306673][T24589] [U] [ 1051.309389][T24589] [U] [ 1051.312189][T24589] [U] [ 1051.315075][T24589] [U] [ 1051.870001][T24605] __vm_enough_memory: pid: 24605, comm: syz.8.3403, bytes: 4398046511104 not enough memory for the allocation [ 1052.064560][T24611] FAULT_INJECTION: forcing a failure. [ 1052.064560][T24611] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.100808][T24611] CPU: 0 UID: 0 PID: 24611 Comm: syz.2.3404 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1052.100862][T24611] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1052.100871][T24611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1052.100880][T24611] Call Trace: [ 1052.100886][T24611] [ 1052.100892][T24611] dump_stack_lvl+0x100/0x190 [ 1052.100915][T24611] should_fail_ex.cold+0x5/0xa [ 1052.100940][T24611] should_failslab+0xc2/0x120 [ 1052.100961][T24611] kmem_cache_alloc_noprof+0x83/0x780 [ 1052.100981][T24611] ? __pmd_alloc+0xbf/0x9c0 [ 1052.101007][T24611] ? __pmd_alloc+0xbf/0x9c0 [ 1052.101028][T24611] __pmd_alloc+0xbf/0x9c0 [ 1052.101052][T24611] walk_pgd_range+0x896/0x1eb0 [ 1052.101073][T24611] ? mt_find+0x687/0x8e0 [ 1052.101092][T24611] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1052.101115][T24611] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1052.101137][T24611] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1052.101160][T24611] ? __pfx_walk_pgd_range+0x10/0x10 [ 1052.101185][T24611] __walk_page_range+0x163/0x820 [ 1052.101205][T24611] ? find_vma+0xbf/0x140 [ 1052.101224][T24611] ? __pfx_find_vma+0x10/0x10 [ 1052.101246][T24611] ? walk_page_test+0x78/0x180 [ 1052.101265][T24611] walk_page_range_mm_unsafe+0x566/0xad0 [ 1052.101287][T24611] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 1052.101311][T24611] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1052.101329][T24611] madvise_guard_install+0x31c/0x830 [ 1052.101355][T24611] ? __pfx_madvise_guard_install+0x10/0x10 [ 1052.101377][T24611] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1052.101395][T24611] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 1052.101415][T24611] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 1052.101436][T24611] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1052.101459][T24611] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1052.101482][T24611] ? mtree_range_walk+0x6ce/0xcd0 [ 1052.101499][T24611] madvise_vma_behavior+0x1006/0x2a40 [ 1052.101523][T24611] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1052.101553][T24611] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1052.101578][T24611] ? mas_prev+0x9b/0xf0 [ 1052.101611][T24611] ? __pfx_mas_prev+0x10/0x10 [ 1052.101652][T24611] ? find_vma_prev+0xd8/0x150 [ 1052.101684][T24611] ? lock_vma_under_rcu+0x1f9/0x5a0 [ 1052.101700][T24611] ? __pfx_find_vma_prev+0x10/0x10 [ 1052.101726][T24611] ? find_held_lock+0x2b/0x80 [ 1052.101741][T24611] ? madvise_do_behavior+0x1ea/0x510 [ 1052.101770][T24611] ? madvise_do_behavior+0x1ea/0x510 [ 1052.101798][T24611] madvise_walk_vmas+0x2fe/0xa90 [ 1052.101825][T24611] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1052.101850][T24611] ? find_held_lock+0x2b/0x80 [ 1052.101867][T24611] madvise_do_behavior+0x1ea/0x510 [ 1052.101892][T24611] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1052.101914][T24611] ? futex_wait+0x125/0x380 [ 1052.101934][T24611] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1052.101953][T24611] do_madvise+0x195/0x240 [ 1052.101974][T24611] ? __pfx_do_madvise+0x10/0x10 [ 1052.101995][T24611] ? do_futex+0x192/0x350 [ 1052.102027][T24611] ? xfd_validate_state+0x129/0x190 [ 1052.102054][T24611] __x64_sys_madvise+0xa9/0x110 [ 1052.102076][T24611] ? lockdep_hardirqs_on+0x78/0x100 [ 1052.102093][T24611] do_syscall_64+0xc9/0xf80 [ 1052.102114][T24611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.102129][T24611] RIP: 0033:0x7fae0219aeb9 [ 1052.102143][T24611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.102157][T24611] RSP: 002b:00007fae003d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1052.102172][T24611] RAX: ffffffffffffffda RBX: 00007fae02416090 RCX: 00007fae0219aeb9 [ 1052.102182][T24611] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 1052.102192][T24611] RBP: 00007fae02208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1052.102201][T24611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.102210][T24611] R13: 00007fae02416128 R14: 00007fae02416090 R15: 00007ffd2aa25578 [ 1052.102231][T24611] [ 1052.681768][T24623] FAULT_INJECTION: forcing a failure. [ 1052.681768][T24623] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.727722][T24623] CPU: 1 UID: 0 PID: 24623 Comm: syz.4.3406 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1052.727760][T24623] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1052.727768][T24623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1052.727778][T24623] Call Trace: [ 1052.727784][T24623] [ 1052.727791][T24623] dump_stack_lvl+0x100/0x190 [ 1052.727813][T24623] should_fail_ex.cold+0x5/0xa [ 1052.727839][T24623] should_failslab+0xc2/0x120 [ 1052.727861][T24623] ? lsm_blob_alloc+0x68/0x90 [ 1052.727877][T24623] __kmalloc_noprof+0xf6/0x9c0 [ 1052.727898][T24623] ? lsm_blob_alloc+0x68/0x90 [ 1052.727913][T24623] lsm_blob_alloc+0x68/0x90 [ 1052.727930][T24623] security_sb_alloc+0x25/0x240 [ 1052.727948][T24623] alloc_super+0x24c/0xd20 [ 1052.727967][T24623] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1052.727984][T24623] sget_fc+0x117/0xc70 [ 1052.727999][T24623] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1052.728015][T24623] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1052.728032][T24623] get_tree_nodev+0x28/0x190 [ 1052.728050][T24623] mqueue_get_tree+0xf1/0x130 [ 1052.728067][T24623] vfs_get_tree+0x92/0x320 [ 1052.728081][T24623] fc_mount_longterm+0x1a/0x270 [ 1052.728097][T24623] mq_init_ns+0x482/0x820 [ 1052.728118][T24623] copy_ipcs+0x3dd/0x7e0 [ 1052.728139][T24623] create_new_namespaces+0x20a/0xab0 [ 1052.728156][T24623] ? security_capable+0x80/0x260 [ 1052.728176][T24623] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1052.728195][T24623] ksys_unshare+0x455/0xab0 [ 1052.728218][T24623] ? __pfx_ksys_unshare+0x10/0x10 [ 1052.728238][T24623] ? xfd_validate_state+0x129/0x190 [ 1052.728268][T24623] __x64_sys_unshare+0x31/0x40 [ 1052.728288][T24623] do_syscall_64+0xc9/0xf80 [ 1052.728308][T24623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.728324][T24623] RIP: 0033:0x7fe07139aeb9 [ 1052.728338][T24623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.728352][T24623] RSP: 002b:00007fe0722d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1052.728367][T24623] RAX: ffffffffffffffda RBX: 00007fe071615fa0 RCX: 00007fe07139aeb9 [ 1052.728377][T24623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1052.728386][T24623] RBP: 00007fe071408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1052.728395][T24623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.728404][T24623] R13: 00007fe071616038 R14: 00007fe071615fa0 R15: 00007fff03231b08 [ 1052.728424][T24623] [ 1053.803978][T24631] random: crng reseeded on system resumption [ 1054.373358][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1054.399348][T24650] HfR: entered promiscuous mode [ 1054.409902][T24652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1054.873480][T24662] ubi0: attaching mtd0 [ 1054.879171][T24662] ubi0: scanning is finished [ 1054.883896][T24662] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1055.181849][T24662] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1056.946470][T24701] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078003a80 pfn:0x78000 [ 1056.998486][T24701] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1057.072397][T24701] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1057.144964][T24701] raw: ffff888078003a80 0000000000000000 00000001ffffffff 0000000000000000 [ 1057.235575][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880670a5400: rx timeout, send abort [ 1057.237443][T24701] page dumped because: unmovable page [ 1057.244205][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880670a5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1057.298819][T24701] page_owner tracks the page as allocated [ 1057.304576][T24701] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 6641, tgid 6633 (syz.2.142), ts 122316937300, free_ts 121999344095 [ 1057.397863][T24701] post_alloc_hook+0x1e1/0x250 [ 1057.402781][T24701] get_page_from_freelist+0xe3d/0x2e10 [ 1057.421662][T24701] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1057.444225][T24701] alloc_pages_mpol+0x1fb/0x550 [ 1057.444272][T24701] alloc_pages_noprof+0x131/0x390 [ 1057.444309][T24701] stack_depot_save_flags+0x905/0x9c0 [ 1057.444363][T24701] kasan_save_stack+0x3f/0x50 [ 1057.444398][T24701] kasan_save_track+0x14/0x30 [ 1057.444433][T24701] __kasan_slab_alloc+0x89/0x90 [ 1057.444469][T24701] kmem_cache_alloc_noprof+0x2ad/0x780 [ 1057.444507][T24701] __kernfs_new_node+0xd2/0x960 [ 1057.444547][T24701] kernfs_new_node+0x11b/0x1a0 [ 1057.444589][T24701] __kernfs_create_file+0x53/0x350 [ 1057.444621][T24701] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1057.444658][T24701] internal_create_group+0x593/0xf40 [ 1057.444698][T24701] internal_create_groups+0x9d/0x150 [ 1057.444740][T24701] page last free pid 6641 tgid 6633 stack trace: [ 1057.444759][T24701] __free_frozen_pages+0x822/0x1130 [ 1057.444788][T24701] stack_depot_save_flags+0x412/0x9c0 [ 1057.444832][T24701] kasan_save_stack+0x3f/0x50 [ 1057.444868][T24701] kasan_save_track+0x14/0x30 [ 1057.444903][T24701] __kasan_slab_alloc+0x89/0x90 [ 1057.581270][T24701] kmem_cache_alloc_noprof+0x2ad/0x780 [ 1057.586832][T24701] __proc_create+0x2cb/0x8c0 [ 1057.612012][T24701] proc_create_reg+0x75/0x170 [ 1057.616812][T24701] proc_create_single_data+0x86/0x130 [ 1057.690386][T24701] snmp6_register_dev+0xe5/0x180 [ 1057.695507][T24701] ipv6_add_dev+0x6dc/0x1520 [ 1057.700714][T24701] addrconf_notify+0x563/0x19c0 [ 1057.705715][T24701] notifier_call_chain+0x99/0x3b0 [ 1057.711350][T24701] call_netdevice_notifiers_info+0xbe/0x110 [ 1057.721230][T24701] register_netdevice+0x16b9/0x21d0 [ 1057.726600][T24701] __ip_tunnel_create+0x52b/0x670 [ 1059.346640][T24740] FAULT_INJECTION: forcing a failure. [ 1059.346640][T24740] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1059.393231][T24740] CPU: 1 UID: 0 PID: 24740 Comm: syz.4.3431 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1059.393291][T24740] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1059.393306][T24740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1059.393321][T24740] Call Trace: [ 1059.393331][T24740] [ 1059.393341][T24740] dump_stack_lvl+0x100/0x190 [ 1059.393380][T24740] should_fail_ex.cold+0x5/0xa [ 1059.393419][T24740] ? lock_acquire+0x17c/0x330 [ 1059.393457][T24740] get_futex_key+0x1d2/0x1620 [ 1059.393496][T24740] ? __pfx_get_futex_key+0x10/0x10 [ 1059.393528][T24740] ? __lock_acquire+0x4a5/0x2630 [ 1059.393564][T24740] ? __local_bh_enable_ip+0x9e/0x120 [ 1059.393594][T24740] futex_wake+0xea/0x530 [ 1059.393617][T24740] ? do_raw_spin_lock+0x128/0x260 [ 1059.393639][T24740] ? __pfx_futex_wake+0x10/0x10 [ 1059.393661][T24740] ? tipc_sk_bind+0x19a/0x380 [ 1059.393684][T24740] ? tipc_sk_bind+0x19a/0x380 [ 1059.393707][T24740] ? rcu_is_watching+0x12/0xc0 [ 1059.393721][T24740] ? __local_bh_enable_ip+0x9e/0x120 [ 1059.393739][T24740] ? lockdep_hardirqs_on+0x78/0x100 [ 1059.393757][T24740] ? tipc_sk_bind+0x19a/0x380 [ 1059.393781][T24740] do_futex+0x32b/0x350 [ 1059.393801][T24740] ? __pfx_do_futex+0x10/0x10 [ 1059.393821][T24740] ? __sys_bind+0x1c7/0x260 [ 1059.393843][T24740] __x64_sys_futex+0x34f/0x4d0 [ 1059.393866][T24740] ? __pfx___x64_sys_futex+0x10/0x10 [ 1059.393900][T24740] do_syscall_64+0xc9/0xf80 [ 1059.393920][T24740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.393935][T24740] RIP: 0033:0x7fe07139aeb9 [ 1059.393949][T24740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.393963][T24740] RSP: 002b:00007fe0722d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1059.393978][T24740] RAX: ffffffffffffffda RBX: 00007fe071615fa8 RCX: 00007fe07139aeb9 [ 1059.393988][T24740] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe071615fac [ 1059.393998][T24740] RBP: 00007fe071615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.394006][T24740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.394015][T24740] R13: 00007fe071616038 R14: 00007fff03231a20 R15: 00007fff03231b08 [ 1059.394033][T24740] [ 1059.739995][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.746275][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.912384][T24787] kernel read not supported for file /\*)A (pid: 24787 comm: syz.2.3441) [ 1060.926966][ T30] audit: type=1800 audit(1130797394.160:127): pid=24787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3441" name="\*)A" dev="mqueue" ino=118749 res=0 errno=0 [ 1061.238769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888089bff400: rx timeout, send abort [ 1061.247204][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888089bff400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1062.712279][T24844] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1062.800352][T24844] mac80211_hwsim hwsim59 : renamed from wlan0 (while UP) [ 1063.455884][T24867] Invalid ELF header magic: != ELF [ 1063.557435][ T31] INFO: task syz.5.2973:21760 blocked for more than 143 seconds. [ 1063.569782][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 1063.594659][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1063.614992][ T31] task:syz.5.2973 state:D stack:27368 pid:21760 tgid:21756 ppid:16279 task_flags:0x400140 flags:0x00080002 [ 1063.647738][ T31] Call Trace: [ 1063.651066][ T31] [ 1063.654011][ T31] ? __schedule+0xf65/0x5e10 [ 1063.678941][ T31] __schedule+0xfe4/0x5e10 [ 1063.683426][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1063.707299][ T31] ? __pfx___schedule+0x10/0x10 [ 1063.717779][ T31] ? find_held_lock+0x2b/0x80 [ 1063.727448][ T31] ? schedule+0x2bf/0x390 [ 1063.740920][ T31] schedule+0xdd/0x390 [ 1063.755199][ T31] schedule_preempt_disabled+0x13/0x30 [ 1063.765821][ T31] __mutex_lock+0xc9a/0x1b90 [ 1063.788183][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1063.793916][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1063.822002][ T31] ? net_generic+0xea/0x2a0 [ 1063.826558][ T31] ? net_generic+0xea/0x2a0 [ 1063.852135][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1063.874244][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1063.923781][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1063.947225][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1063.967347][ T31] ? preempt_schedule_common+0x42/0xc0 [ 1063.972856][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1064.037439][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1064.042176][ T31] ? security_capable+0x80/0x260 [ 1064.057541][ T31] genl_rcv_msg+0x560/0x800 [ 1064.062095][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1064.098007][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1064.104149][ T31] netlink_rcv_skb+0x159/0x420 [ 1064.137309][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1064.142394][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1064.163110][ T31] genl_rcv+0x28/0x40 [ 1064.171718][ T31] netlink_unicast+0x5aa/0x870 [ 1064.176530][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1064.182298][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1064.187545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.192871][ T31] ? __import_iovec+0x1d2/0x640 [ 1064.199029][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1064.204712][ T31] ____sys_sendmsg+0xa54/0xc30 [ 1064.209919][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1064.215481][ T31] ? __pfx___futex_wait+0x10/0x10 [ 1064.220624][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1064.225948][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1064.230693][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1064.235937][ T31] ? find_held_lock+0x2b/0x80 [ 1064.240753][ T31] __sys_sendmsg+0x170/0x220 [ 1064.245380][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1064.250602][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1064.255573][ T31] do_syscall_64+0xc9/0xf80 [ 1064.260220][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.266148][ T31] RIP: 0033:0x7fedf079aeb9 [ 1064.270602][ T31] RSP: 002b:00007fedf1634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.279079][ T31] RAX: ffffffffffffffda RBX: 00007fedf0a16180 RCX: 00007fedf079aeb9 [ 1064.287068][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1064.295096][ T31] RBP: 00007fedf0808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1064.303227][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.311260][ T31] R13: 00007fedf0a16218 R14: 00007fedf0a16180 R15: 00007ffff3706e28 [ 1064.319295][ T31] [ 1064.322390][ T31] [ 1064.322390][ T31] Showing all locks held in the system: [ 1064.347266][ T31] 1 lock held by khungtaskd/31: [ 1064.352153][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1064.387247][ T31] 2 locks held by getty/5590: [ 1064.391940][ T31] #0: ffff88814e5bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1064.437182][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1064.467234][ T31] 3 locks held by kworker/0:4/5873: [ 1064.472447][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.513182][ T31] #1: ffffc900043afc98 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.547181][ T31] #2: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1064.577221][ T31] 2 locks held by kworker/u10:0/6891: [ 1064.582617][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.593840][ T31] #1: ffffc9000b817c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.606325][ T31] 2 locks held by kworker/u10:8/7047: [ 1064.613434][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.625413][ T31] #1: ffffc9000b8c7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.637880][ T31] 2 locks held by kworker/u10:15/7057: [ 1064.643350][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.674179][ T31] #1: ffffc9000457fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.688382][ T31] 2 locks held by kworker/u10:16/7058: [ 1064.693856][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.705578][ T31] #1: ffffc9000456fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.723028][ T31] 4 locks held by kworker/u10:18/7060: [ 1064.728784][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.739489][ T31] #1: ffffc9000416fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.749723][ T31] #2: ffffffff903dcef0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 1064.765099][ T31] #3: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1064.789358][ T31] 2 locks held by kworker/u10:26/7492: [ 1064.794844][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.805611][ T31] #1: ffffc9000256fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.817705][ T31] 2 locks held by kworker/u10:42/7556: [ 1064.823741][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.835258][ T31] #1: ffffc90004a07c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.860298][ T31] 2 locks held by kworker/u10:52/10675: [ 1064.865850][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.879739][ T31] #1: ffffc90003dafc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.896286][ T31] 2 locks held by kworker/u10:53/10676: [ 1064.902276][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.913490][ T31] #1: ffffc90003d9fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.927251][ T31] 2 locks held by kworker/u10:57/10682: [ 1064.932882][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.943639][ T31] #1: ffffc90003cc7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.955265][ T31] 2 locks held by kworker/u10:60/10685: [ 1064.960944][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1064.971752][ T31] #1: ffffc90003c67c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1064.983429][ T31] 2 locks held by kworker/u10:6/16753: [ 1064.988930][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.002096][ T31] #1: ffffc90002ee7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.013763][ T31] 2 locks held by syz-executor/18312: [ 1065.019238][ T31] #0: ffff8881446880e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.029636][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.039321][ T31] 3 locks held by kworker/1:4/19557: [ 1065.044595][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.055116][ T31] #1: ffffc900049f7c98 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.064911][ T31] #2: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1065.075060][ T31] 2 locks held by syz.2.2915/21424: [ 1065.080447][ T31] #0: ffffffff904a2690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.088940][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1065.099073][ T31] 2 locks held by syz.5.2973/21760: [ 1065.104266][ T31] #0: ffffffff904a2690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.112508][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1065.122623][ T31] 2 locks held by syz.0.3004/21948: [ 1065.127872][ T31] #0: ffff88807d79a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.138234][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.147896][ T31] 2 locks held by syz-executor/22242: [ 1065.153275][ T31] #0: ffff88807f4120e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.165623][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.175341][ T31] 2 locks held by syz-executor/22842: [ 1065.180755][ T31] #0: ffff8880350bc0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.191084][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.200873][ T31] 2 locks held by syz.8.3147/22850: [ 1065.206055][ T31] #0: ffff88806bfb60e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.216423][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.226067][ T31] 2 locks held by kworker/u10:5/23476: [ 1065.231612][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.242300][ T31] #1: ffffc90003d0fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.253869][ T31] 2 locks held by kworker/u10:17/23480: [ 1065.259455][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.270157][ T31] #1: ffffc90004bb7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.281760][ T31] 2 locks held by kworker/u10:19/23482: [ 1065.288024][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.298998][ T31] #1: ffffc90003477c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.310712][ T31] 2 locks held by syz-executor/23494: [ 1065.316106][ T31] #0: ffff88803bcfe0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.326488][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.336185][ T31] 2 locks held by syz.7.3255/23572: [ 1065.341422][ T31] #0: ffffffff904a2690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.349746][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1065.359916][ T31] 1 lock held by syz.3.3395/24568: [ 1065.365047][ T31] #0: ffff88808ba880e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: super_lock+0x1ca/0x3f0 [ 1065.375016][ T31] 2 locks held by syz.3.3395/24575: [ 1065.380266][ T31] #0: ffff88808ba880e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1065.390652][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1065.400702][ T31] 3 locks held by syz.2.3451/24846: [ 1065.405967][ T31] #0: ffff88801eeccec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1065.415627][ T31] #1: ffff88801eecc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1065.425555][ T31] #2: ffffffff9068e8e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1065.435694][ T31] 5 locks held by syz.4.3453/24867: [ 1065.440971][ T31] #0: ffff888034e94ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1065.450965][ T31] #1: ffff888034e940c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1065.460737][ T31] #2: ffffffff9068e8e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1065.470886][ T31] #3: ffff888061b42338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 1065.480805][ T31] #4: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1065.491144][ T31] 2 locks held by kworker/u10:21/24877: [ 1065.496952][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.507711][ T31] #1: ffffc9000d4f7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.519305][ T31] 2 locks held by kworker/u10:22/24878: [ 1065.524836][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.535676][ T31] #1: ffffc9000e8d7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.547276][ T31] 2 locks held by kworker/u10:23/24879: [ 1065.552821][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.563649][ T31] #1: ffffc9000e8a7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.575293][ T31] 2 locks held by kworker/u10:24/24880: [ 1065.580925][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.591695][ T31] #1: ffffc9000e897c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.603600][ T31] 2 locks held by kworker/u10:25/24881: [ 1065.609201][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.619917][ T31] #1: ffffc9000e75fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.631483][ T31] 2 locks held by kworker/u10:28/24882: [ 1065.637024][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.647877][ T31] #1: ffffc9000e74fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.659475][ T31] 2 locks held by kworker/u10:29/24883: [ 1065.665037][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.675722][ T31] #1: ffffc9000e73fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.687342][ T31] 2 locks held by kworker/u10:30/24884: [ 1065.692869][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.703595][ T31] #1: ffffc9000e70fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.715315][ T31] 2 locks held by kworker/u10:31/24885: [ 1065.720974][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.731729][ T31] #1: ffffc9000db4fc98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.743567][ T31] 2 locks held by kworker/u10:32/24886: [ 1065.749217][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.760024][ T31] #1: ffffc9000dae7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.771572][ T31] 2 locks held by kworker/u10:33/24887: [ 1065.777165][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.787913][ T31] #1: ffffc9000d617c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.799516][ T31] 2 locks held by kworker/u10:34/24888: [ 1065.805059][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.815767][ T31] #1: ffffc9000d607c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.827360][ T31] 2 locks held by kworker/u10:35/24889: [ 1065.832904][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.843570][ T31] #1: ffffc9000d5c7c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.855178][ T31] 2 locks held by kworker/u10:36/24890: [ 1065.860786][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.871756][ T31] #1: ffffc9000d577c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.883958][ T31] 2 locks held by kworker/u10:37/24891: [ 1065.889681][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.900613][ T31] #1: ffffc9000d567c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.912236][ T31] 2 locks held by kworker/u10:38/24892: [ 1065.917878][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.928627][ T31] #1: ffffc9000d537c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.940220][ T31] 2 locks held by kworker/u10:39/24893: [ 1065.945750][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.956465][ T31] #1: ffffc9000d527c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1065.968305][ T31] 2 locks held by kworker/u10:40/24894: [ 1065.973916][ T31] #0: ffff888142aa4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1065.984793][ T31] #1: ffffc9000d517c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1066.027168][ T31] [ 1066.029532][ T31] ============================================= [ 1066.029532][ T31] [ 1066.078840][ T31] NMI backtrace for cpu 1 [ 1066.078864][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1066.078917][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1066.078932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1066.078947][ T31] Call Trace: [ 1066.078956][ T31] [ 1066.078967][ T31] dump_stack_lvl+0x100/0x190 [ 1066.079004][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1066.079041][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1066.079084][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1066.079129][ T31] sys_info+0x141/0x190 [ 1066.079163][ T31] watchdog+0xcc3/0xfe0 [ 1066.079203][ T31] ? __pfx_watchdog+0x10/0x10 [ 1066.079233][ T31] ? __kthread_parkme+0x18c/0x230 [ 1066.079267][ T31] ? __pfx_watchdog+0x10/0x10 [ 1066.079305][ T31] ? __pfx_watchdog+0x10/0x10 [ 1066.079332][ T31] kthread+0x3b3/0x730 [ 1066.079371][ T31] ? __pfx_kthread+0x10/0x10 [ 1066.079406][ T31] ? ret_from_fork+0x79/0xaf0 [ 1066.079432][ T31] ? ret_from_fork+0x79/0xaf0 [ 1066.079458][ T31] ? rcu_is_watching+0x12/0xc0 [ 1066.079486][ T31] ? __pfx_kthread+0x10/0x10 [ 1066.079525][ T31] ret_from_fork+0x754/0xaf0 [ 1066.079552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1066.079581][ T31] ? __switch_to+0x7b9/0x10c0 [ 1066.079615][ T31] ? __pfx_kthread+0x10/0x10 [ 1066.079654][ T31] ret_from_fork_asm+0x1a/0x30 [ 1066.079710][ T31] [ 1066.079721][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1066.231462][ C0] NMI backtrace for cpu 0 [ 1066.231483][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1066.231545][ C0] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1066.231559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1066.231573][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1066.231607][ C0] Code: 96 7a 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 6b 17 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1066.231631][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 1066.231651][ C0] RAX: 0000000000886785 RBX: ffffffff8e297ac0 RCX: ffffffff8b7414b5 [ 1066.231668][ C0] RDX: 0000000000000000 RSI: ffffffff8dc4156b RDI: ffffffff8bfa3320 [ 1066.231685][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 1066.231701][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 1066.231717][ C0] R13: 0000000000000000 R14: ffffffff90b76fd0 R15: 0000000000000000 [ 1066.231734][ C0] FS: 0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 1066.231756][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1066.231773][ C0] CR2: 00007f12acd60e9c CR3: 000000000e392000 CR4: 00000000003526f0 [ 1066.231789][ C0] Call Trace: [ 1066.231797][ C0] [ 1066.231806][ C0] default_idle+0x9/0x10 [ 1066.231838][ C0] default_idle_call+0x6c/0xb0 [ 1066.231870][ C0] do_idle+0x35b/0x4b0 [ 1066.231895][ C0] ? __pfx_do_idle+0x10/0x10 [ 1066.231919][ C0] ? do_idle+0x2b7/0x4b0 [ 1066.231945][ C0] cpu_startup_entry+0x4f/0x60 [ 1066.231970][ C0] rest_init+0x251/0x260 [ 1066.232002][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1066.232031][ C0] start_kernel+0x47a/0x480 [ 1066.232055][ C0] x86_64_start_reservations+0x24/0x30 [ 1066.232081][ C0] x86_64_start_kernel+0x122/0x130 [ 1066.232107][ C0] common_startup_64+0x13e/0x148 [ 1066.232145][ C0] [ 1066.437406][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1066.444274][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1066.454992][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1066.465054][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1066.475106][ T31] Call Trace: [ 1066.478381][ T31] [ 1066.481307][ T31] dump_stack_lvl+0x100/0x190 [ 1066.485994][ T31] vpanic+0x20d/0x630 [ 1066.489979][ T31] panic+0xd1/0xd1 [ 1066.493702][ T31] ? __pfx_panic+0x10/0x10 [ 1066.498125][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1066.504307][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1066.510487][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1066.516665][ T31] ? watchdog.cold+0x198/0x1ca [ 1066.521435][ T31] ? watchdog+0xcd3/0xfe0 [ 1066.525777][ T31] watchdog.cold+0x1a9/0x1ca [ 1066.530382][ T31] ? __pfx_watchdog+0x10/0x10 [ 1066.535066][ T31] ? __kthread_parkme+0x18c/0x230 [ 1066.540103][ T31] ? __pfx_watchdog+0x10/0x10 [ 1066.544786][ T31] ? __pfx_watchdog+0x10/0x10 [ 1066.549465][ T31] kthread+0x3b3/0x730 [ 1066.553555][ T31] ? __pfx_kthread+0x10/0x10 [ 1066.558153][ T31] ? ret_from_fork+0x79/0xaf0 [ 1066.562833][ T31] ? ret_from_fork+0x79/0xaf0 [ 1066.567514][ T31] ? rcu_is_watching+0x12/0xc0 [ 1066.572282][ T31] ? __pfx_kthread+0x10/0x10 [ 1066.576887][ T31] ret_from_fork+0x754/0xaf0 [ 1066.581480][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1066.586596][ T31] ? __switch_to+0x7b9/0x10c0 [ 1066.591283][ T31] ? __pfx_kthread+0x10/0x10 [ 1066.595887][ T31] ret_from_fork_asm+0x1a/0x30 [ 1066.600682][ T31] [ 1066.604154][ T31] Kernel Offset: disabled [ 1066.608469][ T31] Rebooting in 86400 seconds..