last executing test programs: 7m24.534803645s ago: executing program 32 (id=831): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x7, 0x5, 0x4000000000df, 0xeb3, r1, 0x8004) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/netdevsim/link_device\x00', 0xc0481, 0x0) write$auto(r2, 0x0, 0x81) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/ip_vti0/accept_ra_rtr_pref\x00', 0x8040, 0x0) sysfs$auto(0x7, 0x7, 0x7) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x80000001, &(0x7f0000000080)="0541658f0907e8617cda553c3784102149fa39bb936484131a2fb63359e60243e726d790b39edfb52265e6a2d90ce01d94a258632b1e8301a27d6fcbe37a7d610d7b780e9830814fa5b1353443550cdf2bff1941560a82157d0ea3888663a9e4bbc7ac8ef8a45a2616e08fd6cede35cea1fafe88ec2c55c75c666d425591662d547a11c1cf0d41f2f08b") read$auto(r3, 0x0, 0x1f) write$auto(0x3, 0x0, 0xfdef) 6m43.243345087s ago: executing program 33 (id=959): mmap$auto(0x0, 0x400000000004, 0x4200000000df, 0x1040eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) (async) socket(0x2, 0x801, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/teql0/statistics/rx_compressed\x00', 0xc2700, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/teql0/statistics/rx_compressed\x00', 0xc2700, 0x0) socket(0x26, 0x80805, 0x0) (async) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) (async) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x2, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x2, 0x2, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)="033f1329be8fccd84a") bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2m36.68732467s ago: executing program 0 (id=1724): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) (async) socket(0x25, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async) ioctl$auto(0x3, 0x5420, 0x38) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) ioctl$auto(0x3, 0x402c542c, 0x38) (async) ioctl$auto(0x3, 0x402c542b, 0x38) 2m36.439097775s ago: executing program 0 (id=1725): setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x8) r1 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) close_range$auto(r1, r0, 0xb) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen$auto(0x3, 0x83) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0xa) io_uring_setup$auto(0x1ff, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r2, &(0x7f0000000240)='!', 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f00000003c0)='/dev/snd/pcmC1D1c\x00', 0x9, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x16) r3 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2m36.28230434s ago: executing program 0 (id=1726): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7fb, 0x6, 0xa, 0x1000009, 0x5f, 0xfffffffffffffffd, 0x3}, 0x6f3) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8801, 0x0) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x1, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x1afd, 0x7fffffff, 0x4) mmap$auto(0x800000000000000, 0x402000d, 0xdf, 0xeb1, 0x401, 0x8001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x9e95, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) 2m34.243723314s ago: executing program 0 (id=1732): close_range$auto(0x2, 0x8, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x0) fgetxattr$auto(0xffffffffffffffff, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd4.\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x96) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') sync_file_range$auto(0xffffffffffffffff, 0x1, 0xa31e, 0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) timer_create$auto(0x9, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) r0 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) read$auto_ima_ascii_measurements_ops_ima_fs(r2, 0x0, 0x0) (async) ioctl$auto(0x3, 0xae60, r2) (async) ioctl$auto(0x3, 0x4008ae61, r0) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x42080, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000000040)=""/66, 0x42) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) 2m33.181671825s ago: executing program 0 (id=1734): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x1, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x1afd, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315}, 0x1) read$auto(0x3, 0x0, 0x80) 2m30.783032353s ago: executing program 34 (id=1692): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffc], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x9, 0x1, 0x10000052, 0x5, 0x14, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) timer_create$auto(0x0, 0x0, 0x0) (async, rerun: 32) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x10, 0x3, 0x15) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) (async) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r4) sendmsg$auto_ETHTOOL_MSG_MM_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) (async) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 2m28.351215405s ago: executing program 0 (id=1738): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x1, 0x0) shmctl$auto_IPC_SET(0x10000, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x63102, 0x0) sendfile$auto(r1, r0, 0x0, 0x5) (async) sendfile$auto(r1, r0, 0x0, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r3 = prctl$auto_PR_SET_MM_ENV_START(0xfffffffa, 0xa, 0xffffffffffffffff, 0x9a9, 0x1) mmap$auto(0x190b, 0x20009, 0x10df, 0xeb0, 0x401, 0x8000) (async) mmap$auto(0x190b, 0x20009, 0x10df, 0xeb0, 0x401, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) (async) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_clock\x00', 0x88000, 0x0) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x3, 0x9) (async) socket(0x2c, 0x3, 0x9) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) fcntl$auto(0x0, 0x407, 0x100000) read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000000)=""/113, 0x71) sendfile$auto(r2, r2, 0x0, 0x2) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806121, 0x4) (async) mprotect$auto(0x200000000000, 0x806121, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 2m16.996545461s ago: executing program 6 (id=1777): socket(0x10, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xca600, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xff, 0x800000007, 0x100d3e, 0x1, 0x40c3d4, 0x7, 0x3, 0x10001, 0x7, 0x5e, 0x80000000002, 0x7, 0x6d3f, 0xffffffffffffff01, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca002, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) readv$auto(r2, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x8, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) mbind$auto(0xfffffffffffffffe, 0x2091d6, 0x4, 0x0, 0xde55, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x9, 0x400, 0xfffffffffffffffb, 0x80, 0xcee, 0x1, 0x65, 0x103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2m15.894194234s ago: executing program 6 (id=1779): socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) madvise$auto(0x5, 0xc0, 0xfff) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x6, 0x4, 0x5, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x92d42, 0x0) write$auto(r0, 0x0, 0x5c8) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) semctl$auto_SETVAL(0x200, 0x9, 0x10, 0x2) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="34aeede041849254d06ca5ca1d398846733719729502f8bd8ebb5f8fce88e90f6fac4cc750762526d157c0b0bfaa5f2c1a7419e6b132efb1fba162c931cda9de707b99242453bffdd8a43338842dd9569a2a165dc226617700000000", 0x5c) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x28080, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) shutdown$auto(0x200000003, 0x105) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4785, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptysa\x00', 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x202000a, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x48, 0x4, 0x0, 0x0, 0x0, 0x6, 0xe, 0x803, 0x9, 0x2006, 0xffffffffffffffff, 0x7ff, 0x1, 0x100, 0x8}) 2m13.19462531s ago: executing program 35 (id=1738): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x1, 0x0) shmctl$auto_IPC_SET(0x10000, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x63102, 0x0) sendfile$auto(r1, r0, 0x0, 0x5) (async) sendfile$auto(r1, r0, 0x0, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r3 = prctl$auto_PR_SET_MM_ENV_START(0xfffffffa, 0xa, 0xffffffffffffffff, 0x9a9, 0x1) mmap$auto(0x190b, 0x20009, 0x10df, 0xeb0, 0x401, 0x8000) (async) mmap$auto(0x190b, 0x20009, 0x10df, 0xeb0, 0x401, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) (async) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_clock\x00', 0x88000, 0x0) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x3, 0x9) (async) socket(0x2c, 0x3, 0x9) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) fcntl$auto(0x0, 0x407, 0x100000) read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000000)=""/113, 0x71) sendfile$auto(r2, r2, 0x0, 0x2) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806121, 0x4) (async) mprotect$auto(0x200000000000, 0x806121, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 2m13.062253511s ago: executing program 6 (id=1786): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000140)="b375f1b9b60c5855835a3e0e8c4248594610ac34ff225cc9598ec2ca71b5a12858a2e19c8b92bb528c79f5e7dc2c77c72834369606128c976ce6f1e9ae50c778d78d82b4ffa71bb41011f7daebe4b57e49214bc034544f600f3fb24956d6094c49480f2fedaecd065d027b57c0f046f0270cd978b59ee75ab3e36543b5896e9f7d539c1fac0d9dba5565e3870a642bd79836333d53f72d88e71d7a91e5b595047eb28c7c48ab1f560935412c1d686cd55562efedc45d5667498a547c432207084377adfa50751cfad979b4135b4da291af19fa4f60f50b9080bae8d00f86f1d1a93e90e5da533f", 0xe7) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mlockall$auto(0x7) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mprotect$auto(0x0, 0x806121, 0x6) mprotect$auto(0x3, 0x8000000000000000, 0x800) (async) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 2m11.947183069s ago: executing program 6 (id=1789): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0xb5f0, 0x7352, 0x3a, 0x65f, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x7, 0x80000006, 0x4, 0xb4, 0x3, 0x2000009, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x2, 0x2, 0xfffffffe, 0x2, 0x2, 0xffff4e49, 0x0, 0x0, [0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x40000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], "9b8de3e8f7109c217f9ff6e54d150f01e04b1d0b6314b96238890229b57393e9765c31585dff23b63c40a0323365fceec354e93fb307dcf464a3ebf3b74a8e5e47d8c9e1c5c03222f1bd5561433a2ee5da9f8260d4f2ada91dc0b0b132dc0d5698e5e41f16df006c7006ff190d913f09263c87270000e1c5de192e7544afa5fc00000000000000"}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x209b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x20499d, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x0, 0x2, 0x3) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0xe9f, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 2m9.399835242s ago: executing program 6 (id=1797): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0xc0000103, 0x5, 0x80000000}]}) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m8.184012974s ago: executing program 6 (id=1800): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44131011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r2, 0x4008af25, &(0x7f00000000c0)=0x3) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/8/actions\x00', 0x60840, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/8/actions\x00', 0x60840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/73, 0x49) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/73, 0x49) close_range$auto(0x2, 0xa, 0x40) (async) close_range$auto(0x2, 0xa, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(0x0, r4) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, r4) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) poll$auto(&(0x7f00000000c0)={r5, 0x5, 0xd9c0}, 0x3, 0xb) (async) poll$auto(&(0x7f00000000c0)={r5, 0x5, 0xd9c0}, 0x3, 0xb) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x28001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x2, 0x0) r7 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x16a) (async) r8 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x16a) copy_file_range$auto(r7, 0x0, r8, 0x0, 0x21c3, 0x0) r9 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x161002, 0x0) write$auto_seq_oss_f_ops_seq_oss(r9, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x95f4da0a, 0xffffffffffffffff, 0x8000000000003, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x4) 2m3.948021215s ago: executing program 7 (id=1785): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f00000000c0), 0x800000, 0x0) (async) r1 = getpid() ioctl$auto_BTRFS_IOC_SCAN_DEV(0xffffffffffffffff, 0x50009404, &(0x7f00000002c0)={@raw=0x7, "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"}) pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = set_tid_address$auto(0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x40) (async) getdents$auto(r4, 0x0, 0xa2b0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/shm_next_id\x00', 0x88000, 0x0) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, r1) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/radio29\x00', 0x28002, 0x0) poll$auto(&(0x7f00000001c0)={r5, 0xffff, 0x29}, 0x6, 0x5) (async) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy16/rate_ctrl_alg\x00', 0x5e3380, 0x0) readv$auto(r6, &(0x7f0000000000)={&(0x7f0000000040)="44d58bdb91f3c41c4505", 0x8101}, 0x4) 2m3.411196649s ago: executing program 7 (id=1811): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x8982, 0x1) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x36d000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, 0x0, 0x1c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x8001, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x80}, 0x7f) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2415, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r2}}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0x20000, 0x0) 2m2.645637513s ago: executing program 7 (id=1813): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x9, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(0x1, 0x0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0xfff, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f00000001c0)={0x3, 0x0, 0x7fff, @raw=0x5}, 0x8) socket(0x2, 0xa, 0xe57a) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) fstat$auto(r1, &(0x7f0000000100)={0x0, 0x4, 0xa6, 0x1, 0xee00, 0xee01, 0x0, 0x2, 0x3, 0xd, 0x7, 0x7, 0x0, 0xc64c, 0x5, 0x3, 0x100000000000005}) 2m1.281493344s ago: executing program 7 (id=1815): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0xc0000103, 0x5, 0x80000000}]}) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m0.284809977s ago: executing program 7 (id=1818): getpid() madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise$auto(0xfffffffffffffff3, 0x8, 0xfffffffc) (async) clone$auto(0x8, 0xffffffffffffff81, 0x0, 0x0, 0x6) 1m59.130808676s ago: executing program 3 (id=1823): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910bb713aca465c9bbc23b5d40a", 0x40) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) madvise$auto(0x0, 0x4, 0x15) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r5 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x87, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x5, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r5, 0x15, 0x0, 0x9) 1m58.409145524s ago: executing program 3 (id=1825): set_mempolicy$auto(0x9, &(0x7f0000000080)=0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x120) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy13/airtime_flags\x00', 0x48200, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)="790a2abedeebb2ccb708620d25ce4a34968d386e8d71512c6fb82eb91db31dc8d8730e5619168458791d002c84848f1360f8e3cf71df860dfbe0a0701a4ae253f05900005a651715acfbb8b9adf85b03bfb62f866fc2c5cf13d31e82cb0fa8511dbe85afb6ac53dd3187cbc99fee67164f049336f92d23a2023d9e76bde7c72d5301965950aafe419a2755a006ae8d27fd4c06803ae396a7e9242e55bfd86084f53a0fa8ec8d18087b9dc3c26738265266b2b8e23dbe4460cf5021cfdf721e085a8dbd50f3f78a0aa4da5943d3ba") ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, 0x3, 0x8000) 1m58.219112304s ago: executing program 3 (id=1826): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x1, 0x0, 0x0) timer_settime$auto(0x4, 0x0, &(0x7f00000000c0)={{0x4, 0x10007}, {0x7fff}}, 0x0) timer_gettime$auto(0x6ace, 0x0) socket(0x11, 0x3, 0x400) pwrite64$auto(0xffffffffffffffff, 0x0, 0x1, 0x8d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x101, 0xfffffffb, 0x400008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0x4}, 0x2, 0x3, 0x4, @raw=0x101, @integer64={0x5, 0x3, 0x200}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d00000059a200"}) rt_sigqueueinfo$auto(0x0, 0x400d4, &(0x7f0000000000)={@_si_pad}) r2 = socket(0x11, 0x1, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x22}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="21022abd7000ffdbdf250800000018000180140002006873723000000000000000fbff00000045091bb1b4a579740dd9e34b9fed1e1d0cb022081f42e227bb7c75c716b6d046d20fdfd9f615a81f1c75c3918027b694c1cc6fc2ca5345b1e5e243a1"], 0x2c}}, 0x40) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000340)=0x29413) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop2\x00', 0x1cd080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) 1m57.803615359s ago: executing program 3 (id=1827): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x10, 0x80000, 0x1000) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) finit_module$auto(r0, 0x0, 0x1) mmap$auto(0x0, 0x6, 0x7, 0xeb1, r0, 0x10008000) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kill$auto(0x0, 0x11) mmap$auto(0x40000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m57.335804218s ago: executing program 3 (id=1829): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/tx_queue_len\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) socket(0xa, 0x5, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x1bf4ea5c, 0x8000000000000000, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) fstatfs$auto(0x3, 0x0) bind$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x6, 0x48, 0x4909b6f8, 0x5, 0x7, 0x200003, 0x2, 0xd27, 0x3, 0x8, 0x10001, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800002, 0x1, 0x7, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x938, 0x0, 0x7, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x5, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffdf26, 0x0, 0x0, 0x2, 0x0, 0x4ab1, 0xec4e, 0x0, 0x0, 0x0, 0x400000000000, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) ioctl$auto(0xffffffffffffffff, 0xc0585611, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) mlockall$auto(0x800000000000005) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x5, 0x0) 1m42.552387955s ago: executing program 8 (id=1851): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) timerfd_create$auto(0x9, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000300)=""/251, 0xfb) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd, 0x400, @old_map_fd=0x3ff}, 0xa3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x7, 0x4}, 0x7f, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_tid_address$auto(&(0x7f00000000c0)=0xfffeffff) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r3) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000300)={0x4b0, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_MASK={0x2cc, 0x7, 0x0, 0x1, [@typed={0xc, 0xdb, 0x0, 0x0, @binary="544211c8fd6fc615"}, @generic="0ed696850eacc18e03540b1de053eab0685acffd7e383655dcfb5a58f9fe568c10c3cc9d2116f40cfcb5696735c0c3e28e01638a2120a4e1147a60b7003dd620b4e7f5cbc80ac60ba66dad88719fd8a9ff7f4dc533dc8203259bf98b6338eceb5dcd250ad63e74f7f6b7e082008761d31c10afaf7e4fa7becb9ce05160d3157756be585496103ee58bc91f8a3fe23632bb4a0d6fd6cd6bf7a37bfefbc8cac17066b470fabb064ed4550bddfa83a9228564cb4ea3a0e92cfe8f8bf7e61485d849906e46d8de0aac7253ba33de5699dfc93fd84de7386e93777b74d3264ebc76daf631a9e6c9", @nested={0x164, 0x88, 0x0, 0x1, [@generic="ae3d2e6d9b0e04dce1f0a83c42ef1a6a73cc7a9e92bb3574b258d25499dec0ec6ad65705d4b581a7a42e8e5e6df414137b0a3e9975fc3ed59427fe24b8f161659913e110fef8bbb23b817d083b41c25764c1b8709fd4c06c0ab7aba556dfd12014e850cba6542fd788ed20edd15b33eee706d885b74c636b41198eca1de9cd7919c86ca83c034751393749857b2200d43203e6f070ae4f560af52a7f257432f270b5fad4ead909ca990423506a9ec31b2812c9754b3f240bd852351bd39ec9d4a079ac0fd7fe771a124aa3c73328dffbc799966c", @nested={0x4, 0x139}, @generic="efe796ce1de588e5c8e1abe8e76c8dc3b0a4c24175dc0af0ff59e6dd2aa18e01ae74c97e55034a218c8c7cd657af6250b0a516fcc6f51c4d298f08db36dfe409e22577f5c9da12165fa08856a2c280579205e65f1bfdaaef744193887bac0e44eeeb926421426bc559ab18359128b04be95bb972ccfa2b5a83202823583e8b029ceb690968d9b023"]}, @generic="8baad6b73d4bd3a0ca1ce5a914ee77161275d050944a291af8d0db538b4777f4067657c6640009cffac35fa523c99eef82c9df037fc842fb6ab6258cd2c26e2f9806045127ceffacc304a829cf55317b4c9099db090d54a2083a8ab4ab394b5569a94a9fee04ea42a85bf6", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x287}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}, @OVS_FLOW_ATTR_KEY={0x70, 0x1, 0x0, 0x1, [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@loopback}, @generic="1c59c152faf94d8fe52bd4bfdf18f92c8018534a732b5ba30f071c3b39abff537489635155e9c2039e6255d0b978eaf2f079552d8471b42e887e068d77d6b67c6bfb6339bc7df54036b738b18bae8943721d305d28693762"]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x141, 0x2, 0x0, 0x1, [@nested={0xdd, 0x10d, 0x0, 0x1, [@generic="f358a1f9377dbb3c9e796ef69c0504f8c898356d6e311a61ab5171c6488f3a3add74b67aa5d78531be9a264fdb4426f09cf0ab05c61b896aa4e8ebd4d518ab55e12da7b4e007658b9eb39ea72419a556fef01818149390dc5130ff21eb1deb382013cf609f16581f42db88ee77424f2a519988b8dac07bfdce2e851b76c1d0db7ee3b512bb151353335840d56610175386b3a8531fd173a7426b58375aa25802801e72714c", @nested={0x4, 0x18}, @typed={0x4, 0xde}, @nested={0x4, 0xb0}, @typed={0x27, 0x8, 0x0, 0x0, @str='/sys/devices/virtual/mtd/mtd0/size\x00'}]}, @generic="6133141c9927ed31e24625e8db113c9ab3758294e017eb75755f9d3d9c87ce2111fe8f206e5133130b3df6d4fe08e8350fb228ec2ee20fe527f05f18b94eb25fda6e11764d77b1c1a4276a2db6d40b4c2f71bcc1e081a6115c28b49746"]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x8800}, 0x10008000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/size\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) 1m40.829539336s ago: executing program 38 (id=1832): mmap$auto(0x2000000000004, 0x3, 0x4000000000e3, 0x13, 0x401, 0x3) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0xffffffffffffffc0, 0x9, 0x7fffffff, 0x40000000000eb1, r0, 0x8000) connect$auto(0x3, 0x0, 0x40000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x216, 0x402000b, 0x2000006, 0xeb1, 0x401, 0x10001) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r3, 0x7d, &(0x7f0000000340)="6f48518673c52b419d9709dcdc480000006ac6eaf746b0343a2f370976afa97b82fd31cc448d8873a39d83383dc5fc4a0eb57d8f597ccd191802592579e447362e925b9636114d4c7485ad0a6273b39428b7077e6101607e33ac87a6b25e153ca341eb11d41f01d2ea973ee213471c0b68b3220bd08a759d6764", 0x8001) select$auto(0x8, &(0x7f00000001c0)={[0x5, 0x7fffffffffffffff, 0x0, 0x4, 0x9, 0x400, 0x1ff, 0x2, 0x8000, 0x1, 0xfd3f, 0x5, 0xffffffffffffffff, 0xf, 0x6, 0x100000001]}, &(0x7f0000000240)={[0x0, 0xffffffff, 0x1, 0x5, 0x8, 0x5, 0x8, 0xb, 0x1, 0x18, 0x4, 0x9, 0x3, 0x7ffffffb, 0x3, 0x1]}, &(0x7f00000002c0)={[0x5, 0xffffffffffffff7b, 0x1, 0x6, 0x1, 0xa19c, 0x7, 0x3, 0x6, 0xb, 0x1, 0x100000000, 0xffffffffffffffff, 0x7, 0x80, 0x400000000000000]}, &(0x7f0000000040)={0x0, 0xff}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x7}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) 1m27.513687578s ago: executing program 39 (id=1851): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) timerfd_create$auto(0x9, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000300)=""/251, 0xfb) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd, 0x400, @old_map_fd=0x3ff}, 0xa3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x7, 0x4}, 0x7f, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_tid_address$auto(&(0x7f00000000c0)=0xfffeffff) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r3) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000300)={0x4b0, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_MASK={0x2cc, 0x7, 0x0, 0x1, [@typed={0xc, 0xdb, 0x0, 0x0, @binary="544211c8fd6fc615"}, @generic="0ed696850eacc18e03540b1de053eab0685acffd7e383655dcfb5a58f9fe568c10c3cc9d2116f40cfcb5696735c0c3e28e01638a2120a4e1147a60b7003dd620b4e7f5cbc80ac60ba66dad88719fd8a9ff7f4dc533dc8203259bf98b6338eceb5dcd250ad63e74f7f6b7e082008761d31c10afaf7e4fa7becb9ce05160d3157756be585496103ee58bc91f8a3fe23632bb4a0d6fd6cd6bf7a37bfefbc8cac17066b470fabb064ed4550bddfa83a9228564cb4ea3a0e92cfe8f8bf7e61485d849906e46d8de0aac7253ba33de5699dfc93fd84de7386e93777b74d3264ebc76daf631a9e6c9", @nested={0x164, 0x88, 0x0, 0x1, [@generic="ae3d2e6d9b0e04dce1f0a83c42ef1a6a73cc7a9e92bb3574b258d25499dec0ec6ad65705d4b581a7a42e8e5e6df414137b0a3e9975fc3ed59427fe24b8f161659913e110fef8bbb23b817d083b41c25764c1b8709fd4c06c0ab7aba556dfd12014e850cba6542fd788ed20edd15b33eee706d885b74c636b41198eca1de9cd7919c86ca83c034751393749857b2200d43203e6f070ae4f560af52a7f257432f270b5fad4ead909ca990423506a9ec31b2812c9754b3f240bd852351bd39ec9d4a079ac0fd7fe771a124aa3c73328dffbc799966c", @nested={0x4, 0x139}, @generic="efe796ce1de588e5c8e1abe8e76c8dc3b0a4c24175dc0af0ff59e6dd2aa18e01ae74c97e55034a218c8c7cd657af6250b0a516fcc6f51c4d298f08db36dfe409e22577f5c9da12165fa08856a2c280579205e65f1bfdaaef744193887bac0e44eeeb926421426bc559ab18359128b04be95bb972ccfa2b5a83202823583e8b029ceb690968d9b023"]}, @generic="8baad6b73d4bd3a0ca1ce5a914ee77161275d050944a291af8d0db538b4777f4067657c6640009cffac35fa523c99eef82c9df037fc842fb6ab6258cd2c26e2f9806045127ceffacc304a829cf55317b4c9099db090d54a2083a8ab4ab394b5569a94a9fee04ea42a85bf6", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x287}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}, @OVS_FLOW_ATTR_KEY={0x70, 0x1, 0x0, 0x1, [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@loopback}, @generic="1c59c152faf94d8fe52bd4bfdf18f92c8018534a732b5ba30f071c3b39abff537489635155e9c2039e6255d0b978eaf2f079552d8471b42e887e068d77d6b67c6bfb6339bc7df54036b738b18bae8943721d305d28693762"]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x141, 0x2, 0x0, 0x1, [@nested={0xdd, 0x10d, 0x0, 0x1, [@generic="f358a1f9377dbb3c9e796ef69c0504f8c898356d6e311a61ab5171c6488f3a3add74b67aa5d78531be9a264fdb4426f09cf0ab05c61b896aa4e8ebd4d518ab55e12da7b4e007658b9eb39ea72419a556fef01818149390dc5130ff21eb1deb382013cf609f16581f42db88ee77424f2a519988b8dac07bfdce2e851b76c1d0db7ee3b512bb151353335840d56610175386b3a8531fd173a7426b58375aa25802801e72714c", @nested={0x4, 0x18}, @typed={0x4, 0xde}, @nested={0x4, 0xb0}, @typed={0x27, 0x8, 0x0, 0x0, @str='/sys/devices/virtual/mtd/mtd0/size\x00'}]}, @generic="6133141c9927ed31e24625e8db113c9ab3758294e017eb75755f9d3d9c87ce2111fe8f206e5133130b3df6d4fe08e8350fb228ec2ee20fe527f05f18b94eb25fda6e11764d77b1c1a4276a2db6d40b4c2f71bcc1e081a6115c28b49746"]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x8800}, 0x10008000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/size\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) 59.123769352s ago: executing program 1 (id=1941): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="95"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) write$auto(0xffffffffffffffff, 0x0, 0xfffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0xff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare$auto(0x40000080) mprotect$auto(0x110c230000, 0x1, 0x2) io_uring_setup$auto(0x8, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/uptime\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) timer_create$auto(0x3, 0x0, 0x0) 57.088471995s ago: executing program 1 (id=1946): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty38\x00', 0x301, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b4d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b2338", 0x60) (async, rerun: 32) setsockopt$auto_SO_BUSY_POLL(r0, 0x306, 0x2e, &(0x7f0000000000)='$\'%+#\'&(\x00', 0x2) (rerun: 32) pidfd_open$auto(0x1, 0x80) 56.807286477s ago: executing program 1 (id=1947): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x9, 0x0, [{0x40000072, 0x400, 0x2}]}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5], 0x1}, 0x58) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 56.511195264s ago: executing program 1 (id=1948): syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff) (async) symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 64) r0 = open(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x903080, 0x10) (rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd8\x00', 0x4e0dc3, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8095}, 0x404c081) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010024bd3000fedbdfa504"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000200)={0x68, 0xee01, 0x2}) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r6, 0x400c4d02, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ptrace$auto_ARCH_SHSTK_LOCK(0x80000001, 0x0, 0x7, 0x5003) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x1ffff) (async) socket(0xa, 0x2, 0x88) (async) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffe) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @loopback}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @remote}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xa010101}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private0}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast2}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) (async) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 54.86319087s ago: executing program 1 (id=1958): mknod$auto(0x0, 0x1001, 0x4) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) mmap$auto(0x1, 0x2020001, 0x0, 0x9d5, 0x8, 0x8004) r0 = socket(0x10, 0x2, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x70) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x33}}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(r0, 0x0, 0x80010002, 0x80a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/jfs/TxAnchor\x00', 0x80000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0xd6717874539153c5, 0x2, 0x3b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x500, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 52.987266875s ago: executing program 1 (id=1963): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.events.local\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000001680)={&(0x7f0000000680), 0x7}, 0x5) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) 37.847650084s ago: executing program 40 (id=1963): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.events.local\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000001680)={&(0x7f0000000680), 0x7}, 0x5) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) 7.946913165s ago: executing program 4 (id=2111): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x9) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x248083, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r2, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) 7.715606594s ago: executing program 2 (id=2114): madvise$auto(0x9, 0xa, 0x81) clock_gettime$auto(0x10, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) rseq$auto(&(0x7f0000000300)={0xe, 0x9, 0x0, 0x5fb, 0x6, 0x2}, 0x8000, 0x0, 0xa0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) socket(0x1d, 0x3, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readlinkat$auto(0x1, 0x0, 0x0, 0x16a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x101002, 0x0) write$auto(r1, 0x0, 0x73) write$auto(r0, &(0x7f00000007c0)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x81) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x2a4742, 0x0) socket(0x2, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/tty0/active\x00', 0x103280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003800)=""/168, 0xa8) ioctl$auto(0x3, 0x4040ae79, 0x38) close_range$auto(0x2, 0xa, 0x0) 7.421721249s ago: executing program 9 (id=2115): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xffffffffffffffff) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek$auto(r3, 0x7fd, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/vhci_hcd.4/usb17/17-0:1.0/usb17-port5/power/runtime_suspended_time\x00', 0x282307, 0x0) sendfile$auto(0x1, r4, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={r0, @new_map_fd=r1, 0x4007, @old_map_fd=r2}, 0xa3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r6 = getsockopt$auto(r0, 0x4, 0x4, &(0x7f0000000040)='/sys/d\x00\x10\x00\x00\x00\x00\x00\x00ci0000:00/w!iting_\x05\x00\x00\x00supplier\x00', &(0x7f0000000180)=0x9) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x1, 0x3, 0xa) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r8 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/options/blk_classic\x00', 0x4000, 0x0) socket(0x10, 0x2, 0x6) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)="dc6f97ae4009e0f9c4fc643f5b", 0xfc2}, 0x4, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400e) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r9 = ioctl$auto_TUNSETNOCSUM(r5, 0x400454c8, &(0x7f00000001c0)=0x8) bpf$auto(0x101, &(0x7f0000000280)=@bpf_attr_0={0xa, 0x200000b8, 0x1, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, r9}, 0xf) connect$auto(r11, &(0x7f0000000240)=@can={0x1d, r10}, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r12 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r12, &(0x7f0000000180)={{&(0x7f0000000040), 0xbb, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x208008) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(r6, 0x0, 0x8, 0x0) 6.840544904s ago: executing program 9 (id=2116): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) write$auto(r0, 0x0, 0x2000000003) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r3 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(0x0, 0x401, 0x9, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr15/ifindex\x00', 0x40800, 0x0) 6.382400783s ago: executing program 4 (id=2118): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20001, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) socket(0xa, 0x6, 0x1) write$auto(0x3, 0x0, 0xffd8) bind$auto(0xffffffffffffffff, 0x0, 0x6a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r5 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r5, 0x11) r6 = getpid() pidfd_open$auto(r6, 0x0) setresuid$auto(0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000003640)={0x1c}, 0x0, 0x0, 0x8) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_DETACH(0x11, r0, 0x200000000000004, 0x2000000a) 4.390545284s ago: executing program 2 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x5, 0x8001, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x0, 0xdfdfffff, 0x10, 0xd59, 0x200000000fb, 0xff, 0x6, 0x108000005]}, 0x0, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) bpf$auto(0x1, &(0x7f0000000000)=@task_fd_query={0x0, r0, 0x3, 0x3ff, 0x100, 0x5, r0, 0x80000003, 0x796e}, 0x100000cf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x29, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40800) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x15}, 0xffff8000}, 0xfffffff9, 0xe8, 0x0) (async) ioctl$auto(r2, 0x89f2, 0x24) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='OYM8', @ANYRES64, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x11) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x5, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0xf, 0x5, 0x730) r7 = getsockopt$auto(r6, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) (async) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x1, 0x0) (async) r8 = socket(0x18, 0x5, 0x1) connect$auto(r8, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r7) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000459292826ebc40d8fc9a0bf19d0aeb6a4ee9f053c855a8874b6d000000a608954fca7d60633e08c0b83577f90558b75b0879f12b215dc5b284e403e9e4363e29ac532a82c7fbe460a8f326ce9c8bacc817628149d483199f906c49b03d31ca0d1131066e93e1f414aaac0f6aef62745de7fba6653a126a72f91b", @ANYRES16=r9, @ANYBLOB="000826bd7000fbdbdf255d0000000400d100"], 0x18}, 0x1, 0x0, 0x0, 0x842c7ca5b82c509c}, 0x4040000) 4.289056653s ago: executing program 5 (id=2121): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x6fa100, 0x0) mmap$auto(0x0, 0x0, 0x8000000000000000, 0x9b72, 0xffffffffffffffff, 0x8) (async) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x610000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bus/usb/004/001\x00', 0x101902, 0x0) (async) r3 = socket(0x2, 0x6, 0x106) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r1, 0xd) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9684, 0x100000000000003, 0x95f4da0a, 0x9, 0x3, 0x62, 0x8, 0xa, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0e0026bd7000fcdbdfd6b206001b004e230d00080011001df4000009004946d3420624872600000505000000000000003600"], 0x38}}, 0x810) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x5, 0x3, 0x1, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x7, 0x2, 0x8000000000000006]}, 0x0) (async) ioctl$auto_FS_IOC_GETFSUUID(r3, 0x80111500, 0x8) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) r4 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e00", @ANYRES16=0x0, @ANYBLOB="d438d8f47e11080025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) fanotify_init$auto(0x8, 0x2000000000002) (async) mkdir$auto(0x0, 0x6) (async) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) (async) mmap$auto(0x7f, 0x6, 0x2, 0xfd5, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) (async) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) 4.096322791s ago: executing program 9 (id=2122): r0 = syz_clone(0x14282991, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="02032dbd7000fedbdf252e0000000400018030000180140002007663616e30000000000000", @ANYRES32=r0, @ANYBLOB="0800030000", @ANYRES32=0x0, @ANYBLOB="bf5a7d726f28705c92c7c0fe8a5f82b121799dee0679950c8b212a7386bc8f34f3da6c9f8f3ac12051dcd07d3e2750ad43dc92b1ad5e755cef689b302a73ca1f567aaaac89a3f982279ad01117db714bc0b4ccebcf354c8ec1e43e380f3403a20f43174ab984fa44e02b24e1bead82b7", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="180001801400020076657468305f74", @ANYBLOB="a25ad69f22e67d5fd0cc457bb5f260fd077a2aa48da628b9e659b9704bfc40250d5a3b54f7a6eb9a7ba67d1c0649c2b7840b030b6526a638a776a9f2850beebf1c5138", @ANYRES32, @ANYRES32=r1, @ANYBLOB="08000100", @ANYBLOB="f59a17badcf52645a42a1f1ece4e92a0c24240fc19153deaf5d250628e10e0a8fb8b620a"], 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x4e8080, 0x4a) pipe2$auto(&(0x7f00000001c0), 0x3ff) (async) r3 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clone$auto(0x20003b45, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8001) (async) mmap$auto(0x80000000000, 0x2, 0x5, 0xeb1, 0x401, 0x8) socket(0x11, 0x5, 0x9) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, 0x0) (async) ioctl$auto_SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f00000000c0)="f56a") (async) ioctl$auto_SNDCTL_TMR_TEMPO(r4, 0xc0045405, 0x0) 3.969235003s ago: executing program 4 (id=2123): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = io_uring_setup$auto(0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x6}, @NL80211_ATTR_CSA_IES={0x28, 0xb9, 0x0, 0x1, [@nested={0x21, 0xe7, 0x0, 0x1, [@generic="81ce439a299b4662c8bdc7d55bb53a9c2095aedb2695ff49ef", @nested={0x4, 0xcd}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004040}, 0x80) 3.723203431s ago: executing program 9 (id=2124): timer_settime$auto(0xffffffff, 0xb, &(0x7f00000000c0)={{0x400000000f, 0x10008}, {0x9, 0x2}}, 0x0) (async, rerun: 64) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) (rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = fcntl$auto(r0, 0x20004, 0xa553) (async, rerun: 64) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (rerun: 64) getsockopt$auto_SO_MEMINFO(r1, 0xb, 0x37, 0x0, &(0x7f00000000c0)=0x6) (async) getsockopt$auto_SO_ACCEPTCONN(r0, 0x800, 0x1e, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) (async, rerun: 64) write$auto(0x3, 0x0, 0xffda) (async, rerun: 64) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socket(0xb, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop10\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="0800060065ced0c5e4bb7549be836788d5f414340df3b394c5ddf44ad4fdf8aa6bc4d69a6a1a09509fbcee001ee7d5f3b8d01a1a4701981a6ac23b65d27739fa34ef5078a9018d37a404b5a9f2c90a6c76da5a80483d8ececbf0a70328d2e8b41981363f2278ede7351d5483ff85f5dc312d2bad5a5b039a1ba2cc681d5151fdf3e7392054c73950", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r7, 0x0, 0x0) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 3.020567241s ago: executing program 5 (id=2125): r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c102, 0x0) fcntl$auto_F_SETLKW(r0, 0x7, 0x200) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = fcntl$auto_F_GETOWN(r0, 0x9, 0xd) r3 = set_tid_address$auto(&(0x7f00000000c0)=0x2) shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000000280)={{0x3, 0xffffffffffffffff, 0xee00, 0x0, 0x10001, 0x5, 0x4e}, 0x6, 0x5, 0x1, 0x2, @raw=0x2, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000100)="a6aa86eb6d1164939eb096da501b84113290f4c19bf13fa460b0b3d8d218c0c9301f37f84258fff5ed7242132635d506277ab060b2a05da50a7ce2df7269813dd0ea0efd2f4611e627ae0b758953255fa63e8d591f875563ec", &(0x7f0000000180)="8f1e5a1e41c39aee6f8360c72fcae2fb512127b5b0a106d2ed5a3bde8e9e48a55fd243d151712d0e83b3fb3ef6693bd800f1d25feb3563557f7ef4d6f07c914480ef673e8b459e8fac7c62a325b5bc25563fd40b678981988198f145c4a134ad968d934a4da77065d5529fea53d8047a805b1d33881b3fb284de966d0af9dd5a16016edbffcb03ee08fea375dac72240138e3f3f745f88211dddb59d918d530d3629da72d4106f947a5c08bac923d292fc1d76828cf15583678e0b2bc015049fe748d5e03d4c38f1e73834d1751a7cd7"}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000300)={0xb7c, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x14, 0x10d, "6c182d052238c02953b836b9f4613a1e"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x7f}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_BEACON_TAIL={0x89e, 0xf, "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"}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x292, 0x25, 0x0, 0x1, [@nested={0x19d, 0x52, 0x0, 0x1, [@generic="c8ed74b9e20f9cf6c465a797c1cd7cd789158cf362f7575406897ecf12be0eb1679ac6ff327c24d31508ab086ec31e4e56063792c09fc54b5b392e26fd121fa102d659a9e39434089d19007216e610254b03959de5104331803a1a6fd651d217cb6a195e857d87af11b68c91de22f6549570e1093e5027240255d31a00dc61c8242b78d15c34ca520a62ae424844f4b9e082b84b7aaad4ec696e43f598bc283d6d7962f2c16396355b49b2edc99a5c4ec799f4a831b00a0a052d6001e7bb241e717aee1a9d42", @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x6c, 0x0, 0x0, @pid=r3}, @generic="f38d6f0322bc535b60d78577cbb9cbcce1b07a9652d156e0297474afc277a0ed5d75759a51e864abffc7e86d265c952ef2e831815e15c8e315d613a9d327ba607a9a0c73aa3518eac962a49c52eb118b6256aa7950bd5d7e628506bfab306d154138a0bd64cf5324bc8db623f05444c4b416e7d5cc98aed9e0a29d1a5c8266ef516e84c5b83b0660f37798e035751c26f0d2ce12d74f3d515768d636e63e64a7d64d49c7da4dec485988a7", @nested={0x4, 0x7}]}, @generic="332c0ed3401d78b07108507795d073474495dd8004a1f2b2bd954f969c5eb716f860396b3aaad9b2166c096fac9a0076b47f7081c518b278940f15a9ce932d93d5f13927ff519c70dfcdeb8f997af352ed04f12c4dc61a89a876a5948c3730c2bbd96c36cdb50244a4dbc7d8a8de8c6257caaeb13cfc77c7619952bea91f4712ce7fa5cd43db9d4827023c9cf7e5b0a0988c62f83b68884b334ba4dd2b5afcf059748f5a7515", @nested={0x48, 0x110, 0x0, 0x1, [@nested={0x4, 0x8b}, @typed={0x8, 0x13, 0x0, 0x0, @uid=r4}, @typed={0x37, 0x122, 0x0, 0x0, @binary="5119186070fcaf5414c209e95a0a29973df08ec2694707984386c22df792b71a53bcdeb5a6ccd5d0af8f04eff0fb9ca781ea51"}]}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x5}]}, 0xb7c}, 0x1, 0x0, 0x0, 0xdcfff3c6d6421e5}, 0x80) r5 = ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, &(0x7f0000000f00)=0x4) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r5, 0xc0085504, &(0x7f0000000f40)={0x1, 0xe264, 0x6, "4f0c6548702a767ea71b6ce25fd28a0b12ae40c3247f72e6fc2158aa47c336bb7baf1d7c4f7bc3460ea2864052516af7263216a8cb3458a066333cb29b88a3f86a2cb7ac9fb3dfe03152c76c2be625997d8fe6fa4bf788842a15b1457ead467cf95b605c052ac4dc4ebab16b014f9d6bcb418bd4efc1c010e32bcab46d6acf42563bd4c5206c477675de284353cdd0b0181f12e314a0c22998f6df447f3a82c2eeb11f2ff4d4928b3167b12e0df939b8fe66c4712af62f945b4d5a5abd6a54887df036512cdd0bd604506a3e429c61d128e3776fc2e2"}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) r7 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0) ioctl$auto(r7, 0x340285a8, r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001100), r5) sendmsg$auto_NCSI_CMD_PKG_INFO(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r9, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r6}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x10) r10 = open_tree$auto(r5, &(0x7f0000001200)='./file0\x00', 0x9) r11 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x4ca700, 0x0) setsockopt$auto_SO_KEEPALIVE(r11, 0x9, 0x9, &(0x7f0000001280)='NCSI\x00', 0x9f) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f00000012c0)="6a829fb29911263da680581ced203184c1b4be95d8adc008bcb7ab6a901a47a43db585a51ffb72c49d5d4a5e670b045521ffa46118bdf79e4da737a89ade0b8963436d1584426c866620ec98e95e483aa9e8f19f97ef", 0xd5ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001340)='/sys/devices/platform/vivid.0/video4linux/vbi11/power/control\x00', 0x8901, 0x0) mmap$auto(0xfffffffffffff001, 0x4000000000, 0x4, 0x19, r8, 0x7) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000013c0)={0x164, r9, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NCSI_ATTR_PACKAGE_LIST={0x14e, 0x2, 0x0, 0x1, [@nested={0xc1, 0x2d, 0x0, 0x1, [@generic="34a782ff84c8a085a0feb00888a871b66914a03ab081dc4e0d52a209e8144ea6b8900b476d6a70abcf798c9268d4a1eb2876b18132f9bce2d03399bd507063b2303920ba201a45851710c941ee4057c75edf38b18b3ef5c182f9d24bafbf5d1e613736c8547af2c2595fafde69f9ea96ad2eef7a85437f9f2e75c8a6e0cfe7ad25e3f52803e332302f6e36d47997c75c24b77bf57378e999110c7bab4c7f819d02464e9b552551ffb04055c523c1de81bc4c23d068fcbd20853cc59538"]}, @typed={0x4, 0xeb}, @generic="de452738f9272116f80d76f019f9473b8253afa0b2b3a64658629c21aacea31591109c2a9fa989bf28a8aa77f9f028003591cf8d9d2638a02b282fd5750408ac2963ceea66a4fdb4303050a4697609ee76f8dbd64950b17a211a0f7913b18475e823dddaa30648b23b57ce3f121843ca866854583cd2c0abbb9106eb90152439e4c6"]}]}, 0x164}, 0x1, 0x0, 0x0, 0x444}, 0x0) setsockopt$auto_SO_PROTOCOL(r10, 0x3, 0x26, &(0x7f00000015c0)='\x00', 0x3) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001640), r8) sendmsg$auto_SMC_PNETID_ADD(r12, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r13, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0xd, 0x1, '/$@*-{$/\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x1) fcntl$auto_F_SETFD(r7, 0x2, 0x7fff) sendfile$auto(r11, r12, &(0x7f0000001740)=0x3, 0x5) r14 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000017c0), r8) sendmsg$auto_OVS_METER_CMD_DEL(r5, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0xc4, r14, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x9aa1}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x6}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x4}, @OVS_METER_ATTR_BANDS={0x8f, 0x4, 0x0, 0x1, [@generic="751b737e321136c119a3679d92f96556c6152a109b71c0ae8bdc2b9869f813ec7e89b504b0a9f311d22c030f84799ff8a3093e728f6001916af7dc3ac91a0ba2fcf9779c0de34265f5e8d9c0fbc8d4cd1b9a69486e3ee5d7160f2d8704c02ef5c9dd864030d3f960dfbf45bfefe009330c614433a016ee1d7d17fd4c0d4e604ac9cc67e1e58c2d13e73a04"]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x14040040}, 0x4040004) 3.019294696s ago: executing program 2 (id=2126): mmap$auto(0xa, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x60005}, 0x20004840) symlink$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x10000003, 0x100000000e1, 0x9b72, 0x2, 0x7bffffffffffffff) clone$auto(0x20003b46, 0x3, 0x0, 0x0, 0x2) open(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400001, 0x54) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x41180, 0x0) socket(0x1f, 0x5, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x6, 0x1) socket(0x2, 0x801, 0x100) mmap$auto(0x49, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r1, 0x4b3a, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 2.645977985s ago: executing program 5 (id=2127): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(0xffffffffffffffff, 0x40100, 0xc7a9, 0x7) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file0\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) mmap$auto(0x0, 0x7, 0xffffffff, 0x9b7f, 0x2, 0x20000000000002) getpgrp(0x0) prctl$auto_PR_SET_MEMORY_MERGE(0x43, 0x1, 0x7, 0x16e7, 0x92e) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) epoll_create$auto(0x20009) mmap$auto(0x0, 0x2, 0x2, 0x40eb2, 0x401, 0x4d74) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r0 = socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r1, &(0x7f0000003600)={0x0, 0x2}, 0x8) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r2, &(0x7f0000000040)="4a02000000d2adc24596a4e1eded0e91b86c69b6b42ed642438b9d9b81d8e6ecd000000100"/46, 0x2e) r3 = socket(0x22, 0x5, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@link_update={0xffffffffffffffff, @new_map_fd=r0, 0x7, @old_prog_fd=r2}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r3, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 2.539203447s ago: executing program 9 (id=2128): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 2.119250491s ago: executing program 5 (id=2129): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x25, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x11, 0x80003, 0x300) socket(0x2b, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1, &(0x7f0000000340)="7b598f00b034423fc0f7fd20d64376bfddaecbb322dc1b0257af35a91e3a3c6f1e3da17e18357e3279ca1e77788dbc5ea2dd12c8f62828f13b0e60a4501a319806730e5a3cebf9792317bdfb7bf0b8160b8568b1aff7489b440a8c16c0d91ee16b", 0xd880bb6) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) shmget$auto(0x0, 0x0, 0xa) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x72042, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/dev_snmp6/veth0_to_hsr\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 1.875590896s ago: executing program 2 (id=2130): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_PEERSEC(r0, 0x1, 0x1f, 0x0, &(0x7f00000004c0)=0xffff7fff) socket(0x2, 0x801, 0x106) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/48, 0x30) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) ioperm$auto(0x7, 0x6, 0x2) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x4, 0x4000000000df, 0x450, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) creat$auto(0x0, 0x1000) getsockopt$auto_SO_PREFER_BUSY_POLL(r4, 0x7afa, 0x45, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="80050000e1f0ffff0700000008000000040000005003000003000000feffffff080000000100000009000000"]) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.4/usb17/17-0:1.0/usb17-port8/disable\x00', 0xda1a860a6b6371c7, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="09032fbd7000fabfdf25f7000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.525152402s ago: executing program 5 (id=2131): mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r1 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) inotify_init1$auto(0x8) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) pidfd_open$auto(0x1, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) accept$auto(r2, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) 1.281178681s ago: executing program 4 (id=2132): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x20480, 0x0) read$auto_mISDN_fops_timerdev(r0, 0x0, 0x0) r1 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000000)=0x4) ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)={0xfff3, &(0x7f00000000c0)={0xfff7, 0x7, 0x4, @inferred=r1}}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(r0, r2, 0x0) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x2024009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/dma\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x3) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) tee$auto(r1, r3, 0x7, 0x1) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 1.267069718s ago: executing program 9 (id=2133): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) 917.394664ms ago: executing program 4 (id=2134): mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) setreuid$auto(0x3, 0x7) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) getsid$auto(0x0) (async) r1 = getsid$auto(0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000000080)={0x1264, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_PEER={0x1143, 0x28, 0x0, 0x1, [@generic="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", @nested={0x4, 0x22}, @generic="55fb9c24cbe64d6cb6c3904a221d167339d814ccdb50fbd155c1a83a97f163477fb5adc1", @generic="7f8d5b60be7339f38ede9fbc5cf3d89c90e54988e9f014af2a3a608d62672c32b4e0830315a94a122ec20927730175f59c35eac4130a1afb0e3acd5a48976e7411b132cf23a6b0073347322dc085adf6c4b6daff410498e621212fb3c9ac", @nested={0x14, 0xc, 0x0, 0x1, [@typed={0xc, 0x12e, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x4b}]}, @nested={0x37, 0x151, 0x0, 0x1, [@generic="7f363ff39f5f3470b706671b1897b5a7427400192afe53c3a2940e26fa9ac4d1bbe0de", @typed={0x8, 0x10b, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x3}, @nested={0x4, 0x111}]}, @generic="861aee5212c33faa11651454740f43fd02ab80671453694f5e313f119a196140e46f227167140d448d50814aa1281b25ffb47a82ae0af9de1decdc2e90a4ba49bebef04efe68689e2487863f03f6c12dd1ae6ded9a7fe030c4c5eefe4fcbce435201c9cc2fc2fe9df71a60fbd7"]}, @NL802154_ATTR_SEC_LEVEL={0xea, 0x2d, 0x0, 0x1, [@generic="50149e0b2c3932d891462239ef9a6f54fd4958bc99ae48f79f968c7af07ba5761d539322b148426fc160259dcb69384fe588409b3b402e567d3fd49857be36b08b852b520effed2c567ee4fc9c711e9fc0cb2f4396a503411f78f9e7648864557ddf42c2bd541e6ba83b5a2f05b49e3491faab3fa73bf0fe1b93d00c5ffaaf3d43e2a73318ec18395acbd2e3aaf05899da5f35ce67edb86885afc179a90a5252cb70d2400d782f9ae24f37bce350710250e5799822a89cbe0a8d414958fd17a3adafb528ff2bca491f95a6853b644ed081f45f97bc40c39e92bbde9eb95a151ae5b6d454e717"]}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x2b}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x80}]}, 0x1264}, 0x1, 0x0, 0x0, 0x40040}, 0x1) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) 652.104353ms ago: executing program 2 (id=2135): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0) writev$auto(r1, &(0x7f0000000c00)={0x0, 0x7}, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x400000000008) writev$auto(r0, &(0x7f0000000100)={0x0, 0x407114}, 0x8) 467.283866ms ago: executing program 4 (id=2136): r0 = socket(0x10, 0x2, 0x14) (async) request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000000)='!&$$\x00', &(0x7f0000000040)='^\x00', &(0x7f0000000180)='\x89\xd5\xa5t\xb4*\xfb\f\xd3=iy\x179\x9e\x12', 0xfffffffffffffff8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000714af"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r2 = socket(0x11, 0x3, 0x9) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (rerun: 64) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d2", 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) shmctl$auto_IPC_INFO(0x28, 0x3, &(0x7f0000000100)={{0x5, 0xffffffffffffffff, 0xee00, 0x8, 0x6, 0xc, 0x400}, 0x3, 0x4, 0x3, 0x0, @inferred, @inferred, 0x3ff, 0x0, &(0x7f0000000000)="6f1d25f1c4986a312c79e0dc18f1a4b318719cad6af7aa44008616cbada1599b7d5589bdc8e166abd3dec93d886bd04d6a2401e4d7aeba0d83a35a7328529b", &(0x7f0000000080)="5d0c171d4281cce7ee412afe5d2c8b759daa13023c53a9c98eb0593823bcb04ad7b8988730018ce68a1ea264009bc16f256f6eb7b49891166bc13bf2b0de33fe42307ecd3f8257f6"}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/nr1/uevent\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x2400000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) prctl$auto(0x41, 0x2, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)="7f0d40") (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xf, 0x3, 0x2) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x2, 0x0) read$auto_proc_auxv_operations_base(r1, &(0x7f00000004c0)=""/82, 0x52) epoll_create$auto(0x8) 228.98498ms ago: executing program 5 (id=2137): mmap$auto(0x0, 0x4020009, 0x2, 0x200000000000f5, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa2102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(r0, 0x0, 0x2) 0s ago: executing program 2 (id=2138): mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x20000881) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) close_range$auto(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (async) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000002440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x4000000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) close_range$auto(0x2, 0xa, 0x0) (async) memfd_secret$auto(0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) r4 = socket(0xf, 0x3, 0x2) sendmmsg$auto(r4, 0x0, 0x3, 0x5) kernel console output (not intermixed with test programs): region+0x2271/0x2a00 [ 551.048618][T13647] ? __lock_acquire+0x436/0x2890 [ 551.048635][T13647] ? __pfx___mmap_region+0x10/0x10 [ 551.048664][T13647] ? lock_acquire+0x179/0x330 [ 551.048689][T13647] ? finish_task_switch.isra.0+0x207/0xbd0 [ 551.048757][T13647] ? rcu_is_watching+0x12/0xc0 [ 551.048788][T13647] mmap_region+0x1ab/0x3f0 [ 551.048811][T13647] ? __get_unmapped_area+0x267/0x3f0 [ 551.048840][T13647] do_mmap+0xa3e/0x1210 [ 551.048871][T13647] ? __pfx_do_mmap+0x10/0x10 [ 551.048899][T13647] ? __pfx_down_write_killable+0x10/0x10 [ 551.048922][T13647] vm_mmap_pgoff+0x29e/0x470 [ 551.048952][T13647] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 551.048982][T13647] ? __x64_sys_futex+0x1e0/0x4c0 [ 551.049002][T13647] ? __x64_sys_futex+0x1e9/0x4c0 [ 551.049026][T13647] ksys_mmap_pgoff+0x7d/0x5c0 [ 551.049051][T13647] ? xfd_validate_state+0x61/0x180 [ 551.049068][T13647] ? __pfx_ksys_write+0x10/0x10 [ 551.049096][T13647] __x64_sys_mmap+0x125/0x190 [ 551.049121][T13647] do_syscall_64+0xcd/0xf80 [ 551.049149][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.049168][T13647] RIP: 0033:0x7f8d8ad8f7c9 [ 551.049184][T13647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.049202][T13647] RSP: 002b:00007f8d8bb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 551.049220][T13647] RAX: ffffffffffffffda RBX: 00007f8d8afe5fa0 RCX: 00007f8d8ad8f7c9 [ 551.049231][T13647] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 551.049242][T13647] RBP: 00007f8d8ae13f91 R08: 0000000000000405 R09: 0000000000008000 [ 551.049253][T13647] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 551.049264][T13647] R13: 00007f8d8afe6038 R14: 00007f8d8afe5fa0 R15: 00007ffd87bf0938 [ 551.049291][T13647] [ 551.865244][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 552.352831][T13663] FAULT_INJECTION: forcing a failure. [ 552.352831][T13663] name failslab, interval 1, probability 0, space 0, times 0 [ 552.435503][T13663] CPU: 0 UID: 0 PID: 13663 Comm: syz.5.1531 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.435536][T13663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.435543][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.435553][T13663] Call Trace: [ 552.435559][T13663] [ 552.435567][T13663] dump_stack_lvl+0x16c/0x1f0 [ 552.435599][T13663] should_fail_ex+0x512/0x640 [ 552.435619][T13663] ? kmem_cache_alloc_noprof+0x62/0x770 [ 552.435643][T13663] should_failslab+0xc2/0x120 [ 552.435671][T13663] kmem_cache_alloc_noprof+0x83/0x770 [ 552.435693][T13663] ? __proc_create+0x2c8/0x8d0 [ 552.435721][T13663] ? __proc_create+0x2c8/0x8d0 [ 552.435743][T13663] __proc_create+0x2c8/0x8d0 [ 552.435768][T13663] ? __pfx___proc_create+0x10/0x10 [ 552.435791][T13663] ? __lock_acquire+0x436/0x2890 [ 552.435810][T13663] ? _raw_write_unlock+0x28/0x50 [ 552.435840][T13663] ? proc_register+0x559/0x8b0 [ 552.435866][T13663] proc_create_reg+0x7d/0x180 [ 552.435893][T13663] proc_create_data+0x86/0x110 [ 552.435918][T13663] ? __pfx_proc_create_data+0x10/0x10 [ 552.435951][T13663] gss_svc_init_net+0x2ec/0x660 [ 552.435975][T13663] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 552.436005][T13663] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 552.436031][T13663] ops_init+0x1e2/0x5f0 [ 552.436059][T13663] setup_net+0x11d/0x3a0 [ 552.436083][T13663] ? __pfx_setup_net+0x10/0x10 [ 552.436106][T13663] ? lockdep_init_map_type+0x5c/0x270 [ 552.436133][T13663] ? mutex_init_lockep+0x110/0x150 [ 552.436155][T13663] copy_net_ns+0x351/0x7c0 [ 552.436183][T13663] create_new_namespaces+0x3ea/0xab0 [ 552.436213][T13663] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 552.436241][T13663] ksys_unshare+0x45b/0xa40 [ 552.436270][T13663] ? __pfx_ksys_unshare+0x10/0x10 [ 552.436300][T13663] ? xfd_validate_state+0x61/0x180 [ 552.436324][T13663] __x64_sys_unshare+0x31/0x40 [ 552.436339][T13663] do_syscall_64+0xcd/0xf80 [ 552.436367][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.436386][T13663] RIP: 0033:0x7f6a9798f7c9 [ 552.436401][T13663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.436420][T13663] RSP: 002b:00007f6a9877c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.436438][T13663] RAX: ffffffffffffffda RBX: 00007f6a97be5fa0 RCX: 00007f6a9798f7c9 [ 552.436450][T13663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 552.436461][T13663] RBP: 00007f6a97a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.436471][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.436489][T13663] R13: 00007f6a97be6038 R14: 00007f6a97be5fa0 R15: 00007ffe4f7ed888 [ 552.436512][T13663] [ 553.927735][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.757026][T13711] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 555.997125][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.067204][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.266841][T13771] ubi0: attaching mtd0 [ 558.381500][T13771] ubi0: scanning is finished [ 558.943524][T13771] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 559.182212][T13771] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 559.400935][T13771] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 559.537845][T13771] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 559.640532][T13771] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 559.774345][T13771] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 559.968396][T13771] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2289233335 [ 560.136377][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.171056][T13771] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 560.344348][T13786] ubi0: background thread "ubi_bgt0d" started, PID 13786 [ 560.934187][T13805] random: crng reseeded on system resumption [ 562.215270][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.691511][T13863] TCP: TCP_TX_DELAY enabled [ 564.021799][T13859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.244335][T13859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 564.274080][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 564.499273][T13859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.742576][T13859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.900362][T13859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 565.170258][T13859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 565.787075][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 566.511503][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 566.524527][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.531026][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.741049][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 567.220307][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 567.226403][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.305310][T13896] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 567.870042][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 568.810329][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 569.288093][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.294786][T13859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 569.345801][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.433535][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.463707][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.479856][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.500123][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.520749][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.540755][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.559933][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.581646][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.601556][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.628307][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.650923][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.668587][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.693759][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.711396][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.727878][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.747232][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.767167][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.786860][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.806787][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.830289][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.846838][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.866893][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.884811][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.903227][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.921955][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.939749][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.960363][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.978715][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.998781][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 570.018862][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 570.037032][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 570.058538][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 570.085763][T13859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 571.248076][ T30] audit: type=1800 audit(4294970686.301:24): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1591" name="lu_gp_id" dev="configfs" ino=53945 res=0 errno=0 [ 571.361222][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.368505][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 573.426811][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 574.053935][T14018] FAULT_INJECTION: forcing a failure. [ 574.053935][T14018] name failslab, interval 1, probability 0, space 0, times 0 [ 574.152652][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.3.1605 Tainted: G U L syzkaller #0 PREEMPT(full) [ 574.152686][T14018] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 574.152693][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.152705][T14018] Call Trace: [ 574.152711][T14018] [ 574.152720][T14018] dump_stack_lvl+0x16c/0x1f0 [ 574.152753][T14018] should_fail_ex+0x512/0x640 [ 574.152774][T14018] ? kmem_cache_alloc_noprof+0x62/0x770 [ 574.152800][T14018] should_failslab+0xc2/0x120 [ 574.152828][T14018] kmem_cache_alloc_noprof+0x83/0x770 [ 574.152849][T14018] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 574.152873][T14018] ? fput+0x70/0xf0 [ 574.152889][T14018] ? new_userfaultfd+0x7b/0x490 [ 574.152917][T14018] ? new_userfaultfd+0x7b/0x490 [ 574.152940][T14018] new_userfaultfd+0x7b/0x490 [ 574.152965][T14018] __x64_sys_userfaultfd+0x4b/0xb0 [ 574.152992][T14018] do_syscall_64+0xcd/0xf80 [ 574.153020][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.153039][T14018] RIP: 0033:0x7f8d8ad8f7c9 [ 574.153053][T14018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.153079][T14018] RSP: 002b:00007f8d8bb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 574.153097][T14018] RAX: ffffffffffffffda RBX: 00007f8d8afe5fa0 RCX: 00007f8d8ad8f7c9 [ 574.153109][T14018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 574.153119][T14018] RBP: 00007f8d8ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.153130][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.153140][T14018] R13: 00007f8d8afe6038 R14: 00007f8d8afe5fa0 R15: 00007ffd87bf0938 [ 574.153162][T14018] [ 575.495552][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 575.794703][T14055] FAULT_INJECTION: forcing a failure. [ 575.794703][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 575.844514][T14055] CPU: 0 UID: 0 PID: 14055 Comm: syz.5.1615 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.844554][T14055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.844562][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.844573][T14055] Call Trace: [ 575.844579][T14055] [ 575.844587][T14055] dump_stack_lvl+0x16c/0x1f0 [ 575.844618][T14055] should_fail_ex+0x512/0x640 [ 575.844638][T14055] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 575.844665][T14055] should_failslab+0xc2/0x120 [ 575.844693][T14055] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 575.844716][T14055] ? __d_alloc+0x35/0xa80 [ 575.844749][T14055] ? __d_alloc+0x35/0xa80 [ 575.844777][T14055] __d_alloc+0x35/0xa80 [ 575.844807][T14055] d_alloc_pseudo+0x1c/0xc0 [ 575.844828][T14055] alloc_file_pseudo+0xcf/0x230 [ 575.844850][T14055] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 575.844870][T14055] ? alloc_fd+0x471/0x7d0 [ 575.844899][T14055] sock_alloc_file+0x50/0x210 [ 575.844927][T14055] __sys_socket+0x1c0/0x260 [ 575.844942][T14055] ? fput+0x70/0xf0 [ 575.844958][T14055] ? __pfx___sys_socket+0x10/0x10 [ 575.844975][T14055] ? xfd_validate_state+0x61/0x180 [ 575.844991][T14055] ? __pfx_ksys_write+0x10/0x10 [ 575.845020][T14055] __x64_sys_socket+0x72/0xb0 [ 575.845036][T14055] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.845063][T14055] do_syscall_64+0xcd/0xf80 [ 575.845091][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.845116][T14055] RIP: 0033:0x7f6a9798f7c9 [ 575.845132][T14055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.845157][T14055] RSP: 002b:00007f6a9877c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 575.845175][T14055] RAX: ffffffffffffffda RBX: 00007f6a97be5fa0 RCX: 00007f6a9798f7c9 [ 575.845187][T14055] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000000010 [ 575.845197][T14055] RBP: 00007f6a97a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.845208][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.845218][T14055] R13: 00007f6a97be6038 R14: 00007f6a97be5fa0 R15: 00007ffe4f7ed888 [ 575.845242][T14055] [ 577.394983][T14071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.463156][T14071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 577.565497][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 577.586674][T14071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.691952][T14071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.786470][T14071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.164521][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 579.476958][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 579.546308][T14101] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1627'. [ 579.635778][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 579.715471][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 579.799256][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 580.135221][T14117] zswap: compressor not available [ 580.899084][T14129] usb usb37: usbfs: process 14129 (syz.3.1634) did not claim interface 0 before use [ 581.862722][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.553378][T14175] input: f¬ as /devices/virtual/input/input24 [ 583.170637][T14187] can: request_module (can-proto-3) failed. [ 583.225462][T14188] can: request_module (can-proto-3) failed. [ 583.862126][T14197] FAULT_INJECTION: forcing a failure. [ 583.862126][T14197] name failslab, interval 1, probability 0, space 0, times 0 [ 583.933625][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 583.961780][T14197] CPU: 0 UID: 0 PID: 14197 Comm: syz.5.1651 Tainted: G U L syzkaller #0 PREEMPT(full) [ 583.961816][T14197] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 583.961824][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.961835][T14197] Call Trace: [ 583.961842][T14197] [ 583.961849][T14197] dump_stack_lvl+0x16c/0x1f0 [ 583.961882][T14197] should_fail_ex+0x512/0x640 [ 583.961903][T14197] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 583.961928][T14197] should_failslab+0xc2/0x120 [ 583.961957][T14197] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 583.961980][T14197] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 583.962014][T14197] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 583.962043][T14197] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 583.962072][T14197] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 583.962102][T14197] alloc_inode+0x64/0x240 [ 583.962124][T14197] new_inode+0x22/0x1c0 [ 583.962145][T14197] hugetlbfs_get_inode+0x354/0x700 [ 583.962165][T14197] hugetlb_file_setup+0x15b/0x620 [ 583.962186][T14197] ksys_mmap_pgoff+0x189/0x5c0 [ 583.962216][T14197] __x64_sys_mmap+0x125/0x190 [ 583.962238][T14197] do_syscall_64+0xcd/0xf80 [ 583.962266][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.962285][T14197] RIP: 0033:0x7f6a9798f7c9 [ 583.962300][T14197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.962319][T14197] RSP: 002b:00007f6a9877c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 583.962337][T14197] RAX: ffffffffffffffda RBX: 00007f6a97be5fa0 RCX: 00007f6a9798f7c9 [ 583.962350][T14197] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 583.962361][T14197] RBP: 00007f6a97a13f91 R08: 0000000000000401 R09: 0000300000000000 [ 583.962372][T14197] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 583.962383][T14197] R13: 00007f6a97be6038 R14: 00007f6a97be5fa0 R15: 00007ffe4f7ed888 [ 583.962406][T14197] [ 584.958359][ T30] audit: type=1326 audit(4294970700.092:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.1657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d8ad8f7c9 code=0x0 [ 586.001011][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.368222][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 587.423853][T14299] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1666'. [ 587.960987][T14303] zswap: compressor 000 not available [ 588.070145][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 588.914456][T14320] [U] [ 588.917286][T14320] [U] [ 588.919991][T14320] [U] [ 588.922682][T14320] [U] [ 589.005463][T14320] [U] [ 589.008211][T14320] [U] [ 589.010917][T14320] [U] [ 589.013646][T14320] [U] [ 589.072939][T14320] [U] [ 589.126318][T14320] [U] `¿NÎÂF£D{Jˤ ª‘Õ±ÁËÚWØLóWÑ.¯§‹ÇÀÈG8UR€Ö[ÛÑÏÇJH–BÓHÖ¨&Y}Y¨È0Tœº8‡`ÍÁBS¹¢Á\ÅÑ1)¼FÅ( ÒBÙÔ†Š [ 589.241373][T14320] [U] (—SÀRŸKIŒ®SÆãÙ¼:¿K8!ųGšÓ»ZϧÉ̳Á6 Z}K™Á%š^ÖAÃR±³¢ÆR,ÙYB´ØÂ\ÀÍŒ†U€)HKG†ÂCLÞÝT.J¦·É¶\"L÷β4D±K)ǵلÉ'Þ/K [ 589.412618][T14320] [U] /'¼HÈ=“Ê5ÆËÚ*ž©ÝÑ+Ÿ¨5–E¤/¥~W¿FPIH›,¹ÇNSZÛD¸6¹G“ [ 589.493403][T14320] [U] €'Ñ@OJX¢ÞÏV1Ò‚ÒÑ&ÜB¨ £IÝÍÕ£¹ÀIª>>ݬ¸ÐV’QÇU`÷šÑЩ½‰"CPÙKZÑE˜KP(‚—•FJLÑJ†HPÙH‡–ζÞFª‡Ö’…°£Ê›)@EV}/XÍI…]Ê( [ 589.651176][T14320] [U] »º¢´ [ 589.713328][T14320] [U] 7ÞÑ‚H ÓD8W»F[ÄŽ»ÃÇ%;\€NÝŠ`AÌIÆ”,N(øÛ)DN6ÈÎÖ¯N€1ÇŒWÃÊ\#×3Î[´›Î˜š˜*„§´IMÛ4U3:¢ [ 589.821317][T14320] [U] ÕOÂÁÍÃ9¬ÙÈ‘"OÑ/HÚNÎÚD…”"EJPVNK(ŽCÏS—]MœÃ؇ÄÛµ^…DÌ?8±Ù8—¯Å©ÑžÔ9 [ 589.830263][T14320] [U] ÞEVÌMO²¯Ø´Œ3U¸(ˆ¡6·Ð[>÷•&T®2~B16ZÓH&NÔ[¯W_K*» XÌ2JÝÖÎÚÌG`ÇG¢G•U„F»UÒ÷‘ÈAŸØÌHW0ÐF#=M¡D„5B [ 589.957840][T14320] [U] ÓL[. VFY\&`FT?)ËPU¦ÔC+ÍÆœØÇYÖËÏLÍX4š¥žÜ§ÉÆ\Ô†ÝBV÷+¶€´'YÅÛ®BJ5KÅ~RÞ^U­ÙY>Æ8´R-|ØÒÔ’©1Y [ 590.039081][T14320] [U] œ [ 590.048799][T14320] [U] "Õß*ÖULÀ}„ÕÏš³‘EU[WªÈÁO9B+WŤ'T QÇ8È„Ø2MÈÇÁ‡ØX9£Ö½Ù\ÀÒ„ÌNÏ#Í [ 590.099042][T14320] [U] %.Ð¥Ù§ÀÞÔŽÖYJ­Ù$Ó>Ô·ËÓ¥XN ƒ®:L BšQÄM@1­“ІA)K+ŽÉ|©Œ-UÇ{ÑWW—\‹+Q0™ƒ¸ÃÛ $Ö!‡ÌßW•È!/ÍŸ^A…ÖÀ [ 590.140510][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 590.190018][T14320] [U] «*”SIK½¡SÒË:4ÃPK.¥J‡E6› WFÞŸØÞ®GQÜÝ‹ÇC©Ö¼±Œ: ÒUMŠŽšÆ93±{—E—[®Z¨ŒØ¨·•ÇÑÙ²^SÒCÞA+;ÉD¸Ï€¯ ·Ä/´OK<È…—JNªÈ‹A@Á4ÔF˜ÍƒYFQË…UªÜ|¤=·8‹Áß+‘ÐECÞÙÏWÖ×ÔÁ–AG9VÐŠÌ –ÄÞI—Ú¾×ÕÜ#ÛÛ$¢š‚}_OA¢ËŒC [ 595.581756][T14412] dump_stack_lvl+0x16c/0x1f0 [ 595.581788][T14412] should_fail_ex+0x512/0x640 [ 595.581809][T14412] ? __kmalloc_cache_noprof+0x5f/0x800 [ 595.581833][T14412] should_failslab+0xc2/0x120 [ 595.581862][T14412] __kmalloc_cache_noprof+0x80/0x800 [ 595.581883][T14412] ? init_srcu_struct_fields+0x97a/0xde0 [ 595.581909][T14412] ? init_srcu_struct_fields+0x97a/0xde0 [ 595.581930][T14412] init_srcu_struct_fields+0x97a/0xde0 [ 595.581953][T14412] ? lockdep_init_map_type+0x5c/0x270 [ 595.581974][T14412] kvm_dev_ioctl+0x7ac/0x1a80 [ 595.582002][T14412] ? find_held_lock+0x2b/0x80 [ 595.582025][T14412] ? hook_file_ioctl_common+0x144/0x410 [ 595.582049][T14412] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 595.582077][T14412] ? __fget_files+0x20e/0x3c0 [ 595.582106][T14412] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 595.582132][T14412] __x64_sys_ioctl+0x18e/0x210 [ 595.582161][T14412] do_syscall_64+0xcd/0xf80 [ 595.582190][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.582209][T14412] RIP: 0033:0x7f6a9798f7c9 [ 595.582225][T14412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.582243][T14412] RSP: 002b:00007f6a9875b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.582261][T14412] RAX: ffffffffffffffda RBX: 00007f6a97be6090 RCX: 00007f6a9798f7c9 [ 595.582273][T14412] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 595.582284][T14412] RBP: 00007f6a97a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.582295][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.582306][T14412] R13: 00007f6a97be6128 R14: 00007f6a97be6090 R15: 00007ffe4f7ed888 [ 595.582328][T14412] [ 596.381479][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 596.893495][T14426] zswap: compressor 000 not available [ 598.416365][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 599.297392][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.376265][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.432978][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.493031][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.553273][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.607848][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.664960][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.733269][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.789616][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.843329][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.909645][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 599.966451][T14455] vhci_hcd vhci_hcd.0: invalid port number 16 [ 600.477983][T14475] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 600.506164][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.752617][T14473] zswap: compressor not available [ 600.860852][T14475] CIFS mount error: No usable UNC path provided in device string! [ 600.860852][T14475] [ 600.946569][T14475] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 601.349359][T14468] kexec: Could not allocate control_code_buffer [ 602.554882][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.624118][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.868417][T14540] FAULT_INJECTION: forcing a failure. [ 604.868417][T14540] name failslab, interval 1, probability 0, space 0, times 0 [ 605.016838][T14540] CPU: 0 UID: 0 PID: 14540 Comm: syz.3.1727 Tainted: G U L syzkaller #0 PREEMPT(full) [ 605.016870][T14540] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 605.016878][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.016888][T14540] Call Trace: [ 605.016895][T14540] [ 605.016902][T14540] dump_stack_lvl+0x16c/0x1f0 [ 605.016933][T14540] should_fail_ex+0x512/0x640 [ 605.016953][T14540] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 605.016978][T14540] should_failslab+0xc2/0x120 [ 605.017006][T14540] kmem_cache_alloc_node_noprof+0x86/0x800 [ 605.017028][T14540] ? __alloc_skb+0x156/0x410 [ 605.017052][T14540] ? __alloc_skb+0x156/0x410 [ 605.017069][T14540] __alloc_skb+0x156/0x410 [ 605.017087][T14540] ? __alloc_skb+0x35d/0x410 [ 605.017105][T14540] ? __pfx___alloc_skb+0x10/0x10 [ 605.017127][T14540] ? kfree+0x2f8/0x6e0 [ 605.017145][T14540] ? mpls_dev_notify+0x72b/0x9d0 [ 605.017173][T14540] mpls_netconf_notify_devconf+0x4a/0x110 [ 605.017201][T14540] mpls_dev_notify+0x73e/0x9d0 [ 605.017228][T14540] notifier_call_chain+0xbc/0x3e0 [ 605.017257][T14540] ? __pfx_mpls_dev_notify+0x10/0x10 [ 605.017287][T14540] call_netdevice_notifiers_info+0xbe/0x110 [ 605.017319][T14540] unregister_netdevice_many_notify+0xf81/0x2590 [ 605.017354][T14540] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 605.017392][T14540] unregister_netdevice_queue+0x305/0x3c0 [ 605.017419][T14540] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 605.017447][T14540] ? __pfx_locks_remove_file+0x10/0x10 [ 605.017480][T14540] ? kmem_cache_free+0x171/0x770 [ 605.017506][T14540] ? __pfx_ppp_release+0x10/0x10 [ 605.017532][T14540] ppp_release+0x209/0x230 [ 605.017558][T14540] __fput+0x402/0xb70 [ 605.017580][T14540] task_work_run+0x150/0x240 [ 605.017601][T14540] ? __pfx_task_work_run+0x10/0x10 [ 605.017619][T14540] ? __do_sys_close_range+0x278/0x730 [ 605.017653][T14540] exit_to_user_mode_loop+0xfb/0x540 [ 605.017679][T14540] do_syscall_64+0x4ee/0xf80 [ 605.017707][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.017727][T14540] RIP: 0033:0x7f8d8ad8f7c9 [ 605.017742][T14540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.017760][T14540] RSP: 002b:00007f8d8bb67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 605.017777][T14540] RAX: 0000000000000000 RBX: 00007f8d8afe6090 RCX: 00007f8d8ad8f7c9 [ 605.017788][T14540] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 605.017799][T14540] RBP: 00007f8d8ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.017809][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.017820][T14540] R13: 00007f8d8afe6128 R14: 00007f8d8afe6090 R15: 00007ffd87bf0938 [ 605.017847][T14540] [ 606.697164][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 607.003673][T14560] random: crng reseeded on system resumption [ 607.050701][T14566] Unrecognized hibernate image header format! [ 607.081862][T14566] PM: hibernation: Image mismatch: architecture specific data [ 607.324815][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1731'. [ 608.766162][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 610.266963][T14584] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 610.834941][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 611.212205][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 611.222530][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 611.236123][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 611.249598][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 611.274071][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 612.379681][T14590] chnl_net:caif_netlink_parms(): no params data found [ 612.699679][T14590] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.745360][T14590] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.765812][T14590] bridge_slave_0: entered allmulticast mode [ 612.787129][T14590] bridge_slave_0: entered promiscuous mode [ 612.826340][T14590] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.839351][T14590] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.863210][T14590] bridge_slave_1: entered allmulticast mode [ 612.885833][T14590] bridge_slave_1: entered promiscuous mode [ 612.907178][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 613.055287][T14590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.112254][T14590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.318931][ T5835] Bluetooth: hci5: command tx timeout [ 613.394417][T14590] team0: Port device team_slave_0 added [ 613.440992][T14590] team0: Port device team_slave_1 added [ 613.576361][T14590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.626057][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.725520][T14590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.760976][T14590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.797393][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.885770][T14590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.013712][T14590] hsr_slave_0: entered promiscuous mode [ 614.034818][T14590] hsr_slave_1: entered promiscuous mode [ 614.057141][T14590] debugfs: 'hsr0' already exists in 'hsr' [ 614.075992][T14590] Cannot create hsr debugfs directory [ 614.137666][T14636] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.438773][T14590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.466296][T14590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.497757][T14590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.545096][T14590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.854070][T14590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.924613][T14590] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.967576][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.974776][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.986229][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 615.064456][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.071641][ T7234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.303400][T14656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 615.368788][ T5835] Bluetooth: hci5: command tx timeout [ 615.692708][T14590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.166712][T14673] FAULT_INJECTION: forcing a failure. [ 616.166712][T14673] name failslab, interval 1, probability 0, space 0, times 0 [ 616.210908][T14673] CPU: 0 UID: 0 PID: 14673 Comm: syz.3.1752 Tainted: G U L syzkaller #0 PREEMPT(full) [ 616.210943][T14673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 616.210950][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.210961][T14673] Call Trace: [ 616.210967][T14673] [ 616.210974][T14673] dump_stack_lvl+0x16c/0x1f0 [ 616.211007][T14673] should_fail_ex+0x512/0x640 [ 616.211027][T14673] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 616.211053][T14673] should_failslab+0xc2/0x120 [ 616.211081][T14673] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 616.211105][T14673] ? __d_alloc+0x35/0xa80 [ 616.211136][T14673] ? __d_alloc+0x35/0xa80 [ 616.211163][T14673] __d_alloc+0x35/0xa80 [ 616.211189][T14673] ? __ns_ref_active_get+0x96/0x1b0 [ 616.211226][T14673] path_from_stashed+0x427/0x750 [ 616.211254][T14673] ? do_raw_spin_unlock+0x172/0x230 [ 616.211280][T14673] ns_get_path+0x60/0x80 [ 616.211307][T14673] proc_ns_get_link+0x121/0x230 [ 616.211328][T14673] ? __pfx_proc_ns_get_link+0x10/0x10 [ 616.211351][T14673] ? atime_needs_update+0x8b/0x710 [ 616.211375][T14673] pick_link+0xc96/0x13b0 [ 616.211398][T14673] ? __pfx_proc_ns_get_link+0x10/0x10 [ 616.211423][T14673] step_into_slowpath+0x6c6/0xf50 [ 616.211451][T14673] ? __pfx_step_into_slowpath+0x10/0x10 [ 616.211475][T14673] ? find_held_lock+0x2b/0x80 [ 616.211507][T14673] path_openat+0x10db/0x3140 [ 616.211541][T14673] ? __pfx_path_openat+0x10/0x10 [ 616.211587][T14673] do_filp_open+0x20b/0x470 [ 616.211616][T14673] ? __pfx_do_filp_open+0x10/0x10 [ 616.211660][T14673] ? alloc_fd+0x471/0x7d0 [ 616.211694][T14673] do_sys_openat2+0x121/0x290 [ 616.211715][T14673] ? __pfx_do_sys_openat2+0x10/0x10 [ 616.211744][T14673] __x64_sys_openat+0x174/0x210 [ 616.211766][T14673] ? __pfx___x64_sys_openat+0x10/0x10 [ 616.211796][T14673] do_syscall_64+0xcd/0xf80 [ 616.211825][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.211844][T14673] RIP: 0033:0x7f8d8ad8e010 [ 616.211860][T14673] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 616.211878][T14673] RSP: 002b:00007f8d8bb87f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 616.211897][T14673] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8d8ad8e010 [ 616.211909][T14673] RDX: 0000000000000002 RSI: 00007f8d8bb87fa0 RDI: 00000000ffffff9c [ 616.211921][T14673] RBP: 00007f8d8bb87fa0 R08: 0000000000000000 R09: 0000000000000000 [ 616.211932][T14673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 616.211943][T14673] R13: 00007f8d8afe6038 R14: 00007f8d8afe5fa0 R15: 00007ffd87bf0938 [ 616.211966][T14673] [ 617.089533][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 617.121322][T14675] zswap: compressor not available [ 617.340299][T14590] veth0_vlan: entered promiscuous mode [ 617.397172][T14590] veth1_vlan: entered promiscuous mode [ 617.443271][ T5835] Bluetooth: hci5: command tx timeout [ 617.519328][T14590] veth0_macvtap: entered promiscuous mode [ 617.557076][T14590] veth1_macvtap: entered promiscuous mode [ 617.625444][T14590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.678391][T14590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.736938][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.757537][T14675] zswap: compressor not available [ 617.798311][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.884898][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.958190][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.231209][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.287144][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.384042][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.414149][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.109314][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 619.507011][ T5835] Bluetooth: hci5: command tx timeout [ 619.667980][T14707] cgroup: fork rejected by pids controller in /syz6 [ 619.949701][T14756] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 620.698989][ T30] audit: type=1800 audit(4294970735.998:26): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1772" name="dbroot" dev="configfs" ino=58643 res=0 errno=0 [ 621.178480][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 621.914930][T14793] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 621.987724][T14793] netlink: 'syz.6.1769': attribute type 2 has an invalid length. [ 622.030331][T14793] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 622.079104][T14793] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 622.476466][T14801] nbd: socks must be embedded in a SOCK_ITEM attr [ 623.128536][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1775'. [ 623.248337][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 623.645894][T14820] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.999941][T14843] FAULT_INJECTION: forcing a failure. [ 624.999941][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 625.109540][T14843] CPU: 0 UID: 0 PID: 14843 Comm: syz.6.1779 Tainted: G U L syzkaller #0 PREEMPT(full) [ 625.109576][T14843] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 625.109584][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.109595][T14843] Call Trace: [ 625.109602][T14843] [ 625.109610][T14843] dump_stack_lvl+0x16c/0x1f0 [ 625.109643][T14843] should_fail_ex+0x512/0x640 [ 625.109664][T14843] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 625.109696][T14843] should_failslab+0xc2/0x120 [ 625.109725][T14843] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 625.109752][T14843] ? kstrdup_const+0x63/0x80 [ 625.109780][T14843] ? kstrdup+0x53/0x100 [ 625.109800][T14843] kstrdup+0x53/0x100 [ 625.109822][T14843] kstrdup_const+0x63/0x80 [ 625.109844][T14843] __kernfs_new_node+0x9b/0x990 [ 625.109865][T14843] ? __kernel_text_address+0xd/0x40 [ 625.109889][T14843] ? __pfx___kernfs_new_node+0x10/0x10 [ 625.109916][T14843] ? find_held_lock+0x2b/0x80 [ 625.109942][T14843] ? kernfs_root+0xee/0x2a0 [ 625.109967][T14843] kernfs_new_node+0x13c/0x1e0 [ 625.109992][T14843] ? net_ns_get_ownership+0xf8/0x1b0 [ 625.110019][T14843] kernfs_create_dir_ns+0x4c/0x1a0 [ 625.110047][T14843] sysfs_create_dir_ns+0x13a/0x2b0 [ 625.110068][T14843] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 625.110088][T14843] ? find_held_lock+0x2b/0x80 [ 625.110113][T14843] ? net_namespace+0x12/0x50 [ 625.110141][T14843] ? device_namespace+0x76/0xa0 [ 625.110166][T14843] kobject_add_internal+0x2c4/0x9d0 [ 625.110196][T14843] kobject_add+0x16e/0x240 [ 625.110213][T14843] ? __pfx_kobject_add+0x10/0x10 [ 625.110232][T14843] ? get_device_parent+0x1c5/0x4e0 [ 625.110254][T14843] ? kobject_put+0xaf/0x6f0 [ 625.110290][T14843] device_add+0x288/0x1980 [ 625.110315][T14843] ? __pfx_dev_set_name+0x10/0x10 [ 625.110343][T14843] ? __pfx_device_add+0x10/0x10 [ 625.110369][T14843] ? lockdep_init_map_type+0x5c/0x270 [ 625.110390][T14843] ? __init_waitqueue_head+0xca/0x150 [ 625.110418][T14843] netdev_register_kobject+0x1a9/0x3d0 [ 625.110450][T14843] register_netdevice+0x13ac/0x21d0 [ 625.110480][T14843] ? rcu_is_watching+0x12/0xc0 [ 625.110506][T14843] ? __pfx_register_netdevice+0x10/0x10 [ 625.110539][T14843] slip_open+0xb86/0x1150 [ 625.110576][T14843] ? __pfx_slip_open+0x10/0x10 [ 625.110604][T14843] ? down_write+0x14d/0x200 [ 625.110623][T14843] ? __pfx_slip_open+0x10/0x10 [ 625.110651][T14843] tty_ldisc_open+0x9f/0x120 [ 625.110675][T14843] tty_set_ldisc+0x32b/0x780 [ 625.110701][T14843] tty_ioctl+0xc2d/0x1650 [ 625.110728][T14843] ? __pfx_tty_ioctl+0x10/0x10 [ 625.110761][T14843] ? find_held_lock+0x2b/0x80 [ 625.110785][T14843] ? hook_file_ioctl_common+0x144/0x410 [ 625.110812][T14843] ? __fget_files+0x20e/0x3c0 [ 625.110842][T14843] ? __pfx_tty_ioctl+0x10/0x10 [ 625.110868][T14843] __x64_sys_ioctl+0x18e/0x210 [ 625.110893][T14843] do_syscall_64+0xcd/0xf80 [ 625.110922][T14843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.110942][T14843] RIP: 0033:0x7f210c38f7c9 [ 625.110958][T14843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.110976][T14843] RSP: 002b:00007f210d20a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.110994][T14843] RAX: ffffffffffffffda RBX: 00007f210c5e6090 RCX: 00007f210c38f7c9 [ 625.111007][T14843] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000009 [ 625.111018][T14843] RBP: 00007f210c413f91 R08: 0000000000000000 R09: 0000000000000000 [ 625.111029][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.111040][T14843] R13: 00007f210c5e6128 R14: 00007f210c5e6090 R15: 00007ffc03851858 [ 625.111064][T14843] [ 625.478894][T14843] kobject: kobject_add_internal failed for sl0 (error: -12 parent: net) [ 625.669274][T14846] usbcore.quirks: string doesn't fit in 127 chars. [ 625.868818][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 626.025623][T14859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 626.281606][T14862] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input26 [ 626.300492][T14862] FAULT_INJECTION: forcing a failure. [ 626.300492][T14862] name failslab, interval 1, probability 0, space 0, times 0 [ 626.330951][T14862] CPU: 0 UID: 0 PID: 14862 Comm: syz.3.1784 Tainted: G U L syzkaller #0 PREEMPT(full) [ 626.330991][T14862] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 626.330999][T14862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.331011][T14862] Call Trace: [ 626.331018][T14862] [ 626.331027][T14862] dump_stack_lvl+0x16c/0x1f0 [ 626.331060][T14862] should_fail_ex+0x512/0x640 [ 626.331081][T14862] ? kmem_cache_alloc_noprof+0x62/0x770 [ 626.331107][T14862] should_failslab+0xc2/0x120 [ 626.331136][T14862] kmem_cache_alloc_noprof+0x83/0x770 [ 626.331166][T14862] ? __kernfs_new_node+0xd2/0x990 [ 626.331192][T14862] ? __kernfs_new_node+0xd2/0x990 [ 626.331211][T14862] __kernfs_new_node+0xd2/0x990 [ 626.331234][T14862] ? __lock_acquire+0x436/0x2890 [ 626.331252][T14862] ? __pfx___kernfs_new_node+0x10/0x10 [ 626.331280][T14862] ? find_held_lock+0x2b/0x80 [ 626.331305][T14862] ? kernfs_root+0xee/0x2a0 [ 626.331332][T14862] kernfs_new_node+0x13c/0x1e0 [ 626.331363][T14862] __kernfs_create_file+0x53/0x350 [ 626.331395][T14862] sysfs_add_file_mode_ns+0x207/0x3c0 [ 626.331421][T14862] sysfs_create_file_ns+0x13d/0x1d0 [ 626.331441][T14862] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 626.331465][T14862] ? mark_held_locks+0x49/0x80 [ 626.331486][T14862] device_create_file+0xf2/0x1e0 [ 626.331515][T14862] device_add+0xa51/0x1980 [ 626.331543][T14862] ? __pfx_device_add+0x10/0x10 [ 626.331568][T14862] ? __pfx_exact_lock+0x10/0x10 [ 626.331599][T14862] ? kobject_get+0xbb/0x150 [ 626.331629][T14862] cdev_device_add+0x12b/0x270 [ 626.331659][T14862] evdev_connect+0x3a4/0x4c0 [ 626.331687][T14862] input_attach_handler.isra.0+0x176/0x250 [ 626.331715][T14862] input_register_device+0xab9/0x11b0 [ 626.331739][T14862] ? input_ff_create+0x1c1/0x350 [ 626.331771][T14862] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 626.331791][T14862] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 626.331814][T14862] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 626.331839][T14862] ? find_held_lock+0x2b/0x80 [ 626.331874][T14862] ? __pfx_uinput_ioctl+0x10/0x10 [ 626.331894][T14862] __x64_sys_ioctl+0x18e/0x210 [ 626.331918][T14862] do_syscall_64+0xcd/0xf80 [ 626.331947][T14862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.331967][T14862] RIP: 0033:0x7f8d8ad8f7c9 [ 626.331983][T14862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.332002][T14862] RSP: 002b:00007f8d8bb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.332021][T14862] RAX: ffffffffffffffda RBX: 00007f8d8afe6090 RCX: 00007f8d8ad8f7c9 [ 626.332033][T14862] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 626.332044][T14862] RBP: 00007f8d8ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 626.332056][T14862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.332067][T14862] R13: 00007f8d8afe6128 R14: 00007f8d8afe6090 R15: 00007ffd87bf0938 [ 626.332091][T14862] [ 627.656574][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.663018][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.818564][T14862] input: failed to attach handler evdev to device input26, error: -12 [ 627.915220][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 627.925182][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 627.935904][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 627.947230][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 627.954972][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 627.965285][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 629.177646][T14887] zswap: compressor not available [ 629.192214][T14873] chnl_net:caif_netlink_parms(): no params data found [ 629.484507][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 629.717754][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.735826][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.761948][T14873] bridge_slave_0: entered allmulticast mode [ 629.800103][T14873] bridge_slave_0: entered promiscuous mode [ 629.834298][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.873077][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.880369][T14873] bridge_slave_1: entered allmulticast mode [ 629.943680][T14873] bridge_slave_1: entered promiscuous mode [ 630.012423][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 630.018533][ T5843] Bluetooth: hci6: command tx timeout [ 630.052129][T14916] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input27 [ 630.117557][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.347326][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.468703][T14925] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 630.525509][T14873] team0: Port device team_slave_0 added [ 630.572351][T14873] team0: Port device team_slave_1 added [ 630.891557][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.928175][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.010664][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.069912][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.113261][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.249434][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.547564][T14873] hsr_slave_0: entered promiscuous mode [ 631.577798][T14873] hsr_slave_1: entered promiscuous mode [ 631.608372][T14873] debugfs: 'hsr0' already exists in 'hsr' [ 631.627117][T14873] Cannot create hsr debugfs directory [ 631.962361][T14944] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 632.082517][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 632.088579][ T5843] Bluetooth: hci6: command tx timeout [ 632.710200][T14873] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 632.747950][T14948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 632.771602][T14873] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 632.811330][T14948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.839600][T14948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.857448][T14948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 632.885170][T14873] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 632.907264][T14948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.917949][T14948] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 632.940543][T14873] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 632.970548][T14948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 633.011194][T14948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 633.060271][T14948] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 633.086508][T14948] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 633.154515][T14948] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 633.384722][T14873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.486142][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.531590][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.538766][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.626582][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.633745][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.982210][T14961] zswap: compressor 000 not available [ 634.454366][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.787348][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 634.867580][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.873652][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 634.879811][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 634.949284][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 634.955336][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 635.106016][ T5835] Bluetooth: hci6: command 0x0419 tx timeout [ 635.343849][T14873] veth0_vlan: entered promiscuous mode [ 635.388336][T14873] veth1_vlan: entered promiscuous mode [ 635.477342][T14873] veth0_macvtap: entered promiscuous mode [ 635.513218][T14873] veth1_macvtap: entered promiscuous mode [ 635.581924][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.628764][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.741775][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.923773][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.980017][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.035957][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.275064][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.327432][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.437220][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.489655][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.015744][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 637.021832][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 637.175388][ T5835] Bluetooth: hci6: command 0x0419 tx timeout [ 637.538343][T15014] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 638.347859][T15028] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input30 [ 638.396457][T15028] FAULT_INJECTION: forcing a failure. [ 638.396457][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 638.425089][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.7.1813 Tainted: G U L syzkaller #0 PREEMPT(full) [ 638.425123][T15028] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 638.425131][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.425143][T15028] Call Trace: [ 638.425149][T15028] [ 638.425157][T15028] dump_stack_lvl+0x16c/0x1f0 [ 638.425195][T15028] should_fail_ex+0x512/0x640 [ 638.425216][T15028] ? kmem_cache_alloc_noprof+0x62/0x770 [ 638.425241][T15028] should_failslab+0xc2/0x120 [ 638.425269][T15028] kmem_cache_alloc_noprof+0x83/0x770 [ 638.425291][T15028] ? __kernfs_new_node+0xd2/0x990 [ 638.425317][T15028] ? __kernfs_new_node+0xd2/0x990 [ 638.425337][T15028] __kernfs_new_node+0xd2/0x990 [ 638.425361][T15028] ? __pfx___kernfs_new_node+0x10/0x10 [ 638.425393][T15028] ? find_held_lock+0x2b/0x80 [ 638.425418][T15028] ? kernfs_root+0xee/0x2a0 [ 638.425444][T15028] kernfs_new_node+0x13c/0x1e0 [ 638.425473][T15028] __kernfs_create_file+0x53/0x350 [ 638.425505][T15028] sysfs_add_file_mode_ns+0x207/0x3c0 [ 638.425531][T15028] sysfs_merge_group+0x1aa/0x340 [ 638.425554][T15028] ? __pfx_sysfs_merge_group+0x10/0x10 [ 638.425580][T15028] ? __pfx_dev_add_physical_location+0x10/0x10 [ 638.425606][T15028] ? bus_to_subsys+0x131/0x160 [ 638.425638][T15028] dpm_sysfs_add+0x237/0x280 [ 638.425663][T15028] device_add+0x9cc/0x1980 [ 638.425690][T15028] ? __pfx_device_add+0x10/0x10 [ 638.425715][T15028] ? __pfx_exact_lock+0x10/0x10 [ 638.425746][T15028] ? kobject_get+0xbb/0x150 [ 638.425777][T15028] cdev_device_add+0x12b/0x270 [ 638.425807][T15028] evdev_connect+0x3a4/0x4c0 [ 638.425835][T15028] input_attach_handler.isra.0+0x176/0x250 [ 638.425865][T15028] input_register_device+0xab9/0x11b0 [ 638.425888][T15028] ? input_ff_create+0x1c1/0x350 [ 638.425920][T15028] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 638.425940][T15028] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 638.425971][T15028] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 638.425996][T15028] ? find_held_lock+0x2b/0x80 [ 638.426032][T15028] ? __pfx_uinput_ioctl+0x10/0x10 [ 638.426051][T15028] __x64_sys_ioctl+0x18e/0x210 [ 638.426075][T15028] do_syscall_64+0xcd/0xf80 [ 638.426105][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.426126][T15028] RIP: 0033:0x7fa6dbb8f7c9 [ 638.426142][T15028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.426162][T15028] RSP: 002b:00007fa6dc9f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.426180][T15028] RAX: ffffffffffffffda RBX: 00007fa6dbde6090 RCX: 00007fa6dbb8f7c9 [ 638.426192][T15028] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 638.426203][T15028] RBP: 00007fa6dbc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 638.426214][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.426225][T15028] R13: 00007fa6dbde6128 R14: 00007fa6dbde6090 R15: 00007ffff8e8b7f8 [ 638.426249][T15028] [ 639.129267][T15028] input: failed to attach handler evdev to device input30, error: -12 [ 639.172606][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 639.179056][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 639.353691][ T5844] Bluetooth: hci6: command 0x0419 tx timeout [ 640.575052][T15061] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 641.239780][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 641.393415][ T5844] Bluetooth: hci6: command 0x0419 tx timeout [ 642.225619][T15091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 642.978661][T15104] Invalid ELF header magic: != ELF [ 643.304660][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 643.935496][T15114] nvme_fabrics: unknown parameter or missing value 'äÞt1?Hnº-ç*+ƒr·uÙ&½cöÂLQømO%ÞjVÁ|' in ctrl creation request [ 644.329270][T15121] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1831'. [ 645.372685][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 647.442607][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 647.715239][T15141] delete_channel: no stack [ 648.357820][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 648.370979][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 648.379978][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 648.387776][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 648.395214][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 648.997929][T15150] chnl_net:caif_netlink_parms(): no params data found [ 649.294240][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.332935][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.340190][T15150] bridge_slave_0: entered allmulticast mode [ 649.401309][T15150] bridge_slave_0: entered promiscuous mode [ 649.452502][T15150] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.465233][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.503499][T15150] bridge_slave_1: entered allmulticast mode [ 649.514697][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.553352][T15150] bridge_slave_1: entered promiscuous mode [ 649.671437][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.723388][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.944176][T15150] team0: Port device team_slave_0 added [ 649.990470][T15150] team0: Port device team_slave_1 added [ 650.120079][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.127069][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.228978][T15166] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1842'. [ 650.270813][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.319060][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.366395][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.466330][ T5835] Bluetooth: hci7: command tx timeout [ 650.472669][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.688014][T15150] hsr_slave_0: entered promiscuous mode [ 650.729462][T15150] hsr_slave_1: entered promiscuous mode [ 650.755242][T15150] debugfs: 'hsr0' already exists in 'hsr' [ 650.780230][T15150] Cannot create hsr debugfs directory [ 651.497210][T15150] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 651.580626][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 651.607256][T15150] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 651.698470][T15150] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 651.775971][T15150] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 652.079359][T15150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.137844][T15150] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.182243][T15033] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.189426][T15033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.237535][T15033] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.244698][T15033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.536142][ T5835] Bluetooth: hci7: command tx timeout [ 652.860199][T15150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.457816][T15150] veth0_vlan: entered promiscuous mode [ 653.496241][T15150] veth1_vlan: entered promiscuous mode [ 653.573439][T15150] veth0_macvtap: entered promiscuous mode [ 653.614016][T15150] veth1_macvtap: entered promiscuous mode [ 653.649643][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 653.692381][T15150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.726314][T15150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.779631][ T3078] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.820158][ T6711] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.867670][ T3078] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.902849][ T3078] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.119366][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.164065][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.218598][T15204] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 654.242529][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.276528][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.430396][T15204] hub 1-0:1.0: USB hub found [ 654.555508][T15204] hub 1-0:1.0: 1 port detected [ 654.605113][ T5835] Bluetooth: hci7: command tx timeout [ 655.723771][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 655.899514][T15215] zswap: compressor not available [ 655.993464][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 656.003420][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 656.012040][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 656.020018][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 656.027738][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 656.675132][ T5844] Bluetooth: hci7: command tx timeout [ 656.868836][T15219] chnl_net:caif_netlink_parms(): no params data found [ 657.378583][T15219] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.408842][T15219] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.437046][T15219] bridge_slave_0: entered allmulticast mode [ 657.457161][T15219] bridge_slave_0: entered promiscuous mode [ 657.551011][T15219] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.558179][T15219] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.584398][T15219] bridge_slave_1: entered allmulticast mode [ 657.599921][T15219] bridge_slave_1: entered promiscuous mode [ 657.694295][T15219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.772076][T15219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.789296][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.887936][T15219] team0: Port device team_slave_0 added [ 657.911858][T15219] team0: Port device team_slave_1 added [ 658.047420][T15219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.054411][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.112962][ T5844] Bluetooth: hci8: command tx timeout [ 658.168706][T15219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.212974][T15219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.245703][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.335868][T15219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.469587][T15219] hsr_slave_0: entered promiscuous mode [ 658.510469][T15219] hsr_slave_1: entered promiscuous mode [ 658.554754][T15219] debugfs: 'hsr0' already exists in 'hsr' [ 658.560535][T15219] Cannot create hsr debugfs directory [ 659.237166][T15219] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 659.272095][T15219] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 659.319453][T15219] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 659.361453][T15219] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 659.799738][T15219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.860930][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 659.897899][T15219] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.980435][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.987641][T15098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.065937][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.073269][T15098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.181010][ T5844] Bluetooth: hci8: command tx timeout [ 660.251807][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 660.266692][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 660.275940][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 660.283836][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 660.292031][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 660.895394][T15219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.004168][T15254] chnl_net:caif_netlink_parms(): no params data found [ 661.359595][T15254] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.366768][T15254] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.399065][T15254] bridge_slave_0: entered allmulticast mode [ 661.419894][T15254] bridge_slave_0: entered promiscuous mode [ 661.450840][T15254] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.457988][T15254] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.520121][T15254] bridge_slave_1: entered allmulticast mode [ 661.566828][T15254] bridge_slave_1: entered promiscuous mode [ 661.685828][T15254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.730977][T15254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.867617][T15254] team0: Port device team_slave_0 added [ 661.897740][T15254] team0: Port device team_slave_1 added [ 661.927222][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.046520][T15254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.053557][T15254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.164320][T15254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.197268][T15219] veth0_vlan: entered promiscuous mode [ 662.226742][T15219] veth1_vlan: entered promiscuous mode [ 662.248326][ T5835] Bluetooth: hci8: command tx timeout [ 662.266676][T15254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.291590][T15254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.333290][ T5835] Bluetooth: hci9: command tx timeout [ 662.393175][T15254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.569208][T15219] veth0_macvtap: entered promiscuous mode [ 662.615211][T15254] hsr_slave_0: entered promiscuous mode [ 662.629511][T15254] hsr_slave_1: entered promiscuous mode [ 662.647803][T15254] debugfs: 'hsr0' already exists in 'hsr' [ 662.682217][T15254] Cannot create hsr debugfs directory [ 662.699166][T15219] veth1_macvtap: entered promiscuous mode [ 662.732371][T15280] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1857'. [ 662.854644][T15219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.909016][T15219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.976513][T15098] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.032385][T15098] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.072473][T15098] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.135785][T15098] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.781525][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.830828][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.998578][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 664.144902][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.152754][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.314020][ T5835] Bluetooth: hci8: command tx timeout [ 664.395357][ T5835] Bluetooth: hci9: command tx timeout [ 664.616342][T15254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 664.647397][T15295] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 664.752874][T15297] device-mapper: ioctl: only supply one of name or uuid, cmd(12) [ 664.805083][T15254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.900457][T15254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.010673][T15254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.024799][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1864'. [ 665.383953][T15297] team0 (unregistering): Port device team_slave_0 removed [ 665.526781][T15297] team0 (unregistering): Port device team_slave_1 removed [ 666.070474][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 666.098736][T15254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.240158][T15254] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.296766][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.303987][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.413616][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.420825][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.468459][ T5844] Bluetooth: hci9: command tx timeout [ 668.008408][T15254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.135506][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 668.255225][T15254] veth0_vlan: entered promiscuous mode [ 668.264674][T15339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.333056][T15339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.351089][T15339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.405121][T15339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 668.442291][T15339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.480947][T15339] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 668.525533][T15339] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 668.534736][ T5844] Bluetooth: hci9: command tx timeout [ 668.562877][T15339] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 668.607793][T15339] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 668.641372][T15254] veth1_vlan: entered promiscuous mode [ 668.744345][T15339] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 668.902947][T15339] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 668.933576][T15254] veth0_macvtap: entered promiscuous mode [ 668.939869][T15339] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 668.975915][T15254] veth1_macvtap: entered promiscuous mode [ 668.985771][T15339] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 669.081776][T15339] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 669.095002][T15254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.127962][T15339] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 669.176914][T15339] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 669.198044][T15254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.505937][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.642288][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.787887][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.857110][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.283582][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.289962][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.362774][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.442555][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 670.448601][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.455224][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 670.535829][ T5844] Bluetooth: hci6: command 0x0419 tx timeout [ 670.572517][ T7239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.604942][ T5844] Bluetooth: hci7: command 0x0c1a tx timeout [ 670.632748][ T7239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.767724][ T6711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.806908][ T6711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.919700][ T5844] Bluetooth: hci8: command 0x0c1a tx timeout [ 671.078884][ T5844] Bluetooth: hci9: command 0x0c1a tx timeout [ 672.513465][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 672.641847][T15414] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 672.673403][ T5844] Bluetooth: hci7: command 0x0c1a tx timeout [ 672.988651][ T5844] Bluetooth: hci8: command 0x0c1a tx timeout [ 673.090054][T15434] FAULT_INJECTION: forcing a failure. [ 673.090054][T15434] name failslab, interval 1, probability 0, space 0, times 0 [ 673.153646][ T5844] Bluetooth: hci9: command 0x0c1a tx timeout [ 673.198668][T15434] CPU: 0 UID: 57142 PID: 15434 Comm: syz.1.1869 Tainted: G U L syzkaller #0 PREEMPT(full) [ 673.198705][T15434] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 673.198714][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.198729][T15434] Call Trace: [ 673.198736][T15434] [ 673.198743][T15434] dump_stack_lvl+0x16c/0x1f0 [ 673.198779][T15434] should_fail_ex+0x512/0x640 [ 673.198801][T15434] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 673.198832][T15434] should_failslab+0xc2/0x120 [ 673.198861][T15434] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 673.198884][T15434] ? __d_alloc+0x35/0xa80 [ 673.198916][T15434] ? __d_alloc+0x35/0xa80 [ 673.198943][T15434] __d_alloc+0x35/0xa80 [ 673.198979][T15434] d_alloc_pseudo+0x1c/0xc0 [ 673.199002][T15434] alloc_file_pseudo+0xcf/0x230 [ 673.199026][T15434] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 673.199047][T15434] ? alloc_fd+0x471/0x7d0 [ 673.199080][T15434] sock_alloc_file+0x50/0x210 [ 673.199107][T15434] __sys_socket+0x1c0/0x260 [ 673.199123][T15434] ? fput+0x70/0xf0 [ 673.199140][T15434] ? __pfx___sys_socket+0x10/0x10 [ 673.199157][T15434] ? xfd_validate_state+0x61/0x180 [ 673.199173][T15434] ? __pfx_ksys_write+0x10/0x10 [ 673.199203][T15434] __x64_sys_socket+0x72/0xb0 [ 673.199219][T15434] ? lockdep_hardirqs_on+0x7c/0x110 [ 673.199246][T15434] do_syscall_64+0xcd/0xf80 [ 673.199275][T15434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.199293][T15434] RIP: 0033:0x7efe3238f7c9 [ 673.199309][T15434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.199327][T15434] RSP: 002b:00007efe332f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 673.199346][T15434] RAX: ffffffffffffffda RBX: 00007efe325e5fa0 RCX: 00007efe3238f7c9 [ 673.199358][T15434] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 673.199369][T15434] RBP: 00007efe32413f91 R08: 0000000000000000 R09: 0000000000000000 [ 673.199380][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.199392][T15434] R13: 00007efe325e6038 R14: 00007efe325e5fa0 R15: 00007ffc215c4c68 [ 673.199424][T15434] [ 674.153301][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 674.229284][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 674.237875][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 674.246814][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 674.254647][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 674.582538][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.744735][ T5844] Bluetooth: hci7: command 0x0c1a tx timeout [ 675.060144][ T5844] Bluetooth: hci8: command 0x0c1a tx timeout [ 675.221144][ T5844] Bluetooth: hci9: command 0x0c1a tx timeout [ 676.320626][T15483] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1874'. [ 676.341276][ T5844] Bluetooth: hci10: command tx timeout [ 676.544106][T15446] chnl_net:caif_netlink_parms(): no params data found [ 676.650849][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 677.999114][T15446] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.056086][T15446] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.107593][T15446] bridge_slave_0: entered allmulticast mode [ 678.140476][T15446] bridge_slave_0: entered promiscuous mode [ 678.398313][T15446] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.407486][ T5844] Bluetooth: hci10: command tx timeout [ 678.475433][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.534623][T15446] bridge_slave_1: entered allmulticast mode [ 678.590882][T15446] bridge_slave_1: entered promiscuous mode [ 678.720150][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.888896][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.999666][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.258013][T15446] team0: Port device team_slave_0 added [ 679.358661][T15446] team0: Port device team_slave_1 added [ 680.057030][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.123026][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.285505][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.420000][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.487200][ T5844] Bluetooth: hci10: command tx timeout [ 680.502110][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.671539][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.789374][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.181186][T15446] hsr_slave_0: entered promiscuous mode [ 681.258412][T15446] hsr_slave_1: entered promiscuous mode [ 681.291086][T15446] debugfs: 'hsr0' already exists in 'hsr' [ 681.338302][T15446] Cannot create hsr debugfs directory [ 682.074832][T15581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1885'. [ 682.539603][ T5844] Bluetooth: hci10: command tx timeout [ 682.857517][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 683.089655][T15594] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 683.129180][T15446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 683.228584][T15446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 683.291106][T15446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 683.440463][T15446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 683.922205][T15619] netlink: 130 bytes leftover after parsing attributes in process `syz.9.1891'. [ 684.031700][T15446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.221192][T15446] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.326638][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.333972][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.460023][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.467147][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.744400][T15446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.858001][T15446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.938619][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 685.438937][T15638] zswap: compressor not available [ 686.091867][T15446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.576140][T15676] netlink: 302 bytes leftover after parsing attributes in process `syz.1.1896'. [ 687.010378][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 687.149703][T15690] FAULT_INJECTION: forcing a failure. [ 687.149703][T15690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 687.254807][T15690] CPU: 0 UID: 0 PID: 15690 Comm: syz.1.1898 Tainted: G U L syzkaller #0 PREEMPT(full) [ 687.254843][T15690] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 687.254851][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.254862][T15690] Call Trace: [ 687.254869][T15690] [ 687.254877][T15690] dump_stack_lvl+0x16c/0x1f0 [ 687.254911][T15690] should_fail_ex+0x512/0x640 [ 687.254935][T15690] should_fail_alloc_page+0xe7/0x130 [ 687.254967][T15690] prepare_alloc_pages+0x401/0x670 [ 687.254996][T15690] ? rcu_is_watching+0x12/0xc0 [ 687.255024][T15690] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 687.255047][T15690] ? should_fail_alloc_page+0xee/0x130 [ 687.255077][T15690] ? rcu_is_watching+0x12/0xc0 [ 687.255103][T15690] ? trace_mm_page_alloc+0x11b/0x180 [ 687.255132][T15690] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 687.255155][T15690] ? kfree+0x2f8/0x6e0 [ 687.255172][T15690] ? tomoyo_path_number_perm+0x470/0x580 [ 687.255193][T15690] ? security_file_ioctl+0x9b/0x240 [ 687.255214][T15690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 687.255247][T15690] ? kasan_save_stack+0x42/0x60 [ 687.255272][T15690] ? kasan_save_stack+0x33/0x60 [ 687.255296][T15690] ? kasan_save_track+0x14/0x30 [ 687.255319][T15690] ? __kasan_kmalloc+0xaa/0xb0 [ 687.255342][T15690] ? __kmalloc_noprof+0x33d/0x910 [ 687.255362][T15690] ? vhost_net_ioctl+0x87f/0x1850 [ 687.255388][T15690] ? __lock_acquire+0x436/0x2890 [ 687.255411][T15690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 687.255441][T15690] ? policy_nodemask+0xea/0x4e0 [ 687.255471][T15690] alloc_pages_mpol+0x1fb/0x550 [ 687.255499][T15690] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 687.255533][T15690] ___kmalloc_large_node+0x10c/0x150 [ 687.255568][T15690] __kmalloc_large_node_noprof+0x1c/0x70 [ 687.255600][T15690] __kmalloc_noprof.cold+0xc/0x62 [ 687.255628][T15690] ? vhost_dev_set_owner+0x20c/0xa50 [ 687.255658][T15690] ? vhost_dev_set_owner+0x20c/0xa50 [ 687.255683][T15690] vhost_dev_set_owner+0x20c/0xa50 [ 687.255715][T15690] vhost_net_ioctl+0x87f/0x1850 [ 687.255737][T15690] ? do_vfs_ioctl+0x128/0x14f0 [ 687.255759][T15690] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 687.255781][T15690] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 687.255808][T15690] ? find_held_lock+0x2b/0x80 [ 687.255837][T15690] ? hook_file_ioctl_common+0x144/0x410 [ 687.255863][T15690] ? __fget_files+0x20e/0x3c0 [ 687.255893][T15690] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 687.255917][T15690] __x64_sys_ioctl+0x18e/0x210 [ 687.255941][T15690] do_syscall_64+0xcd/0xf80 [ 687.255971][T15690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.255991][T15690] RIP: 0033:0x7efe3238f7c9 [ 687.256006][T15690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.256025][T15690] RSP: 002b:00007efe332f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.256044][T15690] RAX: ffffffffffffffda RBX: 00007efe325e5fa0 RCX: 00007efe3238f7c9 [ 687.256057][T15690] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000003 [ 687.256069][T15690] RBP: 00007efe32413f91 R08: 0000000000000000 R09: 0000000000000000 [ 687.256080][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.256092][T15690] R13: 00007efe325e6038 R14: 00007efe325e5fa0 R15: 00007ffc215c4c68 [ 687.256116][T15690] [ 688.495319][T15699] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 688.841294][T15446] veth0_vlan: entered promiscuous mode [ 688.869414][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.877677][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.986908][T15446] veth1_vlan: entered promiscuous mode [ 689.123013][T15446] veth0_macvtap: entered promiscuous mode [ 689.202806][T15446] veth1_macvtap: entered promiscuous mode [ 689.331812][T15446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.394832][T15446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.492339][ T7226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.590717][ T7226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.653510][ T7226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.767576][ T7226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.271255][T15098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.318605][T15098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.520218][T15702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.604440][T15702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.172191][T15738] openvswitch: netlink: IPv6 tunnel dst address is zero [ 691.624869][T15754] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 691.668865][T15754] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 692.222014][T15757] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.279629][T15773] FAULT_INJECTION: forcing a failure. [ 692.279629][T15773] name failslab, interval 1, probability 0, space 0, times 0 [ 692.306172][T15772] __vm_enough_memory: pid: 15772, comm: syz.1.1913, bytes: 8589938688 not enough memory for the allocation [ 692.358150][T15773] CPU: 0 UID: 0 PID: 15773 Comm: syz.9.1914 Tainted: G U L syzkaller #0 PREEMPT(full) [ 692.358186][T15773] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 692.358194][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 692.358206][T15773] Call Trace: [ 692.358214][T15773] [ 692.358223][T15773] dump_stack_lvl+0x16c/0x1f0 [ 692.358257][T15773] should_fail_ex+0x512/0x640 [ 692.358278][T15773] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 692.358309][T15773] should_failslab+0xc2/0x120 [ 692.358338][T15773] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 692.358365][T15773] ? drm_open_helper+0x204/0x550 [ 692.358386][T15773] ? kasprintf+0xc7/0x100 [ 692.358405][T15773] ? chrdev_open+0x234/0x6a0 [ 692.358443][T15773] ? kvasprintf+0xbc/0x150 [ 692.358462][T15773] kvasprintf+0xbc/0x150 [ 692.358482][T15773] ? __pfx_kvasprintf+0x10/0x10 [ 692.358517][T15773] kasprintf+0xc7/0x100 [ 692.358537][T15773] ? __pfx_kasprintf+0x10/0x10 [ 692.358561][T15773] ? lockdep_init_map_type+0x5c/0x270 [ 692.358585][T15773] drm_debugfs_clients_add+0x48/0x200 [ 692.358605][T15773] drm_file_alloc+0x5c6/0xb40 [ 692.358629][T15773] drm_open_helper+0x204/0x550 [ 692.358653][T15773] drm_open+0x1a0/0x3e0 [ 692.358674][T15773] ? __pfx_drm_open+0x10/0x10 [ 692.358694][T15773] drm_stub_open+0x20f/0x380 [ 692.358716][T15773] ? __pfx_drm_stub_open+0x10/0x10 [ 692.358736][T15773] chrdev_open+0x234/0x6a0 [ 692.358763][T15773] ? __pfx_apparmor_file_open+0x10/0x10 [ 692.358782][T15773] ? __pfx_chrdev_open+0x10/0x10 [ 692.358812][T15773] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 692.358846][T15773] do_dentry_open+0x748/0x1590 [ 692.358872][T15773] ? __pfx_chrdev_open+0x10/0x10 [ 692.358906][T15773] vfs_open+0x82/0x3f0 [ 692.358927][T15773] path_openat+0x2078/0x3140 [ 692.358962][T15773] ? __pfx_path_openat+0x10/0x10 [ 692.358997][T15773] do_filp_open+0x20b/0x470 [ 692.359025][T15773] ? __pfx_do_filp_open+0x10/0x10 [ 692.359067][T15773] ? alloc_fd+0x471/0x7d0 [ 692.359100][T15773] do_sys_openat2+0x121/0x290 [ 692.359120][T15773] ? __pfx_do_sys_openat2+0x10/0x10 [ 692.359149][T15773] __x64_sys_openat+0x174/0x210 [ 692.359170][T15773] ? __pfx___x64_sys_openat+0x10/0x10 [ 692.359199][T15773] do_syscall_64+0xcd/0xf80 [ 692.359228][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.359248][T15773] RIP: 0033:0x7f956b38f7c9 [ 692.359264][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.359283][T15773] RSP: 002b:00007f956c1db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 692.359302][T15773] RAX: ffffffffffffffda RBX: 00007f956b5e5fa0 RCX: 00007f956b38f7c9 [ 692.359314][T15773] RDX: 0000000000000040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 692.359326][T15773] RBP: 00007f956b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 692.359346][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.359358][T15773] R13: 00007f956b5e6038 R14: 00007f956b5e5fa0 R15: 00007ffcbe5952c8 [ 692.359382][T15773] [ 695.060986][T15816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.760108][T15098] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1365 with max blocks 8 with error 117 [ 696.857659][T15098] EXT4-fs (sda1): This should not happen!! Data will be lost [ 696.857659][T15098] [ 698.279524][T15872] FAULT_INJECTION: forcing a failure. [ 698.279524][T15872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 698.358969][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.1.1933 Tainted: G U L syzkaller #0 PREEMPT(full) [ 698.359002][T15872] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 698.359010][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 698.359020][T15872] Call Trace: [ 698.359027][T15872] [ 698.359034][T15872] dump_stack_lvl+0x16c/0x1f0 [ 698.359066][T15872] should_fail_ex+0x512/0x640 [ 698.359090][T15872] should_fail_alloc_page+0xe7/0x130 [ 698.359120][T15872] prepare_alloc_pages+0x401/0x670 [ 698.359157][T15872] ? rcu_is_watching+0x12/0xc0 [ 698.359185][T15872] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 698.359210][T15872] ? __lock_acquire+0x436/0x2890 [ 698.359236][T15872] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 698.359259][T15872] ? do_raw_spin_lock+0x12c/0x2b0 [ 698.359281][T15872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 698.359302][T15872] ? find_held_lock+0x2b/0x80 [ 698.359332][T15872] ? __lock_acquire+0x436/0x2890 [ 698.359353][T15872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 698.359383][T15872] ? policy_nodemask+0xea/0x4e0 [ 698.359413][T15872] alloc_pages_mpol+0x1fb/0x550 [ 698.359442][T15872] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 698.359476][T15872] folio_alloc_mpol_noprof+0x36/0x2f0 [ 698.359496][T15872] shmem_alloc_folio+0x135/0x160 [ 698.359527][T15872] shmem_alloc_and_add_folio+0x494/0xc20 [ 698.359552][T15872] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 698.359575][T15872] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 698.359601][T15872] shmem_get_folio_gfp+0x67f/0x1610 [ 698.359626][T15872] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 698.359647][T15872] ? filemap_map_pages+0x12dd/0x1e00 [ 698.359673][T15872] shmem_fault+0x1fe/0xa00 [ 698.359699][T15872] ? __pfx_shmem_fault+0x10/0x10 [ 698.359723][T15872] ? __pfx_filemap_map_pages+0x10/0x10 [ 698.359750][T15872] ? __pfx_filemap_map_pages+0x10/0x10 [ 698.359768][T15872] __do_fault+0x10d/0x490 [ 698.359792][T15872] ? __pfx_filemap_map_pages+0x10/0x10 [ 698.359811][T15872] do_fault+0xae4/0x1ad0 [ 698.359837][T15872] ? __pfx_filemap_map_pages+0x10/0x10 [ 698.359861][T15872] __handle_mm_fault+0x1919/0x2bb0 [ 698.359887][T15872] ? __pfx___handle_mm_fault+0x10/0x10 [ 698.359919][T15872] ? find_vma+0xbf/0x140 [ 698.359943][T15872] ? __pfx_find_vma+0x10/0x10 [ 698.359970][T15872] handle_mm_fault+0x3fe/0xad0 [ 698.359994][T15872] do_user_addr_fault+0x7a6/0x1370 [ 698.360019][T15872] ? rcu_is_watching+0x12/0xc0 [ 698.360047][T15872] exc_page_fault+0x64/0xc0 [ 698.360074][T15872] asm_exc_page_fault+0x26/0x30 [ 698.360092][T15872] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 698.360114][T15872] Code: 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 698.360137][T15872] RSP: 0018:ffffc9000c2c7898 EFLAGS: 00050206 [ 698.360153][T15872] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 698.360165][T15872] RDX: 0000000000000000 RSI: 0000000000002000 RDI: ffff888028a1b000 [ 698.360176][T15872] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10051437ff [ 698.360187][T15872] R10: ffff888028a1bfff R11: 0000000000000000 R12: 0000000000002000 [ 698.360199][T15872] R13: ffffea0000a286c0 R14: ffffc9000c2c7d28 R15: ffff888028a1b000 [ 698.360223][T15872] _copy_from_iter+0x355/0x16c0 [ 698.360245][T15872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 698.360275][T15872] ? __pfx__copy_from_iter+0x10/0x10 [ 698.360297][T15872] ? alloc_pages_mpol+0x25a/0x550 [ 698.360325][T15872] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 698.360358][T15872] copy_page_from_iter+0xde/0x180 [ 698.360381][T15872] anon_pipe_write+0xed5/0x1bd0 [ 698.360411][T15872] ? aa_file_perm+0x250/0x1560 [ 698.360440][T15872] ? futex_unqueue+0x133/0x2c0 [ 698.360461][T15872] ? __pfx_anon_pipe_write+0x10/0x10 [ 698.360487][T15872] ? __pfx_aa_file_perm+0x10/0x10 [ 698.360513][T15872] ? futex_unqueue+0x13d/0x2c0 [ 698.360534][T15872] ? __futex_wait+0x24b/0x2f0 [ 698.360563][T15872] do_iter_readv_writev+0x662/0x9e0 [ 698.360590][T15872] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 698.360614][T15872] ? common_file_perm+0x1b1/0x500 [ 698.360637][T15872] ? bpf_lsm_file_permission+0x9/0x10 [ 698.360659][T15872] ? security_file_permission+0x71/0x210 [ 698.360684][T15872] ? rw_verify_area+0xcf/0x6c0 [ 698.360709][T15872] vfs_writev+0x35f/0xde0 [ 698.360735][T15872] ? __lock_acquire+0x436/0x2890 [ 698.360754][T15872] ? __pfx_vfs_writev+0x10/0x10 [ 698.360779][T15872] ? putname+0xf5/0x1a0 [ 698.360808][T15872] ? __fget_files+0x20e/0x3c0 [ 698.360840][T15872] ? do_writev+0x28c/0x340 [ 698.360862][T15872] do_writev+0x28c/0x340 [ 698.360886][T15872] ? __pfx_do_writev+0x10/0x10 [ 698.360917][T15872] do_syscall_64+0xcd/0xf80 [ 698.360946][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.360964][T15872] RIP: 0033:0x7efe3238f7c9 [ 698.360978][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.360995][T15872] RSP: 002b:00007efe332f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 698.361012][T15872] RAX: ffffffffffffffda RBX: 00007efe325e5fa0 RCX: 00007efe3238f7c9 [ 698.361024][T15872] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001 [ 698.361035][T15872] RBP: 00007efe32413f91 R08: 0000000000000000 R09: 0000000000000000 [ 698.361046][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.361057][T15872] R13: 00007efe325e6038 R14: 00007efe325e5fa0 R15: 00007ffc215c4c68 [ 698.361080][T15872] [ 700.983724][T15896] sd 0:0:1:0: PR command failed: 1026 [ 701.033606][T15896] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 701.116910][T15896] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 701.231529][T15906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 701.345956][T15897] zswap: compressor not available [ 702.029299][T15914] FAULT_INJECTION: forcing a failure. [ 702.029299][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 702.105206][T15914] CPU: 0 UID: 0 PID: 15914 Comm: syz.1.1941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 702.105241][T15914] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 702.105249][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 702.105261][T15914] Call Trace: [ 702.105267][T15914] [ 702.105275][T15914] dump_stack_lvl+0x16c/0x1f0 [ 702.105309][T15914] should_fail_ex+0x512/0x640 [ 702.105330][T15914] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 702.105356][T15914] should_failslab+0xc2/0x120 [ 702.105385][T15914] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 702.105407][T15914] ? _raw_spin_unlock+0x28/0x50 [ 702.105432][T15914] ? sock_alloc_inode+0x25/0x1c0 [ 702.105463][T15914] ? __pfx_sock_alloc_inode+0x10/0x10 [ 702.105490][T15914] ? sock_alloc_inode+0x25/0x1c0 [ 702.105516][T15914] sock_alloc_inode+0x25/0x1c0 [ 702.105542][T15914] alloc_inode+0x64/0x240 [ 702.105563][T15914] sock_alloc+0x40/0x280 [ 702.105589][T15914] __sock_create+0xc2/0x8a0 [ 702.105622][T15914] inet_ctl_sock_create+0x94/0x230 [ 702.105643][T15914] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 702.105664][T15914] ? ndisc_net_init+0x1bc/0x250 [ 702.105683][T15914] ? __pfx_ndisc_net_init+0x10/0x10 [ 702.105705][T15914] igmp6_net_init+0x1b2/0x470 [ 702.105726][T15914] ? __pfx_igmp6_net_init+0x10/0x10 [ 702.105745][T15914] ops_init+0x1e2/0x5f0 [ 702.105772][T15914] setup_net+0x11d/0x3a0 [ 702.105797][T15914] ? __pfx_setup_net+0x10/0x10 [ 702.105820][T15914] ? lockdep_init_map_type+0x5c/0x270 [ 702.105841][T15914] ? mutex_init_lockep+0x110/0x150 [ 702.105863][T15914] copy_net_ns+0x351/0x7c0 [ 702.105892][T15914] create_new_namespaces+0x3ea/0xab0 [ 702.105923][T15914] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 702.105956][T15914] ksys_unshare+0x45b/0xa40 [ 702.106005][T15914] ? __pfx_ksys_unshare+0x10/0x10 [ 702.106037][T15914] ? syscall_user_dispatch+0x78/0x140 [ 702.106065][T15914] __x64_sys_unshare+0x31/0x40 [ 702.106088][T15914] do_syscall_64+0xcd/0xf80 [ 702.106119][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.106138][T15914] RIP: 0033:0x7efe3238f7c9 [ 702.106155][T15914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.106173][T15914] RSP: 002b:00007efe332f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 702.106192][T15914] RAX: ffffffffffffffda RBX: 00007efe325e5fa0 RCX: 00007efe3238f7c9 [ 702.106205][T15914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 702.106217][T15914] RBP: 00007efe32413f91 R08: 0000000000000000 R09: 0000000000000000 [ 702.106230][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.106241][T15914] R13: 00007efe325e6038 R14: 00007efe325e5fa0 R15: 00007ffc215c4c68 [ 702.106266][T15914] [ 702.106299][T15914] socket: no more sockets [ 702.780037][T15924] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 703.106348][T15914] Failed to initialize the IGMP6 autojoin socket (err -23) [ 703.319573][T15930] binder: 15929:15930 ioctl c018620c 0 returned -1 [ 703.379535][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1943'. [ 705.081480][T15949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 705.113800][T15949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.172814][T15949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.191440][T15949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 705.211306][T15949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 705.235311][T15949] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 705.255101][T15949] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 705.287830][T15949] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 705.309404][T15949] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 705.329628][T15949] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 705.348253][T15949] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 705.380087][T15949] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 705.406412][T15949] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 706.427167][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 706.761618][T15989] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.144175][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 707.219262][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.225829][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 707.232024][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 707.301927][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 707.317760][ T5843] Bluetooth: hci6: command 0x0419 tx timeout [ 707.323921][ T5844] Bluetooth: hci7: command 0x0c1a tx timeout [ 707.377615][ T5835] Bluetooth: hci8: command 0x0c1a tx timeout [ 707.383694][ T5843] Bluetooth: hci9: command 0x0c1a tx timeout [ 707.389815][ T5844] Bluetooth: hci10: command 0x0c1a tx timeout [ 709.107753][T16033] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 709.340813][T15887] Process accounting resumed [ 709.407145][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1971'. [ 709.435444][T16035] zswap: compressor not available [ 709.452818][ T5844] Bluetooth: hci10: command 0x0c1a tx timeout [ 710.156158][T16060] futex_wake_op: syz.5.1974 tries to shift op by -2048; fix this program [ 710.214299][T16060] futex_wake_op: syz.5.1974 tries to shift op by -2048; fix this program [ 710.247821][T16060] 0x000000000001-0x000000020000 : "" [ 710.297305][T16060] ftl_cs: FTL header corrupt! [ 710.317550][T16062] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 710.427114][T16058] netlink: 'syz.9.1973': attribute type 11 has an invalid length. [ 710.516994][T16069] WARNING! power/level is deprecated; use power/control instead [ 711.213193][ T5844] Bluetooth: hci8: unexpected event 0x20 length: 123 > 7 [ 711.519499][ T5844] Bluetooth: hci10: command 0x0c1a tx timeout [ 711.895616][T16083] binder: 16081:16083 unknown command 393216 [ 711.922232][T16083] binder: 16081:16083 ioctl c0306201 0 returned -22 [ 714.112276][T16114] HfR: entered promiscuous mode [ 714.185552][T16118] GUP no longer grows the stack in syz.9.1986 (16118): 14000-18000 (4000) [ 714.260953][T16118] CPU: 0 UID: 0 PID: 16118 Comm: syz.9.1986 Tainted: G U L syzkaller #0 PREEMPT(full) [ 714.260988][T16118] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 714.260997][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.261009][T16118] Call Trace: [ 714.261016][T16118] [ 714.261024][T16118] dump_stack_lvl+0x16c/0x1f0 [ 714.261058][T16118] gup_vma_lookup+0x1d2/0x220 [ 714.261087][T16118] __get_user_pages+0x241/0x3590 [ 714.261122][T16118] ? find_held_lock+0x2b/0x80 [ 714.261148][T16118] ? __pfx___get_user_pages+0x10/0x10 [ 714.261182][T16118] get_user_pages_remote+0x243/0xab0 [ 714.261214][T16118] ? __pfx_get_user_pages_remote+0x10/0x10 [ 714.261244][T16118] ? __pfx___might_resched+0x10/0x10 [ 714.261272][T16118] ? noop_dirty_folio+0x5e/0xb0 [ 714.261300][T16118] __access_remote_vm+0x24d/0x850 [ 714.261331][T16118] ? __pfx___access_remote_vm+0x10/0x10 [ 714.261362][T16118] mem_rw+0x20e/0x640 [ 714.261392][T16118] ? __pfx_mem_write+0x10/0x10 [ 714.261417][T16118] vfs_write+0x2a0/0x11d0 [ 714.261445][T16118] ? __pfx___mutex_lock+0x10/0x10 [ 714.261475][T16118] ? __pfx_vfs_write+0x10/0x10 [ 714.261507][T16118] ? __fget_files+0x20e/0x3c0 [ 714.261541][T16118] ksys_write+0x12a/0x250 [ 714.261566][T16118] ? __pfx_ksys_write+0x10/0x10 [ 714.261599][T16118] do_syscall_64+0xcd/0xf80 [ 714.261628][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.261648][T16118] RIP: 0033:0x7f956b38f7c9 [ 714.261664][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.261682][T16118] RSP: 002b:00007f956c1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.261701][T16118] RAX: ffffffffffffffda RBX: 00007f956b5e6090 RCX: 00007f956b38f7c9 [ 714.261713][T16118] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 714.261724][T16118] RBP: 00007f956b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 714.261735][T16118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.261746][T16118] R13: 00007f956b5e6128 R14: 00007f956b5e6090 R15: 00007ffcbe5952c8 [ 714.261770][T16118] [ 714.970839][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 715.552674][T16129] __vm_enough_memory: pid: 16129, comm: syz.9.1989, bytes: 4398046511104 not enough memory for the allocation [ 718.832978][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2000'. [ 720.418101][T16217] netlink: 222 bytes leftover after parsing attributes in process `syz.4.2005'. [ 720.792554][T16222] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 721.619898][T16245] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 721.802879][T16241] zswap: compressor not available [ 722.567582][T16258] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 722.766198][T16262] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 722.883895][T16264] random: crng reseeded on system resumption [ 723.373457][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 723.385830][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 723.395109][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 723.405501][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 723.414884][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 724.855086][T16274] chnl_net:caif_netlink_parms(): no params data found [ 725.299213][T16274] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.345320][T16274] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.352561][T16274] bridge_slave_0: entered allmulticast mode [ 725.427213][T16274] bridge_slave_0: entered promiscuous mode [ 725.452870][ T5843] Bluetooth: hci11: command tx timeout [ 725.475513][T16274] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.534719][T16274] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.586771][T16274] bridge_slave_1: entered allmulticast mode [ 725.621796][T16274] bridge_slave_1: entered promiscuous mode [ 725.758029][T16274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.808271][T16274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.029182][T16274] team0: Port device team_slave_0 added [ 726.096789][T16274] team0: Port device team_slave_1 added [ 726.213593][T16274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.236467][T16274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.354305][T16274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.425125][T16274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.463456][T16274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.619182][T16274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.821831][T16274] hsr_slave_0: entered promiscuous mode [ 726.852090][T16274] hsr_slave_1: entered promiscuous mode [ 726.892375][T16274] debugfs: 'hsr0' already exists in 'hsr' [ 726.916674][T16274] Cannot create hsr debugfs directory [ 727.127181][ T2130] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1367 with max blocks 6 with error 117 [ 727.210484][ T2130] EXT4-fs (sda1): This should not happen!! Data will be lost [ 727.210484][ T2130] [ 727.523030][ T5843] Bluetooth: hci11: command tx timeout [ 728.057104][T16274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.426266][T16274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.927654][T16274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.231600][T16274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.594240][ T5843] Bluetooth: hci11: command tx timeout [ 730.543724][T16274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.582955][T16274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.632707][T16274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 730.718499][T16274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 731.170058][T16274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.212587][T16393] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2043'. [ 731.259227][T16274] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.383477][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.390680][T15099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.451946][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.459165][T15099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.662356][ T5843] Bluetooth: hci11: command tx timeout [ 731.943770][ T5843] Bluetooth: hci10: unexpected event 0x3e length: 726 > 260 [ 731.943801][ T5843] Bluetooth: hci10: unexpected subevent 0x0d length: 725 > 260 [ 731.959040][ T5843] Bluetooth: hci10: Unknown advertising packet type: 0x7f [ 731.959087][ T5843] Bluetooth: hci10: adv larger than maximum supported [ 731.969243][ T5843] Bluetooth: hci10: adv larger than maximum supported [ 731.976127][ T5843] Bluetooth: hci10: Malformed LE Event: 0x0d [ 732.088680][T16400] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.204747][T16400] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.429493][T16400] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.727977][T16274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.066514][T16419] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2047'. [ 733.097392][T16274] veth0_vlan: entered promiscuous mode [ 733.200280][T16274] veth1_vlan: entered promiscuous mode [ 733.253259][T16421] serio: Serial port pty6 [ 733.328853][T16274] veth0_macvtap: entered promiscuous mode [ 733.398203][T16274] veth1_macvtap: entered promiscuous mode [ 733.536891][T16274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.603252][T16274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.726839][ T1340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.831223][ T1340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.882096][ T1340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.003767][ T1340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.108475][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.143964][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.257629][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.319169][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.580104][T16442] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 734.903752][T16450] random: crng reseeded on system resumption [ 735.216916][T16446] zswap: compressor not available [ 736.214637][T16458] mkiss: ax0: crc mode is auto. [ 737.402746][T16498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'. syzkaller syzkaller login: [ 741.319815][ T30] audit: type=1800 audit(4294967326.559:27): pid=16542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2075" name="dbroot" dev="configfs" ino=72335 res=0 errno=0 [ 741.579533][T16532] __vm_enough_memory: pid: 16532, comm: syz.2.2073, bytes: 8589938688 not enough memory for the allocation [ 741.747331][T16550] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2077'. [ 741.822629][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2077'. [ 741.913632][T16553] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2077'. [ 742.057465][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2077'. [ 742.350249][T16567] FAULT_INJECTION: forcing a failure. [ 742.350249][T16567] name failslab, interval 1, probability 0, space 0, times 0 [ 742.669014][T16567] CPU: 0 UID: 0 PID: 16567 Comm: syz.2.2079 Tainted: G U L syzkaller #0 PREEMPT(full) [ 742.669049][T16567] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 742.669057][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.669068][T16567] Call Trace: [ 742.669075][T16567] [ 742.669083][T16567] dump_stack_lvl+0x16c/0x1f0 [ 742.669116][T16567] should_fail_ex+0x512/0x640 [ 742.669136][T16567] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 742.669163][T16567] should_failslab+0xc2/0x120 [ 742.669191][T16567] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 742.669215][T16567] ? __d_alloc+0x35/0xa80 [ 742.669249][T16567] ? __d_alloc+0x35/0xa80 [ 742.669276][T16567] __d_alloc+0x35/0xa80 [ 742.669307][T16567] d_alloc_parallel+0x111/0x1510 [ 742.669336][T16567] ? find_held_lock+0x2b/0x80 [ 742.669364][T16567] ? __pfx_d_alloc_parallel+0x10/0x10 [ 742.669391][T16567] ? __d_lookup+0x266/0x4a0 [ 742.669419][T16567] lookup_open.isra.0+0x66c/0x1780 [ 742.669448][T16567] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 742.669483][T16567] ? mnt_get_write_access+0x1e9/0x2f0 [ 742.669508][T16567] path_openat+0x12bb/0x3140 [ 742.669542][T16567] ? __pfx_path_openat+0x10/0x10 [ 742.669577][T16567] do_filp_open+0x20b/0x470 [ 742.669606][T16567] ? __pfx_do_filp_open+0x10/0x10 [ 742.669649][T16567] ? alloc_fd+0x471/0x7d0 [ 742.669682][T16567] do_sys_openat2+0x121/0x290 [ 742.669702][T16567] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.669722][T16567] ? find_held_lock+0x2b/0x80 [ 742.669754][T16567] ? __fget_files+0x204/0x3c0 [ 742.669785][T16567] __x64_sys_openat+0x174/0x210 [ 742.669806][T16567] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.669837][T16567] do_syscall_64+0xcd/0xf80 [ 742.669867][T16567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.669887][T16567] RIP: 0033:0x7fad8c58f7c9 [ 742.669903][T16567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.669922][T16567] RSP: 002b:00007fad8d3cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.669940][T16567] RAX: ffffffffffffffda RBX: 00007fad8c7e6090 RCX: 00007fad8c58f7c9 [ 742.669952][T16567] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 742.669964][T16567] RBP: 00007fad8c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.669976][T16567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.669987][T16567] R13: 00007fad8c7e6128 R14: 00007fad8c7e6090 R15: 00007ffc8a5ddbd8 [ 742.670010][T16567] [ 742.947939][T16575] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2081'. [ 743.637047][T16580] delete_channel: no stack [ 743.900687][T16586] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 744.516335][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2086'. [ 744.631529][T16593] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 744.931397][T16608] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2088'. [ 745.014101][T16607] FAULT_INJECTION: forcing a failure. [ 745.014101][T16607] name fail_futex, interval 1, probability 0, space 0, times 0 [ 745.219624][T16614] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 745.323992][T16607] CPU: 0 UID: 0 PID: 16607 Comm: syz.2.2087 Tainted: G U L syzkaller #0 PREEMPT(full) [ 745.324028][T16607] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 745.324035][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 745.324046][T16607] Call Trace: [ 745.324053][T16607] [ 745.324061][T16607] dump_stack_lvl+0x16c/0x1f0 [ 745.324093][T16607] should_fail_ex+0x512/0x640 [ 745.324117][T16607] get_futex_key+0x1d0/0x15f0 [ 745.324141][T16607] ? __pfx_get_futex_key+0x10/0x10 [ 745.324168][T16607] futex_wait_setup+0x9d/0x570 [ 745.324199][T16607] __futex_wait+0x193/0x2f0 [ 745.324225][T16607] ? __pfx___futex_wait+0x10/0x10 [ 745.324254][T16607] ? __pfx_futex_wake_mark+0x10/0x10 [ 745.324282][T16607] ? futex_hash+0x2c5/0x380 [ 745.324303][T16607] ? futex_private_hash_put+0x160/0x1b0 [ 745.324325][T16607] futex_wait+0xe8/0x380 [ 745.324350][T16607] ? __pfx_futex_wait+0x10/0x10 [ 745.324380][T16607] ? __might_fault+0xe3/0x190 [ 745.324400][T16607] ? __might_fault+0x13b/0x190 [ 745.324425][T16607] do_futex+0x229/0x350 [ 745.324447][T16607] ? __pfx_do_futex+0x10/0x10 [ 745.324478][T16607] ? fput+0x70/0xf0 [ 745.324496][T16607] ? __sys_connect+0xe0/0x160 [ 745.324519][T16607] __x64_sys_futex+0x1e0/0x4c0 [ 745.324544][T16607] ? __pfx___x64_sys_futex+0x10/0x10 [ 745.324566][T16607] ? xfd_validate_state+0x61/0x180 [ 745.324596][T16607] do_syscall_64+0xcd/0xf80 [ 745.324626][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.324645][T16607] RIP: 0033:0x7fad8c58f7c9 [ 745.324660][T16607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.324679][T16607] RSP: 002b:00007fad8d3ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 745.324698][T16607] RAX: ffffffffffffffda RBX: 00007fad8c7e5fa8 RCX: 00007fad8c58f7c9 [ 745.324714][T16607] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad8c7e5fa8 [ 745.324729][T16607] RBP: 00007fad8c7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 745.324740][T16607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.324751][T16607] R13: 00007fad8c7e6038 R14: 00007ffc8a5ddaf0 R15: 00007ffc8a5ddbd8 [ 745.324775][T16607] [ 745.972365][T16619] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 746.024341][T16617] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 747.862805][T16676] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2099'. [ 747.883366][T16673] FAULT_INJECTION: forcing a failure. [ 747.883366][T16673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 747.998558][T16683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 748.040376][T16680] netlink: 166 bytes leftover after parsing attributes in process `syz.5.2099'. [ 748.343646][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.2.2096 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.343683][T16673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.343691][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.343702][T16673] Call Trace: [ 748.343709][T16673] [ 748.343717][T16673] dump_stack_lvl+0x16c/0x1f0 [ 748.343751][T16673] should_fail_ex+0x512/0x640 [ 748.343777][T16673] should_fail_alloc_page+0xe7/0x130 [ 748.343808][T16673] prepare_alloc_pages+0x401/0x670 [ 748.343838][T16673] ? rcu_is_watching+0x12/0xc0 [ 748.343867][T16673] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 748.343891][T16673] ? should_fail_alloc_page+0xee/0x130 [ 748.343921][T16673] ? rcu_is_watching+0x12/0xc0 [ 748.343947][T16673] ? trace_mm_page_alloc+0x11b/0x180 [ 748.343975][T16673] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 748.343999][T16673] ? kfree+0x2f8/0x6e0 [ 748.344016][T16673] ? tomoyo_path_number_perm+0x470/0x580 [ 748.344037][T16673] ? security_file_ioctl+0x9b/0x240 [ 748.344059][T16673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 748.344083][T16673] ? kasan_save_stack+0x42/0x60 [ 748.344107][T16673] ? kasan_save_stack+0x33/0x60 [ 748.344130][T16673] ? kasan_save_track+0x14/0x30 [ 748.344153][T16673] ? __kasan_kmalloc+0xaa/0xb0 [ 748.344176][T16673] ? __kmalloc_noprof+0x33d/0x910 [ 748.344194][T16673] ? vhost_net_ioctl+0x87f/0x1850 [ 748.344220][T16673] ? __lock_acquire+0x436/0x2890 [ 748.344241][T16673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.344271][T16673] ? policy_nodemask+0xea/0x4e0 [ 748.344301][T16673] alloc_pages_mpol+0x1fb/0x550 [ 748.344330][T16673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 748.344372][T16673] ___kmalloc_large_node+0x10c/0x150 [ 748.344405][T16673] __kmalloc_large_node_noprof+0x1c/0x70 [ 748.344437][T16673] __kmalloc_noprof.cold+0xc/0x62 [ 748.344465][T16673] ? vhost_dev_set_owner+0x20c/0xa50 [ 748.344495][T16673] ? vhost_dev_set_owner+0x20c/0xa50 [ 748.344520][T16673] vhost_dev_set_owner+0x20c/0xa50 [ 748.344554][T16673] vhost_net_ioctl+0x87f/0x1850 [ 748.344576][T16673] ? do_vfs_ioctl+0x128/0x14f0 [ 748.344608][T16673] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 748.344631][T16673] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 748.344660][T16673] ? find_held_lock+0x2b/0x80 [ 748.344687][T16673] ? hook_file_ioctl_common+0x144/0x410 [ 748.344715][T16673] ? __fget_files+0x20e/0x3c0 [ 748.344745][T16673] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 748.344770][T16673] __x64_sys_ioctl+0x18e/0x210 [ 748.344803][T16673] do_syscall_64+0xcd/0xf80 [ 748.344834][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.344854][T16673] RIP: 0033:0x7fad8c58f7c9 [ 748.344870][T16673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.344889][T16673] RSP: 002b:00007fad8d3ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.344908][T16673] RAX: ffffffffffffffda RBX: 00007fad8c7e6180 RCX: 00007fad8c58f7c9 [ 748.344921][T16673] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000006 [ 748.344934][T16673] RBP: 00007fad8c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 748.344946][T16673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.344958][T16673] R13: 00007fad8c7e6218 R14: 00007fad8c7e6180 R15: 00007ffc8a5ddbd8 [ 748.344982][T16673] [ 749.554052][T16692] Invalid ELF header magic: != ELF [ 749.953847][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.967519][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.310850][T16724] ubi: mtd0 is already attached to ubi0 [ 751.403556][T16724] ubi0: detaching mtd0 [ 751.553306][T16724] ubi0: mtd0 is detached [ 753.021549][T16748] binder: 16747:16748 ioctl c0306201 0 returned -14 [ 753.290885][T16751] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 754.119592][T16768] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.515891][ T3078] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 11 with max blocks 9 with error 117 [ 754.589606][ T3078] EXT4-fs (sda1): This should not happen!! Data will be lost [ 754.589606][ T3078] [ 754.817020][T16769] Console: switching to colour VGA+ 80x25 [ 756.228283][T16782] kexec: Could not allocate control_code_buffer [ 756.685561][T16796] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.837203][T16806] FAULT_INJECTION: forcing a failure. [ 756.837203][T16806] name failslab, interval 1, probability 0, space 0, times 0 [ 757.050356][T16806] CPU: 0 UID: 0 PID: 16806 Comm: syz.4.2123 Tainted: G U L syzkaller #0 PREEMPT(full) [ 757.050394][T16806] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 757.050401][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 757.050413][T16806] Call Trace: [ 757.050420][T16806] [ 757.050428][T16806] dump_stack_lvl+0x16c/0x1f0 [ 757.050462][T16806] should_fail_ex+0x512/0x640 [ 757.050483][T16806] ? __kmalloc_cache_noprof+0x5f/0x800 [ 757.050508][T16806] should_failslab+0xc2/0x120 [ 757.050536][T16806] __kmalloc_cache_noprof+0x80/0x800 [ 757.050558][T16806] ? io_uring_setup+0x1c4/0x1f60 [ 757.050586][T16806] ? io_uring_setup+0x1c4/0x1f60 [ 757.050609][T16806] io_uring_setup+0x1c4/0x1f60 [ 757.050635][T16806] ? __pfx_io_uring_setup+0x10/0x10 [ 757.050662][T16806] ? do_futex+0x122/0x350 [ 757.050684][T16806] ? __pfx_do_futex+0x10/0x10 [ 757.050716][T16806] ? xfd_validate_state+0x61/0x180 [ 757.050733][T16806] ? __pfx_do_writev+0x10/0x10 [ 757.050762][T16806] __x64_sys_io_uring_setup+0xc2/0x170 [ 757.050788][T16806] do_syscall_64+0xcd/0xf80 [ 757.050817][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.050836][T16806] RIP: 0033:0x7f3146f8f7c9 [ 757.050852][T16806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.050871][T16806] RSP: 002b:00007f3147e0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 757.050890][T16806] RAX: ffffffffffffffda RBX: 00007f31471e5fa0 RCX: 00007f3146f8f7c9 [ 757.050903][T16806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 757.050913][T16806] RBP: 00007f3147013f91 R08: 0000000000000000 R09: 0000000000000000 [ 757.050925][T16806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.050936][T16806] R13: 00007f31471e6038 R14: 00007f31471e5fa0 R15: 00007ffc14829e38 [ 757.050958][T16806] [ 760.234583][T15693] usb usb38-port5: attempt power cycle [ 760.367103][T16855] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 760.528600][T16855] net nr1: uevent: failed to send synthetic uevent: -22 [ 760.712849][ T31] INFO: task syz-executor:5836 blocked for more than 144 seconds. [ 760.732490][ T31] Tainted: G U L syzkaller #0 [ 760.739032][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 760.823680][T15693] usb usb38-port5: unable to enumerate USB device [ 760.850550][ T31] task:syz-executor state:D stack:23480 pid:5836 tgid:5836 ppid:1 task_flags:0x400140 flags:0x00080002 [ 760.912906][T16844] FAULT_INJECTION: forcing a failure. [ 760.912906][T16844] name failslab, interval 1, probability 0, space 0, times 0 [ 760.947056][ T31] Call Trace: [ 760.961143][ T31] [ 760.964313][ T31] ? __schedule+0x10b9/0x6150 [ 761.093848][ T31] __schedule+0x1139/0x6150 [ 761.124256][ T31] ? __lock_acquire+0x436/0x2890 [ 761.160182][ T31] ? __pfx___schedule+0x10/0x10 [ 761.165095][ T31] ? find_held_lock+0x2b/0x80 [ 761.218608][ T31] ? schedule+0x2d7/0x3a0 [ 761.222995][ T31] schedule+0xe7/0x3a0 [ 761.264969][ T31] schedule_preempt_disabled+0x13/0x30 [ 761.303230][ T31] __mutex_lock+0xc69/0x1ca0 [ 761.307912][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 761.328467][T16844] CPU: 0 UID: 0 PID: 16844 Comm: syz.9.2133 Tainted: G U L syzkaller #0 PREEMPT(full) [ 761.328504][T16844] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 761.328512][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 761.328524][T16844] Call Trace: [ 761.328531][T16844] [ 761.328539][T16844] dump_stack_lvl+0x16c/0x1f0 [ 761.328571][T16844] should_fail_ex+0x512/0x640 [ 761.328593][T16844] ? fs_reclaim_acquire+0xae/0x150 [ 761.328625][T16844] should_failslab+0xc2/0x120 [ 761.328653][T16844] __kmalloc_noprof+0xeb/0x910 [ 761.328673][T16844] ? find_held_lock+0x2b/0x80 [ 761.328697][T16844] ? usb_alloc_urb+0x66/0xa0 [ 761.328728][T16844] ? usb_alloc_urb+0x66/0xa0 [ 761.328753][T16844] usb_alloc_urb+0x66/0xa0 [ 761.328779][T16844] do_proc_control+0x2ef/0x10a0 [ 761.328809][T16844] ? __might_fault+0x13b/0x190 [ 761.328830][T16844] ? __pfx_do_proc_control+0x10/0x10 [ 761.328864][T16844] usbdev_ioctl+0x22ff/0x4070 [ 761.328894][T16844] ? __pfx_usbdev_ioctl+0x10/0x10 [ 761.328926][T16844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.328956][T16844] ? do_vfs_ioctl+0x128/0x14f0 [ 761.328987][T16844] ? find_held_lock+0x2b/0x80 [ 761.329011][T16844] ? hook_file_ioctl_common+0x144/0x410 [ 761.329037][T16844] ? __fget_files+0x20e/0x3c0 [ 761.329066][T16844] ? __pfx_usbdev_ioctl+0x10/0x10 [ 761.329095][T16844] __x64_sys_ioctl+0x18e/0x210 [ 761.329119][T16844] do_syscall_64+0xcd/0xf80 [ 761.329149][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.329168][T16844] RIP: 0033:0x7f956b38f7c9 [ 761.329185][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.329203][T16844] RSP: 002b:00007f956c1db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.329221][T16844] RAX: ffffffffffffffda RBX: 00007f956b5e5fa0 RCX: 00007f956b38f7c9 [ 761.329241][T16844] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 761.329252][T16844] RBP: 00007f956b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 761.329263][T16844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.329275][T16844] R13: 00007f956b5e6038 R14: 00007f956b5e5fa0 R15: 00007ffcbe5952c8 [ 761.329299][T16844] [ 761.815474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 761.820604][ T31] ? net_generic+0xea/0x2a0 [ 761.825149][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 761.875183][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 761.880371][ T31] nfsd_umount+0x3b/0x60 [ 761.884734][ T31] deactivate_locked_super+0xc1/0x1a0 [ 761.934884][ T31] deactivate_super+0xde/0x100 [ 761.940242][ T31] cleanup_mnt+0x225/0x450 [ 761.960744][ T31] task_work_run+0x150/0x240 [ 761.987833][ T31] ? __pfx_task_work_run+0x10/0x10 [ 761.993008][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 762.058209][ T31] do_syscall_64+0x4ee/0xf80 [ 762.062872][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.117676][ T31] RIP: 0033:0x7f9b0ad90af7 [ 762.122135][ T31] RSP: 002b:00007ffca8335ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 762.178535][ T31] RAX: 0000000000000000 RBX: 00007f9b0ae13d7d RCX: 00007f9b0ad90af7 [ 762.219145][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca8335da0 [ 762.248887][ T31] RBP: 00007ffca8335da0 R08: 0000000000000000 R09: 0000000000000000 [ 762.283311][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca8336e90 [ 762.291355][ T31] R13: 00007f9b0ae13d7d R14: 0000000000095697 R15: 00007ffca8337f60 [ 762.354226][ T31] [ 762.392566][ T31] [ 762.392566][ T31] Showing all locks held in the system: [ 762.400325][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 762.521802][ T31] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 762.581589][ T31] 1 lock held by khungtaskd/31: [ 762.586579][ T31] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 762.651194][ T31] 4 locks held by kworker/u8:9/1340: [ 762.690942][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 762.735257][ T31] #1: ffffc9000484fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 762.790481][ T31] #2: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 762.799835][ T31] #3: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 762.859854][ T31] 2 locks held by syz-executor/5836: [ 762.899880][ T31] #0: ffff88802ae580e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 762.929665][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 762.979478][ T31] 2 locks held by syz-executor/5839: [ 762.984808][ T31] #0: ffff888024fe40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 763.049251][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 763.108757][ T31] 1 lock held by syz.4.959/10817: [ 763.113814][ T31] 2 locks held by syz.5.1032/11380: [ 763.158516][ T31] #0: ffff88805b96c148 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 763.218222][ T31] #1: ffff8880620d0260 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x1c/0x360 [ 763.228045][ T31] 2 locks held by syz.2.1692/14392: [ 763.264702][ T31] #0: ffffffff901eb350 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.327594][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 763.369204][ T31] 2 locks held by syz-executor/14590: [ 763.374727][ T31] #0: ffff888059bf80e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 763.443680][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 763.486813][ T31] 2 locks held by syz-executor/14873: [ 763.492337][ T31] #0: ffff8880581940e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 763.566620][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 763.607803][ T31] 2 locks held by syz-executor/15150: [ 763.613208][ T31] #0: ffff888077b300e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 763.674766][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 763.717139][ T31] 2 locks held by syz-executor/15254: [ 763.722544][ T31] #0: ffff88805b26c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 763.795195][ T31] #1: ffffffff8e8011e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 763.804823][ T31] 2 locks held by getty/16507: [ 763.844942][ T31] #0: ffff888030baf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 763.878532][ T31] #1: ffffc900051ab2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 763.924539][ T31] 1 lock held by syz.2.2093/16630: [ 763.929877][ T31] 1 lock held by syz.4.2136/16852: [ 763.953668][ T31] #0: ffff88805a936988 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 763.994175][ T31] 1 lock held by syz.4.2136/16854: [ 763.999328][ T31] #0: ffff88805b968d88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 764.024043][ T31] 2 locks held by syz.2.2138/16861: [ 764.029289][ T31] #0: ffff88805d129ec8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 764.059028][ T31] #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 764.093613][ T31] 1 lock held by dhcpcd/16869: [ 764.098432][ T31] #0: ffff888075db2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 764.243707][ T31] [ 764.246080][ T31] ============================================= [ 764.246080][ T31] [ 764.282197][ T31] NMI backtrace for cpu 0 [ 764.282219][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 764.282248][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 764.282255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.282266][ T31] Call Trace: [ 764.282272][ T31] [ 764.282280][ T31] dump_stack_lvl+0x116/0x1f0 [ 764.282312][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 764.282333][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 764.282354][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 764.282377][ T31] sys_info+0x133/0x180 [ 764.282393][ T31] watchdog+0xe66/0x1180 [ 764.282425][ T31] ? rcu_is_watching+0x12/0xc0 [ 764.282451][ T31] ? __pfx_watchdog+0x10/0x10 [ 764.282476][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.282505][ T31] ? __kthread_parkme+0x19e/0x250 [ 764.282537][ T31] ? __pfx_watchdog+0x10/0x10 [ 764.282572][ T31] kthread+0x3c5/0x780 [ 764.282590][ T31] ? __pfx_kthread+0x10/0x10 [ 764.282609][ T31] ? rcu_is_watching+0x12/0xc0 [ 764.282635][ T31] ? __pfx_kthread+0x10/0x10 [ 764.282653][ T31] ret_from_fork+0x983/0xb10 [ 764.282673][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 764.282694][ T31] ? __switch_to+0x7af/0x10d0 [ 764.282717][ T31] ? __pfx_kthread+0x10/0x10 [ 764.282736][ T31] ret_from_fork_asm+0x1a/0x30 [ 764.282774][ T31] [ 764.979250][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 764.986151][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 764.996834][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 765.002036][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.012087][ T31] Call Trace: [ 765.015363][ T31] [ 765.018294][ T31] dump_stack_lvl+0x3d/0x1f0 [ 765.022896][ T31] vpanic+0x640/0x6f0 [ 765.026880][ T31] panic+0xca/0xd0 [ 765.030598][ T31] ? __pfx_panic+0x10/0x10 [ 765.035010][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 765.040993][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 765.047185][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 765.053370][ T31] ? watchdog+0xe83/0x1180 [ 765.057839][ T31] ? watchdog+0xe76/0x1180 [ 765.062287][ T31] watchdog+0xe94/0x1180 [ 765.066549][ T31] ? rcu_is_watching+0x12/0xc0 [ 765.071339][ T31] ? __pfx_watchdog+0x10/0x10 [ 765.076022][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 765.081248][ T31] ? __kthread_parkme+0x19e/0x250 [ 765.086309][ T31] ? __pfx_watchdog+0x10/0x10 [ 765.091044][ T31] kthread+0x3c5/0x780 [ 765.095144][ T31] ? __pfx_kthread+0x10/0x10 [ 765.099765][ T31] ? rcu_is_watching+0x12/0xc0 [ 765.104540][ T31] ? __pfx_kthread+0x10/0x10 [ 765.109127][ T31] ret_from_fork+0x983/0xb10 [ 765.113721][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 765.118829][ T31] ? __switch_to+0x7af/0x10d0 [ 765.123526][ T31] ? __pfx_kthread+0x10/0x10 [ 765.128206][ T31] ret_from_fork_asm+0x1a/0x30 [ 765.133010][ T31] [ 765.136106][ T31] Kernel Offset: disabled [ 765.140434][ T31] Rebooting in 86400 seconds..