last executing test programs: 6m47.24999722s ago: executing program 3 (id=87): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000940)={{@raw=0xb, 0x342, 0xd, 0x6, "c839bab14d1212548fd4da54d56956cc9e8e0d47d085e9fe52bf04348b41597c1f88a8c3689fcc68be5410e6", @raw=0x2}, 0x1, @bytes=@data_ptr=0x0, "a213722d36c81384a87a485117c469cef9981e8a0237986ae6ca3ae611e7e813211b8b6dfcb1ac96427f740d04e0e4edcee7f09888db8e788b715e227d64d4a4be3738ea586f05b9f29af9b74e7620665991b0ebdb2cd8d6f01bb54275431be8bb0ccd7c680cc500073cf6e0fffe7319f2e6ae7d05fd890a7ea859e900915ea2"}) close_range$auto(0x2, 0xffffffffffffffff, 0x3c) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) clock_getres$auto(0x8, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/lru_gen\x00', 0x2443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000540)=""/150, 0x96) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000300)={0x26, 0x7, "3205f62b350101000094791c2ffcea205b61f589de2092b8ff46114218c8332219e6d777fd6b"}, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) fdatasync$auto(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250400000014001a8094c1a78a61c5a780100004800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x10) fchdir$auto(r2) 6m46.853415648s ago: executing program 3 (id=88): mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getpgid(0xffffffffffffffff) 6m46.478144864s ago: executing program 3 (id=90): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) 6m46.217592923s ago: executing program 3 (id=94): r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0xd, 0x200003, 0x2, 0x40eb1, r0, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r1, 0x9000643c, 0xc35) socket(0x22, 0x1, 0xfffffffe) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0xa0343, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xfffffffe, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=r0, 0xa, @old_map_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) setns(r4, 0x60020000) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57) 6m46.062795557s ago: executing program 3 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000f000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c00020004000000000000040c00060009"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 6m45.744108571s ago: executing program 3 (id=98): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r0, 0x11b, 0x7, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000680)="1f9319c707498de36a6eedfcfaa139bb5f55cf18b4ee56510d", 0x19) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r1, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) getpid() sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 6m30.498815227s ago: executing program 32 (id=98): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r0, 0x11b, 0x7, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000680)="1f9319c707498de36a6eedfcfaa139bb5f55cf18b4ee56510d", 0x19) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r1, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) getpid() sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 3m38.885839002s ago: executing program 4 (id=872): mmap$auto(0x200000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x181281, 0x0) ioctl$auto(r1, 0xc040564a, r0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x121882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x4, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x44442, 0x155) fcntl$auto_F_GETLEASE(r2, 0x401, 0xf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clock_getres$auto(0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/114, 0x72) 3m36.812061832s ago: executing program 4 (id=880): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r0, 0x11) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) gettid() (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) (async) ioperm$auto(0x3, 0x5, 0x149) (async) kill$auto(r0, 0x11) (async) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) (async) 3m36.085402896s ago: executing program 4 (id=885): close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) pipe$auto(&(0x7f0000000780)) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty61\x00', 0x103040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129302, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) 3m35.859194943s ago: executing program 4 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c00020004000000000000040c00060009"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 3m35.603482207s ago: executing program 4 (id=888): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cd, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x5}) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b490004000000a32457895897071b", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 3m35.30098155s ago: executing program 4 (id=892): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x1, 0x80000000008, 0x7e, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = socket(0xa, 0x3, 0x3d) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r1, 0xa0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES64=r4, @ANYRES8=r3, @ANYBLOB="7fd2eedbd0f8d16eced9c001e936143ca42fc6372b247bd02b8ea709ef54e47cdc0a65195f11172024d27ecca3f2d93e81e7b801bcd60574620f450bdd9853316c1bf93fe9ecb664362b19d94333150ccfc18236217080f31d60590bbfdd1c8f51d11480eaeb71a3bb3090d96bf05556e2ba40c85ea3875a7c7662ac1203a67428461c0d", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x535785e842ada678}, 0xc005) setreuid$auto(0xffffffffffffffff, 0x8) keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) r6 = socket(0x1d, 0xa, 0x100088) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x1ff, r6, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c000000", @ANYRES64=r1, @ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="08000300ff7f00000800040002000000140002006272696467655f736c6176655f3000001400020070696d726567000000000000000000003000018008000300040000000800030009d100001400020076657468315f766972745f776966690008000100", @ANYRES32=r9, @ANYBLOB="44ca27a91fbba4119c476635db8a4231f95e76520e1b62f75c19876acb62a02699852f7d2a4b86b3197a7bd7f0603d2e60c39e28f714aa9f4d28fe93ecce5d74ca99239ea781e47de51e68ca40918c91847b43e02cb2dbaa9b1cb2703109a44787f73cfdd6dcd0d2686903bf8f2cb1f746fa025139b9be019eee95f149f2b10fced62aca0ea7eac0a456fe47185ebe128213"], 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket(0xa, 0xa, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r3], 0x14}}, 0x24004814) 3m20.032769253s ago: executing program 33 (id=892): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x1, 0x80000000008, 0x7e, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = socket(0xa, 0x3, 0x3d) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r1, 0xa0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES64=r4, @ANYRES8=r3, @ANYBLOB="7fd2eedbd0f8d16eced9c001e936143ca42fc6372b247bd02b8ea709ef54e47cdc0a65195f11172024d27ecca3f2d93e81e7b801bcd60574620f450bdd9853316c1bf93fe9ecb664362b19d94333150ccfc18236217080f31d60590bbfdd1c8f51d11480eaeb71a3bb3090d96bf05556e2ba40c85ea3875a7c7662ac1203a67428461c0d", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x535785e842ada678}, 0xc005) setreuid$auto(0xffffffffffffffff, 0x8) keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) r6 = socket(0x1d, 0xa, 0x100088) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x1ff, r6, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c000000", @ANYRES64=r1, @ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="08000300ff7f00000800040002000000140002006272696467655f736c6176655f3000001400020070696d726567000000000000000000003000018008000300040000000800030009d100001400020076657468315f766972745f776966690008000100", @ANYRES32=r9, @ANYBLOB="44ca27a91fbba4119c476635db8a4231f95e76520e1b62f75c19876acb62a02699852f7d2a4b86b3197a7bd7f0603d2e60c39e28f714aa9f4d28fe93ecce5d74ca99239ea781e47de51e68ca40918c91847b43e02cb2dbaa9b1cb2703109a44787f73cfdd6dcd0d2686903bf8f2cb1f746fa025139b9be019eee95f149f2b10fced62aca0ea7eac0a456fe47185ebe128213"], 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket(0xa, 0xa, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r3], 0x14}}, 0x24004814) 1m58.406408224s ago: executing program 5 (id=1207): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000006c0)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @reserved="a70545d2a59eb86523a1dfb540b50ef0fe861eb6ecfef15574f58d535fd0244d50c54684db291214ef19ab42879371b0d70cdfd852c5b991c5efd57d334d22f1cf863e8f4156cc9f6dad94134fa6132ad5ff21eb2409c0cd4d8b6cf04af40992c79896e31f839766668e0fa28b2856add075f331effd6ceeda92ba9d66af610d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) getegid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x48880) shutdown$auto(0x200000003, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) getsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x5, 0xc, 0x0, &(0x7f00000000c0)=0x7) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40) timerfd_create$auto(0x0, 0x800) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x100) eventfd$auto(0x5) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) getrandom$auto(&(0x7f0000000000)=',_\',\x00', 0x100, 0x7fffffff) 1m57.858819687s ago: executing program 5 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x5c}, 0x1, 0x1000000, 0x0, 0x40000}, 0x0) 1m57.606301616s ago: executing program 5 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xe000000, 0x10}, 0x2000000) 1m57.397079041s ago: executing program 5 (id=1213): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000007b60c000100040000000000000098ff011e40000000000000000c0020000400000000000080fd4afcbf767ad640000c00010000000000000700000c"], 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x440c4) 1m56.873529043s ago: executing program 5 (id=1215): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x2000, 0x0) r1 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r1, 0x0, 0x663, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000940)={{@raw=0xb, 0x342, 0xd, 0x6, "c839bab14d1212548fd4da54d56956cc9e8e0d47d085e9fe52bf04348b41597c1f88a8c3689fcc68be5410e6", @raw=0x2}, 0x1, @bytes=@data_ptr=0x0, "a213722d36c81384a87a485117c469cef9981e8a0237986ae6ca3ae611e7e813211b8b6dfcb1ac96427f740d04e0e4edcee7f09888db8e788b715e227d64d4a4be3738ea586f05b9f29af9b74e7620665991b0ebdb2cd8d6f01bb54275431be8bb0ccd7c680cc500073cf6e0fffe7319f2e6ae7d05fd890a7ea859e900915ea2"}) 1m56.714380742s ago: executing program 5 (id=1216): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8001) io_uring_register$auto(0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0xffffffffffffffff, 0x7, 0xffffffffffffffff) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, 0x0, 0x8000000000001b) unshare$auto(0x40000080) mmap$auto(0x1, 0x0, 0x44000000000dd, 0x15, 0x401, 0x7fff) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x85}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) ioctl$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x4, &(0x7f0000000280)="f26891cb2ed18376017ff1ab12c1792935603a41d4aa06cb408af493565f5f681a8ea3c393851f3e9e9ff18e46c874829f4690aa9deb4ce9ff6524a4e182a843681ee75966c8d0e7e77d777a1531cdc6faff458cf96f44dab5415092292166f727df1ee0ae366beace4eb1de82c93a7f5f0a839fe922f2b3393f4df6af12803213f171c129cc17d13400c1da13f077dfa7251c1a477921e24f5cdc93dd2292daaee610ad261965c267f6a73a") pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 1m55.677538856s ago: executing program 2 (id=1220): mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x524a0, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) socket(0x2, 0x1, 0x106) (async) setsockopt$auto(0x3, 0x0, 0x3e, 0x0, 0x5) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x94, 0xf3, 0xb0}}) (async) r1 = epoll_create$auto(0x8) (async) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$auto_FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000040)) (async) write$auto(r1, &(0x7f0000000140)='\x00', 0x2) (async) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m55.181489976s ago: executing program 2 (id=1222): statmount$auto(&(0x7f0000000040)={0x6189, @inferred, 0x4, 0x4f65b40b, 0xf}, &(0x7f0000000380)={0x55c35ef, 0x2f, 0x3, 0x62, 0x28000, 0xfffffffffffffffe, 0x0, 0x800, 0x13, 0x8, 0x5, 0x40, 0xf, 0x1, 0x21fd, 0x0, 0xe7, 0x1000, 0x2, 0xffffffffffffffff, 0x2d8, 0x5, 0x7, 0x2, 0x7, 0x1, 0x4, 0x4, 0xe, 0x7, 0x8, [0x61, 0xd0e, 0x8, 0x5, 0x3ff, 0x7, 0x10000, 0x1ff, 0x3, 0x121980a3, 0x4, 0x8001, 0x5, 0x40, 0x7, 0xb1a3, 0x80000000, 0x5, 0x2a6, 0x100000000, 0x7, 0xfffffffffffffff9, 0x4, 0x3, 0x2000000000, 0x6, 0xe43, 0x5, 0x9c8, 0x4, 0x2e1, 0x100, 0x1, 0xfffffffffffff538, 0x2, 0x8, 0x8, 0x100000000, 0x7f, 0xfffffffffffffff1, 0x8, 0x0, 0x2]}, 0x9, 0xcc) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x0, 0x10002}, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x100000000000000) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000580)={0x1, 0x2, 0x4, 0x1000, &(0x7f0000000180)="87157c6cbadfbde6233e2a74bf24d3dfc82eda1eeab344380f649c034badc2213b9dcd5cba9192733e6068623b5cb571165f4971cc0886befd1b756936ff00d518ab1074799dd0ce118334400fefa7f5bcc65e00b5d56d8d8543e3964be58bee29a50d8ce64dd0ccdfe9f0a60c9c348b715302fc555ca67a68ff6e31b0dec6a19f47ec90d4b34444f3e4bbffb95678e97948f6eee62ce1e6148528dd05e2fae7aee5a758432febc2a52a656ce924670f966957864269c9f4f32f1141a77a3e70ca5c", 0x57, 0x81b0, 0x7, @stream_id=0x7b, 0x2, 0x4, &(0x7f0000000280)="17d54576ccfa8faaf433783f41eabb9a4e5f54af334582add616ff8516d4d216a6af631e33dd73afca28f69bb28ba0aba3cd81225d1967dab81589f1cccef11fcfc5becad7d1d9b0b996b6291ff944473550ec3f1df8531712f52a", [{0x1, 0x14b, 0xd}, {0x3, 0x7, 0x800}, {0xa2, 0xc, 0x2}, {0x4, 0x4, 0x20000000}, {0x9, 0xfff, 0xb}, {0x8, 0x0, 0xfffffff0}, {0xfffffff2, 0x100, 0x71}, {0x4, 0xd78, 0x6}, {0x2, 0x3, 0xa}, {0x8001, 0x3ff, 0x594ad300}]}) ioctl$auto(r5, 0x4020565b, r4) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) 1m51.776261506s ago: executing program 2 (id=1231): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cd, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x5}) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004007f00a32457895897071b", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 1m51.259207868s ago: executing program 2 (id=1233): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3b, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40403, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44", 0x12) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0x88010}, 0x80) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0xc, 0xffff) kexec_load$auto(0x800000000000000d, 0x0, 0x0, 0x5) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x80000fffffffe, 0x2, 0x1, 0x5, 0x7, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x6, 0x1, 0x200fca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pivot_root$auto(&(0x7f0000000340)='..\t\xc5\xd7\xf2\xa8\x7f~\xde}\x87\x00\xe9\x13t6Uj\x8b\t\x9c\x1db\x90\xf6\xa7[i\xfd)i\x00\x01\x97#\v:\x8aS\t\xca\x01s\xab\xc3{\x19n\xdd\x92\x91\xcc\xec7\xab\xadN#\xbf\xaaNW\x9c]\x1d/\x17\xf0yZ\xc8\xac\x1bD\xf0SP\xbc-\xd8\xd0e\v\x05\xa2\xd0\x19n\xf9`\xae\xf6\xa0N\xd6]\xa2\xbc\x8b\x1f\xedU-\x99\x13\xca{\xd2,5~1f#sY{\xb9\'\x85\x1bXQ\xaaN\xb9ei\xb61\n(\x8f\xa0\x9f7to\xc0\x04\x81\x82\xa6\xe3\r%\x00\x9a\x8c\x03\rn\xe86\xda\xe0q\x02!\x8f\xa6\x82\xc6\xcf\x99\xb4\t\xfd1\xbbW|\x9d\xad\xaaB\x974\xd5\xc5\x9c1B\x06]\x10\xf8\xa3\x99\xe90\xa9\xd0\xfb\xc0\xaf\xbb\x8b\x85\xc9\x13\xf2O\xda\xf94\x88\x88d\x86\xd6-\xa1z\xc4D?\x17\xff\xe6\xf3\x11\x99\x9b\x97\x92\x18\x86\xecq\xe8\xff\xd0\xea\xb5\xa8\xda\f_\xa1\xf4gs\xe3_\xe7\xf2v\xf1\x8c\x8653w\xc3\x9e\x8c~\x9fi\x8b\xb4\x1d\xd7\x9fc\xe9\x027\x18\x11\xdaZfa\x94z\xbc\xf4\x98n\xc8m\x04\xb3\x1f\xdc\xf8\xfe?YR\xb0\xe2c\x17\xd0wm\xf5\xdc(\x03P\x87/\x18\x14', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x10000000000, 0x40009, 0xdf, 0x9b72, r4, 0x10001) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 1m49.671035429s ago: executing program 2 (id=1237): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, 0x55) connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7f}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x642}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) mmap$auto(0x0, 0xa, 0x10d8, 0x410, r0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e21, @private=0xa010101}, 0x54) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r6, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0xe7030000, 0x0, 0x404c884}, 0x64004890) 1m49.246060946s ago: executing program 2 (id=1239): unshare$auto(0x40000080) writev$auto(0xc8, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806122, 0xc) getcpu$auto(&(0x7f0000000000)=0x5, &(0x7f0000000040)=0xffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r2, &(0x7f00000001c0)='+\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) acct$auto(0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) unshare$auto(0x40000080) (async) writev$auto(0xc8, 0x0, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) mprotect$auto(0x200000000000, 0x806122, 0xc) (async) getcpu$auto(&(0x7f0000000000)=0x5, &(0x7f0000000040)=0xffffffff, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x48000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) (async) write$auto(r2, &(0x7f00000001c0)='+\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) (async) acct$auto(0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) (async) 1m42.690835135s ago: executing program 0 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb, {0x6, 0x0, 0xf5ff}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) 1m42.604567382s ago: executing program 0 (id=1262): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1ff, 0x6e020, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/README\x00', 0x8481, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r1, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) prctl$auto(0x44, 0x5, 0x0, 0x8, 0x863) sendfile$auto(r0, r0, 0x0, 0x2) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x80007, 0x0, 0x8004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0) 1m42.483281415s ago: executing program 0 (id=1263): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={"158cfb2684dedecd69d429710c25ffe76cd6f7dfdf4ea1de47e39cd122672b82", 0x3, 0x5, 0x6, 0x2c93, 0x8d, 0x0}) rt_tgsigqueueinfo$auto(r1, 0xffffffffffffffff, 0xfffffffe, &(0x7f0000000580)={@_si_pad}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.kill\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0xc8841, 0x0) poll$auto(&(0x7f0000000000)={r3, 0xe, 0x4}, 0x4, 0xffffff80) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) write$auto(r3, &(0x7f0000000740)='\xe9)\x9f%mk\xcd\xcc\x13\xdb\x01\x00\x00\x80o\xa5i\x0f\xd4\x0e\xe8\xfb2\"\xfd\xb0\xc4\xd8\xd7U\x1cb\xf1\x8d\xe1%\bA:l\xa2\x7f\x02\xc16i\xa3VA\x14\"TI\x17 ks&l\xb7jn|\xe1hK\xb5M\xf6\xf6\xce\x98A!#\x99\x88\x8f\xbd=\xcc\x02\xf7\xfa\xa1\xb8i\xe9\xd40\xdd\x82\\\xc5\xf8R\xea\x04\\\x8d\xa7\x985\xdf\xbc\x89\xf4\"\n\xa7\x1fS\xdc\xa7k#\xff\x0f\x00\x00[\xa0\xca\"\xa1\x92\xa7\x19\x95G\xd9\xa8S\x97}<>\x93;*\xf8j9\xaa\xd3Xj\xc9\xd7Q.{\xa4$%\xa0\x0e\x17\x0f\x8c\x02\x14\xb7\x91\"1\xa8\xbb#\xfa\xc63M\x86\xc6\x13\xc0o\x04\x15\"-\xd6\x137\x8c\xcc?xKf\x14\x97:\xdc\xbc\f\xd2H\xae\t{\xfcaK\xa8,R\xcc-9\x9f\xcc\xc5\x84\x88\'%\x9e\x94?u\xde\xdd\xa1\xa0z\xcdD\x04a\x95\x1b)\xf7\xba\b\xd7\x17\xd1RUs\xccb\xf3\x87\xbc\xcbI\xa3\xe7\xbc\xcbI\xb9\xc7\x80\xbb,\xc7Al\xd9v@\x83D\xc8\x8d\x81\xf7-3\xb5{\x18', 0x5) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000040)="98bd7e46598a039807c266f5987f210b1ca2bab5e497dd62f7fa6e427438c6d00b8934c1511747c43f10d13a1521f4b36086978bf10de52418d53bd16e3d0774fb49931c3b91cd2ed1c909349ff1d8cd06d4ae50589ea8f9832ef821a0959b74e2", 0x7da2, &(0x7f0000000180)={&(0x7f0000000100)="d19fa44f2c5db1810bc5c91ac7c0e2f40870004ab399a80ec952ef337f2f8170e606f77e1d5b0d36889ebc10c1ad57b0c1e0f5a8c1a7a1cd14b9aa76cab9e099d122002d66e9cea0d1eb00cdac6fb2415784925baafd2a32c326fe4f7f51a73a3cec7c6188d65a81a6256062", 0x75}, 0x7, &(0x7f0000000340)="d57c1cb33cd73ee8dff27cb636e875c4737cb4f469ca784ee19aff982704996ae161678d1f7d61c497d2515df91bd7602c66c39919f43f67bec3a016a02f43ff31a8bb52322580fef90435b13e1275fff506aadcf44a28d9deeb1e7659c6168b5ac4bce7978ebd445d58343dd1c0c61e72d704a2672ce6bfd510157bbf1b46d4dca30f42979c23a2687bc1a786b05f2cde34cf703409b4a498a7a7b44a8638d00d", 0xfffffffffffffff3, 0x692}, 0x3}, 0x8, 0x4005) read$auto(r0, 0x0, 0x20) r4 = prctl$auto_PR_SCHED_CORE_GET(0xe, 0x0, 0xffffffffffffffff, 0xf, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = io_uring_setup$auto(0x89, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(0x0, r6) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="da010000", @ANYRES16=r7, @ANYRESHEX=r2], 0x128}, 0x1, 0x0, 0x0, 0x20000090}, 0x4891) sendmsg$auto_NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002cbd7000fedb0000000400460108006b00da000000e276505ef0fc1b701b17359994a29ed9164201a216426881cd4b0d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004014) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x2) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES32], 0x1ac}}, 0x4040000) 1m41.632851365s ago: executing program 34 (id=1216): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8001) io_uring_register$auto(0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0xffffffffffffffff, 0x7, 0xffffffffffffffff) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, 0x0, 0x8000000000001b) unshare$auto(0x40000080) mmap$auto(0x1, 0x0, 0x44000000000dd, 0x15, 0x401, 0x7fff) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x85}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) ioctl$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x4, &(0x7f0000000280)="f26891cb2ed18376017ff1ab12c1792935603a41d4aa06cb408af493565f5f681a8ea3c393851f3e9e9ff18e46c874829f4690aa9deb4ce9ff6524a4e182a843681ee75966c8d0e7e77d777a1531cdc6faff458cf96f44dab5415092292166f727df1ee0ae366beace4eb1de82c93a7f5f0a839fe922f2b3393f4df6af12803213f171c129cc17d13400c1da13f077dfa7251c1a477921e24f5cdc93dd2292daaee610ad261965c267f6a73a") pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 1m41.460321861s ago: executing program 0 (id=1265): rseq$auto(0x0, 0x80000002, 0x1, 0xfc) r0 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x1, 0x0, 0x1) r2 = socket(0xa, 0x80003, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getdents64$auto(r2, &(0x7f0000000000)={0x0, 0x8d80, 0x8001, 0x0, "e09f991eb1d83f9aef05f60e21fae2da9ab72c74ac68d103c66617168cc74f7ae6285aff276a2bd759b5bd1affd800599a67428075c88acb0b7041f9e8203dbfa9c1a7365cd680bfaa14e1c648a72cb17e8518f811dac89419af296bf2a75d659eeb3473ef6d8439584957fa1f1a304843e3d8540a9ab2b4e37d7cb76e0827a8cb43a7ae1afc231ef3769ca2f8b24b20b8ef60515ec53c0c3f64935b4a502fe42dde4874450295796cd356e613c54689a8dee77a79f36a6d122edef866780d6714468a4044dc75951fff699c8b5a01987cdacfc1a513c1ec358aa57c16f93af5da193004e4bc38210b9e18c5"}, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd8/rqos/wbt/curr_win_nsec\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000100)=""/169, 0xa9) 1m41.322811964s ago: executing program 0 (id=1267): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) fsopen$auto(0x0, 0x1) 1m41.212847596s ago: executing program 0 (id=1268): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x8b5cd41af99d4508, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40) (async) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) (async) r1 = io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r2 = socket(0x0, 0x5, 0x84) (rerun: 64) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0) (rerun: 64) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) (async) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async, rerun: 64) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) (async) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_UI_SET_RELBIT(r4, 0x40045566, &(0x7f0000000040)=0x7fffffff) 1m33.986675419s ago: executing program 35 (id=1239): unshare$auto(0x40000080) writev$auto(0xc8, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806122, 0xc) getcpu$auto(&(0x7f0000000000)=0x5, &(0x7f0000000040)=0xffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r2, &(0x7f00000001c0)='+\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) acct$auto(0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) unshare$auto(0x40000080) (async) writev$auto(0xc8, 0x0, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) mprotect$auto(0x200000000000, 0x806122, 0xc) (async) getcpu$auto(&(0x7f0000000000)=0x5, &(0x7f0000000040)=0xffffffff, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x48000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) (async) write$auto(r2, &(0x7f00000001c0)='+\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) (async) acct$auto(0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) (async) 1m31.933908384s ago: executing program 6 (id=1283): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socketpair$auto(0x0, 0xfffffff8, 0x5, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r2 = socketpair$auto(0x100001, 0xfffffff4, 0x2001, 0x0) close_range$auto(r2, r0, 0x5) mlockall$auto(0x9) ppoll$auto(&(0x7f0000000000)={r1, 0x7, 0x9}, 0x1, &(0x7f0000000040)={0x5, 0x5}, &(0x7f00000000c0)={0x80}, 0x8) mmap$auto_mon_fops_binary_mon_bin(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000b, 0x10010, r3, 0x8) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r4, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x9, 0x0) r5 = fsopen$auto(0x0, 0x7ff) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 1m30.73776183s ago: executing program 6 (id=1284): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x0, 0xc, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000340)=@batch={0x25, 0x4, 0x7, 0x9, 0x0, r4, 0x1, 0xfffffffffffff248}, 0x3) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x91) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) 1m29.848457953s ago: executing program 6 (id=1285): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) ustat$auto(0x801, 0x0) socket(0x2, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x7fffffff, 0x2, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r2, 0x0) socket(0x22, 0x1, 0x2) setsockopt$auto(r1, 0x10b, 0x10011, 0x0, 0x0) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) finit_module$auto(r0, &(0x7f0000000000)='*\\\x00', 0x3) mmap$auto(0x3, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80040007}, 0x6, 0x100000001, 0x800000000000b, 0x2f) r3 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=@prog_bind_map={r0, r0, 0x7}, 0xf) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1m28.732060734s ago: executing program 6 (id=1286): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000240)=0x6) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000002c0), 0xffffffffffffffff) shmctl$auto_SHM_STAT(0xfffff801, 0xd, &(0x7f0000000440)={{0x1, 0x0, 0xffffffffffffffff, 0xc, 0x2aad, 0x0, 0x3ff}, 0x1, 0x2, 0x1, 0x22, @inferred=0xffffffffffffffff, @inferred, 0x2, 0x0, &(0x7f0000000300)="f803272d5f1a19c5fa10ace9351ec872a03cf7f6e231df799b92b28aabed257b17588d44cd58537fd20cdf5cd91aa3fdb2e565486e4ada065e8447c6b2ef050b7df58738111813648cb8136d45f15cb2ddff4f1ac8aea5dd921353e4e4d32ead9409d2deb2f94aeee49634b10d463a4c319523b8193bbea7325dcd2c974f77e8baea5b27f226cd8c8f9bae124360fd57d3c38a54cd196f87", &(0x7f00000003c0)="50b2ceaad7a34a53f8b447bfff2629c44e6f98951c3cf3c96858457b4419252d38ff262959f879a6b2083e8b90798b04897ea96ef430caeef0bf2eb9d763af1a0ac1340d72e15cb5bc8a7f49beb31d8b831eeb580aae609b190175acb89b2be152c280253ced0a4c74084fe40467d92e49bd8190bad5b410"}) sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1a8, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x9a0}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xc}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1000000}}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x8, 0x4}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x3}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0xfffffff7}, @OVS_METER_ATTR_BANDS={0x1e, 0x4, 0x0, 0x1, [@generic="a7f16ee6b948ca627b3e98d3dfbc33bba9b7", @typed={0x8, 0x98, 0x0, 0x0, @uid=r3}]}, @OVS_METER_ATTR_BANDS={0x124, 0x4, 0x0, 0x1, [@generic="69496080a2b37d8b2fb0e5c3feb8bd2a42ee4bcbd3835af46ced6e52ffe085f56ea6554e36c7cccc5475c1353c6c15c2f17ed50c96c837f85f59bdf0287e4a619e27f5b3f5e27901d32bf0e8feabd8a8109c578bf1fd5ced9006ea03ce83071a8065fe569ed3aebfee8ee5f42faf5e69a560e3c24897eb11cf5f7af821787c232230653b55a65c7188cfa266f7699463d8e2139caed0e0a4403fb562", @nested={0x83, 0x13, 0x0, 0x1, [@typed={0x4, 0x7b}, @generic="317d6844d135083329d68d8d5bf4b7347ec68792e8fbd641b0248a0d3e10dd9c263b2d9ad6d34d806797a2823f584cbc1e64959ab94659e19de5350db017deadcca97e3c0f648e916e9babd45fc141ca10a10a644037f052ef188af07f383cf7717c9bbd2ac4ae5afb15bfdff7761b52bf4ff65de6f4a7", @nested={0x4, 0x140}]}]}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4001) timerfd_gettime$auto(r0, &(0x7f00000000c0)={{0x60000000000, 0x9}}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) open(0x0, 0x22240, 0x155) ioctl$auto(0x3, 0x40045613, r4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x4fffc) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x22240, 0x154) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dri/card1\x00', 0x111402, 0x0) ioctl$auto(r5, 0x404064c8, r5) r6 = socket(0xa, 0x5, 0x0) getsockopt$auto(r6, 0x84, 0x1c, 0x0, 0x0) r7 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_DEVICE(r8, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00002cbd7000ffdbdf250100000005000f00c400000008001e00700a000008000300b4000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10800) pread64$auto(r7, 0x0, 0x2, 0x3) 1m28.35654391s ago: executing program 6 (id=1288): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socketcall$auto_SYS_SOCKET(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000010, 0x400, 0xfffffffffffffffc}]}) mount$auto(&(0x7f0000000000)='syzkaller0\x00', 0x0, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xdd, 0x0) eventfd$auto(0xaa) 1m27.517739749s ago: executing program 6 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxf\x00', 0x60202, 0x0) getsockopt$auto_SO_BROADCAST(r2, 0x8000, 0x6, &(0x7f0000000080)='\x9b%{(\x00', &(0x7f00000000c0)=0xb3) socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') getcwd$auto(0x0, 0x3b7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x8a180, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x127) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/free_buffer\x00', 0x260480, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r7, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) r8 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r8, @new_prog_fd=0x4, 0x4, @old_map_fd=r7}, 0xa3) bpf$auto(0x1000, &(0x7f0000000400)=@query={@target_fd=r8, 0x80, 0x1, 0x10000, 0x9, @prog_cnt=0xd3dc, 0x0, 0x101, 0x100000001, 0xfffffffffffeffff, 0x7f}, 0xa5) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r3, 0x100, @old_prog_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r9, 0xbb8, @value, 0x100000003}, 0xcd) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000280)=ANY=[@ANYBLOB="7cc741e36c65e0606f3a612d0f7ac1ea449a60491ccf7f7001109e69d25ecb034e289f8e132802b810877a455aa40ed0f6145bbc43762a74bdff6374fb022329a730686515e7586d2d80cc4cb88a64a9c1e172020958cdd58062490b3d40579ac018c3196ce1c4e3ebb160d9b3429e31bb6c64ddaa034c4950", @ANYRES16=r1, @ANYBLOB="890727bd7000ffdbdf251f000000080003000500000008000200dc0000000500060009000000050005000b0000000500040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 1m25.939071813s ago: executing program 36 (id=1268): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x8b5cd41af99d4508, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40) (async) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) (async) r1 = io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r2 = socket(0x0, 0x5, 0x84) (rerun: 64) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0) (rerun: 64) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) (async) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async, rerun: 64) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) (async) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_UI_SET_RELBIT(r4, 0x40045566, &(0x7f0000000040)=0x7fffffff) 1m14.186055272s ago: executing program 8 (id=1325): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) sendmmsg$auto(r0, &(0x7f0000001240)={{&(0x7f0000001140)="c5d22bf4bc244daf65bfb27fb8ad0ff7e74bb00307f348715d317eca36650752a609e26068f57430b636085d1026ef38b4510fce0bb68a2f083ee57723be74887d9800cb54a039661d521f658dd655f2a6f5068aa19e624b6c84e774340f310ac58465006e89f8435ab0c6fcb107e114dbb7dc6460e5eab76c35514cd5111a0b6be7bb781849f8dfe135660410e5d6ae13c8d7f781daf1626e962bf4bcc2544631a6be1d0e3c9f0f4c560d6cd75499952c5214dc2be2077c213d42e2eedd52b21eadd901903df28057", 0xa0b7, &(0x7f0000001340)={&(0x7f00000012c0)="b5fef3be0bb58617c50bb463076d5766b5621e5f74baac3b20647489c8d5ff23e4460211ed9683de2ea9892213d8e7b1701965f29736bb1e1b746eb2ce356d92d3c18c85f8d906a2036a5b1122d2b062c0d9a02b35f5708bd752b48c558c2f150ac78f9bcf043ba54b0d44c5f175de1cc709da", 0xb772}, 0x0, &(0x7f0000002080)="43203686209423173ae7017a69d56546e4219f7538e823cf4c998944c1113188438df6b5a91dd1de4563172ecd514382c7c93a84cc301b01d096b24e16d0439ed752baa49d1cb31886", 0x4, 0xfffffff7}, 0x84d}, 0x8, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) mmap$auto(0x3, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r3 = open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) r4 = socket(0x15, 0x5, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001380)=ANY=[@ANYRESDEC=r4, @ANYRESHEX, @ANYRESHEX=r1, @ANYRES32, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40800) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040840}, 0x4004000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0x5, &(0x7f0000001f80)={&(0x7f0000002100)=ANY=[], 0xb58}, 0x1, 0x0, 0x0, 0x2004c044}, 0xc013) mmap$auto(0x1000, 0x800400008, 0xdf, 0x9b72, 0x2, 0x5) fstat$auto(0x2, 0x0) ioctl$auto(0xc8, 0x401054d5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) setsockopt$auto(r4, 0x114, 0x6, 0x0, 0x8000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty61\x00', 0x103040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 1m14.001034888s ago: executing program 8 (id=1326): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffffffff) futex_wait$auto(0x0, 0x2, 0x6, 0x2, 0xfffffffffffffffe, 0x81) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x82, 0x14, 0x0, 0x8) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e, 0xffff000000000000}, 0x40000) 1m13.846879109s ago: executing program 8 (id=1327): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x50, 0x1, 0x0, 0x0, 0x0) (async) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x9, 0x2, 0xcb6}, 0xaa) (async) socket(0x2, 0x2, 0x1) (async) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) r0 = getpid() (async) r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) socket(0x2, 0x1, 0x106) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) (async) r2 = inotify_init1$auto(0xc0000000) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 1m13.533558619s ago: executing program 8 (id=1328): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) socket(0x10, 0x2, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) 1m12.568874119s ago: executing program 8 (id=1331): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) timerfd_create$auto_CLOCK_TAI(0xb, 0xd) r1 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000040)=0x3) mmap$auto(0xc1, 0xfff, 0x40000000004, 0x92, r1, 0x8005) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x1a, 0x4, 0x100) r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64$auto(r3, 0x0, 0x4, 0xc43) socket(0x5, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffff23, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x880) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x10d080, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m12.407279817s ago: executing program 37 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxf\x00', 0x60202, 0x0) getsockopt$auto_SO_BROADCAST(r2, 0x8000, 0x6, &(0x7f0000000080)='\x9b%{(\x00', &(0x7f00000000c0)=0xb3) socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') getcwd$auto(0x0, 0x3b7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x8a180, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x127) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/free_buffer\x00', 0x260480, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r7, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) r8 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r8, @new_prog_fd=0x4, 0x4, @old_map_fd=r7}, 0xa3) bpf$auto(0x1000, &(0x7f0000000400)=@query={@target_fd=r8, 0x80, 0x1, 0x10000, 0x9, @prog_cnt=0xd3dc, 0x0, 0x101, 0x100000001, 0xfffffffffffeffff, 0x7f}, 0xa5) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r3, 0x100, @old_prog_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r9, 0xbb8, @value, 0x100000003}, 0xcd) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000280)=ANY=[@ANYBLOB="7cc741e36c65e0606f3a612d0f7ac1ea449a60491ccf7f7001109e69d25ecb034e289f8e132802b810877a455aa40ed0f6145bbc43762a74bdff6374fb022329a730686515e7586d2d80cc4cb88a64a9c1e172020958cdd58062490b3d40579ac018c3196ce1c4e3ebb160d9b3429e31bb6c64ddaa034c4950", @ANYRES16=r1, @ANYBLOB="890727bd7000ffdbdf251f000000080003000500000008000200dc0000000500060009000000050005000b0000000500040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 1m11.534997814s ago: executing program 8 (id=1337): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) fallocate$auto(r2, 0x1, 0x7, 0xe) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd15/queue/logical_block_size\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) unshare$auto(0x40000080) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) r7 = socket(0x10, 0x2, 0xc) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r8, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) inotify_add_watch$auto(r3, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0) read$auto(0x3, 0x0, 0x8080) 56.428333712s ago: executing program 38 (id=1337): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) fallocate$auto(r2, 0x1, 0x7, 0xe) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd15/queue/logical_block_size\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) unshare$auto(0x40000080) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) r7 = socket(0x10, 0x2, 0xc) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r8, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) inotify_add_watch$auto(r3, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0) read$auto(0x3, 0x0, 0x8080) 40.973449631s ago: executing program 9 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000ffff", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c00020004000000000000040c00060009"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 40.700231541s ago: executing program 9 (id=1449): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000006c0)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @reserved="a70545d2a59eb86523a1dfb540b50ef0fe861eb6ecfef15574f58d535fd0244d50c54684db291214ef19ab42879371b0d70cdfd852c5b991c5efd57d334d22f1cf863e8f4156cc9f6dad94134fa6132ad5ff21eb2409c0cd4d8b6cf04af40992c79896e31f839766668e0fa28b2856add075f331effd6ceeda92ba9d66af610d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) getegid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) getsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x5, 0xc, 0x0, &(0x7f00000000c0)=0x7) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40) timerfd_create$auto(0x0, 0x800) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x100) eventfd$auto(0x5) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) getrandom$auto(&(0x7f0000000000)=',_\',\x00', 0x100, 0x7fffffff) 39.821448024s ago: executing program 9 (id=1454): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffffffff) futex_wait$auto(0x0, 0x2, 0x6, 0x2, 0xfffffffffffffffe, 0x81) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x82, 0x14, 0x0, 0x8) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e, 0x0, 0xfd}, 0x40000) 39.482898361s ago: executing program 9 (id=1457): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x22, 0x4, 0x708) socket(0x2, 0x2, 0x1001) (async) getsockopt$auto_SO_SNDLOWAT(r0, 0x81, 0x13, &(0x7f0000000000)='/dev/iommu\x00', &(0x7f0000000040)=0x7fff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bc7000fddbdf25037811b735d4741a929a247b000000040008000c00038008001100", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f17790485908286dd000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0xffffa474, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x1f, 0xa}, 0x9}, 0x2, 0x800) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0xed7b, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) fadvise64$auto(r3, 0x9, 0x8000, 0x5) (async) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) readv$auto(0x3, 0x0, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4, 0x2022008, 0x3, 0xeb1, r1, 0x7ffc) ustat$auto(0x801, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) pidfd_open$auto(0x1, 0x6) socket(0x2000000000000021, 0x4, 0x0) (async) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) 39.19747808s ago: executing program 9 (id=1459): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/ad_partner_mac\x00', 0x181800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYBLOB="010025d070000104000003fffffff7000180080001dcb6cd82040800020007000000cfd7d5317ecd3a6a0b5eb3c634cc07b25d17ccec97f56ee721e4bf8d4083873d616e37e5c2699b1e5b03cf1afbcb522363855192369773844883b7b75d0813fbcd472b14da6203c24de2fa9125669be722f4af392765d2a99eab9f99098c9d43ec8fd89ec4a31b153ed8fc6fb6f123c826fb033e25be5e2dd3327b74ac53a039818fd3dbaf39a0362af29a95ecd373fb63b3eef64867009aa50d8b9aa3ade8a8683a68e7f06b64402e49d9058f8ee40cae65184c991f2c829806a72746c60016fc3e9516418487cdb53a33e98fae4528a9ba93c7efee573ab208276a71d11f9336964f02e67918122e3b89605b769f2d04b23c64ff1d942e009728bb7d7e6d2a40d7c055d6a6a1762f1dffba4b4a126cd02ac109fa31c1eb148b26a3a3632a6c45eb02a3aef0067a5ef313ea2afb02de66cc4039c511e22f2f376b3f084b54972d41ee4c8d502bbccc9d9ffa70d1ae5a5f9b8c5fbd785cab28b6346e6df1b728f00bff0723129250c6d00f0410a62dc688ef30ad46c3b96a567e1471364150e07599a5e7a2c415bd9683ac835b8b49b8a443ccf4db84953633275ff868c95869191ca7fbabb24084d9a0e59106b31d76e175d4f7e03653e8d14f4a4f0ff516ccd9d49a9d3d07be4302ea1c3c32ee44f08a1d08af347f9a255069021478334546c604990b9b509d8db8dd0f0d342e1e381e986c4d121b91044f15869d828731d17ff1ef7de776706cf483d41d6895273b7d652132d34a6087ef02ab324c3e0e87e57b428cd7509318238760a918318a76bf51ea6c426269dd9c5f99fa747e9ca829128abe1630a7d37e370e8f246e02736c1ac8bb"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0xc080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = memfd_create$auto(0x0, 0x7) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) close_range$auto(r3, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x448c1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) pwritev$auto(r4, &(0x7f0000000040)={0x0, 0x1}, 0x9, 0x8000000000000001, 0xd3b8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) open(0x0, 0x0, 0x508) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r5, 0x0, 0x6, 0xfffffffffffffffb, 0x3, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram12\x00', 0x14f602, 0x0) 37.659540401s ago: executing program 9 (id=1466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_ep0_operations_inode(r4, &(0x7f0000000280)=""/96, 0x60) close_range$auto(0x2, 0x8, 0x8) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x1, 0x0) bpf$auto(0x9, &(0x7f00000005c0)=@enable_stats={0xe82}, 0x40) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0xfe04) 37.417038998s ago: executing program 7 (id=1468): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) ftruncate$auto(r0, 0x9) fanotify_mark$auto(0x0, 0x55, 0x5, 0xffffffffffffffff, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) userfaultfd$auto(0x3c0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x06\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 36.65693826s ago: executing program 7 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x5c}, 0x1, 0xfffffff0, 0x0, 0x40000}, 0x0) 36.548841239s ago: executing program 7 (id=1472): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cd, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x5}) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897071b", 0x14}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 36.335716018s ago: executing program 7 (id=1474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x3f000000, 0x4000}, 0x810) 36.187144588s ago: executing program 7 (id=1475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230027bd7000fcdbdf250900000f18000380050001800300000d00000800feffffffffffffff04000280080001", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 36.015670321s ago: executing program 7 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/batching\x00', 0x101480, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$auto(r1, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x2070bd26, 0x25dfdbfd, {0x1, 0x0, 0x300}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x010\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c855}, 0x4880) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x4000009f, 0x2, 0x6}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) migrate_pages$auto(r9, 0x7, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x285, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x880) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5}]}, 0x1c}}, 0x0) 22.044129927s ago: executing program 39 (id=1466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_ep0_operations_inode(r4, &(0x7f0000000280)=""/96, 0x60) close_range$auto(0x2, 0x8, 0x8) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x1, 0x0) bpf$auto(0x9, &(0x7f00000005c0)=@enable_stats={0xe82}, 0x40) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) 20.499139431s ago: executing program 40 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/batching\x00', 0x101480, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$auto(r1, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x2070bd26, 0x25dfdbfd, {0x1, 0x0, 0x300}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x010\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c855}, 0x4880) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x4000009f, 0x2, 0x6}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) migrate_pages$auto(r9, 0x7, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x285, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x880) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5}]}, 0x1c}}, 0x0) 16.754757166s ago: executing program 1 (id=1504): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x100000003, 0x4) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x100000003, 0x4) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 16.597386436s ago: executing program 1 (id=1505): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000040)=0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) write$auto(r0, &(0x7f0000000740)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x00\x00};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15<\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x14\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057\x1c&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\x7f\x00\x00\x00AN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81.f\tZ-sZ\x13n\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xbd_r\xf16\xec\xf3\xbb[.\xf3\xef\xf8\x16x\x9e\xb3*:/L\xa0Kg\xf0\xa2\x84\xa3o\xcc\x9e\xd3\xeb\xd3(\xaa\x93g~\x01\x81\x1eV\xf1L\xfc\xad\xa9#O\xe4\x12\xd3\xbda\xbc\x9a\x9f+9\'\xc4\x13\xf0\xc88\x1d80?\xc2\a\af\xdc?-&\xedAd\x9c\xe5&\xb9\x14\xe1\x85 \xbf\x18\xfc:#\xcf\x7ffT\xefPb\xe1\xfa]\xcc\x8a\xe3\x99\x98u\x9bj>\x9d\xc2\x1fk\x87\x92\xfb(U\xa8\xcd4+\xf6e5],\xec\x84 \x1b\x10d\x1b@\x84X\xa1\xa8\xd7\xccO\xb0Qq\x1a\xa4<\\\x0e\xa4\x7f^\x1a|\xfd\xe6#\x00\x9e\x1d\x00k\x84\x1b\xa3\xb1O\xe0IzJRO\xf4,\xe5\xdb\x03CA\x13Q\x84\xbb\x88\xb4\xe3\xba\xf0/\xd0\x04\ny\a\x8d\x12h\xe22\xcb\"\xce\x00\x00\xafOf\xa4|\xf4\xd4\a[\xaczPF\xbb\xc5\xcdS\xddr\xe7\xf7:\xf0j\x04\xdd)\xe96\xcb\x14\xb6Z\xb8\xf3\xa0K\xa0}Wo\bs\"#BW_S\v\x9b\x9d\xc2\xb1\xab/\xf7w\xa2O1', 0x1) 16.269275086s ago: executing program 1 (id=1506): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) ftruncate$auto(r0, 0x9) fanotify_mark$auto(0x0, 0x55, 0x5, 0xffffffffffffffff, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) userfaultfd$auto(0x3c0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\b\x10\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 15.741984153s ago: executing program 1 (id=1507): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cd, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x5}) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897071b", 0x49}, 0x2, 0x0, 0x24, 0x1}, 0x5}, 0x2, 0x100) 15.645681011s ago: executing program 1 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x6000000000000000, 0x10}, 0x2000000) 15.556652966s ago: executing program 1 (id=1509): mmap$auto(0x80, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0xb) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r4) sendmsg$auto_OVS_DP_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r6 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r6, 0x65, 0x6, 0xffffffffffffffff, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r8, 0x9, 0x0) 0s ago: executing program 41 (id=1509): mmap$auto(0x80, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0xb) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r4) sendmsg$auto_OVS_DP_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r6 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r6, 0x65, 0x6, 0xffffffffffffffff, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r8, 0x9, 0x0) kernel console output (not intermixed with test programs): 5.223681][T10263] __x64_sys_unshare+0x31/0x40 [ 355.223719][T10263] do_syscall_64+0x106/0xf80 [ 355.223752][T10263] ? clear_bhb_loop+0x40/0x90 [ 355.223789][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.223820][T10263] RIP: 0033:0x7fa7b0b9c819 [ 355.223846][T10263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.223873][T10263] RSP: 002b:00007fa7b1a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.223903][T10263] RAX: ffffffffffffffda RBX: 00007fa7b0e16090 RCX: 00007fa7b0b9c819 [ 355.223922][T10263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 355.223939][T10263] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 355.223957][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.223973][T10263] R13: 00007fa7b0e16128 R14: 00007fa7b0e16090 R15: 00007ffe089d8ce8 [ 355.224012][T10263] [ 355.662866][T10263] FAULT_INJECTION: forcing a failure. [ 355.662866][T10263] name failslab, interval 1, probability 0, space 0, times 0 [ 355.800527][T10263] CPU: 0 UID: 0 PID: 10263 Comm: syz.1.1050 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.800575][T10263] Tainted: [L]=SOFTLOCKUP [ 355.800585][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.800602][T10263] Call Trace: [ 355.800611][T10263] [ 355.800622][T10263] dump_stack_lvl+0x100/0x190 [ 355.800671][T10263] should_fail_ex.cold+0x5/0xa [ 355.800706][T10263] should_failslab+0xc2/0x120 [ 355.800740][T10263] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 355.800769][T10263] ? cache_create_net+0x2b/0x1f0 [ 355.800805][T10263] ? __pfx_nfsd_net_init+0x10/0x10 [ 355.800838][T10263] kmemdup_noprof+0x29/0x60 [ 355.800866][T10263] cache_create_net+0x2b/0x1f0 [ 355.800897][T10263] ? __pfx_nfsd_net_init+0x10/0x10 [ 355.800930][T10263] nfsd_export_init+0x62/0x250 [ 355.800966][T10263] ? __pfx_nfsd_net_init+0x10/0x10 [ 355.800996][T10263] nfsd_net_init+0x33/0x3d0 [ 355.801030][T10263] ? __pfx_nfsd_net_init+0x10/0x10 [ 355.801071][T10263] ops_init+0x1e2/0x5f0 [ 355.801106][T10263] setup_net+0x118/0x3a0 [ 355.801138][T10263] ? __pfx_setup_net+0x10/0x10 [ 355.801165][T10263] ? lockdep_init_map_type+0x5c/0x250 [ 355.801207][T10263] ? mutex_init_lockep+0x110/0x150 [ 355.801253][T10263] copy_net_ns+0x46f/0x7c0 [ 355.801291][T10263] create_new_namespaces+0x3ea/0xac0 [ 355.801332][T10263] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 355.801369][T10263] ksys_unshare+0x473/0xad0 [ 355.801408][T10263] ? __pfx_ksys_unshare+0x10/0x10 [ 355.801459][T10263] __x64_sys_unshare+0x31/0x40 [ 355.801497][T10263] do_syscall_64+0x106/0xf80 [ 355.801527][T10263] ? clear_bhb_loop+0x40/0x90 [ 355.801563][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.801592][T10263] RIP: 0033:0x7fa7b0b9c819 [ 355.801617][T10263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.801644][T10263] RSP: 002b:00007fa7b1a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.801673][T10263] RAX: ffffffffffffffda RBX: 00007fa7b0e16090 RCX: 00007fa7b0b9c819 [ 355.801692][T10263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 355.801708][T10263] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 355.801725][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.801742][T10263] R13: 00007fa7b0e16128 R14: 00007fa7b0e16090 R15: 00007ffe089d8ce8 [ 355.801783][T10263] [ 356.262682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 357.438407][T10280] random: crng reseeded on system resumption [ 358.462893][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 358.970970][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'. [ 359.032330][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 359.315301][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 361.010395][T10345] FAULT_INJECTION: forcing a failure. [ 361.010395][T10345] name fail_futex, interval 1, probability 0, space 0, times 0 [ 361.025283][T10339] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1070'. [ 361.075699][T10345] CPU: 1 UID: 0 PID: 10345 Comm: syz.5.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.075748][T10345] Tainted: [L]=SOFTLOCKUP [ 361.075760][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 361.075778][T10345] Call Trace: [ 361.075788][T10345] [ 361.075799][T10345] dump_stack_lvl+0x100/0x190 [ 361.075851][T10345] should_fail_ex.cold+0x5/0xa [ 361.075882][T10345] ? __kernel_text_address+0xd/0x30 [ 361.075932][T10345] get_futex_key+0x1d2/0x1620 [ 361.075975][T10345] ? __pfx_get_futex_key+0x10/0x10 [ 361.076013][T10345] ? putname+0xb1/0x110 [ 361.076049][T10345] ? stack_trace_save+0x8e/0xc0 [ 361.076080][T10345] ? __pfx_stack_trace_save+0x10/0x10 [ 361.076115][T10345] futex_wait_setup+0x83/0x510 [ 361.076169][T10345] __futex_wait+0x19f/0x300 [ 361.076218][T10345] ? __pfx___futex_wait+0x10/0x10 [ 361.076279][T10345] ? __pfx_futex_wake_mark+0x10/0x10 [ 361.076332][T10345] ? futex_hash+0x2c5/0x380 [ 361.076386][T10345] futex_wait+0xed/0x380 [ 361.076434][T10345] ? __pfx_futex_wait+0x10/0x10 [ 361.076491][T10345] ? putname+0xb1/0x110 [ 361.076523][T10345] ? kmem_cache_free+0x124/0x6a0 [ 361.076576][T10345] do_futex+0x1ef/0x350 [ 361.076617][T10345] ? __pfx_do_futex+0x10/0x10 [ 361.076656][T10345] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.076701][T10345] ? __fget_files+0x21f/0x3d0 [ 361.076736][T10345] __x64_sys_futex+0x34f/0x4d0 [ 361.076779][T10345] ? __x64_sys_openat+0x12d/0x210 [ 361.076831][T10345] ? __pfx___x64_sys_futex+0x10/0x10 [ 361.076882][T10345] do_syscall_64+0x106/0xf80 [ 361.076913][T10345] ? clear_bhb_loop+0x40/0x90 [ 361.076942][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.076960][T10345] RIP: 0033:0x7f4181d9c819 [ 361.076977][T10345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.076995][T10345] RSP: 002b:00007f4182cc50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.077016][T10345] RAX: ffffffffffffffda RBX: 00007f4182015fa8 RCX: 00007f4181d9c819 [ 361.077028][T10345] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4182015fa8 [ 361.077046][T10345] RBP: 00007f4182015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 361.077057][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.077067][T10345] R13: 00007f4182016038 R14: 00007ffdb77e1b50 R15: 00007ffdb77e1c38 [ 361.077088][T10345] [ 361.974850][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1074'. [ 362.276489][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 363.443437][ T5837] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 364.178677][T10382] FAULT_INJECTION: forcing a failure. [ 364.178677][T10382] name failslab, interval 1, probability 0, space 0, times 0 [ 364.215628][T10382] CPU: 0 UID: 0 PID: 10382 Comm: syz.1.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.215662][T10382] Tainted: [L]=SOFTLOCKUP [ 364.215668][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.215678][T10382] Call Trace: [ 364.215685][T10382] [ 364.215692][T10382] dump_stack_lvl+0x100/0x190 [ 364.215724][T10382] should_fail_ex.cold+0x5/0xa [ 364.215747][T10382] should_failslab+0xc2/0x120 [ 364.215768][T10382] __kmalloc_cache_noprof+0x7a/0x6f0 [ 364.215794][T10382] ? single_open+0x4d/0x1d0 [ 364.215822][T10382] ? __pfx_snd_info_seq_show+0x10/0x10 [ 364.215847][T10382] single_open+0x4d/0x1d0 [ 364.215874][T10382] snd_info_text_entry_open+0x284/0x2f0 [ 364.215899][T10382] ? trace_kmem_cache_alloc+0xf3/0x120 [ 364.215920][T10382] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 364.215945][T10382] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 364.215981][T10382] ? proc_reg_open+0x23f/0x5f0 [ 364.216011][T10382] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 364.216038][T10382] proc_reg_open+0x2ab/0x5f0 [ 364.216069][T10382] do_dentry_open+0x6d8/0x1660 [ 364.216088][T10382] ? __pfx_proc_reg_open+0x10/0x10 [ 364.216123][T10382] vfs_open+0x82/0x3f0 [ 364.216150][T10382] path_openat+0x208c/0x31a0 [ 364.216177][T10382] ? __pfx_path_openat+0x10/0x10 [ 364.216205][T10382] do_file_open+0x20e/0x430 [ 364.216228][T10382] ? __pfx_do_file_open+0x10/0x10 [ 364.216264][T10382] ? alloc_fd+0x476/0x790 [ 364.216285][T10382] ? do_getname+0x191/0x390 [ 364.216310][T10382] do_sys_openat2+0x10d/0x1e0 [ 364.216336][T10382] ? __pfx_do_sys_openat2+0x10/0x10 [ 364.216363][T10382] ? __fget_files+0x21f/0x3d0 [ 364.216386][T10382] __x64_sys_openat+0x12d/0x210 [ 364.216412][T10382] ? __pfx___x64_sys_openat+0x10/0x10 [ 364.216446][T10382] do_syscall_64+0x106/0xf80 [ 364.216465][T10382] ? clear_bhb_loop+0x40/0x90 [ 364.216487][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.216505][T10382] RIP: 0033:0x7fa7b0b9c819 [ 364.216520][T10382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.216537][T10382] RSP: 002b:00007fa7b1a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.216555][T10382] RAX: ffffffffffffffda RBX: 00007fa7b0e15fa0 RCX: 00007fa7b0b9c819 [ 364.216567][T10382] RDX: 0000000000109500 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 364.216577][T10382] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 364.216588][T10382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.216598][T10382] R13: 00007fa7b0e16038 R14: 00007fa7b0e15fa0 R15: 00007ffe089d8ce8 [ 364.216620][T10382] [ 365.123466][T10394] random: crng reseeded on system resumption [ 365.949151][T10405] Unrecognized hibernate image header format! [ 366.075658][T10405] PM: hibernation: Image mismatch: architecture specific data [ 366.084317][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'. [ 366.149165][T10411] Unrecognized hibernate image header format! [ 366.192922][T10420] hsr_slave_0: left promiscuous mode [ 366.240326][T10411] PM: hibernation: Image mismatch: architecture specific data [ 366.273850][T10420] hsr_slave_1: left promiscuous mode [ 367.601264][T10443] FAULT_INJECTION: forcing a failure. [ 367.601264][T10443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.714226][T10443] CPU: 1 UID: 0 PID: 10443 Comm: syz.2.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.714286][T10443] Tainted: [L]=SOFTLOCKUP [ 367.714298][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 367.714319][T10443] Call Trace: [ 367.714331][T10443] [ 367.714344][T10443] dump_stack_lvl+0x100/0x190 [ 367.714401][T10443] should_fail_ex.cold+0x5/0xa [ 367.714435][T10443] ? prepare_alloc_pages+0x16d/0x5f0 [ 367.714478][T10443] should_fail_alloc_page+0xeb/0x140 [ 367.714512][T10443] prepare_alloc_pages+0x1f0/0x5f0 [ 367.714559][T10443] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 367.714618][T10443] ? rcu_is_watching+0x12/0xc0 [ 367.714667][T10443] ? trace_kmem_cache_alloc+0xf3/0x120 [ 367.714713][T10443] ? __kasan_slab_alloc+0x89/0x90 [ 367.714753][T10443] ? mas_wr_store_entry+0x6d2/0x2390 [ 367.714796][T10443] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.714849][T10443] ? perf_event_mmap+0xbc/0xe40 [ 367.714880][T10443] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 367.714927][T10443] ? mas_store_prealloc+0x893/0xfb0 [ 367.714973][T10443] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 367.715018][T10443] ? vma_wants_writenotify+0x10b/0x390 [ 367.715067][T10443] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 367.715119][T10443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.715151][T10443] ? policy_nodemask+0xed/0x4f0 [ 367.715187][T10443] alloc_pages_mpol+0x1fb/0x550 [ 367.715223][T10443] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.715258][T10443] ? mas_ascend+0x53d/0xb30 [ 367.715292][T10443] alloc_pages_noprof+0x136/0x390 [ 367.715330][T10443] pte_alloc_one+0x1c/0x3d0 [ 367.715364][T10443] __pte_alloc+0x6d/0x3e0 [ 367.715394][T10443] ? __pfx___pte_alloc+0x10/0x10 [ 367.715425][T10443] ? __lock_acquire+0x4a5/0x2630 [ 367.715474][T10443] do_anonymous_page+0x13cc/0x1fb0 [ 367.715533][T10443] __handle_mm_fault+0x1d48/0x2b60 [ 367.715583][T10443] ? mt_find+0x45e/0x8e0 [ 367.715620][T10443] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.715661][T10443] ? __pfx_mt_find+0x10/0x10 [ 367.715743][T10443] handle_mm_fault+0x36d/0xa20 [ 367.715796][T10443] __get_user_pages+0xf9c/0x34d0 [ 367.715850][T10443] ? __pfx___get_user_pages+0x10/0x10 [ 367.715901][T10443] populate_vma_page_range+0x267/0x3f0 [ 367.715945][T10443] ? __pfx_populate_vma_page_range+0x10/0x10 [ 367.715982][T10443] ? __pfx_find_vma_intersection+0x10/0x10 [ 367.716019][T10443] ? do_mmap+0x93f/0x12f0 [ 367.716059][T10443] __mm_populate+0x107/0x3a0 [ 367.716099][T10443] ? __pfx___mm_populate+0x10/0x10 [ 367.716141][T10443] ? up_write+0x290/0x4f0 [ 367.716191][T10443] vm_mmap_pgoff+0x37f/0x470 [ 367.716234][T10443] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 367.716275][T10443] ? do_futex+0x192/0x350 [ 367.716317][T10443] ? __pfx_do_futex+0x10/0x10 [ 367.716358][T10443] ? fd_install+0x223/0x580 [ 367.716395][T10443] ksys_mmap_pgoff+0xe1/0x650 [ 367.716430][T10443] ? __x64_sys_futex+0x34f/0x4d0 [ 367.716468][T10443] ? __x64_sys_futex+0x358/0x4d0 [ 367.716511][T10443] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 367.716546][T10443] ? xfd_validate_state+0x129/0x190 [ 367.716601][T10443] __x64_sys_mmap+0x125/0x190 [ 367.716652][T10443] do_syscall_64+0x106/0xf80 [ 367.716682][T10443] ? clear_bhb_loop+0x40/0x90 [ 367.716729][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.716762][T10443] RIP: 0033:0x7fdc7279c819 [ 367.716791][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.716820][T10443] RSP: 002b:00007fdc735d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.716852][T10443] RAX: ffffffffffffffda RBX: 00007fdc72a15fa0 RCX: 00007fdc7279c819 [ 367.716871][T10443] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000200000 [ 367.716891][T10443] RBP: 00007fdc72832c91 R08: 0000000000000007 R09: 0000000000028000 [ 367.716911][T10443] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 367.716928][T10443] R13: 00007fdc72a16038 R14: 00007fdc72a15fa0 R15: 00007ffd420ae848 [ 367.716970][T10443] [ 368.142923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 368.545363][T10445] kAFS: Invalid Command on /proc/fs/afs/cells file [ 371.004765][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 372.746002][T10514] FAULT_INJECTION: forcing a failure. [ 372.746002][T10514] name failslab, interval 1, probability 0, space 0, times 0 [ 372.863501][T10514] CPU: 1 UID: 0 PID: 10514 Comm: syz.5.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.863553][T10514] Tainted: [L]=SOFTLOCKUP [ 372.863565][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.863583][T10514] Call Trace: [ 372.863595][T10514] [ 372.863608][T10514] dump_stack_lvl+0x100/0x190 [ 372.863663][T10514] should_fail_ex.cold+0x5/0xa [ 372.863703][T10514] should_failslab+0xc2/0x120 [ 372.863741][T10514] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 372.863788][T10514] ? security_inode_alloc+0x3b/0x2c0 [ 372.863825][T10514] ? lockdep_init_map_type+0x5c/0x250 [ 372.863875][T10514] security_inode_alloc+0x3b/0x2c0 [ 372.863914][T10514] inode_init_always_gfp+0xced/0x1040 [ 372.863958][T10514] alloc_inode+0x8e/0x250 [ 372.864002][T10514] new_inode+0x22/0x1c0 [ 372.864059][T10514] bdev_alloc+0x2b/0x420 [ 372.864101][T10514] ? bdi_init+0x3f4/0x5b0 [ 372.864181][T10514] ? bdi_init+0x49f/0x5b0 [ 372.864255][T10514] __alloc_disk_node+0x116/0x6b0 [ 372.864303][T10514] __blk_alloc_disk+0xd2/0x170 [ 372.864341][T10514] ? __pfx___blk_alloc_disk+0x10/0x10 [ 372.864437][T10514] ? __pfx_idr_alloc+0x10/0x10 [ 372.864471][T10514] ? lockdep_init_map_type+0x5c/0x250 [ 372.864513][T10514] ? __raw_spin_lock_init+0x3a/0x110 [ 372.864573][T10514] ? __pfx_hot_add_show+0x10/0x10 [ 372.864634][T10514] zram_add+0x1bf/0x610 [ 372.864675][T10514] ? __pfx_zram_add+0x10/0x10 [ 372.864764][T10514] ? find_held_lock+0x2b/0x80 [ 372.864855][T10514] ? sysfs_file_kobj+0xe4/0x290 [ 372.864915][T10514] ? __pfx_hot_add_show+0x10/0x10 [ 372.864961][T10514] hot_add_show+0x21/0x80 [ 372.865007][T10514] class_attr_show+0x72/0xa0 [ 372.865098][T10514] ? __pfx_class_attr_show+0x10/0x10 [ 372.865143][T10514] sysfs_kf_seq_show+0x217/0x3a0 [ 372.865192][T10514] seq_read_iter+0x32f/0x1270 [ 372.865239][T10514] kernfs_fop_read_iter+0x46c/0x610 [ 372.865274][T10514] ? rw_verify_area+0xce/0x6d0 [ 372.865317][T10514] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 372.865355][T10514] vfs_read+0x825/0xb30 [ 372.865391][T10514] ? __pfx_vfs_read+0x10/0x10 [ 372.865450][T10514] ksys_read+0x12a/0x250 [ 372.865480][T10514] ? __pfx_ksys_read+0x10/0x10 [ 372.865524][T10514] do_syscall_64+0x106/0xf80 [ 372.865555][T10514] ? clear_bhb_loop+0x40/0x90 [ 372.865594][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.865623][T10514] RIP: 0033:0x7f4181d9c819 [ 372.865649][T10514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.865675][T10514] RSP: 002b:00007f4182cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.865704][T10514] RAX: ffffffffffffffda RBX: 00007f4182015fa0 RCX: 00007f4181d9c819 [ 372.865723][T10514] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 372.865740][T10514] RBP: 00007f4181e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 372.865754][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.865797][T10514] R13: 00007f4182016038 R14: 00007f4182015fa0 R15: 00007ffdb77e1c38 [ 372.865838][T10514] [ 373.659603][T10514] zram: Error allocating disk structure for device 2 [ 373.847226][T10510] ima: policy update failed [ 373.859272][ T30] audit: type=1802 audit(1775767696.446:19): pid=10510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1111" res=0 errno=0 [ 374.202075][T10532] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 374.431854][T10532] ubi0: attaching mtd0 [ 374.478286][ T30] audit: type=1800 audit(1775767697.046:20): pid=10539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1115" name="discovery_nqn" dev="configfs" ino=68463 res=0 errno=0 [ 374.514000][T10532] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 374.714745][T10532] eraseblock attaching information dump: [ 374.725991][T10532] ec 1 [ 374.743421][T10532] pnum 0 [ 374.842993][T10532] lnum 0 [ 374.971698][T10532] scrub 0 [ 375.032760][T10532] sqnum 1 [ 375.036106][T10532] Volume identifier header dump: [ 375.041032][T10532] magic 55424921 [ 375.152461][T10532] version 1 [ 375.155917][T10532] vol_type 1 [ 375.209030][T10532] copy_flag 0 [ 375.235307][T10532] compat 5 [ 375.264632][T10532] vol_id 2147479551 [ 375.269130][T10532] lnum 0 [ 375.356388][T10532] data_size 0 [ 375.375963][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 375.410233][T10532] used_ebs 0 [ 375.434067][T10532] data_pad 0 [ 375.451886][T10532] sqnum 1 [ 375.510840][T10532] hdr_crc 65b3bd2d [ 375.642575][T10532] Volume identifier header hexdump: [ 376.035535][T10532] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 376.462195][T10564] FAULT_INJECTION: forcing a failure. [ 376.462195][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 376.532502][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.0.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.532552][T10564] Tainted: [L]=SOFTLOCKUP [ 376.532564][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.532581][T10564] Call Trace: [ 376.532591][T10564] [ 376.532610][T10564] dump_stack_lvl+0x100/0x190 [ 376.532660][T10564] should_fail_ex.cold+0x5/0xa [ 376.532697][T10564] should_failslab+0xc2/0x120 [ 376.532732][T10564] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 376.532777][T10564] ? ptlock_alloc+0x1f/0x70 [ 376.532826][T10564] ptlock_alloc+0x1f/0x70 [ 376.532868][T10564] pte_alloc_one+0x82/0x3d0 [ 376.532905][T10564] __pte_alloc+0x6d/0x3e0 [ 376.532939][T10564] ? __pfx___pte_alloc+0x10/0x10 [ 376.532970][T10564] ? __lock_acquire+0x4a5/0x2630 [ 376.533028][T10564] do_anonymous_page+0x13cc/0x1fb0 [ 376.533086][T10564] __handle_mm_fault+0x1d48/0x2b60 [ 376.533136][T10564] ? mt_find+0x45e/0x8e0 [ 376.533174][T10564] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.533216][T10564] ? __pfx_mt_find+0x10/0x10 [ 376.533281][T10564] handle_mm_fault+0x36d/0xa20 [ 376.533331][T10564] __get_user_pages+0xf9c/0x34d0 [ 376.533384][T10564] ? __pfx___get_user_pages+0x10/0x10 [ 376.533433][T10564] populate_vma_page_range+0x267/0x3f0 [ 376.533476][T10564] ? __pfx_populate_vma_page_range+0x10/0x10 [ 376.533515][T10564] ? __pfx_find_vma_intersection+0x10/0x10 [ 376.533552][T10564] ? do_mmap+0x93f/0x12f0 [ 376.533592][T10564] __mm_populate+0x107/0x3a0 [ 376.533632][T10564] ? __pfx___mm_populate+0x10/0x10 [ 376.533675][T10564] ? up_write+0x290/0x4f0 [ 376.533723][T10564] vm_mmap_pgoff+0x37f/0x470 [ 376.533764][T10564] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 376.533805][T10564] ? do_futex+0x192/0x350 [ 376.533847][T10564] ? __pfx_do_futex+0x10/0x10 [ 376.533888][T10564] ? fd_install+0x223/0x580 [ 376.533923][T10564] ksys_mmap_pgoff+0xe1/0x650 [ 376.533958][T10564] ? __x64_sys_futex+0x34f/0x4d0 [ 376.534002][T10564] ? __x64_sys_futex+0x358/0x4d0 [ 376.534045][T10564] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 376.534080][T10564] ? xfd_validate_state+0x129/0x190 [ 376.534135][T10564] __x64_sys_mmap+0x125/0x190 [ 376.534188][T10564] do_syscall_64+0x106/0xf80 [ 376.534221][T10564] ? clear_bhb_loop+0x40/0x90 [ 376.534259][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.534291][T10564] RIP: 0033:0x7f703599c819 [ 376.534317][T10564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.534346][T10564] RSP: 002b:00007f703690a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 376.534376][T10564] RAX: ffffffffffffffda RBX: 00007f7035c15fa0 RCX: 00007f703599c819 [ 376.534395][T10564] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000001000000 [ 376.534412][T10564] RBP: 00007f7035a32c91 R08: 0000000000000007 R09: 0000000000028000 [ 376.534430][T10564] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 376.534448][T10564] R13: 00007f7035c16038 R14: 00007f7035c15fa0 R15: 00007ffda74409f8 [ 376.534490][T10564] [ 377.815552][T10582] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(668977.0.0), cmd(3) [ 379.171308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.182512][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.275530][T10650] FAULT_INJECTION: forcing a failure. [ 382.275530][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 382.383186][T10650] CPU: 1 UID: 0 PID: 10650 Comm: syz.0.1138 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.383236][T10650] Tainted: [L]=SOFTLOCKUP [ 382.383247][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.383264][T10650] Call Trace: [ 382.383273][T10650] [ 382.383285][T10650] dump_stack_lvl+0x100/0x190 [ 382.383333][T10650] should_fail_ex.cold+0x5/0xa [ 382.383370][T10650] should_failslab+0xc2/0x120 [ 382.383403][T10650] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 382.383452][T10650] ? __anon_vma_prepare+0x344/0x5e0 [ 382.383504][T10650] __anon_vma_prepare+0x344/0x5e0 [ 382.383543][T10650] ? __pfx___pte_alloc+0x10/0x10 [ 382.383582][T10650] __vmf_anon_prepare+0x11f/0x250 [ 382.383623][T10650] do_anonymous_page+0x552/0x1fb0 [ 382.383677][T10650] __handle_mm_fault+0x1d48/0x2b60 [ 382.383726][T10650] ? mt_find+0x45e/0x8e0 [ 382.383765][T10650] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.383801][T10650] ? __pfx_mt_find+0x10/0x10 [ 382.383871][T10650] handle_mm_fault+0x36d/0xa20 [ 382.383933][T10650] __get_user_pages+0xf9c/0x34d0 [ 382.383985][T10650] ? __pfx___get_user_pages+0x10/0x10 [ 382.384034][T10650] populate_vma_page_range+0x267/0x3f0 [ 382.384075][T10650] ? __pfx_populate_vma_page_range+0x10/0x10 [ 382.384111][T10650] ? __pfx_find_vma_intersection+0x10/0x10 [ 382.384147][T10650] ? do_mmap+0x93f/0x12f0 [ 382.384187][T10650] __mm_populate+0x107/0x3a0 [ 382.384233][T10650] ? __pfx___mm_populate+0x10/0x10 [ 382.384273][T10650] ? up_write+0x290/0x4f0 [ 382.384316][T10650] vm_mmap_pgoff+0x37f/0x470 [ 382.384358][T10650] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 382.384398][T10650] ? do_futex+0x192/0x350 [ 382.384438][T10650] ? __pfx_do_futex+0x10/0x10 [ 382.384480][T10650] ? fd_install+0x223/0x580 [ 382.384515][T10650] ksys_mmap_pgoff+0xe1/0x650 [ 382.384548][T10650] ? __x64_sys_futex+0x34f/0x4d0 [ 382.384586][T10650] ? __x64_sys_futex+0x358/0x4d0 [ 382.384626][T10650] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 382.384659][T10650] ? xfd_validate_state+0x129/0x190 [ 382.384710][T10650] __x64_sys_mmap+0x125/0x190 [ 382.384760][T10650] do_syscall_64+0x106/0xf80 [ 382.384792][T10650] ? clear_bhb_loop+0x40/0x90 [ 382.384830][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.384862][T10650] RIP: 0033:0x7f703599c819 [ 382.384898][T10650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.384930][T10650] RSP: 002b:00007f703690a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 382.384963][T10650] RAX: ffffffffffffffda RBX: 00007f7035c15fa0 RCX: 00007f703599c819 [ 382.384984][T10650] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000002000000 [ 382.385003][T10650] RBP: 00007f7035a32c91 R08: 0000000000000007 R09: 0000000000028000 [ 382.385021][T10650] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 382.385039][T10650] R13: 00007f7035c16038 R14: 00007f7035c15fa0 R15: 00007ffda74409f8 [ 382.385081][T10650] [ 383.043327][T10652] FAULT_INJECTION: forcing a failure. [ 383.043327][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 383.102469][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.1.1139 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.102532][T10652] Tainted: [L]=SOFTLOCKUP [ 383.102543][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.102561][T10652] Call Trace: [ 383.102571][T10652] [ 383.102582][T10652] dump_stack_lvl+0x100/0x190 [ 383.102635][T10652] should_fail_ex.cold+0x5/0xa [ 383.102673][T10652] should_failslab+0xc2/0x120 [ 383.102709][T10652] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 383.102759][T10652] ? __d_alloc+0x34/0xa80 [ 383.102803][T10652] __d_alloc+0x34/0xa80 [ 383.102843][T10652] d_alloc+0x4a/0x1e0 [ 383.102883][T10652] lookup_one_qstr_excl+0x175/0x250 [ 383.102929][T10652] start_creating_noperm+0x90/0xd0 [ 383.102963][T10652] do_mq_open+0x250/0x9c0 [ 383.103069][T10652] ? __pfx_do_mq_open+0x10/0x10 [ 383.103139][T10652] __x64_sys_mq_open+0x152/0x1e0 [ 383.103172][T10652] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 383.103225][T10652] do_syscall_64+0x106/0xf80 [ 383.103270][T10652] ? clear_bhb_loop+0x40/0x90 [ 383.103310][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.103343][T10652] RIP: 0033:0x7fa7b0b9c819 [ 383.103371][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.103397][T10652] RSP: 002b:00007fa7b1a78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 383.103432][T10652] RAX: ffffffffffffffda RBX: 00007fa7b0e15fa0 RCX: 00007fa7b0b9c819 [ 383.103452][T10652] RDX: 0000000000000009 RSI: 000000000000007e RDI: 0000200000000280 [ 383.103471][T10652] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 383.103489][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.103507][T10652] R13: 00007fa7b0e16038 R14: 00007fa7b0e15fa0 R15: 00007ffe089d8ce8 [ 383.103575][T10652] [ 384.111852][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 384.224766][T10661] openvswitch: HfR: Dropping previously announced user features [ 384.582339][ T30] audit: type=1800 audit(1775767707.156:21): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1144" name="discovery_nqn" dev="configfs" ino=72781 res=0 errno=0 [ 384.910705][T10675] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 385.005054][T10675] ubi0: attaching mtd0 [ 385.095695][T10675] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 385.186474][T10675] eraseblock attaching information dump: [ 385.186495][T10675] ec 1 [ 385.186508][T10675] pnum 0 [ 385.186519][T10675] lnum 0 [ 385.186531][T10675] scrub 0 [ 385.186541][T10675] sqnum 1 [ 385.186553][T10675] Volume identifier header dump: [ 385.186563][T10675] magic 55424921 [ 385.186576][T10675] version 1 [ 385.189888][T10675] vol_type 1 [ 385.189901][T10675] copy_flag 0 [ 385.189914][T10675] compat 5 [ 385.189925][T10675] vol_id 2147479551 [ 385.189938][T10675] lnum 0 [ 385.189951][T10675] data_size 0 [ 385.189962][T10675] used_ebs 0 [ 385.189974][T10675] data_pad 0 [ 385.189986][T10675] sqnum 1 [ 385.189997][T10675] hdr_crc 65b3bd2d [ 385.190011][T10675] Volume identifier header hexdump: [ 385.885854][T10675] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 386.176722][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 386.955264][T10693] FAULT_INJECTION: forcing a failure. [ 386.955264][T10693] name fail_futex, interval 1, probability 0, space 0, times 0 [ 387.058692][T10693] CPU: 1 UID: 0 PID: 10693 Comm: syz.2.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.058740][T10693] Tainted: [L]=SOFTLOCKUP [ 387.058751][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.058767][T10693] Call Trace: [ 387.058776][T10693] [ 387.058787][T10693] dump_stack_lvl+0x100/0x190 [ 387.058835][T10693] should_fail_ex.cold+0x5/0xa [ 387.058869][T10693] get_futex_key+0x1d2/0x1620 [ 387.058909][T10693] ? __pfx_get_futex_key+0x10/0x10 [ 387.058955][T10693] futex_wait_setup+0x83/0x510 [ 387.059006][T10693] __futex_wait+0x19f/0x300 [ 387.059051][T10693] ? __pfx___futex_wait+0x10/0x10 [ 387.059097][T10693] ? __pfx_futex_wake_mark+0x10/0x10 [ 387.059147][T10693] ? find_held_lock+0x2b/0x80 [ 387.059175][T10693] ? futex_wake+0x456/0x530 [ 387.059224][T10693] futex_wait+0xed/0x380 [ 387.059266][T10693] ? __pfx_futex_wait+0x10/0x10 [ 387.059327][T10693] do_futex+0x1ef/0x350 [ 387.059363][T10693] ? __pfx_do_futex+0x10/0x10 [ 387.059402][T10693] ? fput+0x79/0x100 [ 387.059435][T10693] ? __sys_sendmsg+0x18f/0x220 [ 387.059467][T10693] __x64_sys_futex+0x34f/0x4d0 [ 387.059510][T10693] ? __pfx___x64_sys_futex+0x10/0x10 [ 387.059564][T10693] do_syscall_64+0x106/0xf80 [ 387.059593][T10693] ? clear_bhb_loop+0x40/0x90 [ 387.059626][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.059655][T10693] RIP: 0033:0x7fdc7279c819 [ 387.059686][T10693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.059713][T10693] RSP: 002b:00007fdc735d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 387.059743][T10693] RAX: ffffffffffffffda RBX: 00007fdc72a15fa8 RCX: 00007fdc7279c819 [ 387.059762][T10693] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc72a15fa8 [ 387.059779][T10693] RBP: 00007fdc72a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 387.059795][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.059811][T10693] R13: 00007fdc72a16038 R14: 00007ffd420ae760 R15: 00007ffd420ae848 [ 387.059850][T10693] [ 388.234895][T10704] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1151'. [ 389.188052][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1156'. [ 394.311330][T10802] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1177'. [ 394.675129][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 395.443341][T10811] futex_wake_op: syz.1.1180 tries to shift op by -2048; fix this program [ 398.631683][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 399.066713][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1198'. [ 399.508573][ T30] audit: type=1800 audit(1775767722.106:22): pid=10905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1201" name="discovery_nqn" dev="configfs" ino=74682 res=0 errno=0 [ 400.527557][T10917] netlink: 54 bytes leftover after parsing attributes in process `syz.0.1204'. [ 400.725172][T10925] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 400.763451][T10925] ubi0: attaching mtd0 [ 400.768631][T10925] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 400.776539][T10925] eraseblock attaching information dump: [ 400.782166][T10925] ec 1 [ 400.805984][T10925] pnum 0 [ 400.816946][T10925] lnum 0 [ 400.820288][T10925] scrub 0 [ 400.842154][T10925] sqnum 1 [ 400.856235][T10925] Volume identifier header dump: [ 400.861546][T10925] magic 55424921 [ 400.878665][T10925] version 1 [ 400.894721][T10925] vol_type 1 [ 400.898286][T10925] copy_flag 0 [ 400.907694][T10925] compat 5 [ 400.918162][T10925] vol_id 2147479551 [ 400.981766][T10925] lnum 0 [ 400.994763][T10925] data_size 0 [ 401.003641][T10925] used_ebs 0 [ 401.017371][T10925] data_pad 0 [ 401.030637][T10925] sqnum 1 [ 401.043501][T10925] hdr_crc 65b3bd2d [ 401.057921][T10925] Volume identifier header hexdump: [ 401.153642][T10925] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 401.935035][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1213'. [ 402.255138][T10914] kexec: Could not allocate control_code_buffer [ 402.572745][T10964] vivid-007: ================= START STATUS ================= [ 402.580515][T10964] vivid-007: Generate PTS: true [ 402.589930][T10964] vivid-007: Generate SCR: true [ 402.595005][T10964] tpg source WxH: 320x240 (Y'CbCr) [ 402.600317][T10964] tpg field: 1 [ 402.603782][T10964] tpg crop: (0,0)/320x240 [ 402.608144][T10964] tpg compose: (0,0)/320x240 [ 402.618052][T10964] tpg colorspace: 8 [ 402.621900][T10964] tpg transfer function: 0/0 [ 402.648840][T10964] tpg Y'CbCr encoding: 0/0 [ 402.667967][T10964] tpg quantization: 0/0 [ 402.672185][T10964] tpg RGB range: 0/2 [ 402.682065][T10964] vivid-007: ================== END STATUS ================== [ 402.810703][T10964] FAULT_INJECTION: forcing a failure. [ 402.810703][T10964] name failslab, interval 1, probability 0, space 0, times 0 [ 402.913439][T10964] CPU: 0 UID: 0 PID: 10964 Comm: syz.0.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.913472][T10964] Tainted: [L]=SOFTLOCKUP [ 402.913479][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.913489][T10964] Call Trace: [ 402.913496][T10964] [ 402.913503][T10964] dump_stack_lvl+0x100/0x190 [ 402.913536][T10964] should_fail_ex.cold+0x5/0xa [ 402.913559][T10964] should_failslab+0xc2/0x120 [ 402.913580][T10964] __kmalloc_cache_noprof+0x7a/0x6f0 [ 402.913607][T10964] ? sctp_endpoint_new+0xfc/0xb20 [ 402.913632][T10964] sctp_endpoint_new+0xfc/0xb20 [ 402.913654][T10964] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 402.913673][T10964] ? lockdep_init_map_type+0x5c/0x250 [ 402.913699][T10964] ? lockdep_init_map_type+0x5c/0x250 [ 402.913723][T10964] ? lockdep_init_map_type+0x5c/0x250 [ 402.913748][T10964] ? lockdep_init_map_type+0x5c/0x250 [ 402.913777][T10964] sctp_init_sock+0xe2b/0x1300 [ 402.913796][T10964] ? __pfx_sctp_init_sock+0x10/0x10 [ 402.913815][T10964] inet_create+0x94c/0x1060 [ 402.913840][T10964] ? inet_create+0x94/0x1060 [ 402.913867][T10964] __sock_create+0x339/0x860 [ 402.913895][T10964] __sys_socket+0x14d/0x260 [ 402.913920][T10964] ? __pfx___sys_socket+0x10/0x10 [ 402.913958][T10964] __x64_sys_socket+0x72/0xb0 [ 402.913982][T10964] ? lockdep_hardirqs_on+0x78/0x100 [ 402.914004][T10964] do_syscall_64+0x106/0xf80 [ 402.914024][T10964] ? clear_bhb_loop+0x40/0x90 [ 402.914046][T10964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.914064][T10964] RIP: 0033:0x7f703599c819 [ 402.914080][T10964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.914096][T10964] RSP: 002b:00007f703690a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 402.914115][T10964] RAX: ffffffffffffffda RBX: 00007f7035c15fa0 RCX: 00007f703599c819 [ 402.914126][T10964] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 402.914136][T10964] RBP: 00007f7035a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 402.914146][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.914156][T10964] R13: 00007f7035c16038 R14: 00007f7035c15fa0 R15: 00007ffda74409f8 [ 402.914178][T10964] [ 403.664415][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 403.790786][T10994] HfR: entered promiscuous mode [ 405.327156][ T30] audit: type=1800 audit(1775767727.926:23): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1227" name="discovery_nqn" dev="configfs" ino=75940 res=0 errno=0 [ 406.925432][T11037] futex_wake_op: syz.0.1229 tries to shift op by -2048; fix this program [ 408.169723][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 413.019998][T11100] futex_wake_op: syz.1.1244 tries to shift op by -2048; fix this program [ 413.894757][ T30] audit: type=1800 audit(1775767736.496:24): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1249" name="discovery_nqn" dev="configfs" ino=76219 res=0 errno=0 [ 414.067942][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 414.466759][T11004] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.482500][T11121] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 414.525701][T11121] ubi0: attaching mtd0 [ 414.542916][T11121] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 414.550899][T11121] eraseblock attaching information dump: [ 414.604168][T11121] ec 1 [ 414.607578][T11121] pnum 0 [ 414.626982][T11121] lnum 0 [ 414.651949][T11121] scrub 0 [ 414.676389][T11121] sqnum 1 [ 414.679710][T11121] Volume identifier header dump: [ 414.721851][T11121] magic 55424921 [ 414.753002][T11121] version 1 [ 414.756739][T11124] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 414.772408][T11121] vol_type 1 [ 414.833196][T11121] copy_flag 0 [ 414.852601][T11121] compat 5 [ 414.856091][T11121] vol_id 2147479551 [ 414.882421][T11121] lnum 0 [ 414.885985][T11121] data_size 0 [ 414.889622][T11121] used_ebs 0 [ 414.893364][T11121] data_pad 0 [ 414.896830][T11121] sqnum 1 [ 414.900418][T11121] hdr_crc 65b3bd2d [ 414.904557][T11121] Volume identifier header hexdump: [ 414.927937][T11121] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 417.810443][T10831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.820752][T10831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.829451][T10831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.841436][T10831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.850217][T10831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.921316][T11172] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1266'. [ 418.435770][T11162] chnl_net:caif_netlink_parms(): no params data found [ 418.787555][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.813049][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.841204][T11162] bridge_slave_0: entered allmulticast mode [ 418.864456][T11162] bridge_slave_0: entered promiscuous mode [ 418.893596][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.900755][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.923698][T11162] bridge_slave_1: entered allmulticast mode [ 418.931937][T11162] bridge_slave_1: entered promiscuous mode [ 419.024434][T11162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.057604][T11162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.172446][T11162] team0: Port device team_slave_0 added [ 419.181664][T11162] team0: Port device team_slave_1 added [ 419.284882][T11162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.291984][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.322373][T11162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.336048][T11162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.344749][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.371291][T11162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.476038][T11162] hsr_slave_0: entered promiscuous mode [ 419.553731][T11162] hsr_slave_1: entered promiscuous mode [ 419.884706][T10831] Bluetooth: hci5: command tx timeout [ 419.956386][T11162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 420.043130][T11162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 420.081245][T11162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 420.161153][T11162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 420.349705][T11162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.403668][T11162] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.495451][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.502609][T11004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.526063][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.533412][T11004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.018821][T11162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.510418][T11162] veth0_vlan: entered promiscuous mode [ 421.549789][T11162] veth1_vlan: entered promiscuous mode [ 421.645352][T11162] veth0_macvtap: entered promiscuous mode [ 421.685420][T11162] veth1_macvtap: entered promiscuous mode [ 421.780716][T11162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.925790][T11162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.963090][T10831] Bluetooth: hci5: command tx timeout [ 422.028280][T10834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.042689][T10834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.051500][T10834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.265773][T10834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.563870][T10834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.571848][T10834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.696465][T10825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.715915][T10825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.043124][T10831] Bluetooth: hci5: command tx timeout [ 425.561674][T10818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.582670][T10818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.593752][T10818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.610076][T10818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.620035][T10818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.698336][T11230] &#$@\]\-: entered promiscuous mode [ 425.746143][T11230] sctp: [Deprecated]: syz.6.1277 (pid 11230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.746143][T11230] Use struct sctp_sack_info instead [ 425.995157][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 426.125519][T10818] Bluetooth: hci5: command tx timeout [ 426.142927][T11241] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 426.196009][T11241] ubi0: attaching mtd0 [ 426.200316][T11232] chnl_net:caif_netlink_parms(): no params data found [ 426.224203][T11241] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 426.232105][T11241] eraseblock attaching information dump: [ 426.272855][T11241] ec 1 [ 426.276472][T11241] pnum 0 [ 426.279769][T11241] lnum 0 [ 426.322373][T11241] scrub 0 [ 426.325726][T11241] sqnum 1 [ 426.342341][T11241] Volume identifier header dump: [ 426.352663][T11241] magic 55424921 [ 426.383544][T11241] version 1 [ 426.386990][T11241] vol_type 1 [ 426.390392][T11241] copy_flag 0 [ 426.392311][T11232] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.414515][T11232] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.418146][T11241] compat 5 [ 426.421877][T11232] bridge_slave_0: entered allmulticast mode [ 426.437257][T11232] bridge_slave_0: entered promiscuous mode [ 426.458668][T11232] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.472472][T11241] vol_id 2147479551 [ 426.472500][T11232] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.476685][T11241] lnum 0 [ 426.486481][T11232] bridge_slave_1: entered allmulticast mode [ 426.499804][T11232] bridge_slave_1: entered promiscuous mode [ 426.523954][T11241] data_size 0 [ 426.527566][T11241] used_ebs 0 [ 426.552348][T11241] data_pad 0 [ 426.555871][T11241] sqnum 1 [ 426.562821][T11241] hdr_crc 65b3bd2d [ 426.579665][T11241] Volume identifier header hexdump: [ 426.580606][T11232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.609930][T11232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.674391][T11232] team0: Port device team_slave_0 added [ 426.694386][T11232] team0: Port device team_slave_1 added [ 426.756495][T11232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.769938][T11232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.825901][T11232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.844354][T11241] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 426.846831][T11232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.891401][T11232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.962604][T11232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.081478][T11232] hsr_slave_0: entered promiscuous mode [ 427.101140][T11232] hsr_slave_1: entered promiscuous mode [ 427.118452][T11232] debugfs: 'hsr0' already exists in 'hsr' [ 427.144448][T11232] Cannot create hsr debugfs directory [ 427.515528][T11260] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 427.727418][T10818] Bluetooth: hci6: command tx timeout [ 428.052977][T11232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.077190][T11232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.153336][T11232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.222541][T11232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.647642][T11232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.699917][T11274] FAULT_INJECTION: forcing a failure. [ 428.699917][T11274] name failslab, interval 1, probability 0, space 0, times 0 [ 428.745946][T11232] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.752516][T11274] CPU: 0 UID: 0 PID: 11274 Comm: syz.6.1284 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.752558][T11274] Tainted: [L]=SOFTLOCKUP [ 428.752567][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.752583][T11274] Call Trace: [ 428.752592][T11274] [ 428.752602][T11274] dump_stack_lvl+0x100/0x190 [ 428.752647][T11274] should_fail_ex.cold+0x5/0xa [ 428.752690][T11274] should_failslab+0xc2/0x120 [ 428.752726][T11274] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 428.752767][T11274] ? alloc_empty_file+0x55/0x1c0 [ 428.752813][T11274] alloc_empty_file+0x55/0x1c0 [ 428.752854][T11274] alloc_file_pseudo+0x13a/0x230 [ 428.752897][T11274] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 428.752948][T11274] __shmem_file_setup+0x221/0x490 [ 428.752996][T11274] ? __pfx___shmem_file_setup+0x10/0x10 [ 428.753047][T11274] ? vm_area_alloc+0x1f/0x160 [ 428.753093][T11274] shmem_zero_setup+0x96/0x1b0 [ 428.753124][T11274] __mmap_region+0x21f6/0x2a50 [ 428.753169][T11274] ? __pfx___mmap_region+0x10/0x10 [ 428.753269][T11274] ? lockdep_hardirqs_on+0x78/0x100 [ 428.753298][T11274] ? finish_task_switch.isra.0+0x205/0xb80 [ 428.753329][T11274] ? rcu_is_watching+0x12/0xc0 [ 428.753414][T11274] ? rcu_is_watching+0x12/0xc0 [ 428.753451][T11274] ? cap_capable+0x107/0x460 [ 428.753485][T11274] mmap_region+0x180/0x3e0 [ 428.753532][T11274] do_mmap+0xc63/0x12f0 [ 428.753571][T11274] ? __pfx_do_mmap+0x10/0x10 [ 428.753601][T11274] ? __pfx_down_write_killable+0x10/0x10 [ 428.753642][T11274] vm_mmap_pgoff+0x29e/0x470 [ 428.753686][T11274] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 428.753720][T11274] ? do_futex+0x192/0x350 [ 428.753755][T11274] ? __pfx_do_futex+0x10/0x10 [ 428.753789][T11274] ? fd_install+0x223/0x580 [ 428.753820][T11274] ksys_mmap_pgoff+0xe1/0x650 [ 428.753849][T11274] ? __x64_sys_futex+0x34f/0x4d0 [ 428.753882][T11274] ? __x64_sys_futex+0x358/0x4d0 [ 428.753917][T11274] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 428.753947][T11274] ? xfd_validate_state+0x129/0x190 [ 428.753991][T11274] __x64_sys_mmap+0x125/0x190 [ 428.754034][T11274] do_syscall_64+0x106/0xf80 [ 428.754066][T11274] ? clear_bhb_loop+0x40/0x90 [ 428.754099][T11274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.754125][T11274] RIP: 0033:0x7f6c12f9c819 [ 428.754148][T11274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.754172][T11274] RSP: 002b:00007f6c13eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 428.754198][T11274] RAX: ffffffffffffffda RBX: 00007f6c13216090 RCX: 00007f6c12f9c819 [ 428.754215][T11274] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 428.754231][T11274] RBP: 00007f6c13032c91 R08: fffffffffffffffa R09: 0000000000008000 [ 428.754247][T11274] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 428.754262][T11274] R13: 00007f6c13216128 R14: 00007f6c13216090 R15: 00007fff345c6518 [ 428.754298][T11274] [ 429.229346][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.236791][T11007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.346646][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.353927][T11007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.556971][T11232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.632617][T11232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.802404][T10818] Bluetooth: hci6: command tx timeout [ 430.280949][T11254] kexec: Could not allocate control_code_buffer [ 430.508544][T11232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.814090][T11298] FAULT_INJECTION: forcing a failure. [ 430.814090][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 430.830349][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.6.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.830400][T11298] Tainted: [L]=SOFTLOCKUP [ 430.830412][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.830429][T11298] Call Trace: [ 430.830439][T11298] [ 430.830451][T11298] dump_stack_lvl+0x100/0x190 [ 430.830503][T11298] should_fail_ex.cold+0x5/0xa [ 430.830539][T11298] ? sk_prot_alloc+0x10b/0x2a0 [ 430.830571][T11298] should_failslab+0xc2/0x120 [ 430.830602][T11298] __kmalloc_noprof+0xe0/0x850 [ 430.830651][T11298] sk_prot_alloc+0x10b/0x2a0 [ 430.830687][T11298] sk_alloc+0x36/0xe80 [ 430.830740][T11298] __netlink_create+0x5e/0x2c0 [ 430.830780][T11298] ? __wake_up+0x3f/0x60 [ 430.830816][T11298] netlink_create+0x293/0x610 [ 430.830842][T11298] ? __pfx_genl_bind+0x10/0x10 [ 430.830873][T11298] ? __pfx_genl_unbind+0x10/0x10 [ 430.830905][T11298] ? __pfx_genl_release+0x10/0x10 [ 430.830943][T11298] __sock_create+0x339/0x860 [ 430.830985][T11298] __sys_socket+0x14d/0x260 [ 430.831022][T11298] ? __pfx___sys_socket+0x10/0x10 [ 430.831071][T11298] __x64_sys_socket+0x72/0xb0 [ 430.831107][T11298] ? lockdep_hardirqs_on+0x78/0x100 [ 430.831139][T11298] do_syscall_64+0x106/0xf80 [ 430.831170][T11298] ? clear_bhb_loop+0x40/0x90 [ 430.831207][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.831237][T11298] RIP: 0033:0x7f6c12f9c819 [ 430.831261][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.831287][T11298] RSP: 002b:00007f6c13f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 430.831315][T11298] RAX: ffffffffffffffda RBX: 00007f6c13215fa0 RCX: 00007f6c12f9c819 [ 430.831334][T11298] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 430.831352][T11298] RBP: 00007f6c13032c91 R08: 0000000000000000 R09: 0000000000000000 [ 430.831370][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.831387][T11298] R13: 00007f6c13216038 R14: 00007f6c13215fa0 R15: 00007fff345c6518 [ 430.831426][T11298] [ 431.657854][T11232] veth0_vlan: entered promiscuous mode [ 431.694043][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1289'. [ 431.699708][T11232] veth1_vlan: entered promiscuous mode [ 431.826539][T11232] veth0_macvtap: entered promiscuous mode [ 431.840897][T11232] veth1_macvtap: entered promiscuous mode [ 431.868755][T11232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.882380][T10818] Bluetooth: hci6: command tx timeout [ 431.923321][T11232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.970735][T11004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.985522][T11004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.997079][T11004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.014736][T11004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.501964][T11007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.532594][T11007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.588483][T11004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.609075][T11004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.418320][T11321] ubi0: attaching mtd0 [ 433.423707][T11321] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 433.462045][T11321] eraseblock attaching information dump: [ 433.487196][T11321] ec 1 [ 433.490545][T11321] pnum 0 [ 433.522649][T11321] lnum 0 [ 433.526085][T11321] scrub 0 [ 433.529475][T11321] sqnum 1 [ 433.532974][T11321] Volume identifier header dump: [ 433.538556][T11321] magic 55424921 [ 433.548973][T11321] version 1 [ 433.559450][T11321] vol_type 1 [ 433.570251][T11321] copy_flag 0 [ 433.614568][T11321] compat 5 [ 433.635412][T11321] vol_id 2147479551 [ 433.639682][T11321] lnum 0 [ 433.672492][T11321] data_size 0 [ 433.676048][T11321] used_ebs 0 [ 433.681530][T11321] data_pad 0 [ 433.686555][T10831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 433.694492][T11321] sqnum 1 [ 433.698063][T11321] hdr_crc 65b3bd2d [ 433.702611][T11321] Volume identifier header hexdump: [ 433.714277][T10831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 433.731937][T10831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 433.745327][T10831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 433.753416][T10831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 433.962333][T10831] Bluetooth: hci6: command tx timeout [ 434.033343][T11321] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 434.380481][T11323] chnl_net:caif_netlink_parms(): no params data found [ 434.593519][T11323] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.607476][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.621151][T11323] bridge_slave_0: entered allmulticast mode [ 434.633941][T11323] bridge_slave_0: entered promiscuous mode [ 434.643876][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.652545][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.659964][T11323] bridge_slave_1: entered allmulticast mode [ 434.669718][T11323] bridge_slave_1: entered promiscuous mode [ 434.714022][T11323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.747743][T11323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.826114][T11323] team0: Port device team_slave_0 added [ 434.826682][T11338] random: crng reseeded on system resumption [ 434.855390][T11323] team0: Port device team_slave_1 added [ 434.939603][T11323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.950599][T11336] futex_wake_op: syz.7.1295 tries to shift op by -2048; fix this program [ 434.960228][T11336] futex_wake_op: syz.7.1295 tries to shift op by -2048; fix this program [ 434.983694][T11323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.032395][T11323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.092148][T11323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.119684][T11323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.149038][T11323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.253091][T11323] hsr_slave_0: entered promiscuous mode [ 435.262929][T11323] hsr_slave_1: entered promiscuous mode [ 435.310406][T11323] debugfs: 'hsr0' already exists in 'hsr' [ 435.336126][T11323] Cannot create hsr debugfs directory [ 435.606601][T11341] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 435.657320][T11341] ubi0: attaching mtd0 [ 435.703115][T11341] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 435.723814][T11341] eraseblock attaching information dump: [ 435.730121][T11341] ec 1 [ 435.753860][T11341] pnum 0 [ 435.757223][T11341] lnum 0 [ 435.760538][T11341] scrub 0 [ 435.802690][T10831] Bluetooth: hci7: command tx timeout [ 435.811350][T11341] sqnum 1 [ 435.831615][T11341] Volume identifier header dump: [ 435.841757][T11341] magic 55424921 [ 435.851885][T11341] version 1 [ 435.903097][T11341] vol_type 1 [ 435.906501][T11341] copy_flag 0 [ 435.909873][T11341] compat 5 [ 435.942468][T11341] vol_id 2147479551 [ 435.956177][T11323] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 435.968350][T11341] lnum 0 [ 435.980675][T11341] data_size 0 [ 435.986172][T11323] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 435.999974][T11341] used_ebs 0 [ 436.009982][T11341] data_pad 0 [ 436.014425][T11323] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 436.027014][T11341] sqnum 1 [ 436.034566][T11341] hdr_crc 65b3bd2d [ 436.038695][T11341] Volume identifier header hexdump: [ 436.038980][T11323] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 436.204030][T11341] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 436.383653][T11323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.438114][T11323] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.496480][T10834] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.503857][T10834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.599815][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.607021][T10816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.419194][T11323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.882904][T10831] Bluetooth: hci7: command tx timeout [ 438.416107][T11323] veth0_vlan: entered promiscuous mode [ 438.563587][T11323] veth1_vlan: entered promiscuous mode [ 438.735144][T11323] veth0_macvtap: entered promiscuous mode [ 438.776271][T11323] veth1_macvtap: entered promiscuous mode [ 438.875240][T11323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.926934][T11323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.981716][T10825] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.039451][T10825] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.087216][T10825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.109404][T11393] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 439.158233][T11393] ubi0: attaching mtd0 [ 439.165552][T10825] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.196127][T11393] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 439.232066][T11393] eraseblock attaching information dump: [ 439.254960][T11393] ec 1 [ 439.288818][T11393] pnum 0 [ 439.292165][T11393] lnum 0 [ 439.301624][T11393] scrub 0 [ 439.333279][T11393] sqnum 1 [ 439.333299][T11393] Volume identifier header dump: [ 439.333310][T11393] magic 55424921 [ 439.333324][T11393] version 1 [ 439.333336][T11393] vol_type 1 [ 439.333348][T11393] copy_flag 0 [ 439.333360][T11393] compat 5 [ 439.333371][T11393] vol_id 2147479551 [ 439.333383][T11393] lnum 0 [ 439.333395][T11393] data_size 0 [ 439.333406][T11393] used_ebs 0 [ 439.333416][T11393] data_pad 0 [ 439.333427][T11393] sqnum 1 [ 439.333439][T11393] hdr_crc 65b3bd2d [ 439.333451][T11393] Volume identifier header hexdump: [ 439.357126][T10825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.357180][T10825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.485654][T11393] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 439.535645][T11396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.535674][T11396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.931460][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 439.964104][T10831] Bluetooth: hci7: command tx timeout [ 439.972853][T11410] openvswitch: HfR: Dropping previously announced user features [ 440.630658][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.642485][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.809429][T11423] FAULT_INJECTION: forcing a failure. [ 440.809429][T11423] name failslab, interval 1, probability 0, space 0, times 0 [ 440.859650][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.8.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.859699][T11423] Tainted: [L]=SOFTLOCKUP [ 440.859710][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 440.859727][T11423] Call Trace: [ 440.859739][T11423] [ 440.859750][T11423] dump_stack_lvl+0x100/0x190 [ 440.859814][T11423] should_fail_ex.cold+0x5/0xa [ 440.859853][T11423] should_failslab+0xc2/0x120 [ 440.859889][T11423] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 440.859936][T11423] ? do_getname+0x35/0x390 [ 440.859984][T11423] do_getname+0x35/0x390 [ 440.860029][T11423] do_sys_openat2+0xc5/0x1e0 [ 440.860073][T11423] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.860131][T11423] __x64_sys_openat+0x12d/0x210 [ 440.860176][T11423] ? __pfx___x64_sys_openat+0x10/0x10 [ 440.860235][T11423] do_syscall_64+0x106/0xf80 [ 440.860268][T11423] ? clear_bhb_loop+0x40/0x90 [ 440.860307][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.860338][T11423] RIP: 0033:0x7ff30199c819 [ 440.860364][T11423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.860392][T11423] RSP: 002b:00007ff3028ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.860422][T11423] RAX: ffffffffffffffda RBX: 00007ff301c16090 RCX: 00007ff30199c819 [ 440.860440][T11423] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 440.860459][T11423] RBP: 00007ff301a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 440.860477][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.860494][T11423] R13: 00007ff301c16128 R14: 00007ff301c16090 R15: 00007fff737c1468 [ 440.860534][T11423] [ 441.052543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 441.153660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 441.163385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 442.043528][T10831] Bluetooth: hci7: command tx timeout [ 442.099966][T11439] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1315'. [ 442.815453][T11453] FAULT_INJECTION: forcing a failure. [ 442.815453][T11453] name failslab, interval 1, probability 0, space 0, times 0 [ 442.828231][T11453] CPU: 0 UID: 0 PID: 11453 Comm: syz.8.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.828261][T11453] Tainted: [L]=SOFTLOCKUP [ 442.828267][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 442.828277][T11453] Call Trace: [ 442.828284][T11453] [ 442.828290][T11453] dump_stack_lvl+0x100/0x190 [ 442.828322][T11453] should_fail_ex.cold+0x5/0xa [ 442.828343][T11453] ? memcg_list_lru_alloc+0x4ec/0x740 [ 442.828372][T11453] should_failslab+0xc2/0x120 [ 442.828393][T11453] __kmalloc_noprof+0xe0/0x850 [ 442.828429][T11453] ? path_openat+0xf95/0x31a0 [ 442.828453][T11453] memcg_list_lru_alloc+0x4ec/0x740 [ 442.828487][T11453] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 442.828515][T11453] ? rcu_read_unlock+0x17/0x60 [ 442.828541][T11453] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 442.828572][T11453] __memcg_slab_post_alloc_hook+0x130/0x990 [ 442.828598][T11453] ? kasan_save_track+0x14/0x30 [ 442.828617][T11453] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 442.828646][T11453] ? alloc_inode+0x183/0x250 [ 442.828675][T11453] alloc_inode+0x183/0x250 [ 442.828700][T11453] path_from_stashed+0x25b/0x750 [ 442.828721][T11453] ? do_raw_spin_unlock+0x145/0x1e0 [ 442.828752][T11453] ns_get_path+0x60/0x80 [ 442.828772][T11453] proc_ns_get_link+0x121/0x230 [ 442.828799][T11453] ? __pfx_proc_ns_get_link+0x10/0x10 [ 442.828828][T11453] ? atime_needs_update+0x8b/0x6b0 [ 442.828857][T11453] pick_link+0xd17/0x13c0 [ 442.828883][T11453] ? __pfx_proc_ns_get_link+0x10/0x10 [ 442.828913][T11453] step_into_slowpath+0x9ba/0xf90 [ 442.828945][T11453] ? __pfx_step_into_slowpath+0x10/0x10 [ 442.828973][T11453] ? find_held_lock+0x2b/0x80 [ 442.828997][T11453] path_openat+0xf95/0x31a0 [ 442.829024][T11453] ? __pfx_path_openat+0x10/0x10 [ 442.829051][T11453] do_file_open+0x20e/0x430 [ 442.829073][T11453] ? __pfx_do_file_open+0x10/0x10 [ 442.829109][T11453] ? alloc_fd+0x476/0x790 [ 442.829129][T11453] ? do_getname+0x191/0x390 [ 442.829156][T11453] do_sys_openat2+0x10d/0x1e0 [ 442.829181][T11453] ? __pfx_do_sys_openat2+0x10/0x10 [ 442.829207][T11453] ? __fget_files+0x21f/0x3d0 [ 442.829229][T11453] __x64_sys_openat+0x12d/0x210 [ 442.829255][T11453] ? __pfx___x64_sys_openat+0x10/0x10 [ 442.829288][T11453] do_syscall_64+0x106/0xf80 [ 442.829308][T11453] ? clear_bhb_loop+0x40/0x90 [ 442.829330][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.829349][T11453] RIP: 0033:0x7ff30195d04e [ 442.829364][T11453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.829388][T11453] RSP: 002b:00007ff30290eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.829412][T11453] RAX: ffffffffffffffda RBX: 00007ff30290f6c0 RCX: 00007ff30195d04e [ 442.829424][T11453] RDX: 0000000000000002 RSI: 00007ff30290ef90 RDI: ffffffffffffff9c [ 442.829435][T11453] RBP: 00007ff301a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 442.829445][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.829455][T11453] R13: 00007ff301c16038 R14: 00007ff301c15fa0 R15: 00007fff737c1468 [ 442.829477][T11453] [ 443.249397][T11438] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 443.983539][T10831] Bluetooth: hci7: unexpected event 0x3e length: 726 > 260 [ 443.983582][T10831] Bluetooth: hci7: unexpected subevent 0x06 length: 725 > 10 [ 444.055959][ T30] audit: type=1800 audit(1775767766.656:25): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1321" name="features" dev="configfs" ino=80389 res=0 errno=0 [ 444.965571][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1325'. [ 444.985909][ T30] audit: type=1800 audit(1775767767.586:26): pid=11481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1325" name="dbroot" dev="configfs" ino=79728 res=0 errno=0 [ 445.814177][T11495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 445.909656][T11492] FAULT_INJECTION: forcing a failure. [ 445.909656][T11492] name fail_futex, interval 1, probability 0, space 0, times 0 [ 446.005692][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.8.1328 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.005742][T11492] Tainted: [L]=SOFTLOCKUP [ 446.005753][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.005772][T11492] Call Trace: [ 446.005783][T11492] [ 446.005794][T11492] dump_stack_lvl+0x100/0x190 [ 446.005848][T11492] should_fail_ex.cold+0x5/0xa [ 446.005886][T11492] get_futex_key+0x1d2/0x1620 [ 446.005930][T11492] ? __pfx_get_futex_key+0x10/0x10 [ 446.005984][T11492] futex_wake+0xea/0x530 [ 446.006035][T11492] ? __pfx_futex_wake+0x10/0x10 [ 446.006088][T11492] ? putname+0xb1/0x110 [ 446.006118][T11492] ? kmem_cache_free+0x124/0x6a0 [ 446.006171][T11492] do_futex+0x32b/0x350 [ 446.006214][T11492] ? __pfx_do_futex+0x10/0x10 [ 446.006272][T11492] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.006324][T11492] __x64_sys_futex+0x34f/0x4d0 [ 446.006364][T11492] ? __x64_sys_openat+0x12d/0x210 [ 446.006406][T11492] ? __pfx___x64_sys_futex+0x10/0x10 [ 446.006461][T11492] do_syscall_64+0x106/0xf80 [ 446.006493][T11492] ? clear_bhb_loop+0x40/0x90 [ 446.006532][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.006564][T11492] RIP: 0033:0x7ff30199c819 [ 446.006590][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.006628][T11492] RSP: 002b:00007ff30290f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.006657][T11492] RAX: ffffffffffffffda RBX: 00007ff301c15fa8 RCX: 00007ff30199c819 [ 446.006677][T11492] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff301c15fac [ 446.006696][T11492] RBP: 00007ff301c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 446.006715][T11492] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 446.006733][T11492] R13: 00007ff301c16038 R14: 00007fff737c1380 R15: 00007fff737c1468 [ 446.006775][T11492] [ 446.224031][T10818] Bluetooth: hci7: command tx timeout [ 446.692928][T11505] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 446.750701][T11505] ubi0: attaching mtd0 [ 446.780909][T11505] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 446.812938][T11505] eraseblock attaching information dump: [ 446.842567][T11505] ec 1 [ 446.845917][T11505] pnum 0 [ 446.849235][T11505] lnum 0 [ 446.887611][T11505] scrub 0 [ 446.891027][T11505] sqnum 1 [ 446.935419][T11505] Volume identifier header dump: [ 446.940595][T11505] magic 55424921 [ 446.966260][T11505] version 1 [ 446.969699][T11505] vol_type 1 [ 447.003430][T11505] copy_flag 0 [ 447.028222][T11505] compat 5 [ 447.031664][T11505] vol_id 2147479551 [ 447.066547][T11505] lnum 0 [ 447.090892][T11505] data_size 0 [ 447.103137][T11505] used_ebs 0 [ 447.112670][T11505] data_pad 0 [ 447.113380][T11517] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 447.122434][T11505] sqnum 1 [ 447.128515][T11517] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 447.136767][T11517] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 447.144931][T11517] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 447.153007][T11517] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 447.172467][T11505] hdr_crc 65b3bd2d [ 447.202828][T11505] Volume identifier header hexdump: [ 447.433455][T11505] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 447.766221][T11527] FAULT_INJECTION: forcing a failure. [ 447.766221][T11527] name failslab, interval 1, probability 0, space 0, times 0 [ 447.805457][T11517] Bluetooth: hci2: command 0x0406 tx timeout [ 447.851722][T11527] CPU: 1 UID: 0 PID: 11527 Comm: syz.8.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.851773][T11527] Tainted: [L]=SOFTLOCKUP [ 447.851783][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.851800][T11527] Call Trace: [ 447.851810][T11527] [ 447.851820][T11527] dump_stack_lvl+0x100/0x190 [ 447.851873][T11527] should_fail_ex.cold+0x5/0xa [ 447.851906][T11527] ? memcg_list_lru_alloc+0x4ec/0x740 [ 447.851940][T11527] should_failslab+0xc2/0x120 [ 447.851960][T11527] __kmalloc_noprof+0xe0/0x850 [ 447.851989][T11527] ? do_syscall_64+0x106/0xf80 [ 447.852012][T11527] memcg_list_lru_alloc+0x4ec/0x740 [ 447.852047][T11527] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 447.852075][T11527] ? rcu_read_unlock+0x17/0x60 [ 447.852104][T11527] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 447.852137][T11527] __memcg_slab_post_alloc_hook+0x130/0x990 [ 447.852164][T11527] ? kasan_save_track+0x14/0x30 [ 447.852196][T11527] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 447.852237][T11527] ? __d_alloc+0x34/0xa80 [ 447.852282][T11527] __d_alloc+0x34/0xa80 [ 447.852316][T11527] d_alloc+0x4a/0x1e0 [ 447.852341][T11527] lookup_one_qstr_excl+0x175/0x250 [ 447.852365][T11527] ? mnt_want_write+0x161/0x450 [ 447.852394][T11527] filename_create+0x1cf/0x400 [ 447.852424][T11527] ? __pfx_filename_create+0x10/0x10 [ 447.852457][T11527] ? find_held_lock+0x2b/0x80 [ 447.852479][T11527] filename_mkdirat+0xb9/0x5e0 [ 447.852503][T11527] ? __pfx_filename_mkdirat+0x10/0x10 [ 447.852525][T11527] ? strncpy_from_user+0x19d/0x2d0 [ 447.852551][T11527] ? do_getname+0x191/0x390 [ 447.852584][T11527] __x64_sys_mkdir+0x6b/0x90 [ 447.852607][T11527] do_syscall_64+0x106/0xf80 [ 447.852625][T11527] ? clear_bhb_loop+0x40/0x90 [ 447.852648][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.852667][T11527] RIP: 0033:0x7ff30199c819 [ 447.852683][T11527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.852702][T11527] RSP: 002b:00007ff30290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 447.852721][T11527] RAX: ffffffffffffffda RBX: 00007ff301c15fa0 RCX: 00007ff30199c819 [ 447.852732][T11527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 447.852743][T11527] RBP: 00007ff301a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 447.852754][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.852764][T11527] R13: 00007ff301c16038 R14: 00007ff301c15fa0 R15: 00007fff737c1468 [ 447.852787][T11527] [ 448.118196][T11515] chnl_net:caif_netlink_parms(): no params data found [ 448.322955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 448.849973][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.861324][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.899465][T11515] bridge_slave_0: entered allmulticast mode [ 448.987898][T11515] bridge_slave_0: entered promiscuous mode [ 449.067765][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.098553][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.141295][T11515] bridge_slave_1: entered allmulticast mode [ 449.175018][T11515] bridge_slave_1: entered promiscuous mode [ 449.249739][T10831] Bluetooth: hci8: command tx timeout [ 449.569208][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.597212][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.749539][T11515] team0: Port device team_slave_0 added [ 449.767490][T11515] team0: Port device team_slave_1 added [ 449.829889][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.850898][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.888303][T11550] device-mapper: ioctl: Invalid ioctl structure: name , dev 3000000000 [ 449.923490][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.981635][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.989396][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.022768][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.248476][T11515] hsr_slave_0: entered promiscuous mode [ 450.274298][T11515] hsr_slave_1: entered promiscuous mode [ 450.302086][T11515] debugfs: 'hsr0' already exists in 'hsr' [ 450.330620][T11515] Cannot create hsr debugfs directory [ 450.457182][T11561] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 450.475257][T11561] ubi0: attaching mtd0 [ 450.482170][T11561] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 450.538390][T11561] eraseblock attaching information dump: [ 450.566364][T11561] ec 1 [ 450.569852][T11561] pnum 0 [ 450.616680][T11561] lnum 0 [ 450.620002][T11561] scrub 0 [ 450.654594][T11561] sqnum 1 [ 450.674008][T11561] Volume identifier header dump: [ 450.693660][T11561] magic 55424921 [ 450.713357][T11561] version 1 [ 450.718486][T11561] vol_type 1 [ 450.731969][T11561] copy_flag 0 [ 450.744430][T11561] compat 5 [ 450.771553][T11561] vol_id 2147479551 [ 450.789947][T11561] lnum 0 [ 450.802132][T11561] data_size 0 [ 450.816086][T11561] used_ebs 0 [ 450.832500][T11561] data_pad 0 [ 450.839045][T11561] sqnum 1 [ 450.892434][T11561] hdr_crc 65b3bd2d [ 450.911429][T11561] Volume identifier header hexdump: [ 451.044294][T11561] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 451.325676][T10831] Bluetooth: hci8: command tx timeout [ 451.513773][T11515] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 451.579125][T11515] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 451.621735][T11515] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 451.649212][T11515] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 451.925083][T11515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.986872][T11515] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.043540][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.050663][T10825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.113065][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.120298][T11004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.016073][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.404372][T10831] Bluetooth: hci8: command tx timeout [ 453.685434][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 453.738041][T11601] openvswitch: HfR: Dropping previously announced user features [ 454.160429][T11515] veth0_vlan: entered promiscuous mode [ 454.209479][T11515] veth1_vlan: entered promiscuous mode [ 454.244515][T11605] sctp: [Deprecated]: syz.7.1351 (pid 11605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.244515][T11605] Use struct sctp_sack_info instead [ 454.343392][T11515] veth0_macvtap: entered promiscuous mode [ 454.374151][T11515] veth1_macvtap: entered promiscuous mode [ 454.463629][T11515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.514054][T11515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.586189][T10845] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.604448][T10845] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.629334][T11610] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 454.679281][T10845] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.698051][T11612] ubi0: attaching mtd0 [ 454.743342][T11612] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 454.754978][T10845] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.785743][T11612] eraseblock attaching information dump: [ 454.877397][T11612] ec 1 [ 454.880799][T11612] pnum 0 [ 454.886967][T11612] lnum 0 [ 454.912363][T11612] scrub 0 [ 454.915700][T11612] sqnum 1 [ 454.919148][T11612] Volume identifier header dump: [ 454.954180][T11612] magic 55424921 [ 454.958218][T11612] version 1 [ 454.961602][T11612] vol_type 1 [ 455.033286][T11612] copy_flag 0 [ 455.055645][T11612] compat 5 [ 455.059955][T10825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.064274][T11612] vol_id 2147479551 [ 455.102374][T11612] lnum 0 [ 455.107499][T11612] data_size 0 [ 455.122408][T11612] used_ebs 0 [ 455.126037][T11612] data_pad 0 [ 455.132438][T10825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.151789][T11612] sqnum 1 [ 455.171470][T11612] hdr_crc 65b3bd2d [ 455.190339][T11612] Volume identifier header hexdump: [ 455.211578][T11004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.224508][T11004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.354010][T11612] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 455.483851][T11517] Bluetooth: hci8: command tx timeout [ 455.574117][T11622] futex_wake_op: syz.9.1333 tries to shift op by -2048; fix this program [ 455.613535][T11622] futex_wake_op: syz.9.1333 tries to shift op by -2048; fix this program [ 455.653865][T11622] 0x000000000001-0x000000020000 : "" [ 455.716795][T11622] ftl_cs: FTL header corrupt! [ 455.935616][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 456.779371][ T30] audit: type=1800 audit(1775767779.376:27): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1361" name="discovery_nqn" dev="configfs" ino=82299 res=0 errno=0 [ 457.408651][T11654] zswap: compressor not available [ 457.598791][ T30] audit: type=1807 audit(1775767780.196:28): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 457.621890][T11643] ima: policy update failed [ 457.631128][ T30] audit: type=1802 audit(1775767780.196:29): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.1362" res=0 errno=0 [ 457.694188][ T30] audit: type=1802 audit(1775767780.276:30): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1362" res=0 errno=0 [ 458.021103][T11675] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 459.223173][T11694] dump_stack_lvl+0x100/0x190 [ 459.223242][T11694] should_fail_ex.cold+0x5/0xa [ 459.223265][T11694] should_failslab+0xc2/0x120 [ 459.223286][T11694] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 459.223316][T11694] ? skb_clone+0x190/0x400 [ 459.223337][T11694] skb_clone+0x190/0x400 [ 459.223356][T11694] netlink_deliver_tap+0xaed/0xcc0 [ 459.223380][T11694] netlink_unicast+0x70c/0x870 [ 459.223402][T11694] ? __pfx_netlink_unicast+0x10/0x10 [ 459.223421][T11694] ? __alloc_skb+0x5b7/0x710 [ 459.223459][T11694] netlink_ack+0x655/0xb80 [ 459.223484][T11694] netlink_rcv_skb+0x333/0x420 [ 459.223504][T11694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.223524][T11694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.223560][T11694] ? netlink_deliver_tap+0x1ae/0xcc0 [ 459.223598][T11694] netlink_unicast+0x5aa/0x870 [ 459.223635][T11694] ? __pfx_netlink_unicast+0x10/0x10 [ 459.223675][T11694] netlink_sendmsg+0x8b0/0xda0 [ 459.223699][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.223718][T11694] ? __import_iovec+0x1d2/0x640 [ 459.223744][T11694] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 459.223768][T11694] ____sys_sendmsg+0x9e1/0xb70 [ 459.223790][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.223811][T11694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.223839][T11694] ? __pfx_futex_wake_mark+0x10/0x10 [ 459.223872][T11694] ___sys_sendmsg+0x190/0x1e0 [ 459.223898][T11694] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.223948][T11694] __sys_sendmsg+0x170/0x220 [ 459.223967][T11694] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.223984][T11694] ? __x64_sys_futex+0x34f/0x4d0 [ 459.224022][T11694] do_syscall_64+0x106/0xf80 [ 459.224041][T11694] ? clear_bhb_loop+0x40/0x90 [ 459.224063][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.224082][T11694] RIP: 0033:0x7fa7b0b9c819 [ 459.224097][T11694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.224115][T11694] RSP: 002b:00007fa7b1a78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.224134][T11694] RAX: ffffffffffffffda RBX: 00007fa7b0e15fa0 RCX: 00007fa7b0b9c819 [ 459.224145][T11694] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 459.224156][T11694] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 459.224167][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.224185][T11694] R13: 00007fa7b0e16038 R14: 00007fa7b0e15fa0 R15: 00007ffe089d8ce8 [ 459.224208][T11694] [ 459.986322][T11704] ubi0: attaching mtd0 [ 459.991652][T11704] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 460.022354][T11704] eraseblock attaching information dump: [ 460.029673][T11704] ec 1 [ 460.035959][T11704] pnum 0 [ 460.049746][T11704] lnum 0 [ 460.055778][T11704] scrub 0 [ 460.059113][T11704] sqnum 1 [ 460.069344][T11704] Volume identifier header dump: [ 460.090937][T11704] magic 55424921 [ 460.111277][T11704] version 1 [ 460.120068][T11704] vol_type 1 [ 460.130215][T11704] copy_flag 0 [ 460.140349][T11704] compat 5 [ 460.152591][T11704] vol_id 2147479551 [ 460.156806][T11704] lnum 0 [ 460.160194][T11704] data_size 0 [ 460.216499][T11704] used_ebs 0 [ 460.220032][T11704] data_pad 0 [ 460.252412][T11704] sqnum 1 [ 460.256125][T11704] hdr_crc 65b3bd2d [ 460.262378][T11704] Volume identifier header hexdump: [ 460.311123][T11704] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 460.346991][T11706] ubi0: attaching mtd0 [ 460.361815][T11706] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 460.396786][T11706] eraseblock attaching information dump: [ 460.419306][T11706] ec 1 [ 460.429560][T11706] pnum 0 [ 460.440160][T11706] lnum 0 [ 460.455097][T11706] scrub 0 [ 460.465213][T11706] sqnum 1 [ 460.476649][T11706] Volume identifier header dump: [ 460.492432][T11706] magic 55424921 [ 460.510310][T11706] version 1 [ 460.521329][T11706] vol_type 1 [ 460.530276][T11706] copy_flag 0 [ 460.538019][T11706] compat 5 [ 460.548155][T11706] vol_id 2147479551 [ 460.558300][T11706] lnum 0 [ 460.562439][T11706] data_size 0 [ 460.569859][T11706] used_ebs 0 [ 460.582300][T11706] data_pad 0 [ 460.585914][T11706] sqnum 1 [ 460.589408][T11706] hdr_crc 65b3bd2d [ 460.661044][T11706] Volume identifier header hexdump: [ 460.767377][T11706] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 461.159620][T11719] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 461.168030][T11719] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 463.084771][T10831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 463.094106][T10831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 463.102734][T10831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 463.110724][T10831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 463.118676][T10831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 463.409161][T11760] bridge_slave_1: left allmulticast mode [ 463.417055][T11760] bridge_slave_1: left promiscuous mode [ 463.426132][T11760] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.884484][T11751] chnl_net:caif_netlink_parms(): no params data found [ 463.943117][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 464.341306][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.349723][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.359905][T11751] bridge_slave_0: entered allmulticast mode [ 464.374889][T11751] bridge_slave_0: entered promiscuous mode [ 464.389014][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.448410][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.473334][T11751] bridge_slave_1: entered allmulticast mode [ 464.524949][T11751] bridge_slave_1: entered promiscuous mode [ 464.620448][T11751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.648485][T11751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.760847][T11751] team0: Port device team_slave_0 added [ 464.826396][T11751] team0: Port device team_slave_1 added [ 464.937091][T11751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.972263][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.066173][T11751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.119427][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 465.148218][T11751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.164506][T10831] Bluetooth: hci9: command tx timeout [ 465.204002][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.355810][T11751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.425495][T11785] openvswitch: HfR: Dropping previously announced user features [ 465.597005][T11751] hsr_slave_0: entered promiscuous mode [ 465.609948][T11751] hsr_slave_1: entered promiscuous mode [ 465.620726][T11751] debugfs: 'hsr0' already exists in 'hsr' [ 465.646876][T11751] Cannot create hsr debugfs directory [ 466.706967][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 467.243479][T10831] Bluetooth: hci9: command tx timeout [ 467.372243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 469.327054][T10831] Bluetooth: hci9: command tx timeout [ 469.713850][T11872] FAULT_INJECTION: forcing a failure. [ 469.713850][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 469.772436][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.1.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.772484][T11872] Tainted: [L]=SOFTLOCKUP [ 469.772495][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.772510][T11872] Call Trace: [ 469.772520][T11872] [ 469.772530][T11872] dump_stack_lvl+0x100/0x190 [ 469.772579][T11872] should_fail_ex.cold+0x5/0xa [ 469.772607][T11872] should_failslab+0xc2/0x120 [ 469.772635][T11872] __kmalloc_cache_noprof+0x7a/0x6f0 [ 469.772674][T11872] ? proc_thread_self_get_link+0x1a6/0x210 [ 469.772730][T11872] proc_thread_self_get_link+0x1a6/0x210 [ 469.772779][T11872] pick_link+0xac2/0x13c0 [ 469.772816][T11872] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 469.772862][T11872] step_into_slowpath+0x9ba/0xf90 [ 469.772915][T11872] ? __pfx_step_into_slowpath+0x10/0x10 [ 469.772981][T11872] ? lookup_fast+0x2da/0x600 [ 469.773024][T11872] ? inode_permission+0x374/0x620 [ 469.773074][T11872] link_path_walk+0xf28/0x1cc0 [ 469.773137][T11872] path_lookupat+0x74/0xc40 [ 469.773188][T11872] path_openat+0x1b08/0x31a0 [ 469.773220][T11872] ? kasan_save_stack+0x3f/0x50 [ 469.773247][T11872] ? kasan_save_stack+0x30/0x50 [ 469.773273][T11872] ? kasan_save_track+0x14/0x30 [ 469.773302][T11872] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 469.773348][T11872] ? do_getname+0x35/0x390 [ 469.773385][T11872] ? do_sys_openat2+0xc5/0x1e0 [ 469.773434][T11872] ? __pfx_path_openat+0x10/0x10 [ 469.773484][T11872] do_file_open+0x20e/0x430 [ 469.773522][T11872] ? __pfx_do_file_open+0x10/0x10 [ 469.773585][T11872] ? alloc_fd+0x476/0x790 [ 469.773620][T11872] ? do_getname+0x191/0x390 [ 469.773664][T11872] do_sys_openat2+0x10d/0x1e0 [ 469.773707][T11872] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.773753][T11872] ? __fget_files+0x21f/0x3d0 [ 469.773793][T11872] __x64_sys_openat+0x12d/0x210 [ 469.773838][T11872] ? __pfx___x64_sys_openat+0x10/0x10 [ 469.773894][T11872] do_syscall_64+0x106/0xf80 [ 469.773933][T11872] ? clear_bhb_loop+0x40/0x90 [ 469.773972][T11872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.774003][T11872] RIP: 0033:0x7fa7b0b9c819 [ 469.774030][T11872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.774059][T11872] RSP: 002b:00007fa7b1a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.774090][T11872] RAX: ffffffffffffffda RBX: 00007fa7b0e15fa0 RCX: 00007fa7b0b9c819 [ 469.774111][T11872] RDX: 0000000000200800 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 469.774132][T11872] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 469.774150][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.774169][T11872] R13: 00007fa7b0e16038 R14: 00007fa7b0e15fa0 R15: 00007ffe089d8ce8 [ 469.774209][T11872] [ 471.403283][T11517] Bluetooth: hci9: command tx timeout [ 472.123579][T10831] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 473.443444][T11937] sctp: [Deprecated]: syz.7.1426 (pid 11937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.443444][T11937] Use struct sctp_sack_info instead [ 473.524617][T11942] __vm_enough_memory: pid: 11942, comm: syz.9.1427, bytes: 9223372036854775808 not enough memory for the allocation [ 473.833812][T11951] vivid-007: ================= START STATUS ================= [ 473.842753][T11951] vivid-007: Generate PTS: true [ 473.847719][T11951] vivid-007: Generate SCR: true [ 473.855147][T11951] tpg source WxH: 320x240 (Y'CbCr) [ 473.861463][T11951] tpg field: 1 [ 473.868757][T11951] tpg crop: (0,0)/320x240 [ 473.874704][T11951] tpg compose: (0,0)/320x240 [ 473.880614][T11951] tpg colorspace: 8 [ 473.889611][T11951] tpg transfer function: 0/0 [ 473.897221][T11951] tpg Y'CbCr encoding: 0/0 [ 473.903348][T11951] tpg quantization: 0/0 [ 473.908749][T11951] tpg RGB range: 0/2 [ 473.914244][T11951] vivid-007: ================== END STATUS ================== [ 474.393306][T11960] FAULT_INJECTION: forcing a failure. [ 474.393306][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 474.407544][T11960] CPU: 0 UID: 0 PID: 11960 Comm: syz.9.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.407596][T11960] Tainted: [L]=SOFTLOCKUP [ 474.407608][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 474.407626][T11960] Call Trace: [ 474.407637][T11960] [ 474.407649][T11960] dump_stack_lvl+0x100/0x190 [ 474.407703][T11960] should_fail_ex.cold+0x5/0xa [ 474.407744][T11960] should_failslab+0xc2/0x120 [ 474.407782][T11960] __kmalloc_cache_noprof+0x7a/0x6f0 [ 474.407826][T11960] ? proc_thread_self_get_link+0x1a6/0x210 [ 474.407885][T11960] proc_thread_self_get_link+0x1a6/0x210 [ 474.407936][T11960] pick_link+0xac2/0x13c0 [ 474.407991][T11960] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 474.408052][T11960] step_into_slowpath+0x9ba/0xf90 [ 474.408111][T11960] ? __pfx_step_into_slowpath+0x10/0x10 [ 474.408185][T11960] ? lookup_fast+0x2da/0x600 [ 474.408257][T11960] ? inode_permission+0x374/0x620 [ 474.408306][T11960] link_path_walk+0xf28/0x1cc0 [ 474.408379][T11960] path_lookupat+0x74/0xc40 [ 474.408437][T11960] path_openat+0x1b08/0x31a0 [ 474.408467][T11960] ? kasan_save_stack+0x3f/0x50 [ 474.408493][T11960] ? kasan_save_stack+0x30/0x50 [ 474.408534][T11960] ? kasan_save_track+0x14/0x30 [ 474.408571][T11960] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 474.408623][T11960] ? do_getname+0x35/0x390 [ 474.408662][T11960] ? do_sys_openat2+0xc5/0x1e0 [ 474.408712][T11960] ? __pfx_path_openat+0x10/0x10 [ 474.408763][T11960] do_file_open+0x20e/0x430 [ 474.408801][T11960] ? __pfx_do_file_open+0x10/0x10 [ 474.408866][T11960] ? alloc_fd+0x476/0x790 [ 474.408904][T11960] ? do_getname+0x191/0x390 [ 474.408946][T11960] do_sys_openat2+0x10d/0x1e0 [ 474.408989][T11960] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.409035][T11960] ? __fget_files+0x21f/0x3d0 [ 474.409074][T11960] __x64_sys_openat+0x12d/0x210 [ 474.409119][T11960] ? __pfx___x64_sys_openat+0x10/0x10 [ 474.409185][T11960] do_syscall_64+0x106/0xf80 [ 474.409219][T11960] ? clear_bhb_loop+0x40/0x90 [ 474.409256][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.409288][T11960] RIP: 0033:0x7f2bbf59c819 [ 474.409314][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.409344][T11960] RSP: 002b:00007f2bc04a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.409375][T11960] RAX: ffffffffffffffda RBX: 00007f2bbf815fa0 RCX: 00007f2bbf59c819 [ 474.409395][T11960] RDX: 0000000000200800 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 474.409416][T11960] RBP: 00007f2bbf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 474.409437][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.409456][T11960] R13: 00007f2bbf816038 R14: 00007f2bbf815fa0 R15: 00007ffdbb3a9a58 [ 474.409499][T11960] [ 475.526825][T11962] FAULT_INJECTION: forcing a failure. [ 475.526825][T11962] name failslab, interval 1, probability 0, space 0, times 0 [ 475.542859][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.9.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.542890][T11962] Tainted: [L]=SOFTLOCKUP [ 475.542897][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.542908][T11962] Call Trace: [ 475.542915][T11962] [ 475.542923][T11962] dump_stack_lvl+0x100/0x190 [ 475.542956][T11962] should_fail_ex.cold+0x5/0xa [ 475.542979][T11962] should_failslab+0xc2/0x120 [ 475.543001][T11962] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 475.543031][T11962] ? proc_alloc_inode+0x25/0x200 [ 475.543063][T11962] ? __pfx_proc_alloc_inode+0x10/0x10 [ 475.543097][T11962] proc_alloc_inode+0x25/0x200 [ 475.543125][T11962] alloc_inode+0x68/0x250 [ 475.543152][T11962] new_inode+0x22/0x1c0 [ 475.543180][T11962] proc_get_inode+0x1d/0x780 [ 475.543199][T11962] proc_lookup_de+0x236/0x360 [ 475.543222][T11962] proc_lookup+0xcf/0x110 [ 475.543241][T11962] proc_root_lookup+0x3b/0x70 [ 475.543260][T11962] __lookup_slow+0x251/0x460 [ 475.543287][T11962] ? __pfx___lookup_slow+0x10/0x10 [ 475.543330][T11962] lookup_slow+0x50/0x70 [ 475.543356][T11962] link_path_walk+0x1377/0x1cc0 [ 475.543393][T11962] path_openat+0x1be/0x31a0 [ 475.543412][T11962] ? kasan_save_stack+0x3f/0x50 [ 475.543429][T11962] ? kasan_save_stack+0x30/0x50 [ 475.543445][T11962] ? kasan_save_track+0x14/0x30 [ 475.543461][T11962] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 475.543497][T11962] ? __pfx_path_openat+0x10/0x10 [ 475.543526][T11962] do_file_open+0x20e/0x430 [ 475.543548][T11962] ? __pfx_do_file_open+0x10/0x10 [ 475.543585][T11962] ? alloc_fd+0x476/0x790 [ 475.543606][T11962] ? do_getname+0x191/0x390 [ 475.543632][T11962] do_sys_openat2+0x10d/0x1e0 [ 475.543658][T11962] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.543692][T11962] __x64_sys_openat+0x12d/0x210 [ 475.543718][T11962] ? __pfx___x64_sys_openat+0x10/0x10 [ 475.543753][T11962] do_syscall_64+0x106/0xf80 [ 475.543778][T11962] ? clear_bhb_loop+0x40/0x90 [ 475.543801][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.543820][T11962] RIP: 0033:0x7f2bbf59c819 [ 475.543836][T11962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.543860][T11962] RSP: 002b:00007f2bc04a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.543879][T11962] RAX: ffffffffffffffda RBX: 00007f2bbf815fa0 RCX: 00007f2bbf59c819 [ 475.543890][T11962] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 475.543902][T11962] RBP: 00007f2bbf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 475.543912][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.543923][T11962] R13: 00007f2bbf816038 R14: 00007f2bbf815fa0 R15: 00007ffdbb3a9a58 [ 475.543947][T11962] /[ 476.535128][T11972] sctp: [Deprecated]: syz.7.1437 (pid 11972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.535128][T11972] Use struct sctp_sack_info instead [ 476.606931][T11171] udevd[11171]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 476.621140][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1440'. [ 478.530103][T12015] ubi0: attaching mtd0 [ 478.536412][T12015] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 478.552274][T12015] eraseblock attaching information dump: [ 478.558223][T12015] ec 1 [ 478.561541][T12015] pnum 0 [ 478.610561][T12015] lnum 0 [ 478.622363][T12015] scrub 0 [ 478.636701][T12015] sqnum 1 [ 478.650249][T12015] Volume identifier header dump: [ 478.673587][T12015] magic 55424921 [ 478.680656][T12015] version 1 [ 478.686321][T12015] vol_type 1 [ 478.689722][T12015] copy_flag 0 [ 478.711650][T12015] compat 5 [ 478.729811][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 478.775366][T12022] openvswitch: HfR: Dropping previously announced user features [ 478.792351][T12015] vol_id 2147479551 [ 478.802647][T12015] lnum 0 [ 478.806147][T12015] data_size 0 [ 478.809534][T12015] used_ebs 0 [ 478.813978][T12015] data_pad 0 [ 478.817435][T12015] sqnum 1 [ 478.820881][T12015] hdr_crc 65b3bd2d [ 478.825125][T12015] Volume identifier header hexdump: [ 479.145345][T12015] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 479.335827][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1454'. [ 479.680377][T12037] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1457'. [ 479.692404][T12036] block nbd4: Unsupported socket: should be TCP or UNIX. [ 480.005163][T12044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'. [ 480.419699][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1460'. [ 480.622979][T12053] FAULT_INJECTION: forcing a failure. [ 480.622979][T12053] name fail_futex, interval 1, probability 0, space 0, times 0 [ 480.643713][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.7.1461 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.643764][T12053] Tainted: [L]=SOFTLOCKUP [ 480.643775][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 480.643793][T12053] Call Trace: [ 480.643804][T12053] [ 480.643816][T12053] dump_stack_lvl+0x100/0x190 [ 480.643870][T12053] should_fail_ex.cold+0x5/0xa [ 480.643908][T12053] get_futex_key+0x1d2/0x1620 [ 480.643953][T12053] ? __pfx_get_futex_key+0x10/0x10 [ 480.644007][T12053] ? psi_group_change+0x457/0xa20 [ 480.644055][T12053] ? find_held_lock+0x2b/0x80 [ 480.644092][T12053] futex_wait_setup+0x83/0x510 [ 480.644153][T12053] __futex_wait+0x19f/0x300 [ 480.644205][T12053] ? __pfx___futex_wait+0x10/0x10 [ 480.644250][T12053] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 480.644301][T12053] ? lockdep_hardirqs_on+0x78/0x100 [ 480.644339][T12053] ? __pfx_futex_wake_mark+0x10/0x10 [ 480.644395][T12053] ? find_held_lock+0x2b/0x80 [ 480.644425][T12053] ? futex_wake+0x456/0x530 [ 480.644481][T12053] futex_wait+0xed/0x380 [ 480.644530][T12053] ? __pfx_futex_wait+0x10/0x10 [ 480.644589][T12053] ? putname+0xb1/0x110 [ 480.644623][T12053] ? kmem_cache_free+0x124/0x6a0 [ 480.644676][T12053] do_futex+0x1ef/0x350 [ 480.644718][T12053] ? __pfx_do_futex+0x10/0x10 [ 480.644758][T12053] ? __pfx_do_sys_openat2+0x10/0x10 [ 480.644805][T12053] ? __fget_files+0x21f/0x3d0 [ 480.644842][T12053] __x64_sys_futex+0x34f/0x4d0 [ 480.644887][T12053] ? __x64_sys_openat+0x12d/0x210 [ 480.644932][T12053] ? __pfx___x64_sys_futex+0x10/0x10 [ 480.644997][T12053] do_syscall_64+0x106/0xf80 [ 480.645029][T12053] ? clear_bhb_loop+0x40/0x90 [ 480.645067][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.645101][T12053] RIP: 0033:0x7f9318f9c819 [ 480.645128][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.645159][T12053] RSP: 002b:00007f9319e8e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 480.645191][T12053] RAX: ffffffffffffffda RBX: 00007f9319215fa8 RCX: 00007f9318f9c819 [ 480.645212][T12053] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9319215fa8 [ 480.645232][T12053] RBP: 00007f9319215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 480.645251][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.645269][T12053] R13: 00007f9319216038 R14: 00007ffd1c537060 R15: 00007ffd1c537148 [ 480.645312][T12053] [ 481.038749][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1462'. [ 481.483300][T12064] HfR: entered promiscuous mode [ 481.496476][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1466'. [ 481.539449][T12064] HfR: left promiscuous mode [ 482.333942][T12079] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1470'. [ 482.983788][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1475'. [ 483.171287][T12103] WARNING! power/level is deprecated; use power/control instead [ 483.287797][T12108] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 483.635470][T12114] FAULT_INJECTION: forcing a failure. [ 483.635470][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 483.651269][T12114] CPU: 1 UID: 0 PID: 12114 Comm: syz.1.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.651319][T12114] Tainted: [L]=SOFTLOCKUP [ 483.651331][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.651352][T12114] Call Trace: [ 483.651362][T12114] [ 483.651374][T12114] dump_stack_lvl+0x100/0x190 [ 483.651428][T12114] should_fail_ex.cold+0x5/0xa [ 483.651466][T12114] should_failslab+0xc2/0x120 [ 483.651501][T12114] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 483.651549][T12114] ? proc_alloc_inode+0x25/0x200 [ 483.651594][T12114] ? d_alloc_parallel+0x864/0x14e0 [ 483.651642][T12114] ? __pfx_proc_alloc_inode+0x10/0x10 [ 483.651699][T12114] proc_alloc_inode+0x25/0x200 [ 483.651744][T12114] alloc_inode+0x68/0x250 [ 483.651786][T12114] new_inode+0x22/0x1c0 [ 483.651831][T12114] proc_get_inode+0x1d/0x780 [ 483.651863][T12114] proc_lookup_de+0x236/0x360 [ 483.651900][T12114] proc_lookup+0xcf/0x110 [ 483.651930][T12114] __lookup_slow+0x251/0x460 [ 483.651971][T12114] ? __pfx___lookup_slow+0x10/0x10 [ 483.652036][T12114] ? __d_lookup+0x266/0x4a0 [ 483.652092][T12114] lookup_slow+0x50/0x70 [ 483.652136][T12114] link_path_walk+0x1377/0x1cc0 [ 483.652202][T12114] path_openat+0x1be/0x31a0 [ 483.652234][T12114] ? kasan_save_stack+0x3f/0x50 [ 483.652260][T12114] ? kasan_save_stack+0x30/0x50 [ 483.652287][T12114] ? kasan_save_track+0x14/0x30 [ 483.652315][T12114] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 483.652373][T12114] ? __pfx_path_openat+0x10/0x10 [ 483.652423][T12114] do_file_open+0x20e/0x430 [ 483.652460][T12114] ? __pfx_do_file_open+0x10/0x10 [ 483.652525][T12114] ? alloc_fd+0x476/0x790 [ 483.652562][T12114] ? do_getname+0x191/0x390 [ 483.652606][T12114] do_sys_openat2+0x10d/0x1e0 [ 483.652651][T12114] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.652719][T12114] __x64_sys_openat+0x12d/0x210 [ 483.652766][T12114] ? __pfx___x64_sys_openat+0x10/0x10 [ 483.652827][T12114] do_syscall_64+0x106/0xf80 [ 483.652859][T12114] ? clear_bhb_loop+0x40/0x90 [ 483.652899][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.652930][T12114] RIP: 0033:0x7fa7b0b9c819 [ 483.652957][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.652987][T12114] RSP: 002b:00007fa7b1a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.653020][T12114] RAX: ffffffffffffffda RBX: 00007fa7b0e15fa0 RCX: 00007fa7b0b9c819 [ 483.653042][T12114] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 483.653063][T12114] RBP: 00007fa7b0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 483.653082][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.653100][T12114] R13: 00007fa7b0e16038 R14: 00007fa7b0e15fa0 R15: 00007ffe089d8ce8 [ 483.653143][T12114] [ 486.136244][T12156] sctp: [Deprecated]: syz.1.1483 (pid 12156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.136244][T12156] Use struct sctp_sack_info instead [ 486.393704][T12160] process 'syz.1.1484' launched '/dev/fd/4' with NULL argv: empty string added [ 487.555968][T12170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 488.958160][T12180] zswap: compressor not available [ 489.036520][T12180] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 492.452661][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1494'. [ 497.248269][T11517] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 497.259184][T11517] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 497.282519][T11517] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 497.313482][T11517] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 497.323672][T11517] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 497.879714][T12245] chnl_net:caif_netlink_parms(): no params data found [ 498.113036][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.125540][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.143558][T12245] bridge_slave_0: entered allmulticast mode [ 498.155007][T12245] bridge_slave_0: entered promiscuous mode [ 498.180080][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.195375][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.215206][T12245] bridge_slave_1: entered allmulticast mode [ 498.233322][T12245] bridge_slave_1: entered promiscuous mode [ 498.311983][T12245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.337343][T12245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.423473][T12245] team0: Port device team_slave_0 added [ 498.435569][T12245] team0: Port device team_slave_1 added [ 498.537750][T12245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.562281][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.652621][T12245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.684680][T12245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.691680][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.855896][T12245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.894051][T10831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 498.933123][T10831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 498.943909][T10831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 498.953345][T10831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 498.983065][T10831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 499.042026][T12245] hsr_slave_0: entered promiscuous mode [ 499.073719][T12245] hsr_slave_1: entered promiscuous mode [ 499.079931][T12245] debugfs: 'hsr0' already exists in 'hsr' [ 499.111682][T12245] Cannot create hsr debugfs directory [ 499.406483][T10831] Bluetooth: hci10: command tx timeout [ 499.806913][T12254] chnl_net:caif_netlink_parms(): no params data found [ 500.102914][T12254] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.110143][T12254] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.124470][T12254] bridge_slave_0: entered allmulticast mode [ 500.143242][T12254] bridge_slave_0: entered promiscuous mode [ 500.153272][T12254] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.169065][T12254] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.192822][T12254] bridge_slave_1: entered allmulticast mode [ 500.201063][T12254] bridge_slave_1: entered promiscuous mode [ 500.280985][T12254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.306948][T12254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.399365][T12254] team0: Port device team_slave_0 added [ 500.425288][T12254] team0: Port device team_slave_1 added [ 500.486193][T12254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.509861][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.542858][T12254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.575034][T12254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.582121][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.622389][T12254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.765891][T12254] hsr_slave_0: entered promiscuous mode [ 500.772871][T12254] hsr_slave_1: entered promiscuous mode [ 500.779105][T12254] debugfs: 'hsr0' already exists in 'hsr' [ 500.822310][T12254] Cannot create hsr debugfs directory [ 501.087033][T10831] Bluetooth: hci11: command tx timeout [ 501.494167][T10831] Bluetooth: hci10: command tx timeout [ 502.072822][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.079187][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.322384][T12267] mmap: syz.1.1504 (12267) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 502.470182][ T30] audit: type=1800 audit(1775767825.066:31): pid=12271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1505" name="discovery_nqn" dev="configfs" ino=84841 res=0 errno=0 [ 503.162587][T10831] Bluetooth: hci11: command tx timeout [ 503.562709][T10831] Bluetooth: hci10: command tx timeout [ 504.058632][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 505.243497][T10831] Bluetooth: hci11: command tx timeout [ 505.642332][T11517] Bluetooth: hci10: command tx timeout [ 507.322694][T11517] Bluetooth: hci11: command tx timeout [ 519.343277][T10831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 519.354425][T10831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 519.363088][T10831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 519.373607][T10831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 519.384731][T10831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 519.663248][T12297] chnl_net:caif_netlink_parms(): no params data found [ 519.833606][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.842571][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.849873][T12297] bridge_slave_0: entered allmulticast mode [ 519.868636][T12297] bridge_slave_0: entered promiscuous mode [ 519.903140][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.910506][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.918063][T12297] bridge_slave_1: entered allmulticast mode [ 519.943810][T12297] bridge_slave_1: entered promiscuous mode [ 520.013773][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.035248][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.068247][T12297] team0: Port device team_slave_0 added [ 520.089996][T12297] team0: Port device team_slave_1 added [ 520.126535][T12297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.133801][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.161769][T12297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.174565][T12297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.181554][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.216252][T12297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.278524][T12297] hsr_slave_0: entered promiscuous mode [ 520.293462][T12297] hsr_slave_1: entered promiscuous mode [ 520.299651][T12297] debugfs: 'hsr0' already exists in 'hsr' [ 520.305758][T12297] Cannot create hsr debugfs directory [ 521.482595][T10831] Bluetooth: hci12: command tx timeout [ 523.562431][T10831] Bluetooth: hci12: command tx timeout [ 523.745058][T11517] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 523.754845][T11517] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 523.767360][T11517] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 523.789958][T11517] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 523.804179][T11517] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 524.197612][T12307] chnl_net:caif_netlink_parms(): no params data found [ 524.348013][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.362535][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.369846][T12307] bridge_slave_0: entered allmulticast mode [ 524.384109][T12307] bridge_slave_0: entered promiscuous mode [ 524.394280][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.406826][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.422523][T12307] bridge_slave_1: entered allmulticast mode [ 524.429802][T12307] bridge_slave_1: entered promiscuous mode [ 524.477280][T12307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.509672][T12307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.569698][T12307] team0: Port device team_slave_0 added [ 524.584819][T12307] team0: Port device team_slave_1 added [ 524.635269][T12307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.643138][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.675048][T12307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.695194][T12307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.714610][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.763085][T12307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.864605][T12307] hsr_slave_0: entered promiscuous mode [ 524.871138][T12307] hsr_slave_1: entered promiscuous mode [ 524.877924][T12307] debugfs: 'hsr0' already exists in 'hsr' [ 524.886310][T12307] Cannot create hsr debugfs directory [ 525.642325][T10831] Bluetooth: hci12: command tx timeout [ 525.882605][T10831] Bluetooth: hci13: command tx timeout [ 527.723687][T10831] Bluetooth: hci12: command tx timeout [ 527.962308][T10831] Bluetooth: hci13: command tx timeout [ 530.042465][T10831] Bluetooth: hci13: command tx timeout [ 532.124173][T10831] Bluetooth: hci13: command tx timeout [ 536.952379][T10822] unregister_netdevice: waiting for erspan0 to become free. Usage count = 9 [ 536.961431][T10822] unregister_netdevice: waiting for gretap0 to become free. Usage count = 3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 539.975678][T10818] Bluetooth: hci5: command 0x0406 tx timeout [ 543.952403][T10959] unregister_netdevice: waiting for erspan0 to become free. Usage count = 9 [ 543.961130][T10959] unregister_netdevice: waiting for gretap0 to become free. Usage count = 9