last executing test programs: 2m24.186781261s ago: executing program 0 (id=1153): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b542, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x5, 0x4000000009, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0xab1e, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/hwsim0/queues/tx-0/xps_cpus\x00', 0x4a0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sysfs$auto(0x2, 0x17, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f00000001c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x4) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, 0x0, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) socketpair$auto(0x7ed, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x6) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x2, 0x0) 2m23.164011136s ago: executing program 0 (id=1157): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000600), r0) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @remote}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0xdfa9}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'hsr0\x00'}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048805) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2m17.193199338s ago: executing program 2 (id=1174): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) setfsuid$auto(0xee00) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, 0x0, 0x24040000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0xa7) r2 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) read$auto_nst_seq_fops_netdebug(r2, &(0x7f0000000000)=""/219, 0xdb) mmap$auto(0x10001, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="54e3fce5a45dae8fd7ed2b89edcb1e0000", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000010001a80080001008703000004000480"], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 2m16.417923906s ago: executing program 2 (id=1176): mmap$auto(0x2000000000, 0x202000d, 0x8, 0xeb1, 0xffffffffffffffff, 0x3) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x1000000000001, 0x2020009, 0x3, 0x19, 0xfffffffffffffffa, 0x8004) dup2$auto(r0, r0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) listen$auto(0x3, 0x81) prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x7) unshare$auto(0x20000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0x28102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/bInterfaceSubClass\x00', 0x8a784, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) socket(0x18, 0xa, 0x1) r3 = socket(0x18, 0x80000, 0x7) setsockopt$auto(r3, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x98\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "2c55000000ac5600"}, 0x66) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m16.017698113s ago: executing program 2 (id=1180): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/sctp/rto_alpha_exp_divisor\x00', 0x900, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000", @ANYBLOB="7600279e", @ANYRES16=r1, @ANYRES32=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80801, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x40049409, 0x0) 2m15.497460695s ago: executing program 2 (id=1184): r0 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=@bpf_attr_0={0xf, 0x6, 0x2, 0x7fffffff, 0x8, 0xffffffffffffffff, 0x4, "089c3cd64d0a26432cb4c0f12af321c5", 0x0, 0xffffffffffffffff, 0x5, 0x7fff, 0x3ff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}, 0xb) r6 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/sessionid\x00', 0x0, 0x0) close_range$auto(r5, r6, 0x4) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x40, 0x0) read$auto_nvmf_dev_fops_fabrics(r1, &(0x7f0000000140)=""/36, 0x24) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r4) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x233ea436}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8060000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r8, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffc01}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4c2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc000}, 0x40004) read$auto_proc_sessionid_operations_base(r1, &(0x7f00000004c0)=""/129, 0x81) fsconfig$auto_FSCONFIG_CMD_CREATE_EXCL(r1, 0x8, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="cff87bee8c592a0902dcb4f66e87e1dc589cb7c14a1260f4e5277a41867137f1337ce99a1ae156efb795a0a4af4246ac73dfef70435102fd605c8fd06825e6e2faf2b1807a8a282902b60feb9c2284ced59b6ea986870cc8c6d98284e17aec9fb467ab0fd7598acc3b890ddd88c88af0b9c8184cc5bc1efdbc048f338f54a7e5cf3654efc218637feb194bb8f0079d3c0aa8e33f86954409e94975e82ffb731cd8ddaada10a9eb06a12591195442e85e7f08f2f78d9b745bf99a0eb0c4f77b9549608dcb4c4724df725d6bd692b82259db5a31f66465db24093d9a", 0xdc) r10 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) lseek$auto(r10, 0x10001, 0x9) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_NONE={0x34, 0x0, "30b750bfc9bf3bc42871a824c55d22e99f846834159295d091dfc12376040644ab1da6c97fc55a39120c51855ae59f16"}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0xd38, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x8}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xf1d7}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0xcb}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x40}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x9125}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x8}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x3}, @ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r4) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1fc, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd6, 0xbe, "35562e48f74dd33ddb3c1d896b8e48a773c16d5df858d8b7e4018e4695f775895400abb7c8fb7018e24291df602c9be44d2bd5cf3d75b48e64e778c47df09b564eb453406a4cc21dff235f0ddab3754e06c5600cfb3a3de4c5f8f82d1ac9e95ff7ccfb5316d123fd34ece10ce6f401fe7da2e9744013d47128423fe73f04e0d0520623c0c8d8b26c9de3ced022ba36706eee13ea8528ceb41d68e48a8bba7b3d38cc50b66bab4d58f7688c6599591288b2bca02737044e6e8c96784f4790d4aedc6971671fe3cbec4accdab5db625d62ef6e"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1b60}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x29, 0x129, "9a8eeebeee2d5ecb535d653258c41564c5d7e246e129d3310872421fe3f91cde938de40160"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x6e, 0xc5, "00fc7d422478e6195fa99ee7957b49a8bd948ee648d68a7dd3656313860fe14ac73ae84a878efdb36d2f3a834bac2e7fadbcb31758fc22053d9ca08367c92d1d7e99c3c947432ec32e7ac75c92fa64d1249626ee662bacd890ac59c1b836261968d14cc93b61adfae4eb"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x55, 0x145, 0x0, 0x1, [@generic="ea30d0e2910916edfa215f81ebe0e1e82581f8bcbb2298fb73d0c4251d645105aaaea79a976181c5ae0e9934108ee1d9be6c3840256efe9a4a07ed4030410bc58b1e7c79146e2670653008bfb1d72da3ec"]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x240000d1) io_uring_register$auto_IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000c40)="ca5e725e3c08c06c72d488554b33a6df86ef0665328cee643ee3ea2d4f1f90c268f50693f51d6f320b53f533cdb6b1b709819086a38668cc42fa02bd89f9d0a0c38b6badb15d0de15f2106d4639b5210dc3ba34d827b72135bf6d5ea06d8b8cdc65747bcded72e90f5acdba8cdb8c48db851485032a0f04bcef37d285675493eaa9507581db25b2e5abb28c4a6e11eae1386a4828fc76f24daf7416286f28bba8e8e985fff689883da48e5000a1cfd5478", 0x30) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000d00), 0x101c00, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r11, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5e6}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x2c}}, 0x8001) r12 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000e80), r3) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r12, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x8001}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x3, 0x40, 0x7, 0x7520, 0x1, 0x8, 0x0, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r13 = getsockopt$auto(r6, 0x7d5355b2, 0x2, &(0x7f0000000fc0)='dvmrp1\x00', &(0x7f0000001000)=0x5) r14 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), r13) r15 = waitid$auto(0x8, r1, &(0x7f00000012c0)={@siginfo_0_0={0x4, 0x7, 0x9, @_sigfault={&(0x7f00000010c0)="0ed71760325f667df093d0d4f1bd987dcd45a77cde50cb14f01f6e36f98446bafd5bcdd9dace4fd14731038909af89845fd61fca8f256992677340cc42ce4ad51cf363fef3822e987b0b2933ad0e91d1cc5d840007827946624d9e5edb81059c8124379abd00b5605d9621af42421e0eaf22fe1de751167b859b7e6f116110b149c35b91cca7d20800eac5a9e11824d1870067ea34e519b52f327049d07a1714e93b061d1cc975dcf4a40218f8", @_addr_bnd={"1cc3a38559df602a", &(0x7f0000001180)="7399d33a3cd42f7bcf9139c5b8a5268703f3497125ed70da960b2498b4b310c2bd183ce40bedae91724a960ae2344249247d4309831a6250ca1bd4ac3def0e3d923af5214ba89e441835791612d8d47b52ef935271743cb0196db50bb18c4b4714dea536b810ea6760b31d6798bbc2045c8f3af2bb69f3ee5f301c90f4e88b22680d5f49d5c14792e81907cab70540a02a61861238580d2760bbb675c68a0e2c3501cb69783b407b685a46ea4269659f431da578fb37ce0fa0abab5db913c60f0ed1d09a61395c42f07b26c356ee9b2c96b065ed7d70c14d117d692120a83bc632", &(0x7f0000001280)="79d4a42bfa0804594291eff2bae1723257efc80985f278875122f7cc2e7770af0b8fe4d7d584c4"}}}}, 0x7, &(0x7f0000001340)={{0x7ff, 0x8}, {0x5d, 0x5}, 0x8, 0x63, 0x4, 0x2, 0x2, 0x5, 0xfffffffffffffff9, 0x800, 0x362a, 0x7ff, 0x2400000, 0x1, 0xa, 0x5a}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r3, &(0x7f0000001480)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r14, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_PID={0x8, 0x1c, r15}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044041}, 0x881) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x800000, 0x0) r16 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000001540), r3) sendmsg$auto_OVS_METER_CMD_FEATURES(r10, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r16, 0x332, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x2}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 2m15.302138664s ago: executing program 2 (id=1185): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) r2 = socket(0xa, 0x1, 0x84) close_range$auto(r2, 0xfffffffffffff000, 0xfff) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_fd, 0x1, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x86c, 0x81, 0x4}}, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x189880, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000005340), 0xffffffffffffffff) 2m14.321346319s ago: executing program 2 (id=1187): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "de6208d69c90e1beedda1aa1796c4536", "1aef09f057b8e6b77c3fa8db259056a2", "9649efcec118d7563fb34bf487b9bcf832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a3723933044e12e7aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c40316b50fd844ca966e25bae3ea9e0485911ca98dc015b6353fc8fdb75ed727190a9b59c895c6fd3f4857dd0a53acc9fc8eaaf65594d77abfb1a6b0788a2ac012a27f566ac119dff3c275c8e64a87699577b2ad1a822a23d98d5dcef24a81ad1005f9c69ebdea766c9795a8214e6804939ac95778ab3f25c3c4da43984d0b0f"}) write$auto(0xffffffffffffffff, &(0x7f0000000000)='9\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0Q\x88H\x95\v\xbe5\xc2os\xe2iq\x1d>,\xe8\xb3\x950\xca\xfc\x98\xbd\xff\x93&\x98\'\\\xf4\xfe\xed7\x8e.I\xc3HG\x8d\xa3m\'\xbf\xc4\xad:\x96z\xcb\x1b\xe6\xa9J\xcfL\xf9\xd5\x00\x00\x00\x00\x00\x00X\xa8\xdb\xcf\xbb?f\xa2\xd0\xa4\xc2#f\xce\x98\x98\xbf\x03\xb6\x1aaAT\x1b\xa9\xa0\xee\xa2K\xe6\xf2B\xdb|\xa1\x19\xf0#\xda\x1b\xaf\x94\xed\x17)\x9f}\x19\x81\x11|G\x97\f\xe2\xf2%AvH\x82~', 0x4) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, 0x0, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) open_tree$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1ff) r2 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x801, 0x0) write$auto_aoe_fops_aoechr(r2, 0x0, 0x0) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f00000000c0), 0xd85ac1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x10, r3, 0x8000) socket(0xa, 0x3, 0x101) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x218200, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) open(0x0, 0x62240, 0x154) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1000, 0x8000000000000001, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2m8.021968448s ago: executing program 32 (id=1157): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000600), r0) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @remote}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0xdfa9}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'hsr0\x00'}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048805) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1m59.259039377s ago: executing program 33 (id=1187): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "de6208d69c90e1beedda1aa1796c4536", "1aef09f057b8e6b77c3fa8db259056a2", "9649efcec118d7563fb34bf487b9bcf832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a3723933044e12e7aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c40316b50fd844ca966e25bae3ea9e0485911ca98dc015b6353fc8fdb75ed727190a9b59c895c6fd3f4857dd0a53acc9fc8eaaf65594d77abfb1a6b0788a2ac012a27f566ac119dff3c275c8e64a87699577b2ad1a822a23d98d5dcef24a81ad1005f9c69ebdea766c9795a8214e6804939ac95778ab3f25c3c4da43984d0b0f"}) write$auto(0xffffffffffffffff, &(0x7f0000000000)='9\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0Q\x88H\x95\v\xbe5\xc2os\xe2iq\x1d>,\xe8\xb3\x950\xca\xfc\x98\xbd\xff\x93&\x98\'\\\xf4\xfe\xed7\x8e.I\xc3HG\x8d\xa3m\'\xbf\xc4\xad:\x96z\xcb\x1b\xe6\xa9J\xcfL\xf9\xd5\x00\x00\x00\x00\x00\x00X\xa8\xdb\xcf\xbb?f\xa2\xd0\xa4\xc2#f\xce\x98\x98\xbf\x03\xb6\x1aaAT\x1b\xa9\xa0\xee\xa2K\xe6\xf2B\xdb|\xa1\x19\xf0#\xda\x1b\xaf\x94\xed\x17)\x9f}\x19\x81\x11|G\x97\f\xe2\xf2%AvH\x82~', 0x4) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, 0x0, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) open_tree$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1ff) r2 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x801, 0x0) write$auto_aoe_fops_aoechr(r2, 0x0, 0x0) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f00000000c0), 0xd85ac1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x10, r3, 0x8000) socket(0xa, 0x3, 0x101) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x218200, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) open(0x0, 0x62240, 0x154) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1000, 0x8000000000000001, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m48.273704687s ago: executing program 1 (id=1274): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r0, 0x5608, r0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x4, 0x2000000080000001, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b32, r0, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x109000, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0xfffffffffffffffe, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x40003, 0x2}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mbind$auto(0x7fffffffffffffff, 0x2, 0x9, 0x0, 0x100000001, 0x7fff) pread64$auto(r2, 0x0, 0x2, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = openat2$auto(0xffffffffffffff9c, 0x0, 0x0, 0xf6) mlockall$auto(0x800000000000005) ioctl$auto_TUNSETGROUP(r3, 0x400454ce, &(0x7f0000000040)=0xe9c) 1m47.37700077s ago: executing program 1 (id=1277): mmap$auto(0x0, 0x6, 0x4200000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112", 0x40000000001243}, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) syz_clone(0x1225080, &(0x7f00000001c0)="6f8312d53ff4454b4f6c9ccab1b41eaa686829ab00774931985f6c513d6816bf783175a30ca9fa8d0ccda1a072181ce9e58e08bed6fce34d80a3afadaba3b8cfa9ff5c5893a761fd96eb48698f517c3ebd91fb0f8bc5cca34332ab7f872a8d4f60bdea94b6ede67efb0c4cd3ec11b682335f9d584d70b420c308175f6b0cc692130370cdd6ca113727d4664809dfbd90fccf3707caec6e1d7371233b96ca124fa50ab0331f7f4e0ea72ea3eae08286a13b59be2f2daa7cabe4ab7d67e3641f1ca23d4cb0608e", 0xc6, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="74538063537f0b5a8ab600574ac95bc900f1accfea16348e9169897716e6938bf14682a073cd0e4f3e49b8e8951ca0f4ff0afd7d2f89b81882df2d671dd90715f4c682387809a563282e7624ea66751b41aee30575b5b9fe3b7967648d32d96ac1d312c84d9623930d17001e6db9f113affa42ee52ee85d27ae0e0437a9fc075cedd4924ccbd384e4286eed073f78ebc6f16c16cd5e82df7184d0f7e2ea85becc1054767d59942c77b799d4e4eb9a5849207bf2a52ee") setsockopt$auto_SO_MARK(r1, 0x81, 0x24, &(0x7f0000000080)='{%--\f+.\x00', 0x8001) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) 1m46.29970577s ago: executing program 1 (id=1282): openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x41a900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf2525000000050019009a000000060004000000000005002300080000003566ca2e7ce8e02b4f3aac6302c7fa3e483c90375aeb3d70008f14bae39cb08ee304e1ac864f6b96459a56356ead3f8f5d1b9f71288edad8ffe347074d3c703c0de2438c331b417fcdd06fb38aaac50b2505b4816590884e9cc67c2ce29515ca2b79c6b803bf98c6a1101619adeff3ae9226caa0e561e9d33b0d345f8e32c4f625926c97ca1c4075ac17714a09dbfbd8313ca91658e5bccad54b17d4803824f501943b540792e0363f7c2f08f2ee76834f08eea9d7a36a0c08c7e6216fbe48c0713d37478aa304fe0531be7c061c7f6e163e5041be29927f80ad0a764b"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) 1m44.949714413s ago: executing program 1 (id=1288): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x24084005) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) keyctl$auto_KEYCTL_UPDATE(0x2, 0xffffffffffffffff, 0x6, 0x1, 0x100000000) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x0, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m43.861610667s ago: executing program 4 (id=1293): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) (async, rerun: 64) mmap$auto(0x0, 0x1, 0x1000000df, 0xeb1, r0, 0x8000) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000380)={@raw=0x80, "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"}) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x4509, 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_HWSIM_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000001380)=ANY=[@ANYBLOB="4c00000036ae0532f7a1c90e24e3b79bea04aa660dd6225bf1ac9971f898794d320000003d45058de963257e181e9049000000008054fbcf8e926e427b1f54305d7a661b7f37f7b9794bcf5d80d53679f1a4e22bad8e02ab84e35895ca4ada6ea11e7aff5cb3c31a1ffab51900"/118, @ANYRES16=r6, @ANYBLOB="030426bd7000f9dbdb25020000001c000300afcc6f65fdd72aaaf6232ed2dd183765b06bef62cb03c3460a000100196f88149b0c000008000500050000000800060008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x3, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x4000005, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) (async, rerun: 32) clock_gettime$auto(0x1, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfbf}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) 1m43.776276182s ago: executing program 1 (id=1294): futex_requeue$auto(&(0x7f00000000c0)={0xfffffffffffffffa, 0x1, 0x7f}, 0x0, 0xfffffffe, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r5 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/current_tracer\x00', 0x81, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000500)=@bpf_attr_0={0x28000, 0xff, 0x3ff, 0x40, 0xd1, r2, 0x9, "89527345d7c3f360e2a7a4bc794cd859", r4, r5, 0xe46e, 0xac6, 0x7fffffff, 0x460, r1, r1}, 0x5) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r6 = waitid$auto(0x81, r2, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000300)={{0x3, 0x32}, {0xa8, 0x5}, 0xffff, 0x3, 0xffff, 0x4, 0xffffffffffffffff, 0x6, 0xffffffffffffff1f, 0x5, 0xffffffff, 0xfffffffffffffff9, 0x3, 0x376, 0x1, 0x28}) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [@nested={0x14, 0x123, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r6}]}]}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xf8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x200}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x533}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xe9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040840}, 0x20040840) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) write$auto(r7, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) 1m42.459897279s ago: executing program 4 (id=1297): openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x41a900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) 1m42.180625875s ago: executing program 1 (id=1298): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2, 0x20000000004, 0x8000000008011, 0x3, 0x8020) r1 = getsid$auto(0x0) sched_setaffinity$auto(r1, 0x10000, &(0x7f0000000200)=0x80000001) shmctl$auto_IPC_INFO(0x8001, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0xee01, 0x1, 0x2, 0x7, 0x3}, 0x18f, 0x2, 0x7, 0x4df9e870, @raw=0x8, @inferred=r1, 0x9, 0x0, 0x0, 0x0}) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) 1m40.650291363s ago: executing program 4 (id=1304): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigtimedwait$auto(0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0xfffffffe}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x7ff, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x6, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffff, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x1, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x8, 0x1, 0x3, 0x3, 0x5, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x100, 0x8001, 0x0, 0x1, 0x7, 0x9, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0xfffffffe}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x7ff, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x6, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffff, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x1, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x8, 0x1, 0x3, 0x3, 0x5, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x100, 0x8001, 0x0, 0x1, 0x7, 0x9, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) signalfd$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8000000000000001}, 0x200) (async) r0 = signalfd$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8000000000000001}, 0x200) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012bbd7000fddbdf250d0200000c0006000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_max_send_size\x00', 0x101000, 0x0) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_max_send_size\x00', 0x101000, 0x0) pread64$auto(r6, 0x0, 0x8, 0xffff) (async) pread64$auto(r6, 0x0, 0x8, 0xffff) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xec}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x20040014) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) r7 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0x403c6f2b, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0x403c6f2b, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m39.531735888s ago: executing program 3 (id=1306): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)="351547") 1m39.389289185s ago: executing program 4 (id=1307): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x9210642d, 0xc5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x2) socket(0xa, 0x801, 0x84) prctl$auto(0x80000000, 0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setsockopt$auto(r0, 0x3, 0x1000, &(0x7f00000000c0)='\x00', 0x1) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) 1m39.040919724s ago: executing program 3 (id=1309): r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r2, 0xb21064a7, 0x20000a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x900, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r4 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r4, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40890) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setreuid$auto(0x4, 0x8) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x207, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x7, 0x8001, 0x9, 0x1000005, 0x7, 0x5, 0x2, 0x10b}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="77b927bd7000fcdbdf255f00000043f280ab5461d67fb1a26da13aa776c36c23010099f46a26a320a48e7f4b0ddc47e12386907f4b6ca3233b1731bdef2ed105a58db8b6535d0a46d1247c4ddbf91c6a88500e7a42e3acca"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 1m38.517549921s ago: executing program 3 (id=1310): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xe) (async) socket(0x2c, 0x5, 0x0) (async) socket(0x25, 0x1, 0x10) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe6, 0xeb3, 0x40000000000a5, 0x8000000000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x1) (async, rerun: 64) pread64$auto(r0, 0x0, 0x600100000001, 0x1ff) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x12, r1, 0x1, 0x7fe) unshare$auto(0x40000080) (async) mmap$auto(0x40000, 0x2000c, 0x400000df, 0x20eb1, 0x40000000000a5, 0x8001) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r2, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0x596) (async) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x82`\x00\x00\x00\x00\x00\x00w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\xebs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x8000000100000001) (async) mlockall$auto(0x7) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) unshare$auto(0x40000080) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x141140, 0x0) (async) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mouse0\x00', 0x149503, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3001, 0x6, 0x8, 0x400b, r3, [], {0x6, 0x20000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x46, 0x4}, {0x100, 0x1, 0x104, 0x83, 0x3, 0x24, 0xfcffffff, 0x7}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D3\x00', 0x102, 0x0) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2000, 0x0) 1m36.288922472s ago: executing program 3 (id=1313): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x9210642d, 0xc5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x2) socket(0xa, 0x801, 0x84) prctl$auto(0x80000000, 0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setsockopt$auto(r0, 0x3, 0x1000, &(0x7f00000000c0)='\x00', 0x1) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) 1m35.98991668s ago: executing program 4 (id=1314): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='9\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0Q\x88H\x95\v\xbe5\xc2os\xe2iq\x1d>,\xe8\xb3\x950\xca\xfc\x98\xbd\xff\x93&\x98\'\\\xf4\xfe\xed7\x8e.I\xc3HG\x8d\xa3m\'\xbf\xc4\xad:\x96z\xcb\x1b\xe6\xa9J\xcfL\xf9\xd5\x00\x00\x00\x00\x00\x00X\xa8\xdb\xcf\xbb?f\xa2\xd0\xa4\xc2#f\xce\x98\x98\xbf\x03\xb6\x1aaAT\x1b\xa9\xa0\xee\xa2K\xe6\xf2B\xdb|\xa1\x19\xf0#\xda\x1b\xaf\x94\xed\x17)\x9f}\x19\x81\x11|G\x97\f\xe2\xf2%AvH\x82~', 0x4) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, 0x0, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) open_tree$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1ff) r2 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x801, 0x0) write$auto_aoe_fops_aoechr(r2, 0x0, 0x0) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f00000000c0), 0xd85ac1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x10, r3, 0x8000) mbind$auto(0x2, 0x7, 0x0, 0x0, 0x3, 0x7) socket(0xa, 0x3, 0x101) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x218200, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) open(0x0, 0x62240, 0x154) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1000, 0x8000000000000001, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m35.261527949s ago: executing program 4 (id=1315): mmap$auto(0x0, 0x20009, 0xdf, 0x16, 0x401, 0x101) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) read$auto(0x3, 0x0, 0x8080) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$auto(0x5, 0x202000b, 0x80000000000003, 0x8597, r1, 0x8000) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, 0x0, 0x0) pipe2$auto(0x0, 0x80) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{0x1db, 0x13, 0x1}]}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setgroups$auto(0xa1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r3) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) move_pages$auto(0x0, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x3, 0x0, 0x90) 1m32.668254367s ago: executing program 3 (id=1320): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bond0/queues/tx-12/xps_rxqs\x00', 0x2a001, 0x0) write$auto(r0, &(0x7f0000000340)='SMC_PNETID\x00', 0x4) 1m32.46498051s ago: executing program 3 (id=1322): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, r0, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r3 = io_uring_setup$auto(0x3, 0x0) write$auto_force_devcoredump_fops_hci_vhci(r1, &(0x7f0000000180)="d2cd6a68cd3b425be957e396b3905d94a8111fdd48734bb63a83538fd48cef01f1d8cc51c66d0b9e675c7e6e1fa8fcfb3c68df16cbdd49650ff39d8baa1411b418664b9e8ec7c4889947", 0x4a) close_range$auto(0x2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m28.001746744s ago: executing program 5 (id=1332): socket(0x2c, 0x5, 0x2000006) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0x4, 0x0) futex$auto(&(0x7f0000000040)=0x1, 0x6, 0x7, 0x0, 0x0, 0xc687) futex$auto(&(0x7f0000000040)=0x40000000, 0x6, 0x8, 0x0, 0x0, 0xc687) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) inotify_init1$auto(0x4) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r0, 0x4010bc06, &(0x7f0000000000)={0x0, 0x0, 0x1000}) 1m27.142417759s ago: executing program 34 (id=1298): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2, 0x20000000004, 0x8000000008011, 0x3, 0x8020) r1 = getsid$auto(0x0) sched_setaffinity$auto(r1, 0x10000, &(0x7f0000000200)=0x80000001) shmctl$auto_IPC_INFO(0x8001, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0xee01, 0x1, 0x2, 0x7, 0x3}, 0x18f, 0x2, 0x7, 0x4df9e870, @raw=0x8, @inferred=r1, 0x9, 0x0, 0x0, 0x0}) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) 1m27.136472171s ago: executing program 5 (id=1334): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x468140, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x42082, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) memfd_create$auto(0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x2) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, 0x0, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f1, 0x24) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) 1m26.220823606s ago: executing program 5 (id=1335): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x80000001, 0xffffffffffffffff, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0) write$auto(r3, &(0x7f0000000040)='\\\x00', 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x800000, 0x9, 0x9, 0x8b72, 0x1000000002, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x100c0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x40000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000500)=""/186, 0xba) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) sendmsg$auto_TCP_METRICS_CMD_DEL(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250200000014000c00ff0100"/38], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/autosuspend\x00', 0xc0002, 0x0) rseq$auto(&(0x7f0000000280)={0x2861, 0x1ff, 0x3, 0x7, 0x0, 0xfffff2b8, "9de68cc620f8c6f541c2a75591c8cf8572ceee8a313b8e157d28cbeae4fd781441b28704d521f0b07dd17fb87f95f9e1c1a552a99f1fcbbd5263bdd6317910daa7d4adfc67b670d4e0a912ef47863f0b36bbe08d155266700a39cf4b9a84fae0af40cceb91853aa2e0b11f75b2490db4c5c01bf0e2a4300f1e4cdc482446cccf1ebe9dbd500ff5b481d4f31840c5887f666fc9338c8053efb2ed3b4000de477ea51c1a370f64a6120bbd482fc945ff6cb017697612ab385ffb98e4bdd9047591f467c8496de80d"}, 0x4c, 0x7fff, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1) socket(0xa, 0x1, 0x84) 1m25.414780786s ago: executing program 5 (id=1336): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000001}, 0x8, 0x3, 0x4, 0x2a) mprotect$auto(0x1000, 0x401000, 0x2) 1m25.309342987s ago: executing program 5 (id=1337): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, 0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100)="0977b20d5258eca826a4544a5db3bfa5deebdf9b9919b9debef90d4b64633f0eb8162aa93f55d0d56687a5be1110194fbd48a603d4cb3949f65f2366e35b294c41b7069e8a0c60a7c9acaedacf5068e6d0aa1d05292bd70540e52ba410720cdbb0", &(0x7f0000000340)="5f9fe49db3b478eb5aa112d00517c1aa957d9e0f2852dad7f5c236bf8371d3b0f6d518edeaa6493a608fb25d5e4ef247c283343a661cf945418dfa1d90930d85eb4cde61cfe640e7f1d181f7939b2f542198986127b4853ed7e3309866acb8cd226f097b6b0469e947ae99d1fe614f2f7d0972073a12204d10f259ae7c3e05bc290d17e2460cdc91ea9f95b5a74077d7861c8b9c4b44d916a186054543c18576525484367482cb2e8aa1c6b42c5d1d2699904715cfce7fea171e426b886b482af2d6098cf74c3c4e"}) fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695d494e55c", r1) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 1m24.181255017s ago: executing program 5 (id=1338): timer_settime$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3f, 0x0) fsopen$auto(0x0, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x482800, 0x0) ioctl$auto(r1, 0x4bfa, 0x9) r2 = fcntl$getown(r0, 0x9) r3 = prctl$auto(0x79, 0x7, r2, 0x4d, 0x1) getrlimit$auto(0x80, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) r4 = memfd_secret$auto(0x0) ftruncate$auto(r4, 0x1) ftruncate$auto(0x3, 0x700) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000100)={@sival_int=0x6, @raw=0x843, 0x28a8, @_sigev_thread={&(0x7f0000000080)=&(0x7f0000000040)=0x2, &(0x7f00000000c0)="c9a558e4efa519c3b28377925811e395"}}, &(0x7f0000000140)=0x3) process_mrelease$auto(r3, 0xfffffff9) socket(0x2, 0x1, 0x6) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)=@task_fd_query={r2, r0, 0x0, 0x261, 0x6, 0x2, r3, 0x40, 0x7}, 0x1c) 1m20.057327577s ago: executing program 35 (id=1315): mmap$auto(0x0, 0x20009, 0xdf, 0x16, 0x401, 0x101) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) read$auto(0x3, 0x0, 0x8080) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$auto(0x5, 0x202000b, 0x80000000000003, 0x8597, r1, 0x8000) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, 0x0, 0x0) pipe2$auto(0x0, 0x80) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{0x1db, 0x13, 0x1}]}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setgroups$auto(0xa1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r3) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) move_pages$auto(0x0, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x3, 0x0, 0x90) 1m17.095891513s ago: executing program 36 (id=1322): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, r0, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r3 = io_uring_setup$auto(0x3, 0x0) write$auto_force_devcoredump_fops_hci_vhci(r1, &(0x7f0000000180)="d2cd6a68cd3b425be957e396b3905d94a8111fdd48734bb63a83538fd48cef01f1d8cc51c66d0b9e675c7e6e1fa8fcfb3c68df16cbdd49650ff39d8baa1411b418664b9e8ec7c4889947", 0x4a) close_range$auto(0x2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m8.543125964s ago: executing program 37 (id=1338): timer_settime$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3f, 0x0) fsopen$auto(0x0, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x482800, 0x0) ioctl$auto(r1, 0x4bfa, 0x9) r2 = fcntl$getown(r0, 0x9) r3 = prctl$auto(0x79, 0x7, r2, 0x4d, 0x1) getrlimit$auto(0x80, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) r4 = memfd_secret$auto(0x0) ftruncate$auto(r4, 0x1) ftruncate$auto(0x3, 0x700) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000100)={@sival_int=0x6, @raw=0x843, 0x28a8, @_sigev_thread={&(0x7f0000000080)=&(0x7f0000000040)=0x2, &(0x7f00000000c0)="c9a558e4efa519c3b28377925811e395"}}, &(0x7f0000000140)=0x3) process_mrelease$auto(r3, 0xfffffff9) socket(0x2, 0x1, 0x6) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)=@task_fd_query={r2, r0, 0x0, 0x261, 0x6, 0x2, r3, 0x40, 0x7}, 0x1c) 36.277238121s ago: executing program 7 (id=1443): mmap$auto(0x0, 0x40009, 0x2000000000000df, 0x9b72, 0x7, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(0x0, 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x260a01, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) r3 = syz_genetlink_get_family_id$auto_nl802154(0x0, r0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000003340)=ANY=[@ANYBLOB="b0160000e737fd144d21cfa384849c915bbbe9004d375a8f26677d46980a49613b08411abc794cfc9a9aa9099070849edc060be9", @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf251f00000005001f0081000000080021000300000006000a0006e900000500250007000000c00019800800d68004005780b40013800e0003002f6465762f7474793000000008002900100000007c0e0a6a30094ad012955de26d6dd248fffe61517fae1d25b1e6c54c97c544c41927e8a8e8b253330ffe46867a18120dfedfc0c71427f8f53a6c49a9a56d111a14cfbe7ceaf797ee37273f4deec4f30e8bcc8066cdc5cab5200500fc53fe71bdfd8124007c7837812013c44ffa6c5a4597a6925e80a69a4021a02eff040076800600f1007b00000008009e00e000000108001b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x16b0}, 0x1, 0x0, 0x0, 0x2004800c}, 0x4801) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, &(0x7f0000000040)={0x0, 0x7fff, 0x6, 0x4, 0x2, 0x5d36, 0xffffffffffffffff, [0x4, 0xb, 0x8], {0x1, 0x1, 0x2433, 0xc, 0x80, 0x10001, 0xb4b, 0x7, 0xc}, {0xbee, 0x7f, 0x90, 0x53a4, 0x5, 0x4, 0x0, 0xba8, 0x7}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r5, 0x936355e497c8b7e5, 0x70bd24, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) mkdir$auto(0x0, 0x0) 34.873144812s ago: executing program 7 (id=1447): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x24084005) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) keyctl$auto_KEYCTL_UPDATE(0x2, 0xffffffffffffffff, 0x6, 0x1, 0x100000000) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x0, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 33.6627233s ago: executing program 7 (id=1450): rt_sigqueueinfo$auto(0x0, 0x2, &(0x7f0000000000)={@siginfo_0_0={0x8, 0x5, 0x3, @_rt={0x0, 0xffffffffffffffff, @sival_int=0x1}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x580000, 0x0) preadv$auto(r0, &(0x7f0000000180)={&(0x7f00000000c0)="d2d6d94a1e3a5add8bb921e3ea8f13f50e6229c51058687b41baa90fd48bf3da9f99146bfd32c3323fc110a693ad6c0657d197a10ae3a0aa44bfbab6894ed33d52df837ac791512e34d35081e6824ac377e2309cba39543ca66301f5c3dc9410cfe1a005aed0e6b314fe6ffe3aee157d85b8e6ec2200ec0365264414d4741a5bfbf4d2abfe9de32e2fb61fa3850c0a64504745e8705d46cd60af28ccd3c3fdde611985d816ff5cfe858d9ae284bf2eb4febef128eeffbbe731c6", 0x8}, 0x80000001, 0x5, 0x100000000000) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) 32.700480964s ago: executing program 7 (id=1454): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)='\n', 0x1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) read$auto(0xffffffffffffffff, 0x0, 0x4) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40100, 0x0) (async) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) (async) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080), 0x149b42, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) (async) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) r3 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 28.941285596s ago: executing program 7 (id=1461): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000800038004001280"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) msgctl$auto_IPC_INFO(0x45, 0x3, &(0x7f0000000200)={{0xff, 0xee00, 0xee00, 0x7fff, 0xb61, 0xa, 0xe17}, &(0x7f0000000180)=0xbf, &(0x7f00000001c0)=0x1, 0x4, 0x8000000000000001, 0x8000000000000001, 0x3, 0x10, 0x7, 0x7ff, 0x7, @raw=0x55c, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x4010) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c3, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000001, 0xeb1, r1, 0xbf47) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000) unshare$auto(0x3ff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) lsetxattr$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='/sys/module/zswap/parameters/compressor\x00', &(0x7f0000000280)="37a0e52a2287b4343388390dbd7f88c01111b18c1d50138693675bfab94c5ea99cbfdf74c7ed2a0e484443aee09b75ca19998e427637c821faa1fbb9ef831a0adf09083fa2c54fda9de913eb5cd37190ce96147bed457430aebb14b5d65c0813dc7c2779c317c484d9b7dd86eca39b52786a98d43e819834998cde0a7260c7ec7aaac9b1122d8e0b6a331270077badef661be97ace0bc15da62d31c106cfba8c57ef1caf02c5be41e1c3a9637b65970c39eeb894a61b02db9f340ff95c26ff85e650fcea752187d8ae80b36835258ceb69", 0x6, 0x81) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) 26.088918045s ago: executing program 7 (id=1467): openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x41a900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) 13.381430868s ago: executing program 8 (id=1518): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x1, 0x106) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000018c0), 0x55) setsockopt$auto(r1, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) (async) setsockopt$auto(r1, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sysfs$auto(0x402, 0xc48, 0x0) (async) sysfs$auto(0x402, 0xc48, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) mprotect$auto(0x0, 0x806121, 0x6) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/bdi/1:15/stats\x00', 0x20802, 0x0) (async) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/bdi/1:15/stats\x00', 0x20802, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) prctl$auto(0x43, 0x2000017, 0x0, 0x0, 0x0) execveat$auto(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) sendfile$auto(0x3, r2, 0x0, 0x400000000006) (async) sendfile$auto(0x3, r2, 0x0, 0x400000000006) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 13.031105s ago: executing program 8 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) (async) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) (async) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) inotify_init1$auto(0x3000000000000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) (async) fsopen$auto(0x0, 0x1) (async) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0x1, 0x5421, 0xa) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=0x0, @ANYBLOB="a388ca109e7d"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 12.541202084s ago: executing program 8 (id=1523): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x468140, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x42082, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) memfd_create$auto(0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x2) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200802, 0x16}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f1, 0x24) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x6, 0x0) 12.360767439s ago: executing program 8 (id=1524): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0x40d, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4) (fail_nth: 7) 12.041417792s ago: executing program 8 (id=1526): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x7, 0x0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x1c7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = pidfd_open$auto(0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xb9, 0x9, 0xfffffffffffffffd, 0x948d, 0x1ff, 0x1, 0x8, 0x8003, 0x65, 0x8000001f, 0x10000001002, 0x100000000006d41, 0x7, 0x1, 0x9]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x3, 0x6, 0x7, 0x4, 0x0, 0x4000000000003, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) utimes$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2400, 0x2}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000002100)=ANY=[@ANYBLOB="60100000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25040000002c000100fbd4290adfa23e60527c7bf739c8c05ca45dff13f751dd67f4312992093749f3c33835b30b8aa3890600070006ef0000041018004bb2dc79ccf862721738802caca194a4a8b3e0477fd882df8fd014aea58f050da9de7c9e22fa2dbce50757abae9a51b7f92769584cce6afc3f5a5ddfbf6d2bf42afb480dcc28e244007f61dbdd872fae04acecff777819e07cfc724bbb9e5f90c6c125dd609376e6b7bf7dee46177f384afec444e6f4625640e793c13689bdc79e0154dc23e6964f5ecb4908a166b63a033fb44cb573585947a6a94c1f89944b88ca4165e249e0943dce8e5b04035b392193909a0a63c6ccfda3b7e4556c220150c191b9feeadceff8b5ae5e08dae7dbdaa86f5dc81f1e09829416a223afbabc526d26ec58046e2c90d392fe41c37f8b749ad0acd66284a880440972b0b8c6781a6a0728c554fc439ed21994bf858de6b619122fbe771b00262536b2d6c88622f722af2c3cd94a64dab7176073c1ea3777db7e795158ebbf998a795d121b8cd05e5ab820629bcfa73da4d154306149634bb971193cc23d0ecd40663efc5a732438f69fd2b09ad67b5600f43d7526676c3e2a8572e691edbee79e07a150c8311864c12ee0c6423b7def37f911525a12d128498a4850f13321040b9e0da1986cdc8b3855ada81a947e73329b45b8fcecd60898ea8abd6f2dca9b3dd38bfd454be269bc856587f05336b971901f35f5355e0a3fc2bd8132dc298a6cbf29decd76a4c2de5e906f85dbb43ae10bf6640ade3eaa568bfc2270cc9ed3cdce02dbdc9b3aa602d0c26b861331d8376d9ff9a1c40d3322de1cbba628d1f2c1bdcfdfb8b1480eb2ee3c3a9d1a5a6178a1b2a90f91467e9c7faf40342a27cccee940f27cf8342a3b14b42d5ce28e49039e5a20de55ca2c1c3d853ece35b1b50df364707f03941627333d129e3455474d6d13e091fe1cd7183d1eab327a664b6bae99cc7b34114abac9a86c144ed3c63f49b53ca17f2b3fce1a7baf313e7ad74d17b87e7e4e3ccc71575770333633a165e77b95d14770887837cc25c1fb117be67e57e4188cb2982e764a1e3455e589192c19a37d7e95e12d016b59ea47931d4c33c6a8f2bcd45f5f1ce6a318823af4d374618f94077ae4762b1304c8df225be32e2b80f9566709ebbb6d4502040a6c6229d3063616bdce379cdb26325310d5901cc20c1ba314cfc4dcdc0698952186a01fc6aac6938cf17d0fb65b59a79cee771bc56263cce4b3a489d7b3ae61bbfb5ecd2a0472076dcefbe8eb16b10563d352764e13e7578747344502d93a12d484cea1b3e9fe65baad2857f1b52e9e5a7a7e0043db66b3f63f86457af8f597541d62cb225bb7b2acecc9341a0058d3e75d3f9c5cd1c971de85f8ee7c167ed87c1fa9a24719c8e199f53d8b931aae42047407a4e3d609f57f66274be866fc3d52116f23f47e4c84cadd1ea05cdc0cf33d8390bb7ce2d595e357100dc7ae956736cb165d8521bbc4e51eeaa76cd8d639864693e116f9fb7193b23924d32e99475355f729e6276cd05f00f37678dd73cca04740ed271851197f7a539d23cb7a680c8165af51b7417aad5392815e0fe2c11f8d46cafe93206b566b4f0e7f3c360de17dfa6e80cf41a2773a3fa1ab48804d3489c961a907a0acae709fbd54722ae2de9b40f26ff0d7f58aa9255000a9020c0495429e816b9b46746c9b64918fcf88ffd31b31a9536cac3292be3685ae221d632307a3be9e53ecdde8017e6177e3e71cebfc9abd3b27939efbc37d2d4a4b308d89120d12c71c5cf8c1297b9d314e038a52e11a8474d525cd98a446f61ae06288bdbf09f06fb35dce84a6c60d712adfb97dcd46f71e6200d5b1718bbdf8ed0f3f84e3cedc036ff79057754218a00f0adaec2d0f76e7416cf90bea05499529aac239d44e0effb41f688d763e95ad335856b9745991a497e7fbac7bbff60e130e8658b52b58437416d90d70782476921db6f202a75a939b9a4fcc966312481b5968c5ab26ee7926a8ac63f5ade6ae4d8ab996b29d67e01d5d7be60c7be486c53ab76eb702fe8a93ebc44f850157993e2393a4b4094847ff2738f27c52c0eb366b7777eee1930d205060d71b96e9330fde18c2f031a831a6c1bbd8d0ed95127d46ba6f614aada493aedbd240c657685c1fb45c2ac5f7112cd60a20181a30ccd0a97d085225f6ea28cb6454dd1e3eecb23480eb89e164a7215f4a98b9c0c76644123df8192918c18f4086ce9feda23bd0692ee8262ae8a4e509edcee2085cc6e2137ee19010e57fddc1d22056d26b45d27cbb325cc8cc5a837efc872dd31aa2a070dbe775f03c66397a3e0bba426e8b7549d99db63a4d13075934c4b5dc51fbaf18634ad319a156042e4d88f16a92ab8f6faf5fef924d5b4a85a99fda6e8a5a7bedd2fa84d9b5b9fa9dd8ce8330475eeed1bc1c1d08b94004413f56d0e3113a5a5eb1d96fb39c69b355928800fc8ff7f918e971e56eb0d5b0978aa078c7de6a804467e1239a3848de55315b95245fbff55be2fa61d03b84991e570023416f597460b5f6faab319258a043a685aaa9ff55d07c9939fc7962975a5e238a62cc61091557878f4880b894fe484c161a38aa4d61fd3992d6653f552e3b4a4ccc38ee6b5ef241f639f20501ddcb16498039abc96d6560fc1485bba5aa5976674ded4ca75a3a7b3b4d377fb85203a24d3b44448159eea92d6d0e9e670f2bb097773b5b9bb4cdbc6c923ebd0a98b1a906cd7d6005890490594a00e2c2fd39378d3affbc5551a883aefd92027ab3121fdd701bbeb2d1a74654157d4ca0f54a538e7a3e5a6c752a7148754c2d56de4eafcff559a3581150b480c9463803022229eb1344ab5061de9598d4e8d67e5dfb7f4d5f762bf43ada197f8b7b56a6593b3ed67aab25f9adca99fd605bce705d6ddc017adaae7d07056aff43f330b99092bff94596e06bcc476b7acd0999b3f7327ab97495dc3f21d748b8377a26794fd61839ab2cb5f108d05e84407bf8ed30017c10a335950e20ba1d07ed4a1edb0bfee4317a4c09554775b786f2feae860aff3795a53a9f812846c45ca0f559df02eabc6315a18956be5207d3452e9edfeeddcb9e39b30cc5c99df3e7543724c6f86693b163946073846b94a13fcadda3951e900af980d1381184054b7a581581773a3ff3f812bb2f8eb91c37907cb7c7df000496fc06b4a44612e0ac958953878aa3038c20f009bbbc5b24cd211f4a66508b13937dbed31affc1cd28e630325c27fcd5edd8b9f119c7345ff3344575f37f28bf6e1ed89af6b6c9e8a1b6a1600fb0b33dc012b5350c2fe1751d9caca6864c1893bc883c8ff9553e2dda2aa2ba303d97aa4198de1620a703fbe3f180587caaab6c3d996a2211d302322fbfc41416443024bd7ffca9f6c316b5c9387fa2be1fb2848edb79a1dad2e0aeb3ff559509e52d8a99620743b5d9afd50ddd588958274f00d79bc0eeea54f8e4de388583cd1a382a98d6281e6ab80b932dd9593802910eb013ea0f5dcdd9e468a927fa6f88fd0c85def746282c728cbf5283fa10678419877b373c93141d37e789462ee3c7f28f987cd258a16872037e73eb5293ec3834aad10a80f692c04db46fce04e147a088194e92391425c3836fcabae8abe56e46da4509966bc3c00d88747181e56a3dd2b63aad78450f2028125eede4f73f5e60833319b60d465de3613e63d4afa8a87504a600348df1d7ead602c30120172cbde509b8c3d350fbc182875e4826b1b8e882e7e8be64cfdb6cff938b8d35728321329f972e7ab1fc2e16f8bc69393251dfabca25bbe56e213d5a7cbd98088d3b5fe7fe2f3e47658d22680c8704d2d92f4088ac0451b1f6bab27c25593072b3ce9748cdcd6b363e25d5128077f835440075402a60f464a542916b5aa8d581798734a12a1897c7507237e96047ddd91352417d9d1cc1935267240b2db8e40dd1a5bd2dd230de1d6b0666ebd2aa0f198c53cce50d656af47afe55eef439aba77766309312ce647225a9c8cfea23cf69221fae3ad257c4c5f97cdd4418f02949c46b4269b340611d8b2101d4a8e7416b82e261eda3232271caa181b1835dae3b0034bc088165d44f8db3a513bc32f55d471401abbdc2a9dd9a855ab4b7ccd43ba5d97757a0bf82b41a99c40eb634eb9de526c1e14555cd3aa992714bb3a563ef854be49b3406b4b53aac4f18851e78c94625e6a17fdd465fee698905598ddf807d849b7d2116266385f9ede23be96e46b6e4f354c8ca7662fa55db9e4a0019b754f685041ba401ce3785f1446ab03ede66a711ce03325b4ca0ff4844c6b9d13500625318195d0aabe84a4c0343b23bb22809cf5603fa4f49d6769993c52ce211ab9b03dfd01dc338ce5f66fe16eea833a583eb0e8a58f790e4b2691b53e43437ed3ca729720febd9e23163668b47d4f13b5304bf3b0ce2ca8f8fa074bffa7a2ea4b68c33f72419b5321756f180873ff6db894d0a9bbb7af912102370cda4dddbcc8eee47b4542e6c9da80dcf2639b23e79788fb204190591d543ab22fc9a2c2bfc46a9f4fbfb6313978cf4afaf88550c98fb4f8a9c6894a58d258251db873f90f5040aef5943b0975bafec1064a1b3903866068266df7bf53ff2f9806dc91fe1cad81692ecf644285e286cd45bb3394c0833a24f29d7896ff075e06e0202b8cb1ac68e10fd4279c1d9c26755cbca8bab6441ebff1c6b0f01669bc7715d7324ef80bf529c236f318e6fab891a0abd61271221db2d40c482687b5fcac1a7eb6f22bbd9241626222047031b9bc96330be478a2fb9454533a33e40073c901e6f55a696f981d6ef192a4dd0f57a731ecf140781709c9a98621994b487054a2a2c2fb65c0b1c5fd9ff2d9fa3dae00d939d0efffb7ac8c19f791a28e97bed26c0508277aabce243f2663691b3d61754093e06ae0d5e334d181e6d2db5193e770d5dc356405404d1f070b8215832383f84d1e586a5f6b0c8b203204b1cb664a4dd38dd5969b0bda742e994968e0301b0b4586705078cba5be7b930edbacf741f79bea3bf97edcfd756de8cc41c408d658c7bccfff000680eed43a2672b62c8c1e2aa4a082f00be0d1642ce94fb537d025bcbbadbd373141b679ad12be34a4ad31a2474b61d9726f6d24193b9ee6da43571e5cad6c9cca72848826ec0474b5f61823465bfaadd47d3a250de8b888c0b7f425a217daf654f85d13e6300c469883f9f00e0bfa285506cb85b9be7f31a861c39d35fd43a471aa7b8d19012520df533f2c7d5fb3ca3a33ad08a53fd594ce2786e9441becbae7b1d4fd430c620534ad74e846dab659a912b7132d49f440b0abeff4d539edf8d5f9f8d6a6aca327ba306e461acb114943e641ce170bef32a858ade907757d2f962c2c0477b6ad93a25fd4ae083634bb181b5574bccc87aaf7f23a8ceca3bbbe6776b40ea8419ea9f9169edcb0cc103faf0c2519edafe1617732c63963a836e368325ed92380e86f4d4eacc7aad85b3ea060012abc23054501ea68754707de9c0e750cd5bb1842fcedba7382ab0e59d58dda56bc1444882afa02b2b0edfca0096dd643eb151452650fe68f3664aa23d020272f402cdd2ac4d8393fc0127f2e07db290413ac41646bedc2d07a9f61bae5e5d40c9d819932eedd65963b00f5f2bf6e8e96d73c9930596dd01e7c33ad7b74c856b37792200bb9ac668a6638bee1c0134298e8ac688274a5634ea2e04afaafced389eba0a0da4128936a4f261a82bdd55ddde36095939e05145da60082113b43c5428f6d82e40f18e2e3c518f91c17ffe99d4c47882e1b9268c806b240a8fbfb867dbf80cdd4c23de163ad252b1b8b3c2a3c672eaf7b47abb516541f0a3332bdd080004000002000004000e00040007000400"], 0x1060}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x10, r2, 0x8000) socketpair$auto(0x1b, 0x4, 0x8000000000000000, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x4, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$auto_SIGCONT(0xc86, 0x12, 0x0, 0x30c, 0x1) 10.928722729s ago: executing program 38 (id=1467): openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x41a900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) 10.844887674s ago: executing program 8 (id=1530): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x1, 0x84) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r5, 0x0, 0x400018) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0x80000, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x86100, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x7f47, 0xffffffffffffffff}) pipe2$auto(&(0x7f0000000000)=r8, 0xda1) msgctl$auto_IPC_STAT(0x7, 0x2, &(0x7f00000002c0)={{0x4, 0xee00, 0xee01, 0x1, 0x400, 0x4, 0x2}, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0xe, 0x669f, 0x7, 0x7, 0x400, 0x7fffffffffffffff, 0x6, 0x6, 0x5, @raw=0xc, @raw=0x80000001}) r10 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc0680, 0x0) r11 = setfsgid$auto(0xee01) quotactl_fd$auto(r10, 0x401, r11, &(0x7f00000001c0)="d225e2ba7e813f00c536c91ac36ddd2acb3ec90a4225ec33b5dbc866d2cc43b0988c9652ef8af38044942adb846922d4211049b691323def2453b898fef74e6a3bd6ba2a103dffb81da2f5953cdb2a90672f4cfbc75668f457c202b9d3697ce6eb880a0cfc8fe749631a81917a6bcaf412c98a8e15b709c6f46d9996be07b213876b7a87beedc62c4b001bd35964d83ab1aaa5a6a4276f284a2d0f3635d537d16920fe9be941fbc0f6878dfaa4601d44ca26c2e3c53a7f848f1aa8e8b1577971922cb7dde7c98a8dfc3c0a8444a8e4c144c3e92381908e2a534f9c75cc02d8bf481c2d7d0654c780e49e23b35567") r12 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r12, 0x82652360e804c8d3, 0x9, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}, @OVS_METER_ATTR_BANDS={0x10, 0x4, 0x0, 0x1, [@typed={0x7, 0x12c, 0x0, 0x0, @u64=0xff}]}]}, 0x34}}, 0x8080) sendmsg$auto_OVS_METER_CMD_DEL(r3, &(0x7f0000002bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b80)={&(0x7f0000001640)={0x14c4, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@OVS_METER_ATTR_BANDS={0x14b0, 0x4, 0x0, 0x1, [@typed={0x71, 0x13d, 0x0, 0x0, @binary="f7b3ad3f68a3d4bc767d3abcfd1bbd18c318114520b7836230cb9745c567eea737851245c74e6d92e1000c96ad11ce7860bc0ec70d4f80c679c1e57d8394d3834376aeecd19e45708b10b2961c913cbe0be8f3bdde6f833c8a0bf3615b841d7cb2bb2484d2e57227f30e6e7c26"}, @nested={0x10a, 0x10, 0x0, 0x1, [@nested={0x4, 0x43}, @nested={0x4, 0xb2}, @generic="4fef50928c9c32b54611b25edeab8f797da019df3665e78381c0f70f89a47a77e3ded6dc3bdc22b895cf2fbf540ed70fffb83731b98349b462f354ce0dafb3050292fdf3c688ccaea790b8173c93cdc09a10aa56bddc28a274bf1d04b818d1292b43da1b94235ee8f2fe6e816c22bbdcb6e055212d2f1ff86a4f5c3f28f5c885a79fb3ccdf3ee8699ff990fe41487ec7eb8ae43c489bb7f29d9f57915f788cd43f4c30bf9b752c0ec3b11843cbdcf554f7d751da1e4d72ae33be56b2a65501b88ab52b82deb4077579a16cdb9912befd77bc13e83a6e7a6249015606047f09aede9142b5b13fb3ba2de5c1779dcb", @typed={0x8, 0x108, 0x0, 0x0, @pid}, @nested={0x4, 0x12f}, @nested={0x4, 0x70}]}, @nested={0x242, 0x135, 0x0, 0x1, [@nested={0x4, 0x51}, @generic="b585d8e5e50077f4a6", @generic="fb8e8a9d2fe071ed7b247bc8cb220100b337d4fd836ffe2e2ec9429bc05a18fe1941fefaeb47cef597637e62549cdb4a9edb60641f825b928bb3094b222f44bfdb12badec49ed1c754f3ca0dcd1c5c2f5afd3ff51328a7dd592d66a196c496496968fcafc57934407b629e3d127b753eda870538d1c47b875bcf23e433f23c64bb5dc3a9590240212d89e8f85cefc472955e84", @generic="031e2e3f76180606bf27b1f0fd3d8a924f762dffd596b14c49673fb43ad859da943a3fac", @generic="8528c983102316a477e1df7ef7338eeacfa05f8b656d877516c0d1a32718e1fe7e7bb23282f74a2dda2a6a55d0ec35eaf937e2108c0adb047e76e42a720efc675e50689610fc459ad989c92e03755de369ec4c9deb2e5f311d30613e0db118fb806913b312167f8dfcec9f", @generic="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", @nested={0x4, 0xef}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x134}]}, @generic="3df5e9bb4289b3f5c55668ba690c1ed665430dc77bf215effd9e4dff452aadc637feea8385ba50db49362d3baffefebc7c7d7544e3df107b587e3020f2f931d75ad2", @typed={0x8, 0xe2, 0x0, 0x0, @fd=r4}, @generic="761109a352e6", @nested={0x8c, 0x50, 0x0, 0x1, [@nested={0x4, 0x8}, @generic="e23c1c883733bebfc7610786ee7c69a1ed6823f6f4fc5676ffbbae0561518595b1a65191c21a51bfd5849a21ab9bf45002c2697bab18875e23072ccd36a25e5801be7ddd426b8aa0937c75790878f6fe786c7b66f52939590c06deee308a3a3cfeba2e6249ff8172ceed79bb2e7b6207de6e86fbb0b07af47e579022bf697f7c", @nested={0x4, 0xac}]}, @nested={0x100c, 0x8d, 0x0, 0x1, [@nested={0x4, 0x44}, @generic="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", @nested={0x4, 0x3a}]}]}]}, 0x14c4}, 0x1, 0x0, 0x0, 0x4}, 0x8004) newfstatat$auto(r5, &(0x7f0000000200)=':,\x00', &(0x7f0000000340)={0x10001, 0x0, 0x53, 0x24e, r9, r11, 0x0, 0xde5, 0x5, 0x3, 0x2, 0x1000, 0x401, 0xffff, 0x8000, 0x6, 0x8000000000000001}, 0x4b7) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0xa201, 0x0) 6.135942263s ago: executing program 6 (id=1544): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4080000000df, 0xeb1, 0x401, 0xf1e8) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd15/queue/iosched/writes_starved\x00', 0x95e61c2a6c9650a6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x8000004000eb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x402, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x2, 0x80, 0x4, @inferred=0x0, @integer64={0x5, 0x0, 0xd}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) r2 = socket(0x2, 0x800, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x22}, 0x5, 0x0, 0x5, 0xe}, 0x400005}, 0x2, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x9a041, 0x0) mmap$auto(0xb, 0x4, 0xdf, 0xeb4, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(r1, 0xffe, 0x0, &(0x7f0000001140)=0x80000, 0x0, 0x20000002) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/udplite6\x00', 0x26a043, 0x0) pread64$auto(r3, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) 5.905036421s ago: executing program 9 (id=1545): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mtd/mtd0/mtdblock0/partscan\x00', 0x48380, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/86, 0x56) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x40000000f42c, 0x80202) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r4, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x5408, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto(r3, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0x5) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 5.251929442s ago: executing program 6 (id=1546): mmap$auto(0x100000000, 0x4000000400008, 0xdb, 0x9b72, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x80000, 0x0) r1 = io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x9, 0x100000000000000c, 0x8, 0xfffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) setuid$auto(0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r1) sendmsg$auto_NFC_CMD_GET_TARGET(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x20342, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5761, 0x4) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000300)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x7, 0x9, 0x362, 0xffffffffffffffff, 0xce, 0x4}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0xb, &(0x7f0000000180), 0x1) io_uring_register$auto(0x2, 0x23, 0x0, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x1, 0x8000) socketpair$auto(0x4, 0x5, 0x5, 0x0) 4.921319669s ago: executing program 9 (id=1547): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000400008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x25b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000100)={0x0, 0x4}, 0x6, 0xfffffffffffbffff, 0x9, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="6a425ac0", @ANYRES16=r4, @ANYBLOB="010927bd7000fbdbdf250200000014000c00ff01000000000000000000000000000108000100ac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = socket(0x18, 0x3, 0x0) getsockname$auto(r5, &(0x7f0000000080), &(0x7f00000000c0)=0x10000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffff7fd, &(0x7f0000000580)=@link_create={@prog_fd, @target_ifindex=r0, 0xd, 0x341d, @perf_event={0x1}}, 0x6f3) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0xa, 0x7fffffff, 0x7, 0xeb2, r6, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) 4.231959626s ago: executing program 6 (id=1548): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x24084005) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) keyctl$auto_KEYCTL_UPDATE(0x2, 0xffffffffffffffff, 0x6, 0x1, 0x100000000) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x0, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.791718571s ago: executing program 6 (id=1549): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x9210642d, 0xc5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x2) socket(0xa, 0x801, 0x84) prctl$auto(0x80000000, 0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setsockopt$auto(r0, 0x3, 0x1000, &(0x7f00000000c0)='\x00', 0x1) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) 3.548486875s ago: executing program 9 (id=1550): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:02.0/drm/card2/card2-Virtual-2/connector_id\x00', 0x1c9002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/dvb_usb_dtt200u/parameters/adapter_nr\x00', 0x0, 0x0) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) r3 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/available_tracers\x00', 0x8000, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r3, 0xa5d2, 0x41, &(0x7f0000000100)='/sys/kernel/debug/x86/pat_memtype_list\x00', &(0x7f0000000140)=0xa) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2802c1, 0x0) ioctl$auto(r4, 0x40084d05, 0x7) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) socket(0x17, 0x3, 0x20084) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) 3.211308394s ago: executing program 0 (id=1528): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x2000000000000df, 0x9b72, 0x7, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(0x0, 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x260a01, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) r3 = syz_genetlink_get_family_id$auto_nl802154(0x0, r0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000003340)=ANY=[@ANYBLOB="b0160000e737fd144d21cfa384849c915bbbe9004d375a8f26677d46980a49613b08411abc794cfc9a9aa9099070849edc060be9", @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf251f00000005001f0081000000080021000300000006000a0006e900000500250007000000c00019800800d68004005780b40013800e0003002f6465762f7474793000000008002900100000007c0e0a6a30094ad012955de26d6dd248fffe61517fae1d25b1e6c54c97c544c41927e8a8e8b253330ffe46867a18120dfedfc0c71427f8f53a6c49a9a56d111a14cfbe7ceaf797ee37273f4deec4f30e8bcc8066cdc5cab5200500fc53fe71bdfd8124007c7837812013c44ffa6c5a4597a6925e80a69a4021a02eff040076800600f1007b00000008009e00e000000108001b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x16b0}, 0x1, 0x0, 0x0, 0x2004800c}, 0x4801) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, &(0x7f0000000040)={0x0, 0x7fff, 0x6, 0x4, 0x2, 0x5d36, 0xffffffffffffffff, [0x4, 0xb, 0x8], {0x1, 0x1, 0x2433, 0xc, 0x80, 0x10001, 0xb4b, 0x7, 0xc}, {0xbee, 0x7f, 0x90, 0x53a4, 0x5, 0x4, 0x0, 0xba8, 0x7}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r5, 0x936355e497c8b7e5, 0x70bd24, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) mkdir$auto(0x0, 0x0) 1.817154655s ago: executing program 9 (id=1551): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace_options\x00', 0x2000, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) getsockopt$auto(r1, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_BUSY_POLL(r2, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) read$auto_tracing_iter_fops_trace(r0, &(0x7f0000000180)=""/8, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x2, 0x80000, 0x2) connect$auto(r7, &(0x7f0000000240)=@vsock, 0x1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r6, 0x1, 0x1, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x40) shutdown$auto(r3, 0x73) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x5c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x538}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x40}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xb}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) pwrite64$auto(r3, &(0x7f0000000100)='/dev/sda1\x00', 0xe, 0x7) 1.752543228s ago: executing program 6 (id=1552): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1d/power/runtime_active_time\x00', 0x200000, 0x0) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) r0 = socketpair$auto(0x1e, 0x5, 0x7, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) (async) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc058560f, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x40400, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r3, 0x40086602, &(0x7f0000000100)) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r4 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) read$auto_vga_arb_device_fops_vgaarb(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0xe2481, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='5', 0x1) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) (async) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) (async) mmap$auto(0x1fff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x7) (async) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) (async) mbind$auto(0xffffffffffffff00, 0x101, 0x6, &(0x7f0000000040)=0x100, 0xffffffffffffffff, 0x7) 1.730097125s ago: executing program 0 (id=1553): mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x80000100008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20082, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x1ff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x5, 0x8000000000000c4, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd7/queue/dax\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4098, 0x1002) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, r0, 0xfbfffffffffffaf6) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r3, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100081}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0xd, 0x10, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0xdc, 0x3, 0x4, 0x7, 0x6, 0xb4b9}) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="147300", @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x80040}, 0x10004000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7fd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r6, 0x0, 0x2) 1.438738114s ago: executing program 9 (id=1554): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, 0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100)="0977b20d5258eca826a4544a5db3bfa5deebdf9b9919b9debef90d4b64633f0eb8162aa93f55d0d56687a5be1110194fbd48a603d4cb3949f65f2366e35b294c41b7069e8a0c60a7c9acaedacf5068e6d0aa1d05292bd70540e52ba410720cdbb0", &(0x7f0000000340)="5f9fe49db3b478eb5aa112d00517c1aa957d9e0f2852dad7f5c236bf8371d3b0f6d518edeaa6493a608fb25d5e4ef247c283343a661cf945418dfa1d90930d85eb4cde61cfe640e7f1d181f7939b2f542198986127b4853ed7e3309866acb8cd226f097b6b0469e947ae99d1fe614f2f7d0972073a12204d10f259ae7c3e05bc290d17e2460cdc91ea9f95b5a74077d7861c8b9c4b44d916a186054543c18576525484367482cb2e8aa1c6b42c5d1d2699904715cfce7fea171e426b886b482af2d6098cf74c3c4e"}) fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695d494e55c", r1) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) unshare$auto(0x40000080) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 1.221475538s ago: executing program 6 (id=1555): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdc06}, 0x14}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) pidfd_open$auto(0x0, 0x1) mmap$auto(0x6, 0x1, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40004) mbind$auto(0x1ffe, 0x100000004, 0x100000000, 0x0, 0xa, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x5, 0xffffffffffff0004, 0x19) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) 1.134055827s ago: executing program 0 (id=1556): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x201, 0x6, 0x0, 0xc) ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x123a40, 0x1c7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = pidfd_open$auto(0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x8000000000001, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x2008, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xb9, 0xfffffffffffffff5, 0xfffffffffffffffd, 0x948d, 0x5, 0x40000001, 0x8, 0x8003, 0x65, 0x8000001f, 0x10000001002, 0x100000000006d44, 0x7, 0x1, 0x9]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x3, 0x6, 0x7, 0x4, 0x0, 0x4000000000003, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) prctl$auto(0x3f, 0x3, 0xffffffffffffffff, 0x802000008, 0x40002) mmap$auto(0x6, 0x33, 0x4000000000df, 0x40ebd, 0x401, 0x300000200000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000002100)=ANY=[@ANYBLOB="60100000", @ANYRES16=r4, @ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x200438c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x10, r2, 0x8000) socketpair$auto(0x1b, 0x4, 0x8000000000000000, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xaca, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(r5, 0x7fffffff, 0x100000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) 78.039936ms ago: executing program 9 (id=1557): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8004) r1 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r1, 0x8000) r2 = getpgrp(0x0) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r2], 0x1}, 0x58) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000001}, 0x8, 0x3, 0x4, 0x2a) mprotect$auto(0x1000, 0x401000, 0x2) 0s ago: executing program 0 (id=1558): madvise$auto(0x110c230000, 0x8031ca, 0x9) (async, rerun: 64) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) unshare$auto(0x1) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) socket(0xa, 0x4, 0x0) socket(0xa, 0x3, 0xff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0xa, 0x8000000000000000, 0x0) (async) r0 = pidfd_open$auto(0x1, 0x0) open_by_handle_at$auto(r0, 0x0, 0x800) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x2, 0x0, 0x0, 0x7, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x7, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) (async, rerun: 64) write$auto(r1, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x402, 0x400006, 0x80000000, 0x1a, 0xffffffffffffffff, 0x7fff) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) (async, rerun: 32) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) (async) fsopen$auto(&(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7fffffff) kernel console output (not intermixed with test programs): 0/0x100 [ 328.085882][T10370] ? __pfx_vma_modify+0x10/0x10 [ 328.085923][T10370] ? trace_pid_list_is_set+0x22c/0x390 [ 328.085974][T10370] vma_modify_flags+0x257/0x3d0 [ 328.086015][T10370] ? __pfx_vma_modify_flags+0x10/0x10 [ 328.086052][T10370] ? try_to_wake_up+0x5ec/0x1900 [ 328.086107][T10370] ? __pfx_try_to_wake_up+0x10/0x10 [ 328.086151][T10370] madvise_update_vma+0x21c/0xce0 [ 328.086188][T10370] ? __pfx_madvise_update_vma+0x10/0x10 [ 328.086231][T10370] ? __khugepaged_enter+0x2ed/0x380 [ 328.086268][T10370] ? khugepaged_enter_vma+0x8b/0x2c0 [ 328.086309][T10370] madvise_vma_behavior+0x2a3/0x2200 [ 328.086348][T10370] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 328.086394][T10370] ? find_vma_prev+0xd8/0x150 [ 328.086424][T10370] ? futex_unqueue+0x133/0x2c0 [ 328.086453][T10370] ? __pfx_find_vma_prev+0x10/0x10 [ 328.086498][T10370] ? __futex_wait+0x256/0x300 [ 328.086540][T10370] madvise_walk_vmas+0x2fe/0xa90 [ 328.086580][T10370] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 328.086625][T10370] madvise_do_behavior+0x1ea/0x510 [ 328.086663][T10370] ? __pfx_madvise_do_behavior+0x10/0x10 [ 328.086710][T10370] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.086752][T10370] do_madvise+0x195/0x240 [ 328.086785][T10370] ? __pfx_do_madvise+0x10/0x10 [ 328.086818][T10370] ? do_futex+0x192/0x350 [ 328.086853][T10370] ? __sys_sendmsg+0x18f/0x220 [ 328.086907][T10370] __x64_sys_madvise+0xa9/0x110 [ 328.086940][T10370] ? lockdep_hardirqs_on+0x78/0x100 [ 328.086979][T10370] do_syscall_64+0x10b/0xf80 [ 328.087017][T10370] ? clear_bhb_loop+0x40/0x90 [ 328.087049][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.087082][T10370] RIP: 0033:0x7f1ba999ce59 [ 328.087104][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.087129][T10370] RSP: 002b:00007f1baa804028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 328.087155][T10370] RAX: ffffffffffffffda RBX: 00007f1ba9c15fa0 RCX: 00007f1ba999ce59 [ 328.087173][T10370] RDX: 000000000000000e RSI: 0000000000004081 RDI: 0000000000000000 [ 328.087189][T10370] RBP: 00007f1ba9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 328.087205][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.087221][T10370] R13: 00007f1ba9c16038 R14: 00007f1ba9c15fa0 R15: 00007ffccfe6f418 [ 328.087256][T10370] [ 328.401831][T10390] writes to the poll attribute are ignored. [ 328.416161][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.468282][T10390] please use driver specific parameters instead. [ 328.571446][T10394] random: crng reseeded on system resumption [ 329.174368][T10408] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 329.801046][T10419] nvme_fabrics: missing parameter 'transport=%s' [ 329.825478][T10419] nvme_fabrics: missing parameter 'nqn=%s' [ 329.920681][T10426] ubi0: attaching mtd0 [ 329.944286][T10426] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 329.963395][T10426] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 329.990095][T10426] eraseblock attaching information dump: [ 330.007365][T10426] ec 1 [ 330.017071][T10426] pnum 0 [ 330.022756][T10426] lnum 0 [ 330.059173][T10426] scrub 0 [ 330.067743][T10426] sqnum 1 [ 330.084022][T10426] Volume identifier header dump: [ 330.093845][T10426] magic 55424921 [ 330.119660][T10426] version 1 [ 330.147657][T10426] vol_type 1 [ 330.163134][T10426] copy_flag 0 [ 330.170641][T10426] compat 5 [ 330.178650][T10426] vol_id 2147479551 [ 330.186126][T10426] lnum 0 [ 330.192645][T10426] data_size 0 [ 330.199167][T10426] used_ebs 0 [ 330.202686][T10426] data_pad 0 [ 330.219877][T10426] sqnum 1 [ 330.231641][T10426] hdr_crc 65b3bd2d [ 330.253432][T10426] Volume identifier header hexdump: [ 330.426924][T10426] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 330.576079][T10417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.869731][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.880528][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.207779][T10480] ubi0: attaching mtd0 [ 333.242893][T10480] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 333.264135][T10480] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 333.335625][T10480] eraseblock attaching information dump: [ 333.393312][T10480] ec 1 [ 333.422389][T10480] pnum 0 [ 333.428197][T10480] lnum 0 [ 333.432161][T10480] scrub 0 [ 333.437186][T10480] sqnum 1 [ 333.441845][T10480] Volume identifier header dump: [ 333.454243][T10480] magic 55424921 [ 333.482966][T10480] version 1 [ 333.504657][T10480] vol_type 1 [ 333.510860][T10480] copy_flag 0 [ 333.520304][T10480] compat 5 [ 333.574433][T10480] vol_id 2147479551 [ 333.585129][T10480] lnum 0 [ 333.616544][T10480] data_size 0 [ 333.628573][T10480] used_ebs 0 [ 333.638023][T10480] data_pad 0 [ 333.642438][T10480] sqnum 1 [ 333.655305][T10480] hdr_crc 65b3bd2d [ 333.667612][T10480] Volume identifier header hexdump: [ 333.892107][T10480] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 334.679275][T10506] Line length is too long: Should be less than 4094 [ 334.809396][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.816906][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.654024][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 336.249955][T10533] ubi0: attaching mtd0 [ 336.271870][T10533] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 336.295023][T10533] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 336.302982][T10533] eraseblock attaching information dump: [ 336.313856][T10533] ec 1 [ 336.368118][T10533] pnum 0 [ 336.384282][T10533] lnum 0 [ 336.397577][T10533] scrub 0 [ 336.412933][T10533] sqnum 1 [ 336.502672][T10533] Volume identifier header dump: [ 336.526582][T10533] magic 55424921 [ 336.533848][T10533] version 1 [ 336.545898][T10533] vol_type 1 [ 336.552285][T10533] copy_flag 0 [ 336.572193][T10533] compat 5 [ 336.581852][T10533] vol_id 2147479551 [ 336.586908][T10533] lnum 0 [ 336.590666][T10533] data_size 0 [ 336.599981][T10533] used_ebs 0 [ 336.611764][T10533] data_pad 0 [ 336.673212][T10533] sqnum 1 [ 336.713958][T10533] hdr_crc 65b3bd2d [ 336.745858][T10533] Volume identifier header hexdump: [ 337.099873][T10533] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 338.061440][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 338.936100][T10583] netlink: 'syz.1.848': attribute type 11 has an invalid length. [ 338.960782][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.848'. [ 339.775971][T10604] futex_wake_op: syz.1.851 tries to shift op by -2048; fix this program [ 339.809573][T10597] 0x000000000001-0x000000020000 : "" [ 339.946618][T10597] ftl_cs: FTL header corrupt! [ 340.529773][T10615] ubi0: attaching mtd0 [ 340.561930][T10615] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 340.595692][T10615] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 340.603996][T10615] eraseblock attaching information dump: [ 340.613263][T10615] ec 1 [ 340.632760][T10615] pnum 0 [ 340.644568][T10615] lnum 0 [ 340.658092][T10615] scrub 0 [ 340.716316][T10615] sqnum 1 [ 340.729572][T10615] Volume identifier header dump: [ 340.743418][T10615] magic 55424921 [ 340.753154][T10615] version 1 [ 340.760346][T10615] vol_type 1 [ 340.763848][T10615] copy_flag 0 [ 340.769181][T10615] compat 5 [ 340.789510][T10615] vol_id 2147479551 [ 340.795758][T10615] lnum 0 [ 340.802544][T10615] data_size 0 [ 340.821885][T10615] used_ebs 0 [ 340.835479][T10615] data_pad 0 [ 340.839036][T10615] sqnum 1 [ 340.856660][T10615] hdr_crc 65b3bd2d [ 340.869989][T10615] Volume identifier header hexdump: [ 341.269588][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.277261][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.337941][T10615] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 341.433049][T10598] Process accounting resumed [ 341.878401][T10647] netlink: 'syz.3.860': attribute type 11 has an invalid length. [ 341.900102][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'. [ 342.533754][T10660] netlink: 'syz.0.862': attribute type 11 has an invalid length. [ 342.580596][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.862'. [ 342.646190][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.653016][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.285081][T10685] netlink: 'syz.1.867': attribute type 11 has an invalid length. [ 343.539253][T10691] ubi0: attaching mtd0 [ 343.571211][T10691] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 343.588736][T10691] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 343.601685][T10691] eraseblock attaching information dump: [ 343.617563][T10691] ec 1 [ 343.625896][T10691] pnum 0 [ 343.629395][T10691] lnum 0 [ 343.673993][T10691] scrub 0 [ 343.719970][T10691] sqnum 1 [ 343.723469][T10691] Volume identifier header dump: [ 343.729966][T10691] magic 55424921 [ 343.734189][T10691] version 1 [ 343.738267][T10691] vol_type 1 [ 343.743002][T10691] copy_flag 0 [ 343.751211][T10691] compat 5 [ 343.754881][T10691] vol_id 2147479551 [ 343.764794][T10691] lnum 0 [ 343.768674][T10691] data_size 0 [ 343.779239][T10691] used_ebs 0 [ 343.791937][T10691] data_pad 0 [ 343.812445][T10691] sqnum 1 [ 343.821327][T10691] hdr_crc 65b3bd2d [ 343.829951][T10691] Volume identifier header hexdump: [ 343.993339][T10699] Line length is too long: Should be less than 4094 [ 344.048127][T10691] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 345.134183][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 345.690691][T10731] FAULT_INJECTION: forcing a failure. [ 345.690691][T10731] name failslab, interval 1, probability 0, space 0, times 0 [ 345.745300][T10731] CPU: 1 UID: 0 PID: 10731 Comm: syz.2.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.745344][T10731] Tainted: [L]=SOFTLOCKUP [ 345.745353][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.745369][T10731] Call Trace: [ 345.745377][T10731] [ 345.745396][T10731] dump_stack_lvl+0x100/0x190 [ 345.745432][T10731] should_fail_ex.cold+0x5/0xa [ 345.745465][T10731] ? sk_prot_alloc+0x10b/0x2a0 [ 345.745500][T10731] should_failslab+0xc2/0x120 [ 345.745532][T10731] __kmalloc_noprof+0xe0/0x850 [ 345.745564][T10731] sk_prot_alloc+0x10b/0x2a0 [ 345.745603][T10731] sk_alloc+0x36/0xe80 [ 345.745633][T10731] __netlink_create+0x5e/0x2c0 [ 345.745664][T10731] ? __wake_up+0x3f/0x60 [ 345.745704][T10731] netlink_create+0x29b/0x610 [ 345.745737][T10731] ? __pfx_genl_bind+0x10/0x10 [ 345.745775][T10731] ? __pfx_genl_unbind+0x10/0x10 [ 345.745813][T10731] ? __pfx_genl_release+0x10/0x10 [ 345.745841][T10731] __sock_create+0x339/0x860 [ 345.745887][T10731] __sys_socket+0x14d/0x260 [ 345.745931][T10731] ? __pfx___sys_socket+0x10/0x10 [ 345.745982][T10731] __x64_sys_socket+0x72/0xb0 [ 345.746006][T10731] ? lockdep_hardirqs_on+0x78/0x100 [ 345.746050][T10731] do_syscall_64+0x10b/0xf80 [ 345.746089][T10731] ? clear_bhb_loop+0x40/0x90 [ 345.746122][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.746149][T10731] RIP: 0033:0x7f816dd9ce59 [ 345.746172][T10731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.746198][T10731] RSP: 002b:00007f816ec04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.746224][T10731] RAX: ffffffffffffffda RBX: 00007f816e016090 RCX: 00007f816dd9ce59 [ 345.746242][T10731] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 345.746259][T10731] RBP: 00007f816de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 345.746275][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.746290][T10731] R13: 00007f816e016128 R14: 00007f816e016090 R15: 00007ffd76c8a688 [ 345.746330][T10731] [ 347.112484][T10749] netlink: 'syz.2.879': attribute type 11 has an invalid length. [ 347.705651][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.713391][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.958255][T10803] ubi0: attaching mtd0 [ 348.964783][T10803] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 349.038153][T10803] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 349.047499][T10803] eraseblock attaching information dump: [ 349.099231][T10803] ec 1 [ 349.112048][T10803] pnum 0 [ 349.117851][T10797] netlink: 'syz.1.889': attribute type 11 has an invalid length. [ 349.131806][T10803] lnum 0 [ 349.144611][T10803] scrub 0 [ 349.149514][T10803] sqnum 1 [ 349.154486][T10803] Volume identifier header dump: [ 349.167278][T10803] magic 55424921 [ 349.172964][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 349.184633][T10803] version 1 [ 349.208843][T10803] vol_type 1 [ 349.226752][T10803] copy_flag 0 [ 349.241999][T10803] compat 5 [ 349.254050][T10803] vol_id 2147479551 [ 349.295044][T10803] lnum 0 [ 349.299099][T10803] data_size 0 [ 349.306776][T10803] used_ebs 0 [ 349.314219][T10803] data_pad 0 [ 349.326944][T10803] sqnum 1 [ 349.330458][T10803] hdr_crc 65b3bd2d [ 349.334692][T10803] Volume identifier header hexdump: [ 349.545798][T10803] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 350.219949][T10811] block nbd2: not configured, cannot reconfigure [ 351.136851][T10829] can0: slcan on pty238. [ 351.286304][T10828] can0 (unregistered): slcan off pty238. [ 351.665926][T10841] can0: slcan on pty238. [ 351.815506][T10839] can0 (unregistered): slcan off pty238. [ 351.925209][T10848] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 353.141550][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.150284][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.391697][T10893] ubi0: attaching mtd0 [ 354.412995][T10893] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 354.434299][T10893] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 354.472817][T10893] eraseblock attaching information dump: [ 354.500705][T10893] ec 1 [ 354.512155][T10893] pnum 0 [ 354.515571][T10893] lnum 0 [ 354.526006][T10893] scrub 0 [ 354.540271][T10893] sqnum 1 [ 354.554629][T10893] Volume identifier header dump: [ 354.613678][T10893] magic 55424921 [ 354.640442][T10893] version 1 [ 354.644570][T10893] vol_type 1 [ 354.664574][T10893] copy_flag 0 [ 354.674849][T10893] compat 5 [ 354.686413][T10893] vol_id 2147479551 [ 354.716082][T10893] lnum 0 [ 354.726821][T10893] data_size 0 [ 354.784636][T10893] used_ebs 0 [ 354.809798][T10893] data_pad 0 [ 354.837786][T10893] sqnum 1 [ 354.848671][T10893] hdr_crc 65b3bd2d [ 354.870781][T10893] Volume identifier header hexdump: [ 355.324814][T10893] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 357.918161][T10935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 357.931128][T10935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 357.954074][T10935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.974842][T10935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.184563][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.194111][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.547527][T10952] netlink: 'syz.0.920': attribute type 11 has an invalid length. [ 358.649978][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.661569][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.566542][ T6846] Bluetooth: hci0: command 0x0406 tx timeout [ 359.965819][ T6846] Bluetooth: hci3: command 0x0406 tx timeout [ 359.972304][ T6859] Bluetooth: hci2: command 0x0406 tx timeout [ 360.045429][ T6846] Bluetooth: hci1: command 0x0c1a tx timeout [ 360.343106][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.353694][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.674519][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.682278][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.031301][T11043] FAULT_INJECTION: forcing a failure. [ 363.031301][T11043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.050460][T11043] CPU: 0 UID: 0 PID: 11043 Comm: syz.2.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.050502][T11043] Tainted: [L]=SOFTLOCKUP [ 363.050512][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.050527][T11043] Call Trace: [ 363.050535][T11043] [ 363.050544][T11043] dump_stack_lvl+0x100/0x190 [ 363.050577][T11043] should_fail_ex.cold+0x5/0xa [ 363.050605][T11043] ? prepare_alloc_pages+0x16d/0x5f0 [ 363.050649][T11043] should_fail_alloc_page+0xeb/0x140 [ 363.050682][T11043] prepare_alloc_pages+0x1f0/0x5f0 [ 363.050715][T11043] ? __lock_acquire+0x4a5/0x2630 [ 363.050744][T11043] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 363.050799][T11043] ? find_held_lock+0x2b/0x80 [ 363.050832][T11043] ? is_bpf_text_address+0x8a/0x1a0 [ 363.050867][T11043] ? is_bpf_text_address+0x8a/0x1a0 [ 363.050902][T11043] ? bpf_ksym_find+0x124/0x1c0 [ 363.050929][T11043] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.050967][T11043] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 363.051003][T11043] ? is_bpf_text_address+0x94/0x1a0 [ 363.051037][T11043] ? kernel_text_address+0x8d/0x100 [ 363.051059][T11043] ? ima_match_policy+0x8c4/0x2350 [ 363.051084][T11043] ? __kernel_text_address+0xd/0x30 [ 363.051109][T11043] ? unwind_get_return_address+0x59/0xa0 [ 363.051155][T11043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.051195][T11043] ? policy_nodemask+0xed/0x4f0 [ 363.051231][T11043] alloc_pages_mpol+0x1fb/0x540 [ 363.051269][T11043] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 363.051299][T11043] ? kasan_save_stack+0x30/0x50 [ 363.051325][T11043] ? __kasan_kmalloc+0xaa/0xb0 [ 363.051349][T11043] ? __get_vm_area_node+0x101/0x330 [ 363.051380][T11043] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 363.051423][T11043] alloc_pages_noprof+0x1a/0x160 [ 363.051460][T11043] get_free_pages_noprof+0x10/0xb0 [ 363.051491][T11043] __kasan_populate_vmalloc+0xa0/0x210 [ 363.051542][T11043] alloc_vmap_area+0x95d/0x2b70 [ 363.051588][T11043] ? __pfx_alloc_vmap_area+0x10/0x10 [ 363.051637][T11043] __get_vm_area_node+0x1ca/0x330 [ 363.051677][T11043] __vmalloc_node_range_noprof+0x228/0x1630 [ 363.051716][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.051753][T11043] ? rcu_is_watching+0x12/0xc0 [ 363.051794][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.051840][T11043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 363.051885][T11043] ? rcu_is_watching+0x12/0xc0 [ 363.051914][T11043] ? trace_kmem_cache_alloc+0xd5/0x100 [ 363.051948][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.051982][T11043] __vmalloc_node_noprof+0xad/0xf0 [ 363.052017][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.052056][T11043] copy_process+0x7fb/0x7ed0 [ 363.052091][T11043] ? __futex_wait+0x256/0x300 [ 363.052126][T11043] ? __pfx___futex_wait+0x10/0x10 [ 363.052170][T11043] ? __pfx_copy_process+0x10/0x10 [ 363.052210][T11043] ? futex_hash+0x141/0x370 [ 363.052241][T11043] kernel_clone+0x12e/0x9c0 [ 363.052274][T11043] ? __pfx_futex_wait+0x10/0x10 [ 363.052306][T11043] ? __pfx_kernel_clone+0x10/0x10 [ 363.052357][T11043] __do_sys_clone+0xd9/0x120 [ 363.052393][T11043] ? __pfx___do_sys_clone+0x10/0x10 [ 363.052439][T11043] ? ksys_write+0x1ac/0x250 [ 363.052473][T11043] ? rcu_is_watching+0x12/0xc0 [ 363.052506][T11043] do_syscall_64+0x10b/0xf80 [ 363.052547][T11043] ? clear_bhb_loop+0x40/0x90 [ 363.052579][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.052604][T11043] RIP: 0033:0x7f816dd9ce59 [ 363.052633][T11043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.052658][T11043] RSP: 002b:00007f816ec25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 363.052683][T11043] RAX: ffffffffffffffda RBX: 00007f816e015fa0 RCX: 00007f816dd9ce59 [ 363.052701][T11043] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000007 [ 363.052717][T11043] RBP: 00007f816de32d6f R08: 8000000000000001 R09: 0000000000000000 [ 363.052734][T11043] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 363.052749][T11043] R13: 00007f816e016038 R14: 00007f816e015fa0 R15: 00007ffd76c8a688 [ 363.052784][T11043] [ 363.487412][T11043] syz.2.941: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 363.514510][T11040] futex_wake_op: syz.3.940 tries to shift op by -2048; fix this program [ 363.601023][T11040] futex_wake_op: syz.3.940 tries to shift op by -2048; fix this program [ 363.644595][T11054] 0x000000000001-0x000000020000 : "" [ 363.659818][T11043] CPU: 1 UID: 0 PID: 11043 Comm: syz.2.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.659853][T11043] Tainted: [L]=SOFTLOCKUP [ 363.659860][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.659872][T11043] Call Trace: [ 363.659879][T11043] [ 363.659888][T11043] dump_stack_lvl+0x100/0x190 [ 363.659917][T11043] warn_alloc.cold+0x95/0x1c1 [ 363.659943][T11043] ? __pfx_warn_alloc+0x10/0x10 [ 363.659975][T11043] ? lockdep_hardirqs_on+0x78/0x100 [ 363.660012][T11043] ? __get_vm_area_node+0x2c5/0x330 [ 363.660049][T11043] ? __get_vm_area_node+0x208/0x330 [ 363.660084][T11043] __vmalloc_node_range_noprof+0xccd/0x1630 [ 363.660117][T11043] ? rcu_is_watching+0x12/0xc0 [ 363.660151][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.660191][T11043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 363.660225][T11043] ? rcu_is_watching+0x12/0xc0 [ 363.660250][T11043] ? trace_kmem_cache_alloc+0xd5/0x100 [ 363.660282][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.660309][T11043] __vmalloc_node_noprof+0xad/0xf0 [ 363.660340][T11043] ? kernel_clone+0x12e/0x9c0 [ 363.660375][T11043] copy_process+0x7fb/0x7ed0 [ 363.660407][T11043] ? __futex_wait+0x256/0x300 [ 363.660439][T11043] ? __pfx___futex_wait+0x10/0x10 [ 363.660480][T11043] ? __pfx_copy_process+0x10/0x10 [ 363.660512][T11043] ? futex_hash+0x141/0x370 [ 363.660551][T11043] kernel_clone+0x12e/0x9c0 [ 363.660582][T11043] ? __pfx_futex_wait+0x10/0x10 [ 363.660610][T11043] ? __pfx_kernel_clone+0x10/0x10 [ 363.660659][T11043] __do_sys_clone+0xd9/0x120 [ 363.660693][T11043] ? __pfx___do_sys_clone+0x10/0x10 [ 363.660737][T11043] ? ksys_write+0x1ac/0x250 [ 363.660768][T11043] ? rcu_is_watching+0x12/0xc0 [ 363.660801][T11043] do_syscall_64+0x10b/0xf80 [ 363.660836][T11043] ? clear_bhb_loop+0x40/0x90 [ 363.660864][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.660889][T11043] RIP: 0033:0x7f816dd9ce59 [ 363.660911][T11043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.660935][T11043] RSP: 002b:00007f816ec25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 363.660960][T11043] RAX: ffffffffffffffda RBX: 00007f816e015fa0 RCX: 00007f816dd9ce59 [ 363.660978][T11043] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000007 [ 363.660994][T11043] RBP: 00007f816de32d6f R08: 8000000000000001 R09: 0000000000000000 [ 363.661010][T11043] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 363.661025][T11043] R13: 00007f816e016038 R14: 00007f816e015fa0 R15: 00007ffd76c8a688 [ 363.661058][T11043] [ 363.661067][T11043] Mem-Info: [ 363.967417][T11054] ftl_cs: FTL header corrupt! [ 364.126216][T11043] active_anon:21602 inactive_anon:1323 isolated_anon:0 [ 364.126216][T11043] active_file:11990 inactive_file:49889 isolated_file:0 [ 364.126216][T11043] unevictable:768 dirty:980 writeback:0 [ 364.126216][T11043] slab_reclaimable:11103 slab_unreclaimable:107444 [ 364.126216][T11043] mapped:34267 shmem:11891 pagetables:1906 [ 364.126216][T11043] sec_pagetables:0 bounce:0 [ 364.126216][T11043] kernel_misc_reclaimable:0 [ 364.126216][T11043] free:1013708 free_pcp:7885 free_cma:0 [ 364.445119][T11043] Node 0 active_anon:87528kB inactive_anon:5292kB active_file:44132kB inactive_file:199352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141168kB dirty:3920kB writeback:0kB shmem:50428kB shmem_thp:8192kB shmem_pmdmapped:8192kB anon_thp:0kB kernel_stack:11944kB pagetables:6548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 364.525449][T11043] Node 1 active_anon:780kB inactive_anon:0kB active_file:3828kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:1076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 364.694535][T11043] Node 0 DMA free:11732kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.756455][T11043] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 364.782668][T11043] Node 0 DMA32 free:98020kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98528kB inactive_anon:5292kB active_file:44076kB inactive_file:199352kB unevictable:1536kB writepending:3920kB zspages:28kB present:3129332kB managed:2537272kB mlocked:0kB bounce:0kB free_pcp:28408kB local_pcp:13072kB free_cma:0kB [ 364.850465][T11043] lowmem_reserve[]: 0 0 1 1 1 [ 364.870410][T11043] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.935018][T11043] lowmem_reserve[]: 0 0 0 0 0 [ 364.948845][T11043] Node 1 Normal free:3938128kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:780kB inactive_anon:0kB active_file:3828kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.099240][T11043] lowmem_reserve[]: 0 0 0 0 0 [ 365.119223][T11043] Node 0 DMA: 7*4kB (U) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (M) 11*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 2*4096kB (UM) = 11732kB [ 365.201745][T11043] Node 0 DMA32: 1674*4kB (UE) 727*8kB (UME) 305*16kB (UE) 198*32kB (UM) 231*64kB (UME) 95*128kB (UM) 26*256kB (UM) 16*512kB (UME) 22*1024kB (UME) 0*2048kB 0*4096kB = 88048kB [ 365.300939][T11043] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 365.369812][T11043] Node 1 Normal: 132*4kB (UME) 108*8kB (UME) 118*16kB (UME) 116*32kB (UME) 84*64kB (UME) 54*128kB (UME) 46*256kB (UM) 13*512kB (UME) 9*1024kB (UM) 8*2048kB (UME) 946*4096kB (UM) = 3938128kB [ 365.462802][T11043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.497850][T11043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.537936][T11043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.565186][T11043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.574703][T11043] 82679 total pagecache pages [ 365.579675][T11043] 497 pages in swap cache [ 365.584109][T11043] Free swap = 122688kB [ 365.588887][T11043] Total swap = 124996kB [ 365.593179][T11043] 2097051 pages RAM [ 365.598671][T11043] 0 pages HighMem/MovableOnly [ 365.605485][T11043] 430844 pages reserved [ 365.609802][T11043] 0 pages cma reserved [ 366.190636][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.200407][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 366.540565][T11100] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 367.907851][T11134] netlink: 'syz.2.953': attribute type 33 has an invalid length. [ 367.939488][T11134] netlink: 322 bytes leftover after parsing attributes in process `syz.2.953'. [ 368.212802][T11134] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11134] [ 368.962365][T11156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.959'. [ 369.580890][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.587398][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.573652][T11213] Process accounting paused [ 373.493561][T11231] ubi0: attaching mtd0 [ 373.506408][T11231] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 373.522961][T11231] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 373.559322][T11231] eraseblock attaching information dump: [ 373.576927][T11231] ec 1 [ 373.591081][T11231] pnum 0 [ 373.601098][T11231] lnum 0 [ 373.611191][T11231] scrub 0 [ 373.616378][T11231] sqnum 1 [ 373.622809][T11231] Volume identifier header dump: [ 373.645647][T11231] magic 55424921 [ 373.667557][T11231] version 1 [ 373.689452][T11231] vol_type 1 [ 373.708283][T11231] copy_flag 0 [ 373.723719][T11231] compat 5 [ 373.734893][T11231] vol_id 2147479551 [ 373.781260][T11231] lnum 0 [ 373.825054][T11231] data_size 0 [ 373.841390][T11231] used_ebs 0 [ 373.861268][T11231] data_pad 0 [ 373.872194][T11231] sqnum 1 [ 373.905605][T11231] hdr_crc 65b3bd2d [ 373.933799][T11231] Volume identifier header hexdump: [ 374.359066][T11231] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 377.880377][T11330] FAULT_INJECTION: forcing a failure. [ 377.880377][T11330] name failslab, interval 1, probability 0, space 0, times 0 [ 377.982654][T11330] CPU: 1 UID: 0 PID: 11330 Comm: syz.1.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.982702][T11330] Tainted: [L]=SOFTLOCKUP [ 377.982713][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.982731][T11330] Call Trace: [ 377.982741][T11330] [ 377.982751][T11330] dump_stack_lvl+0x100/0x190 [ 377.982788][T11330] should_fail_ex.cold+0x5/0xa [ 377.982826][T11330] should_failslab+0xc2/0x120 [ 377.982865][T11330] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 377.982911][T11330] ? __kernfs_new_node+0xd2/0x9f0 [ 377.982951][T11330] __kernfs_new_node+0xd2/0x9f0 [ 377.982988][T11330] ? __pfx___kernfs_new_node+0x10/0x10 [ 377.983028][T11330] ? find_held_lock+0x2b/0x80 [ 377.983061][T11330] ? kernfs_root+0xee/0x2a0 [ 377.983090][T11330] ? kernfs_root+0xee/0x2a0 [ 377.983124][T11330] kernfs_new_node+0x11b/0x1a0 [ 377.983163][T11330] __kernfs_create_file+0x53/0x350 [ 377.983207][T11330] sysfs_add_file_mode_ns+0x207/0x3c0 [ 377.983245][T11330] sysfs_merge_group+0x194/0x340 [ 377.983279][T11330] ? __pfx_sysfs_merge_group+0x10/0x10 [ 377.983310][T11330] ? bus_add_device+0x368/0x6b0 [ 377.983339][T11330] ? __pfx_bus_add_device+0x10/0x10 [ 377.983375][T11330] ? __pfx_dev_add_physical_location+0x10/0x10 [ 377.983421][T11330] dpm_sysfs_add+0x237/0x280 [ 377.983460][T11330] device_add+0x9ef/0x1950 [ 377.983499][T11330] ? __pfx_device_add+0x10/0x10 [ 377.983537][T11330] ? __pfx___might_resched+0x10/0x10 [ 377.983569][T11330] ? lockdep_hardirqs_on+0x78/0x100 [ 377.983624][T11330] __add_disk+0x518/0xe40 [ 377.983671][T11330] add_disk_fwnode+0x118/0x5c0 [ 377.983714][T11330] loop_add+0x90b/0xb60 [ 377.983758][T11330] ? __pfx_loop_add+0x10/0x10 [ 377.983833][T11330] loop_control_ioctl+0xae/0x620 [ 377.983860][T11330] ? __pfx_loop_control_ioctl+0x10/0x10 [ 377.983886][T11330] ? xfd_validate_state+0x129/0x190 [ 377.983915][T11330] ? __pfx_loop_control_ioctl+0x10/0x10 [ 377.983944][T11330] __x64_sys_ioctl+0x18e/0x210 [ 377.983994][T11330] do_syscall_64+0x10b/0xf80 [ 377.984038][T11330] ? clear_bhb_loop+0x40/0x90 [ 377.984069][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.984096][T11330] RIP: 0033:0x7fd40579ce59 [ 377.984119][T11330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.984151][T11330] RSP: 002b:00007fd4065d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.984179][T11330] RAX: ffffffffffffffda RBX: 00007fd405a15fa0 RCX: 00007fd40579ce59 [ 377.984198][T11330] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 377.984216][T11330] RBP: 00007fd405832d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.984233][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.984250][T11330] R13: 00007fd405a16038 R14: 00007fd405a15fa0 R15: 00007ffe843d8578 [ 377.984287][T11330] [ 378.689330][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.699084][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.402154][T11404] can0: slcan on pty238. [ 381.656744][T11403] can0 (unregistered): slcan off pty238. [ 381.886734][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.894470][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.349531][T11449] can0: slcan on pty238. [ 383.558953][T11448] can0 (unregistered): slcan off pty238. [ 385.184269][T11490] netlink: 'syz.3.1013': attribute type 11 has an invalid length. [ 385.184290][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1013'. [ 386.499610][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.510169][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.052085][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.060299][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.376532][ T6846] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 387.594050][T11540] futex_wake_op: syz.3.1022 tries to shift op by -2048; fix this program [ 387.613725][T11540] futex_wake_op: syz.3.1022 tries to shift op by -2048; fix this program [ 388.467005][T11557] futex_wake_op: syz.1.1025 tries to shift op by -2048; fix this program [ 388.522869][T11557] futex_wake_op: syz.1.1025 tries to shift op by -2048; fix this program [ 388.564188][T11557] 0x000000000001-0x000000020000 : "" [ 388.637060][T11557] ftl_cs: FTL header corrupt! [ 389.630421][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.645133][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.780137][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.786817][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.445249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 390.809553][T11604] netlink: 'syz.0.1034': attribute type 11 has an invalid length. [ 390.820588][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 390.997252][ T6846] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 391.008586][ T6846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 391.022233][ T6846] CPU: 0 UID: 0 PID: 6846 Comm: kworker/u12:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.022260][ T6846] Tainted: [L]=SOFTLOCKUP [ 391.022266][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.022289][ T6846] Workqueue: hci2 hci_rx_work [ 391.022315][ T6846] Call Trace: [ 391.022320][ T6846] [ 391.022327][ T6846] dump_stack_lvl+0x100/0x190 [ 391.022346][ T6846] sysfs_warn_dup.cold+0x1c/0x28 [ 391.022369][ T6846] sysfs_create_dir_ns+0x24b/0x2b0 [ 391.022386][ T6846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 391.022402][ T6846] ? find_held_lock+0x2b/0x80 [ 391.022435][ T6846] ? kobject_add_internal+0x25f/0x930 [ 391.022466][ T6846] ? kobject_add_internal+0x25f/0x930 [ 391.022500][ T6846] ? do_raw_spin_unlock+0x145/0x1e0 [ 391.022520][ T6846] kobject_add_internal+0x2c8/0x930 [ 391.022540][ T6846] kobject_add+0x16a/0x1e0 [ 391.022557][ T6846] ? __pfx_kobject_add+0x10/0x10 [ 391.022572][ T6846] ? class_to_subsys+0x10f/0x150 [ 391.022595][ T6846] ? kobject_put+0xb9/0x640 [ 391.022609][ T6846] ? _raw_spin_unlock+0x28/0x50 [ 391.022634][ T6846] device_add+0x294/0x1950 [ 391.022654][ T6846] ? __pfx_dev_set_name+0x10/0x10 [ 391.022693][ T6846] ? __pfx_device_add+0x10/0x10 [ 391.022713][ T6846] ? mgmt_send_event_skb+0x2fb/0x460 [ 391.022741][ T6846] hci_conn_add_sysfs+0x1a3/0x260 [ 391.022768][ T6846] le_conn_complete_evt+0x11eb/0x1f60 [ 391.022794][ T6846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 391.022813][ T6846] ? __pfx_bt_warn+0x10/0x10 [ 391.022840][ T6846] hci_le_conn_complete_evt+0x23c/0x3a0 [ 391.022869][ T6846] ? skb_pull_data+0x15f/0x1e0 [ 391.022910][ T6846] hci_le_meta_evt+0x34a/0x5f0 [ 391.022934][ T6846] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 391.022958][ T6846] hci_event_packet+0x51c/0xcd0 [ 391.022980][ T6846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 391.023002][ T6846] ? __pfx_hci_event_packet+0x10/0x10 [ 391.023028][ T6846] ? kcov_remote_start+0x374/0x660 [ 391.023048][ T6846] ? lockdep_hardirqs_on+0x78/0x100 [ 391.023075][ T6846] hci_rx_work+0x451/0xfc0 [ 391.023099][ T6846] process_one_work+0xa0e/0x1980 [ 391.023125][ T6846] ? __pfx_process_one_work+0x10/0x10 [ 391.023146][ T6846] ? __pfx_hci_rx_work+0x10/0x10 [ 391.023167][ T6846] worker_thread+0x5ef/0xe50 [ 391.023189][ T6846] ? kthread+0x13a/0x450 [ 391.023201][ T6846] ? __pfx_worker_thread+0x10/0x10 [ 391.023214][ T6846] kthread+0x370/0x450 [ 391.023227][ T6846] ? __pfx_kthread+0x10/0x10 [ 391.023241][ T6846] ret_from_fork+0x72b/0xd50 [ 391.023258][ T6846] ? __pfx_ret_from_fork+0x10/0x10 [ 391.023275][ T6846] ? __switch_to+0x800/0x1100 [ 391.023294][ T6846] ? __switch_to_asm+0x39/0x70 [ 391.023313][ T6846] ? __pfx_kthread+0x10/0x10 [ 391.023327][ T6846] ret_from_fork_asm+0x1a/0x30 [ 391.023356][ T6846] [ 391.023403][ T6846] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 391.327658][ T6846] Bluetooth: hci2: failed to register connection device [ 392.209973][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.216386][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.406961][ T6859] Bluetooth: hci2: command 0x0406 tx timeout [ 393.953964][T11656] cgroup: fork rejected by pids controller in /syz1 [ 395.178907][T11723] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 395.485547][ T6859] Bluetooth: hci2: command 0x0406 tx timeout [ 395.737061][T11737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.746847][T11737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.786500][T11737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 395.825387][T11737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 395.858472][T11737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 395.876748][T11737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.024446][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 396.043734][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.055177][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.081118][T11756] FAULT_INJECTION: forcing a failure. [ 396.081118][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 396.126052][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.0.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.126095][T11756] Tainted: [L]=SOFTLOCKUP [ 396.126104][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.126120][T11756] Call Trace: [ 396.126129][T11756] [ 396.126138][T11756] dump_stack_lvl+0x100/0x190 [ 396.126172][T11756] should_fail_ex.cold+0x5/0xa [ 396.126206][T11756] should_failslab+0xc2/0x120 [ 396.126240][T11756] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 396.126281][T11756] ? kcm_create+0x11e/0x6a0 [ 396.126325][T11756] kcm_create+0x11e/0x6a0 [ 396.126366][T11756] __sock_create+0x339/0x860 [ 396.126414][T11756] __sys_socket+0x14d/0x260 [ 396.126453][T11756] ? fput+0x79/0x100 [ 396.126488][T11756] ? __pfx___sys_socket+0x10/0x10 [ 396.126527][T11756] ? ksys_write+0x1ac/0x250 [ 396.126558][T11756] ? __pfx_ksys_write+0x10/0x10 [ 396.126603][T11756] __x64_sys_socket+0x72/0xb0 [ 396.126627][T11756] ? lockdep_hardirqs_on+0x78/0x100 [ 396.126667][T11756] do_syscall_64+0x10b/0xf80 [ 396.126706][T11756] ? clear_bhb_loop+0x40/0x90 [ 396.126736][T11756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.126762][T11756] RIP: 0033:0x7f1ba999ce59 [ 396.126784][T11756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.126807][T11756] RSP: 002b:00007f1baa804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 396.126834][T11756] RAX: ffffffffffffffda RBX: 00007f1ba9c15fa0 RCX: 00007f1ba999ce59 [ 396.126852][T11756] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 396.126866][T11756] RBP: 00007f1ba9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 396.126882][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.126898][T11756] R13: 00007f1ba9c16038 R14: 00007f1ba9c15fa0 R15: 00007ffccfe6f418 [ 396.126932][T11756] [ 397.010892][ T30] audit: type=1326 audit(1779444970.926:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.0.1069" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ba999ce59 code=0x0 [ 397.089201][ T30] audit: type=1400 audit(1779444970.996:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11795 comm="syz.0.1069" [ 397.269563][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.277586][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.821343][ T6859] Bluetooth: hci0: command 0x0406 tx timeout [ 397.830886][ T6846] Bluetooth: hci2: command 0x0406 tx timeout [ 397.885804][ T6859] Bluetooth: hci3: command 0x0406 tx timeout [ 397.891945][ T6846] Bluetooth: hci1: command 0x0c1a tx timeout [ 399.007644][T11851] QAT: Device 0 not found [ 399.233169][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1083'. [ 399.892552][ T6846] Bluetooth: hci2: command 0x0406 tx timeout [ 401.561100][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.568279][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.977213][ T6846] Bluetooth: hci2: command 0x0406 tx timeout [ 402.112734][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.127819][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.638730][T11929] netlink: 'syz.2.1096': attribute type 11 has an invalid length. [ 402.648796][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 403.057766][T11900] Process accounting resumed [ 403.766221][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.775166][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.409634][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.417279][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.776122][T11965] netlink: 'syz.0.1107': attribute type 11 has an invalid length. [ 404.791187][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 405.943015][T11998] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 407.264855][T12023] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1120'. [ 407.377164][T12018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.402288][T12018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.424454][T12018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.445975][T12018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.565173][T12042] usb usb17: usbfs: interface 0 claimed by hub while 'syz.0.1122' resets device [ 407.669417][T12036] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1118'. [ 407.894554][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 407.902801][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.235945][T12052] tc_dump_action: action bad kind [ 409.406101][ T6846] Bluetooth: hci2: command 0x0406 tx timeout [ 409.412877][ T6859] Bluetooth: hci0: command 0x0406 tx timeout [ 409.485342][ T6846] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.491490][ T6859] Bluetooth: hci3: command 0x0406 tx timeout [ 410.005190][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.015869][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.726033][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.749580][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.773732][ T30] audit: type=1800 audit(1779444984.696:20): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1131" name="dbroot" dev="configfs" ino=46431 res=0 errno=0 [ 411.062971][T12126] FAULT_INJECTION: forcing a failure. [ 411.062971][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 411.081257][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.0.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.081307][T12126] Tainted: [L]=SOFTLOCKUP [ 411.081317][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.081334][T12126] Call Trace: [ 411.081342][T12126] [ 411.081352][T12126] dump_stack_lvl+0x100/0x190 [ 411.081388][T12126] should_fail_ex.cold+0x5/0xa [ 411.081425][T12126] should_failslab+0xc2/0x120 [ 411.081459][T12126] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 411.081505][T12126] ? sock_alloc_inode+0x26/0x290 [ 411.081548][T12126] ? __pfx_sock_alloc_inode+0x10/0x10 [ 411.081590][T12126] sock_alloc_inode+0x26/0x290 [ 411.081628][T12126] ? __pfx_sock_alloc_inode+0x10/0x10 [ 411.081665][T12126] alloc_inode+0x68/0x250 [ 411.081709][T12126] sock_alloc+0x44/0x280 [ 411.081742][T12126] ? security_socket_create+0x7f/0x250 [ 411.081787][T12126] __sock_create+0xc2/0x860 [ 411.081843][T12126] __sys_socket+0x14d/0x260 [ 411.081888][T12126] ? __pfx___sys_socket+0x10/0x10 [ 411.081939][T12126] __x64_sys_socket+0x72/0xb0 [ 411.081963][T12126] ? lockdep_hardirqs_on+0x78/0x100 [ 411.082007][T12126] do_syscall_64+0x10b/0xf80 [ 411.082049][T12126] ? clear_bhb_loop+0x40/0x90 [ 411.082083][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.082112][T12126] RIP: 0033:0x7f1ba999ce59 [ 411.082136][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.082161][T12126] RSP: 002b:00007f1baa804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 411.082189][T12126] RAX: ffffffffffffffda RBX: 00007f1ba9c15fa0 RCX: 00007f1ba999ce59 [ 411.082212][T12126] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 411.082229][T12126] RBP: 00007f1ba9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 411.082246][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.082262][T12126] R13: 00007f1ba9c16038 R14: 00007f1ba9c15fa0 R15: 00007ffccfe6f418 [ 411.082300][T12126] [ 411.082413][T12126] socket: no more sockets [ 412.210462][T12160] ubi0: attaching mtd0 [ 412.226356][T12150] can0: slcan on pty238. [ 412.243644][T12160] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 412.260459][T12160] eraseblock attaching information dump: [ 412.310038][T12160] ec 1 [ 412.334120][T12160] pnum 0 [ 412.342936][T12160] lnum 0 [ 412.348519][T12160] scrub 0 [ 412.373681][T12160] sqnum 1 [ 412.393806][T12160] Volume identifier header dump: [ 412.402746][T12160] magic 55424921 [ 412.421896][T12160] version 1 [ 412.432717][T12160] vol_type 1 [ 412.440990][T12160] copy_flag 0 [ 412.444517][T12160] compat 5 [ 412.452769][T12160] vol_id 2147479551 [ 412.475360][T12160] lnum 0 [ 412.492201][T12160] data_size 0 [ 412.505011][T12160] used_ebs 0 [ 412.513073][T12160] data_pad 0 [ 412.521689][T12160] sqnum 1 [ 412.526182][T12160] hdr_crc 65b3bd2d [ 412.555464][T12149] can0 (unregistered): slcan off pty238. [ 412.571335][T12160] Volume identifier header hexdump: [ 412.874681][T12160] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 413.483331][T12195] deleting an unspecified loop device is not supported. [ 413.878442][T12202] netlink: 'syz.3.1143': attribute type 11 has an invalid length. [ 413.888143][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 414.637062][ T6846] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 414.942627][T12225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 415.262048][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.269862][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.438558][T12227] random: crng reseeded on system resumption [ 415.716976][T12243] FAULT_INJECTION: forcing a failure. [ 415.716976][T12243] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.752410][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz.0.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.752450][T12243] Tainted: [L]=SOFTLOCKUP [ 415.752459][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.752475][T12243] Call Trace: [ 415.752484][T12243] [ 415.752494][T12243] dump_stack_lvl+0x100/0x190 [ 415.752532][T12243] should_fail_ex.cold+0x5/0xa [ 415.752562][T12243] get_futex_key+0x1d2/0x1510 [ 415.752593][T12243] ? __pfx_get_futex_key+0x10/0x10 [ 415.752625][T12243] ? lock_acquire+0x1b1/0x370 [ 415.752661][T12243] futex_wake+0xea/0x530 [ 415.752699][T12243] ? __pfx_futex_wake+0x10/0x10 [ 415.752736][T12243] ? exit_mm_release+0x19/0x30 [ 415.752783][T12243] do_futex+0x32b/0x350 [ 415.752809][T12243] ? __pfx_do_futex+0x10/0x10 [ 415.752832][T12243] ? __might_fault+0xc5/0x140 [ 415.752880][T12243] mm_release+0x24a/0x2f0 [ 415.752913][T12243] do_exit+0x707/0x2af0 [ 415.752960][T12243] ? __pfx_do_exit+0x10/0x10 [ 415.752999][T12243] ? do_raw_spin_lock+0x128/0x260 [ 415.753030][T12243] ? find_held_lock+0x2b/0x80 [ 415.753063][T12243] ? get_signal+0x7e5/0x2210 [ 415.753098][T12243] do_group_exit+0xd5/0x2a0 [ 415.753138][T12243] get_signal+0x20ff/0x2210 [ 415.753183][T12243] ? __pfx_get_signal+0x10/0x10 [ 415.753217][T12243] ? do_futex+0x192/0x350 [ 415.753244][T12243] arch_do_signal_or_restart+0x91/0x7a0 [ 415.753283][T12243] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 415.753331][T12243] ? rcu_is_watching+0x12/0xc0 [ 415.753364][T12243] exit_to_user_mode_loop+0x8b/0x4f0 [ 415.753390][T12243] ? rcu_is_watching+0x12/0xc0 [ 415.753424][T12243] do_syscall_64+0x6f2/0xf80 [ 415.753463][T12243] ? clear_bhb_loop+0x40/0x90 [ 415.753495][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.753524][T12243] RIP: 0033:0x7f1ba999ce59 [ 415.753547][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.753572][T12243] RSP: 002b:00007f1baa7c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.753598][T12243] RAX: fffffffffffffe00 RBX: 00007f1ba9c16188 RCX: 00007f1ba999ce59 [ 415.753623][T12243] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ba9c16188 [ 415.753637][T12243] RBP: 00007f1ba9c16180 R08: 0000000000000000 R09: 0000000000000000 [ 415.753646][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.753654][T12243] R13: 00007f1ba9c16218 R14: 00007ffccfe6f330 R15: 00007ffccfe6f418 [ 415.753673][T12243] [ 416.527457][T12251] can0: slcan on pty238. [ 416.637179][T12260] capability: warning: `syz.3.1151' uses 32-bit capabilities (legacy support in use) [ 416.645205][T12250] can0 (unregistered): slcan off pty238. [ 416.687030][ T6859] Bluetooth: hci2: command 0x0406 tx timeout [ 417.543643][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.551588][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 418.765556][ T6859] Bluetooth: hci2: command 0x0406 tx timeout [ 422.060470][T12326] kexec: Could not allocate control_code_buffer [ 422.960893][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 422.969966][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.004017][T12372] netlink: 'syz.3.1173': attribute type 11 has an invalid length. [ 424.024032][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 424.335722][T12383] ubi0: attaching mtd0 [ 424.350677][T12383] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 424.361876][T12383] eraseblock attaching information dump: [ 424.373933][T12383] ec 1 [ 424.378261][T12383] pnum 0 [ 424.382129][T12383] lnum 0 [ 424.388581][T12383] scrub 0 [ 424.394304][T12383] sqnum 1 [ 424.405736][T12383] Volume identifier header dump: [ 424.431459][T12383] magic 55424921 [ 424.473374][T12383] version 1 [ 424.502286][T12383] vol_type 1 [ 424.516197][T12383] copy_flag 0 [ 424.519827][T12383] compat 5 [ 424.523363][T12383] vol_id 2147479551 [ 424.528060][T12383] lnum 0 [ 424.532831][T12383] data_size 0 [ 424.537977][T12383] used_ebs 0 [ 424.551374][T12383] data_pad 0 [ 424.559016][T12383] sqnum 1 [ 424.582613][T12383] hdr_crc 65b3bd2d [ 424.628151][T12383] Volume identifier header hexdump: [ 424.797375][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.804323][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.836061][T12383] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 426.991071][T12431] ubi0: attaching mtd0 [ 427.003215][T12431] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 427.012608][T12431] eraseblock attaching information dump: [ 427.018521][T12431] ec 1 [ 427.021853][T12431] pnum 0 [ 427.027536][T12431] lnum 0 [ 427.035340][T12431] scrub 0 [ 427.041122][T12431] sqnum 1 [ 427.044756][T12431] Volume identifier header dump: [ 427.057116][T12431] magic 55424921 [ 427.076461][T12431] version 1 [ 427.092121][T12431] vol_type 1 [ 427.124224][T12431] copy_flag 0 [ 427.144544][T12431] compat 5 [ 427.159645][T12431] vol_id 2147479551 [ 427.191210][T12431] lnum 0 [ 427.196872][T12431] data_size 0 [ 427.207820][T12431] used_ebs 0 [ 427.212833][T12431] data_pad 0 [ 427.218246][T12431] sqnum 1 [ 427.224392][T12431] hdr_crc 65b3bd2d [ 427.257819][T12431] Volume identifier header hexdump: [ 427.507165][T12431] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 428.347098][T12449] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 428.354679][T12449] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 428.453637][ T6846] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 428.712091][T12466] : Can't lookup blockdev [ 428.763294][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 429.977119][T12484] input: f as /devices/virtual/input/input8 [ 430.788964][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 431.493593][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.500616][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.071298][T12537] netlink: 'syz.1.1208': attribute type 11 has an invalid length. [ 433.079817][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 433.381736][ T6859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.396402][ T6859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.407335][ T6859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.417694][ T6859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.432355][ T6859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 433.904110][ T6859] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 433.912670][T12545] Process accounting paused [ 434.572679][T12550] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.591710][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.607514][T12550] bridge_slave_0: entered allmulticast mode [ 434.625676][T12550] bridge_slave_0: entered promiscuous mode [ 434.645142][T12550] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.665578][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.672906][T12550] bridge_slave_1: entered allmulticast mode [ 434.692890][T12550] bridge_slave_1: entered promiscuous mode [ 434.768593][T12550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.806582][T12550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.898724][T12550] team0: Port device team_slave_0 added [ 434.919685][T12550] team0: Port device team_slave_1 added [ 434.971307][T12550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.986160][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.018142][T12550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.036452][T12550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.045013][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.075255][T12550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.273716][T12550] hsr_slave_0: entered promiscuous mode [ 435.288358][T12550] hsr_slave_1: entered promiscuous mode [ 435.299155][T12550] debugfs: 'hsr0' already exists in 'hsr' [ 435.308256][T12550] Cannot create hsr debugfs directory [ 435.474606][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.481782][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.490292][ T6859] Bluetooth: hci4: command tx timeout [ 436.004434][T12550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 436.039330][T12550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.072244][T12550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 436.090245][T12550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.109468][T12550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 436.152262][T12550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.162786][T12550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.178212][T12550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.256213][T12619] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 436.357402][T12550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.448786][T12550] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.588632][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.595774][T11705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.644147][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.651414][T11705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.565432][ T6859] Bluetooth: hci4: command tx timeout [ 437.654077][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.660669][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.707189][T12550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.221088][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 438.482107][T12550] veth0_vlan: entered promiscuous mode [ 438.511504][T12550] veth1_vlan: entered promiscuous mode [ 438.590206][T12550] veth0_macvtap: entered promiscuous mode [ 438.618388][T12550] veth1_macvtap: entered promiscuous mode [ 438.679942][T12550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.826722][T12550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.886551][T11705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.954217][T11705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.981764][T11705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.060800][T11705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.294070][T12693] ubi0: attaching mtd0 [ 439.306231][T12693] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 439.314216][ T6873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.324782][T12693] eraseblock attaching information dump: [ 439.332470][T12693] ec 1 [ 439.337769][ T6873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.360085][T12693] pnum 0 [ 439.363464][T12693] lnum 0 [ 439.367291][T12693] scrub 0 [ 439.377146][T12693] sqnum 1 [ 439.385665][T12693] Volume identifier header dump: [ 439.390703][T12693] magic 55424921 [ 439.398705][T12693] version 1 [ 439.402262][T12693] vol_type 1 [ 439.407437][T12693] copy_flag 0 [ 439.410869][T12693] compat 5 [ 439.414362][T12693] vol_id 2147479551 [ 439.419110][T12693] lnum 0 [ 439.423466][T12693] data_size 0 [ 439.428293][T12693] used_ebs 0 [ 439.432283][T12693] data_pad 0 [ 439.437400][T12693] sqnum 1 [ 439.443022][T12693] hdr_crc 65b3bd2d [ 439.452352][T12693] Volume identifier header hexdump: [ 439.471786][ T9229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.483471][ T9229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.529137][T12550] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 439.645705][ T6859] Bluetooth: hci4: command tx timeout [ 439.651315][T12693] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 440.029750][T12711] random: crng reseeded on system resumption [ 440.130689][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139694][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.081626][T12734] netlink: 'syz.1.1231': attribute type 11 has an invalid length. [ 441.129736][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 441.557878][T12744] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 441.726585][ T6859] Bluetooth: hci4: command tx timeout [ 442.010790][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 442.059847][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.105355][ T6846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.120353][ T6846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.135702][ T6846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.153402][T12756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.162788][ T6846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.187177][ T6846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.675390][T12796] ecryptfs_miscdev_write: Invalid packet size [0] [ 444.285536][ T6846] Bluetooth: hci5: command tx timeout [ 444.442087][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.462725][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.480124][T12759] bridge_slave_0: entered allmulticast mode [ 444.500908][T12759] bridge_slave_0: entered promiscuous mode [ 444.557560][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.571595][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.590677][T12759] bridge_slave_1: entered allmulticast mode [ 444.611254][T12759] bridge_slave_1: entered promiscuous mode [ 444.708191][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.761428][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.873597][T12759] team0: Port device team_slave_0 added [ 444.903978][T12759] team0: Port device team_slave_1 added [ 444.960926][T12820] can0: slcan on pty238. [ 444.961752][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.972648][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.001841][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.050224][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.057385][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.085245][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.105512][T12819] can0 (unregistered): slcan off pty238. [ 445.281502][T12759] hsr_slave_0: entered promiscuous mode [ 445.296244][T12759] hsr_slave_1: entered promiscuous mode [ 445.309427][T12759] debugfs: 'hsr0' already exists in 'hsr' [ 445.323841][T12759] Cannot create hsr debugfs directory [ 445.587448][T12828] vhci_hcd vhci_hcd.2: default hub control req: e5c0 v00f6 i0000 l0 [ 445.924183][T12759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 445.953586][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.966364][T12759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 445.993468][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.018234][T12759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 446.062011][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.079842][T12759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 446.101680][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.319124][T12825] Process accounting resumed [ 446.365112][ T6846] Bluetooth: hci5: command tx timeout [ 446.723719][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.768052][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.810768][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.819527][ T9229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.884780][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.892032][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.332750][T12871] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1256'. [ 447.364318][T12873] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1256'. [ 447.525388][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 447.641892][T12878] openvswitch: netlink: Key type 111 is out of range max 32 [ 447.989753][T12855] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 448.321240][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.449475][ T6846] Bluetooth: hci5: command tx timeout [ 449.370131][T12759] veth0_vlan: entered promiscuous mode [ 449.393820][T12759] veth1_vlan: entered promiscuous mode [ 449.461366][T12759] veth0_macvtap: entered promiscuous mode [ 449.514143][T12759] veth1_macvtap: entered promiscuous mode [ 449.583084][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.625239][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.650814][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.661065][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.661079][ T6922] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.669641][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.685327][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.708402][ T6922] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.754897][ T6922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.811878][ T6922] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.024910][ T6873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.056586][ T6873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.161198][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.179124][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.525813][ T6846] Bluetooth: hci5: command tx timeout [ 450.545778][T12943] netlink: get zone limit has 4 unknown bytes [ 454.548036][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'. [ 454.572866][T13009] sd 0:0:1:0: PR command failed: 1026 [ 454.619578][T13009] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 454.656470][T13009] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 455.802791][T13034] netlink: zone id is out of range [ 455.864839][T13034] netlink: zone id is out of range [ 455.887568][T13034] netlink: zone id is out of range [ 456.026744][T13034] netlink: set zone limit has 8 unknown bytes [ 456.076530][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1286'. [ 456.356867][T13052] FAULT_INJECTION: forcing a failure. [ 456.356867][T13052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.394275][T13052] CPU: 1 UID: 0 PID: 13052 Comm: syz.5.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.394320][T13052] Tainted: [L]=SOFTLOCKUP [ 456.394329][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.394346][T13052] Call Trace: [ 456.394361][T13052] [ 456.394371][T13052] dump_stack_lvl+0x100/0x190 [ 456.394407][T13052] should_fail_ex.cold+0x5/0xa [ 456.394442][T13052] _copy_from_user+0x2e/0xd0 [ 456.394473][T13052] kvm_vm_ioctl+0xf93/0x4050 [ 456.394522][T13052] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 456.394584][T13052] ? kasan_quarantine_put+0x104/0x240 [ 456.394611][T13052] ? lockdep_hardirqs_on+0x78/0x100 [ 456.394655][T13052] ? find_held_lock+0x2b/0x80 [ 456.394689][T13052] ? tomoyo_path_number_perm+0x28f/0x580 [ 456.394719][T13052] ? tomoyo_path_number_perm+0x28f/0x580 [ 456.394756][T13052] ? tomoyo_path_number_perm+0x188/0x580 [ 456.394789][T13052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.394833][T13052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.394875][T13052] ? do_vfs_ioctl+0x226/0x13e0 [ 456.394903][T13052] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 456.394944][T13052] ? find_held_lock+0x2b/0x80 [ 456.394972][T13052] ? __fget_files+0x215/0x3d0 [ 456.394998][T13052] ? hook_file_ioctl_common+0x149/0x410 [ 456.395035][T13052] ? __fget_files+0x21f/0x3d0 [ 456.395071][T13052] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 456.395108][T13052] __x64_sys_ioctl+0x18e/0x210 [ 456.395139][T13052] do_syscall_64+0x10b/0xf80 [ 456.395175][T13052] ? clear_bhb_loop+0x40/0x90 [ 456.395207][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.395235][T13052] RIP: 0033:0x7fe151b9ce59 [ 456.395258][T13052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.395283][T13052] RSP: 002b:00007fe152af1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.395309][T13052] RAX: ffffffffffffffda RBX: 00007fe151e15fa0 RCX: 00007fe151b9ce59 [ 456.395328][T13052] RDX: 0000200000000080 RSI: 000000004068aea3 RDI: 0000000000000003 [ 456.395344][T13052] RBP: 00007fe152af1090 R08: 0000000000000000 R09: 0000000000000000 [ 456.395412][T13052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.395428][T13052] R13: 00007fe151e16038 R14: 00007fe151e15fa0 R15: 00007fff3c4f3778 [ 456.395464][T13052] [ 457.335677][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.348592][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.359412][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.368910][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.387605][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.407276][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.555865][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.750550][T13080] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0ee5a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 457.766353][T13080] Call Trace: [ 457.769627][T13080] [ 457.772557][T13080] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 457.779269][T13080] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 457.785770][T13080] mce_cpu_restart+0xd5/0x1f0 [ 457.790445][T13080] ? __pfx_mce_cpu_restart+0x10/0x10 [ 457.795724][T13080] smp_call_function_many_cond+0x13d4/0x1700 [ 457.801710][T13080] ? __pfx_mce_cpu_restart+0x10/0x10 [ 457.807006][T13080] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 457.812821][T13080] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 457.819150][T13080] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 457.825162][T13080] ? __timer_delete_sync+0x151/0x1c0 [ 457.830444][T13080] ? __pfx_mce_cpu_restart+0x10/0x10 [ 457.835721][T13080] on_each_cpu_cond_mask+0x40/0x90 [ 457.840835][T13080] set_bank+0x240/0x3a0 [ 457.845010][T13080] ? __pfx_set_bank+0x10/0x10 [ 457.849676][T13080] ? find_held_lock+0x2b/0x80 [ 457.854347][T13080] ? sysfs_file_kobj+0xe4/0x290 [ 457.859204][T13080] ? sysfs_file_kobj+0xe4/0x290 [ 457.864057][T13080] ? __pfx_set_bank+0x10/0x10 [ 457.868726][T13080] dev_attr_store+0x58/0x80 [ 457.873229][T13080] ? __pfx_dev_attr_store+0x10/0x10 [ 457.878423][T13080] sysfs_kf_write+0xf2/0x150 [ 457.883004][T13080] kernfs_fop_write_iter+0x3e0/0x5f0 [ 457.888288][T13080] ? __pfx_sysfs_kf_write+0x10/0x10 [ 457.893479][T13080] vfs_write+0x6ac/0x1070 [ 457.897813][T13080] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 457.903619][T13080] ? __pfx_vfs_write+0x10/0x10 [ 457.908414][T13080] ksys_write+0x12a/0x250 [ 457.912784][T13080] ? __pfx_ksys_write+0x10/0x10 [ 457.917674][T13080] ? rcu_is_watching+0x12/0xc0 [ 457.922477][T13080] do_syscall_64+0x10b/0xf80 [ 457.927122][T13080] ? clear_bhb_loop+0x40/0x90 [ 457.931831][T13080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.937722][T13080] RIP: 0033:0x7fd40579ce59 [ 457.942137][T13080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.961771][T13080] RSP: 002b:00007fd4065b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.970183][T13080] RAX: ffffffffffffffda RBX: 00007fd405a16090 RCX: 00007fd40579ce59 [ 457.978146][T13080] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000008 [ 457.986106][T13080] RBP: 00007fd405832d6f R08: 0000000000000000 R09: 0000000000000000 [ 457.994078][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.002063][T13080] R13: 00007fd405a16128 R14: 00007fd405a16090 R15: 00007ffe843d8578 [ 458.010099][T13080] [ 459.153634][T13091] can0: slcan on pty238. [ 459.286395][T13090] can0 (unregistered): slcan off pty238. [ 460.128046][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.134436][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.631080][T13164] Process accounting resumed [ 465.189943][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.201054][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.776258][T13182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 467.504897][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.514652][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.243140][T13222] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1319'. [ 470.939756][T13249] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 470.953946][T13249] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 472.582143][T13267] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 473.950199][ T6859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 473.964219][ T6859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 473.978893][ T6859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 473.987713][ T6859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 473.998550][ T6859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.517624][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.524802][T13284] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.532346][T13284] bridge_slave_0: entered allmulticast mode [ 474.541027][T13284] bridge_slave_0: entered promiscuous mode [ 474.548948][T13284] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.558012][T13284] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.565323][T13284] bridge_slave_1: entered allmulticast mode [ 474.572444][T13284] bridge_slave_1: entered promiscuous mode [ 474.602474][T13284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.615963][T13284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.647177][T13284] team0: Port device team_slave_0 added [ 474.655770][T13284] team0: Port device team_slave_1 added [ 474.682575][T13284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.693135][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.723044][T13284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.738874][T13284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.749909][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.782002][T13284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.872591][T13284] hsr_slave_0: entered promiscuous mode [ 474.879073][T13284] hsr_slave_1: entered promiscuous mode [ 474.887152][T13284] debugfs: 'hsr0' already exists in 'hsr' [ 474.892904][T13284] Cannot create hsr debugfs directory [ 474.920157][T13308] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[12759] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13308] [ 475.322374][T13284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 475.350850][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.359694][T13284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 475.372954][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.382720][T13284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 475.400338][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.412818][T13284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 475.427205][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.688065][T13284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.728441][T13284] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.753765][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.760987][T11705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.793417][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.800692][T11705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.045225][ T6846] Bluetooth: hci6: command tx timeout [ 476.295682][T13284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.591057][T13284] veth0_vlan: entered promiscuous mode [ 476.613470][T13284] veth1_vlan: entered promiscuous mode [ 476.668983][T13284] veth0_macvtap: entered promiscuous mode [ 476.692302][T13284] veth1_macvtap: entered promiscuous mode [ 476.802595][T13284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.846654][T13284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.888050][T12614] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.912377][T12614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.949059][T12614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.965642][T12614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.234056][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.244249][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.318774][T12614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.328605][T12614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.125401][ T6846] Bluetooth: hci6: command tx timeout [ 478.324767][T13363] can0: slcan on pty238. [ 478.467023][T13362] can0 (unregistered): slcan off pty238. [ 480.205764][ T6846] Bluetooth: hci6: command tx timeout [ 481.209433][ T6859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 481.226619][ T6859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 481.238197][ T6859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 481.270172][ T6859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 481.282367][ T6859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 482.286228][ T6859] Bluetooth: hci6: command tx timeout [ 482.385651][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.393077][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.403550][T13407] bridge_slave_0: entered allmulticast mode [ 482.411981][T13407] bridge_slave_0: entered promiscuous mode [ 482.423679][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.434336][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.444503][T13407] bridge_slave_1: entered allmulticast mode [ 482.454733][T13407] bridge_slave_1: entered promiscuous mode [ 482.504870][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.519205][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.566292][T13407] team0: Port device team_slave_0 added [ 482.577085][T13407] team0: Port device team_slave_1 added [ 482.624349][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.632591][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.663754][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.677969][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.701163][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.730485][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.844596][T13407] hsr_slave_0: entered promiscuous mode [ 482.854155][T13407] hsr_slave_1: entered promiscuous mode [ 482.861235][T13407] debugfs: 'hsr0' already exists in 'hsr' [ 482.867434][T13407] Cannot create hsr debugfs directory [ 483.094795][T13419] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 483.325355][ T6859] Bluetooth: hci7: command tx timeout [ 484.341721][ T6846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 484.358543][ T6846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 484.367337][ T6846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 484.381906][ T6846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 484.393027][ T6846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 484.478491][T13407] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.513923][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.559601][T13441] can0: slcan on pty238. [ 484.559948][T13407] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.600393][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.610203][T13407] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.623661][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.660010][T13407] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 484.693208][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.702695][T13440] can0 (unregistered): slcan off pty238. [ 485.025895][T13456] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1353'. [ 485.095818][T13407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.141319][T13407] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.182761][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.190005][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.240625][T12614] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.247886][T12614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.405360][ T6846] Bluetooth: hci7: command tx timeout [ 486.159489][T13439] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.172351][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.195260][T13439] bridge_slave_0: entered allmulticast mode [ 486.207112][T13439] bridge_slave_0: entered promiscuous mode [ 486.233540][T13439] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.240965][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.248610][T13439] bridge_slave_1: entered allmulticast mode [ 486.256583][T13439] bridge_slave_1: entered promiscuous mode [ 486.305676][T13439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.320238][T13439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.365182][T13439] team0: Port device team_slave_0 added [ 486.378120][T13439] team0: Port device team_slave_1 added [ 486.445666][ T6846] Bluetooth: hci8: command tx timeout [ 486.628785][T13439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.645227][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.715045][T13439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.747197][T13439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.754173][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.820243][T13439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.997494][T13439] hsr_slave_0: entered promiscuous mode [ 487.008648][T13487] Process accounting resumed [ 487.022971][T13439] hsr_slave_1: entered promiscuous mode [ 487.036605][T13439] debugfs: 'hsr0' already exists in 'hsr' [ 487.042497][T13439] Cannot create hsr debugfs directory [ 487.061890][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.487084][ T6859] Bluetooth: hci7: command tx timeout [ 487.642614][T13495] FAULT_INJECTION: forcing a failure. [ 487.642614][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 487.694661][T13495] CPU: 1 UID: 0 PID: 13495 Comm: syz.6.1356 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.694706][T13495] Tainted: [L]=SOFTLOCKUP [ 487.694714][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.694731][T13495] Call Trace: [ 487.694741][T13495] [ 487.694750][T13495] dump_stack_lvl+0x100/0x190 [ 487.694785][T13495] should_fail_ex.cold+0x5/0xa [ 487.694819][T13495] should_failslab+0xc2/0x120 [ 487.694850][T13495] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 487.694893][T13495] ? dup_fd+0x4d/0xd10 [ 487.694924][T13495] ? do_futex+0x192/0x350 [ 487.694960][T13495] dup_fd+0x4d/0xd10 [ 487.694990][T13495] ? __pfx_get_nodes+0x10/0x10 [ 487.695027][T13495] __x64_sys_close_range+0x405/0x5d0 [ 487.695067][T13495] ? __pfx___x64_sys_close_range+0x10/0x10 [ 487.695106][T13495] ? rcu_is_watching+0x12/0xc0 [ 487.695145][T13495] do_syscall_64+0x10b/0xf80 [ 487.695194][T13495] ? clear_bhb_loop+0x40/0x90 [ 487.695230][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.695259][T13495] RIP: 0033:0x7f6edf99ce59 [ 487.695283][T13495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.695309][T13495] RSP: 002b:00007f6ee07c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 487.695341][T13495] RAX: ffffffffffffffda RBX: 00007f6edfc15fa0 RCX: 00007f6edf99ce59 [ 487.695360][T13495] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 487.695379][T13495] RBP: 00007f6edfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 487.695396][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.695413][T13495] R13: 00007f6edfc16038 R14: 00007f6edfc15fa0 R15: 00007fff62a951a8 [ 487.695448][T13495] [ 487.874432][T13407] veth0_vlan: entered promiscuous mode [ 488.038332][T13407] veth1_vlan: entered promiscuous mode [ 488.056737][T13439] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 488.089233][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.136805][T13439] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 488.158238][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.192828][T13439] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 488.233518][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.262037][T13439] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 488.279448][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.300982][T13407] veth0_macvtap: entered promiscuous mode [ 488.323021][T13407] veth1_macvtap: entered promiscuous mode [ 488.407044][T13407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.475923][T13407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.516973][ T9229] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.528711][ T6846] Bluetooth: hci8: command tx timeout [ 488.539142][ T9229] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.612049][ T9229] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.625965][ T9229] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.089863][T11705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.117394][T11705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.186004][T13439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.256017][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.275105][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.304357][T13439] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.349617][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.356909][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.387927][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.395158][ T9229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.566037][ T6846] Bluetooth: hci7: command tx timeout [ 490.388720][T13439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.605710][ T6846] Bluetooth: hci8: command tx timeout [ 491.227018][T13439] veth0_vlan: entered promiscuous mode [ 491.238692][T13537] sd 0:0:1:0: PR command failed: 1026 [ 491.248131][T13439] veth1_vlan: entered promiscuous mode [ 491.267335][T13537] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 491.295090][T13537] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 491.303673][T13439] veth0_macvtap: entered promiscuous mode [ 491.323934][T13439] veth1_macvtap: entered promiscuous mode [ 491.370137][T13439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.395175][T13537] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 491.422603][T13439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.471495][ T6922] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.507578][ T6922] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.544894][ T6922] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.602272][ T6922] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.893594][ T9225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.937987][ T9225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.054280][ T30] audit: type=1800 audit(1779445065.966:21): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1360" name="features" dev="configfs" ino=57071 res=0 errno=0 [ 492.124156][ T9225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.156262][ T9225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.685693][ T6846] Bluetooth: hci8: command tx timeout [ 492.715458][T13550] ubi0: attaching mtd0 [ 492.732333][T13550] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 492.768943][T13550] eraseblock attaching information dump: [ 492.791164][ T6859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.809451][ T6859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.829412][ T6859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.847580][ T6859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.859689][ T6859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.908716][T13550] ec 1 [ 492.929001][T13550] pnum 0 [ 492.951232][T13550] lnum 0 [ 492.995923][T13550] scrub 0 [ 493.020206][T13550] sqnum 1 [ 493.044633][T13550] Volume identifier header dump: [ 493.063886][T13550] magic 55424921 [ 493.145976][T13550] version 1 [ 493.158755][T13550] vol_type 1 [ 493.260282][T13550] copy_flag 0 [ 493.286191][T13550] compat 5 [ 493.292638][T13550] vol_id 2147479551 [ 493.322789][T13550] lnum 0 [ 493.330056][T13550] data_size 0 [ 493.340192][T13550] used_ebs 0 [ 493.362040][T13550] data_pad 0 [ 493.370236][T13550] sqnum 1 [ 493.418099][T13550] hdr_crc 65b3bd2d [ 493.423675][T13550] Volume identifier header hexdump: [ 493.751444][T13550] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 495.007395][ T6846] Bluetooth: hci2: command tx timeout [ 495.938138][T13551] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.945753][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.953225][T13551] bridge_slave_0: entered allmulticast mode [ 495.962385][T13551] bridge_slave_0: entered promiscuous mode [ 495.978867][T13551] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.987763][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.995132][T13551] bridge_slave_1: entered allmulticast mode [ 496.011573][T13551] bridge_slave_1: entered promiscuous mode [ 496.343354][T13551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.370622][T13551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.524023][T13551] team0: Port device team_slave_0 added [ 496.561184][T13551] team0: Port device team_slave_1 added [ 496.706050][T13551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.745327][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.815024][T13551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.861448][T13551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.886787][T13551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.969524][T13551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.090984][ T6846] Bluetooth: hci2: command tx timeout [ 497.175668][T13551] hsr_slave_0: entered promiscuous mode [ 497.198114][T13551] hsr_slave_1: entered promiscuous mode [ 497.224284][T13551] debugfs: 'hsr0' already exists in 'hsr' [ 497.255163][T13551] Cannot create hsr debugfs directory [ 497.661245][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1370'. [ 498.606186][T13632] FAULT_INJECTION: forcing a failure. [ 498.606186][T13632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.657129][T13632] CPU: 0 UID: 0 PID: 13632 Comm: syz.7.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.657176][T13632] Tainted: [L]=SOFTLOCKUP [ 498.657185][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.657201][T13632] Call Trace: [ 498.657209][T13632] [ 498.657220][T13632] dump_stack_lvl+0x100/0x190 [ 498.657255][T13632] should_fail_ex.cold+0x5/0xa [ 498.657290][T13632] _copy_from_iter+0x1f4/0x1690 [ 498.657325][T13632] ? __asan_memset+0x23/0x50 [ 498.657373][T13632] ? __pfx__copy_from_iter+0x10/0x10 [ 498.657403][T13632] ? __pfx___alloc_skb+0x10/0x10 [ 498.657447][T13632] netlink_sendmsg+0x808/0xda0 [ 498.657494][T13632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.657534][T13632] ? __import_iovec+0x1d2/0x640 [ 498.657566][T13632] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 498.657615][T13632] ____sys_sendmsg+0x9e1/0xb70 [ 498.657653][T13632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.657696][T13632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.657753][T13632] ___sys_sendmsg+0x190/0x1e0 [ 498.657797][T13632] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.657882][T13632] __sys_sendmsg+0x170/0x220 [ 498.657916][T13632] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.657969][T13632] ? rcu_is_watching+0x12/0xc0 [ 498.658007][T13632] do_syscall_64+0x10b/0xf80 [ 498.658047][T13632] ? clear_bhb_loop+0x40/0x90 [ 498.658081][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.658110][T13632] RIP: 0033:0x7f03bb19ce59 [ 498.658133][T13632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.658160][T13632] RSP: 002b:00007f03bbffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.658186][T13632] RAX: ffffffffffffffda RBX: 00007f03bb415fa0 RCX: 00007f03bb19ce59 [ 498.658205][T13632] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000004 [ 498.658222][T13632] RBP: 00007f03bbffa090 R08: 0000000000000000 R09: 0000000000000000 [ 498.658239][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.658256][T13632] R13: 00007f03bb416038 R14: 00007f03bb415fa0 R15: 00007fff09aa9e88 [ 498.658293][T13632] [ 499.165581][ T6846] Bluetooth: hci2: command tx timeout [ 499.344807][T13551] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 499.400793][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.442415][T13551] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 499.488357][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.597038][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1375'. [ 499.615434][T13551] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 499.639935][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.669189][T13551] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 499.707882][T13551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.208088][T13551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.247735][ T6846] Bluetooth: hci2: command tx timeout [ 501.280610][T13551] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.298877][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.298996][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.398874][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.399004][T11702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.571460][T13551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.583133][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.583196][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.740747][T13679] ubi0: attaching mtd0 [ 501.741843][T13679] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 501.741871][T13679] eraseblock attaching information dump: [ 501.741878][T13679] ec 1 [ 501.741883][T13679] pnum 0 [ 501.741889][T13679] lnum 0 [ 501.741894][T13679] scrub 0 [ 501.741900][T13679] sqnum 1 [ 501.741906][T13679] Volume identifier header dump: [ 501.741911][T13679] magic 55424921 [ 501.741917][T13679] version 1 [ 501.741922][T13679] vol_type 1 [ 501.741928][T13679] copy_flag 0 [ 501.741933][T13679] compat 5 [ 501.741938][T13679] vol_id 2147479551 [ 501.741945][T13679] lnum 0 [ 501.741950][T13679] data_size 0 [ 501.741955][T13679] used_ebs 0 [ 501.752122][T13679] data_pad 0 [ 501.752134][T13679] sqnum 1 [ 501.752140][T13679] hdr_crc 65b3bd2d [ 501.752146][T13679] Volume identifier header hexdump: [ 501.972017][T13679] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 503.172056][T13551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.350081][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.356663][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.674877][ T30] audit: type=1800 audit(1779445077.586:22): pid=13672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1379" name="file0" dev="tmpfs" ino=44 res=0 errno=0 [ 503.977343][T13551] veth0_vlan: entered promiscuous mode [ 504.015889][T13551] veth1_vlan: entered promiscuous mode [ 504.112766][T13551] veth0_macvtap: entered promiscuous mode [ 504.157562][T13551] veth1_macvtap: entered promiscuous mode [ 504.207667][T13551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.234238][T13551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.273435][ T9225] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.316172][ T9225] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.331179][ T9225] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.354812][ T9225] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.598527][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1385'. [ 504.641097][ T6873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.673092][ T6873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.909812][ T6860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.942394][ T6860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.001427][T13718] zswap: compressor I not available [ 505.669299][T13734] can0: slcan on pty238. [ 505.976250][T13729] can0 (unregistered): slcan off pty238. [ 506.150332][T13743] FAULT_INJECTION: forcing a failure. [ 506.150332][T13743] name failslab, interval 1, probability 0, space 0, times 0 [ 506.208780][T13743] CPU: 1 UID: 0 PID: 13743 Comm: syz.8.1389 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.208808][T13743] Tainted: [L]=SOFTLOCKUP [ 506.208813][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.208822][T13743] Call Trace: [ 506.208827][T13743] [ 506.208832][T13743] dump_stack_lvl+0x100/0x190 [ 506.208854][T13743] should_fail_ex.cold+0x5/0xa [ 506.208873][T13743] should_failslab+0xc2/0x120 [ 506.208890][T13743] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 506.208915][T13743] ? __alloc_skb+0x140/0x710 [ 506.208934][T13743] __alloc_skb+0x140/0x710 [ 506.208949][T13743] ? __alloc_skb+0x5b7/0x710 [ 506.208964][T13743] ? __pfx___alloc_skb+0x10/0x10 [ 506.208982][T13743] ? __mutex_lock+0x26d/0x1b10 [ 506.208998][T13743] netlink_dump+0x194/0xd00 [ 506.209021][T13743] ? __pfx_netlink_dump+0x10/0x10 [ 506.209039][T13743] ? __netlink_lookup+0x65c/0x900 [ 506.209070][T13743] __netlink_dump_start+0x6d6/0x990 [ 506.209093][T13743] ? __pfx_inet6_dump_ifinfo+0x10/0x10 [ 506.209112][T13743] rtnetlink_rcv_msg+0xb3e/0xe90 [ 506.209131][T13743] ? __pfx_inet6_dump_ifinfo+0x10/0x10 [ 506.209151][T13743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.209170][T13743] ? __pfx_inet6_dump_ifinfo+0x10/0x10 [ 506.209193][T13743] ? ref_tracker_free+0x37e/0x6c0 [ 506.209214][T13743] netlink_rcv_skb+0x159/0x420 [ 506.209236][T13743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.209256][T13743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.209284][T13743] ? netlink_deliver_tap+0x1ae/0xcc0 [ 506.209308][T13743] netlink_unicast+0x585/0x850 [ 506.209332][T13743] ? __pfx_netlink_unicast+0x10/0x10 [ 506.209359][T13743] netlink_sendmsg+0x8b0/0xda0 [ 506.209399][T13743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.209427][T13743] ? __import_iovec+0x1d2/0x640 [ 506.209445][T13743] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 506.209471][T13743] ____sys_sendmsg+0x9e1/0xb70 [ 506.209491][T13743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.209514][T13743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.209547][T13743] ___sys_sendmsg+0x190/0x1e0 [ 506.209570][T13743] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.209620][T13743] __sys_sendmsg+0x170/0x220 [ 506.209641][T13743] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.209666][T13743] ? rcu_is_watching+0x12/0xc0 [ 506.209687][T13743] do_syscall_64+0x10b/0xf80 [ 506.209709][T13743] ? clear_bhb_loop+0x40/0x90 [ 506.209727][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.209742][T13743] RIP: 0033:0x7f6ff799ce59 [ 506.209756][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.209770][T13743] RSP: 002b:00007f6ff882b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.209785][T13743] RAX: ffffffffffffffda RBX: 00007f6ff7c15fa0 RCX: 00007f6ff799ce59 [ 506.209795][T13743] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000004 [ 506.209803][T13743] RBP: 00007f6ff882b090 R08: 0000000000000000 R09: 0000000000000000 [ 506.209812][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.209820][T13743] R13: 00007f6ff7c16038 R14: 00007f6ff7c15fa0 R15: 00007ffcde46ad88 [ 506.209839][T13743] [ 508.806325][T13773] hub 1-0:1.0: USB hub found [ 508.829474][T13773] hub 1-0:1.0: 1 port detected [ 510.192705][T12614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.563408][T12614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.860479][T13811] Setting dangerous option i915.mitigations - tainting kernel [ 510.876117][T13811] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 510.892965][T12614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.217723][T12614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.662299][T13840] ubi0: attaching mtd0 [ 511.693400][T13840] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 511.706521][T13840] eraseblock attaching information dump: [ 511.769218][T13840] ec 1 [ 511.795169][T13840] pnum 0 [ 511.804008][T13840] lnum 0 [ 511.821397][T13840] scrub 0 [ 511.836946][T13840] sqnum 1 [ 511.862443][T13840] Volume identifier header dump: [ 511.880222][T13840] magic 55424921 [ 511.907818][T13840] version 1 [ 511.933424][T13840] vol_type 1 [ 511.974193][T13840] copy_flag 0 [ 511.998499][T13840] compat 5 [ 512.012711][T13840] vol_id 2147479551 [ 512.050681][T13840] lnum 0 [ 512.112654][T13840] data_size 0 [ 512.130422][T13840] used_ebs 0 [ 512.151620][T13840] data_pad 0 [ 512.181644][T13840] sqnum 1 [ 512.211189][T13840] hdr_crc 65b3bd2d [ 512.233057][T13840] Volume identifier header hexdump: [ 512.546958][T12614] bridge_slave_1: left allmulticast mode [ 512.555616][T12614] bridge_slave_1: left promiscuous mode [ 512.570451][T12614] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.630360][T12614] bridge_slave_0: left allmulticast mode [ 512.663898][T12614] bridge_slave_0: left promiscuous mode [ 512.673149][T13840] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 512.681786][T12614] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.875985][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.885314][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 513.434849][T12614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.458978][T13851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 513.476352][T12614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.504522][T12614] bond0 (unregistering): Released all slaves [ 513.804885][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 514.670845][T12614] hsr_slave_0: left promiscuous mode [ 514.718124][T12614] hsr_slave_1: left promiscuous mode [ 514.745935][T12614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.766439][T12614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.949822][T12614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.994527][T12614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.026709][T12614] veth1_macvtap: left promiscuous mode [ 515.032341][T12614] veth0_macvtap: left promiscuous mode [ 515.048894][T12614] veth1_vlan: left promiscuous mode [ 515.058586][T12614] veth0_vlan: left promiscuous mode [ 515.942774][T12614] team0 (unregistering): Port device team_slave_1 removed [ 515.990401][T12614] team0 (unregistering): Port device team_slave_0 removed [ 516.246395][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 518.152854][T13962] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 518.508438][T13934] [U] ^@ [ 518.725694][ T5712] Process accounting paused [ 518.825374][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 518.918649][ T30] audit: type=1800 audit(1779445092.836:23): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1427" name="dbroot" dev="configfs" ino=60442 res=0 errno=0 [ 520.668615][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 521.151433][T14026] ubi0: attaching mtd0 [ 521.179853][T14026] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 521.219934][T14026] eraseblock attaching information dump: [ 521.246520][T14026] ec 1 [ 521.252668][T14026] pnum 0 [ 521.269455][T14026] lnum 0 [ 521.280563][T14026] scrub 0 [ 521.292551][T14026] sqnum 1 [ 521.306266][T14026] Volume identifier header dump: [ 521.313871][T14026] magic 55424921 [ 521.322356][T14026] version 1 [ 521.344065][T14026] vol_type 1 [ 521.361444][T14026] copy_flag 0 [ 521.369464][T14026] compat 5 [ 521.409180][T14026] vol_id 2147479551 [ 521.441400][T14026] lnum 0 [ 521.462440][T14026] data_size 0 [ 521.505320][T14026] used_ebs 0 [ 521.521744][T14026] data_pad 0 [ 521.527282][T14026] sqnum 1 [ 521.540851][T14026] hdr_crc 65b3bd2d [ 521.554748][T14026] Volume identifier header hexdump: [ 522.349426][T14026] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 524.471945][ T30] audit: type=1800 audit(1779445098.386:24): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1441" name="lu_gp_id" dev="configfs" ino=60656 res=0 errno=0 [ 525.174915][T14083] ubi0: attaching mtd0 [ 525.244171][T14083] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 525.285635][T14083] eraseblock attaching information dump: [ 525.292714][T14083] ec 1 [ 525.295142][T14079] zswap: compressor IJv. not available [ 525.309945][T14083] pnum 0 [ 525.320176][T14083] lnum 0 [ 525.333762][T14083] scrub 0 [ 525.352029][T14083] sqnum 1 [ 525.365068][T14083] Volume identifier header dump: [ 525.372876][T14083] magic 55424921 [ 525.402658][T14083] version 1 [ 525.459193][T14083] vol_type 1 [ 525.459215][T14083] copy_flag 0 [ 525.459227][T14083] compat 5 [ 525.459238][T14083] vol_id 2147479551 [ 525.459250][T14083] lnum 0 [ 525.459261][T14083] data_size 0 [ 525.459272][T14083] used_ebs 0 [ 525.459283][T14083] data_pad 0 [ 525.459293][T14083] sqnum 1 [ 525.459305][T14083] hdr_crc 65b3bd2d [ 525.459332][T14083] Volume identifier header hexdump: [ 525.846231][T14083] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 527.743678][T14121] can0: slcan on pty238. [ 528.030655][T14115] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 528.077032][T14115] File: /dev/nullb0 PID: 14115 Comm: syz.6.1449 [ 528.155212][T14120] can0 (unregistered): slcan off pty238. [ 528.961536][T14149] netlink: 'syz.8.1455': attribute type 11 has an invalid length. [ 532.776150][T14197] zswap: compressor not available [ 532.892180][T14216] futex_wake_op: syz.8.1464 tries to shift op by -2048; fix this program [ 532.910187][T14218] futex_wake_op: syz.8.1464 tries to shift op by -2048; fix this program [ 535.770448][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1472'. [ 535.892722][T14281] random: crng reseeded on system resumption [ 536.014706][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.024897][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.024473][ T30] audit: type=1800 audit(1779445110.936:25): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1476" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 538.140870][T14336] netlink: 'syz.8.1480': attribute type 11 has an invalid length. [ 538.484563][ T30] audit: type=1800 audit(1779445112.396:26): pid=14343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1482" name="dbroot" dev="configfs" ino=61257 res=0 errno=0 [ 539.732593][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1486'. [ 539.761976][T14364] ipvlan1: entered promiscuous mode [ 539.768340][T14364] ipvlan1: entered allmulticast mode [ 539.777535][T14364] veth0_vlan: entered allmulticast mode [ 539.810974][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1486'. [ 541.511495][T14390] hub 1-0:1.0: USB hub found [ 541.584498][T14390] hub 1-0:1.0: 1 port detected [ 543.476403][T14432] random: crng reseeded on system resumption [ 545.394102][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 545.403788][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 545.752920][T14450] kexec: Could not allocate control_code_buffer [ 545.897794][T14463] FAULT_INJECTION: forcing a failure. [ 545.897794][T14463] name failslab, interval 1, probability 0, space 0, times 0 [ 545.912562][T14463] CPU: 0 UID: 0 PID: 14463 Comm: syz.8.1508 Tainted: G U L syzkaller #0 PREEMPT(full) [ 545.912619][T14463] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 545.912630][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.912646][T14463] Call Trace: [ 545.912655][T14463] [ 545.912666][T14463] dump_stack_lvl+0x100/0x190 [ 545.912704][T14463] should_fail_ex.cold+0x5/0xa [ 545.912740][T14463] should_failslab+0xc2/0x120 [ 545.912775][T14463] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 545.912826][T14463] ? kcm_create+0x11e/0x6a0 [ 545.912873][T14463] kcm_create+0x11e/0x6a0 [ 545.912917][T14463] __sock_create+0x339/0x860 [ 545.912967][T14463] __sys_socket+0x14d/0x260 [ 545.913013][T14463] ? __pfx___sys_socket+0x10/0x10 [ 545.913056][T14463] ? ksys_write+0x1ac/0x250 [ 545.913098][T14463] __x64_sys_socket+0x72/0xb0 [ 545.913122][T14463] ? lockdep_hardirqs_on+0x78/0x100 [ 545.913166][T14463] do_syscall_64+0x10b/0xf80 [ 545.913208][T14463] ? clear_bhb_loop+0x40/0x90 [ 545.913243][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.913273][T14463] RIP: 0033:0x7f6ff799ce59 [ 545.913297][T14463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.913324][T14463] RSP: 002b:00007f6ff882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 545.913352][T14463] RAX: ffffffffffffffda RBX: 00007f6ff7c15fa0 RCX: 00007f6ff799ce59 [ 545.913371][T14463] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 545.913425][T14463] RBP: 00007f6ff7a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 545.913443][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.913458][T14463] R13: 00007f6ff7c16038 R14: 00007f6ff7c15fa0 R15: 00007ffcde46ad88 [ 545.913495][T14463] [ 547.121178][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.132470][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.110687][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1519'. [ 549.372787][T14537] netlink: 'syz.8.1526': attribute type 11 has an invalid length. [ 549.486429][T14542] zswap: compressor not available [ 549.924599][T14548] Process accounting resumed [ 550.222076][ T6859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.243422][ T6859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.264572][ T6859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.285697][ T6859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.294600][ T6859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.802942][T14583] bridge0: port 3(dummy0) entered blocking state [ 551.845665][T14583] bridge0: port 3(dummy0) entered disabled state [ 551.900305][T14583] dummy0: entered allmulticast mode [ 551.946519][T14583] dummy0: entered promiscuous mode [ 551.952186][T14583] bridge0: port 3(dummy0) entered blocking state [ 551.960367][T14583] bridge0: port 3(dummy0) entered forwarding state [ 552.248214][T14594] netlink: 'syz.6.1534': attribute type 11 has an invalid length. [ 552.366423][ T6859] Bluetooth: hci5: command tx timeout [ 552.637316][T14554] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.669748][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.689777][T14554] bridge_slave_0: entered allmulticast mode [ 552.701008][T14554] bridge_slave_0: entered promiscuous mode [ 552.713575][T14554] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.721738][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.729867][T14554] bridge_slave_1: entered allmulticast mode [ 552.740141][T14554] bridge_slave_1: entered promiscuous mode [ 552.821337][T14554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.838461][T14554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.910431][T14554] team0: Port device team_slave_0 added [ 552.918395][T14554] team0: Port device team_slave_1 added [ 552.982508][T14554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.011294][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.100218][T14554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.152067][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.180779][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.245121][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.327815][T14554] hsr_slave_0: entered promiscuous mode [ 553.346320][T14554] hsr_slave_1: entered promiscuous mode [ 553.361058][T14554] debugfs: 'hsr0' already exists in 'hsr' [ 553.377269][T14554] Cannot create hsr debugfs directory [ 553.944830][T14554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.190642][T14554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.258877][T14554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.445256][ T6859] Bluetooth: hci5: command tx timeout [ 554.763869][T14554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.779884][T14554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.790303][T14554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.807373][T14554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.816462][T14554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.828610][T14554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.837218][T14554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.851448][T14554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.030189][T14554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.133609][T14554] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.201095][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.208264][ T6860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.352274][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.359415][ T9225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.531118][ T6859] Bluetooth: hci5: command tx timeout [ 556.634091][T14554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.839166][T14554] veth0_vlan: entered promiscuous mode [ 556.895010][T14554] veth1_vlan: entered promiscuous mode [ 556.985424][T14554] veth0_macvtap: entered promiscuous mode [ 557.010508][T14554] veth1_macvtap: entered promiscuous mode [ 557.044776][T14554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.069135][T14554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.111002][ T6873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.139351][ T6873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.161311][ T6873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.174729][ T6873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.463234][T11702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.483091][T11702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.572490][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.594063][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.933766][T14697] ubi0: attaching mtd0 [ 557.949035][T14697] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 557.965706][T14697] eraseblock attaching information dump: [ 557.977417][T14697] ec 1 [ 557.981984][T14697] pnum 0 [ 557.991955][T14697] lnum 0 [ 558.005733][T14697] scrub 0 [ 558.015312][T14697] sqnum 1 [ 558.023071][T14697] Volume identifier header dump: [ 558.036022][T14697] magic 55424921 [ 558.041884][T14697] version 1 [ 558.049796][T14697] vol_type 1 [ 558.065394][T14697] copy_flag 0 [ 558.085282][T14697] compat 5 [ 558.096447][T14697] vol_id 2147479551 [ 558.110083][T14697] lnum 0 [ 558.122998][T14697] data_size 0 [ 558.136451][T14697] used_ebs 0 [ 558.145785][T14697] data_pad 0 [ 558.160857][T14697] sqnum 1 [ 558.167118][T14697] hdr_crc 65b3bd2d [ 558.174092][T14697] Volume identifier header hexdump: [ 558.431450][T14697] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 558.607602][ T6859] Bluetooth: hci5: command tx timeout [ 559.266709][T14708] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 559.393025][T14719] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 559.976267][ T6859] Bluetooth: hci4: command 0x0406 tx timeout [ 560.184575][T14734] netlink: 'syz.0.1556': attribute type 11 has an invalid length. [ 561.738840][ T31] INFO: task syz.0.1157:12287 blocked for more than 143 seconds. [ 561.754938][ T31] Tainted: G U L syzkaller #0 [ 561.778807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 561.805066][ T31] task:syz.0.1157 state:D stack:28248 pid:12287 tgid:12283 ppid:6516 task_flags:0x400140 flags:0x00080002 [ 561.839499][ T31] Call Trace: [ 561.846427][ T31] [ 561.859901][ T31] __schedule+0x1295/0x67a0 [ 561.875635][ T31] ? __pfx___schedule+0x10/0x10 [ 561.890787][ T31] ? find_held_lock+0x2b/0x80 [ 561.912682][ T31] ? schedule+0x2bf/0x390 [ 561.933290][ T31] schedule+0xdd/0x390 [ 561.947312][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.971934][ T31] __mutex_lock+0xced/0x1b10 [ 562.003739][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 562.042186][ T31] ? netlink_unicast+0x585/0x850 [ 562.063727][ T31] ? ____sys_sendmsg+0x9e1/0xb70 [ 562.099500][ T31] ? ___sys_sendmsg+0x190/0x1e0 [ 562.118745][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.138947][ T31] ? __asan_memset+0x23/0x50 [ 562.158926][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 562.177532][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 562.199000][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 562.204805][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.211575][ T31] ? trace_kmalloc+0xe3/0x110 [ 562.216811][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 562.224908][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 562.233482][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 562.243792][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 562.259002][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 562.266627][ T31] ? genl_get_cmd+0x3e7/0x760 [ 562.278976][ T31] ? bpf_lsm_capable+0x9/0x10 [ 562.289350][ T31] ? security_capable+0x80/0x260 [ 562.299000][ T31] genl_rcv_msg+0x560/0x800 [ 562.309017][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 562.319208][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 562.329037][ T31] netlink_rcv_skb+0x159/0x420 [ 562.338980][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 562.348999][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.359037][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 562.370790][ T31] genl_rcv+0x28/0x40 [ 562.386048][ T31] netlink_unicast+0x585/0x850 [ 562.399026][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 562.404411][ T31] netlink_sendmsg+0x8b0/0xda0 [ 562.419069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.424453][ T31] ? __import_iovec+0x1d2/0x640 [ 562.439040][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 562.446229][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 562.459073][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.469092][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.479074][ T31] ? kasan_quarantine_put+0x104/0x240 [ 562.499102][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 562.504362][ T31] ___sys_sendmsg+0x190/0x1e0 [ 562.510602][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.528863][ T31] ? tomoyo_path_number_perm+0x188/0x580 [ 562.534652][ T31] __sys_sendmsg+0x170/0x220 [ 562.539560][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 562.544779][ T31] ? kcov_ioctl+0x16a/0x720 [ 562.549355][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.554142][ T31] ? kcov_ioctl+0x16a/0x720 [ 562.558658][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.563920][ T31] do_syscall_64+0x10b/0xf80 [ 562.568547][ T31] ? clear_bhb_loop+0x40/0x90 [ 562.573309][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.579246][ T31] RIP: 0033:0x7f1ba999ce59 [ 562.584658][ T31] RSP: 002b:00007f1baa7e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.593203][ T31] RAX: ffffffffffffffda RBX: 00007f1ba9c16090 RCX: 00007f1ba999ce59 [ 562.601254][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 562.609665][ T31] RBP: 00007f1ba9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 562.617699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.626180][ T31] R13: 00007f1ba9c16128 R14: 00007f1ba9c16090 R15: 00007ffccfe6f418 [ 562.638119][ T31] [ 562.641501][ T31] [ 562.641501][ T31] Showing all locks held in the system: [ 562.654295][ T31] 1 lock held by khungtaskd/31: [ 562.709934][ T31] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 562.741761][ T31] 2 locks held by syz-executor/5626: [ 562.761781][ T31] #0: ffff888044f840d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 562.807299][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 562.843682][ T31] 2 locks held by syz-executor/5628: [ 562.860410][ T31] #0: ffff88807d9220d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 562.897700][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 562.922872][ T31] 3 locks held by kworker/0:6/5780: [ 562.933029][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 562.960256][ T31] #1: ffffc90004befd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 562.980082][ T31] #2: ffffffff8e7f0e38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 563.029971][ T31] 2 locks held by kworker/u11:1/6851: [ 563.031292][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.039725][ T31] #0: [ 563.048922][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.049661][ T31] ffff88801cb36140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 563.122467][ T31] #1: ffffc90007c17d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 563.160726][ T31] 2 locks held by syz.0.1157/12284: [ 563.177800][ T31] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.209434][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 563.223893][ T31] 2 locks held by syz.0.1157/12287: [ 563.229121][ T31] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.237880][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 563.248107][ T31] 2 locks held by syz.4.1315/13199: [ 563.253374][ T31] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.261695][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 563.271952][ T31] 2 locks held by syz.3.1322/13229: [ 563.277165][ T31] #0: ffff8880676ce0d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 563.287573][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 563.297410][ T31] 2 locks held by syz-executor/13407: [ 563.303875][ T31] #0: ffff88806a1ca0d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 563.314292][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 563.323966][ T31] 3 locks held by syz-executor/13551: [ 563.329363][ T31] #0: ffff88807bee8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 563.339607][ T31] #1: ffff88807bee80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 563.349272][ T31] #2: ffffffff908978e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 563.359349][ T31] 2 locks held by getty/13876: [ 563.364153][ T31] #0: ffff8880374ff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 563.373942][ T31] #1: ffffc9000593b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 563.384129][ T31] 4 locks held by syz-executor/14554: [ 563.389562][ T31] #0: ffff888012c98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 563.399215][ T31] #1: ffff888012c980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 563.410462][ T31] #2: ffffffff908978e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 563.420805][ T31] #3: ffff88807f4e12f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 563.430273][ T31] 2 locks held by syz.8.1530/14562: [ 563.435474][ T31] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.443739][ T31] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 563.453926][ T31] 3 locks held by syz.6.1534/14604: [ 563.459116][ T31] #0: ffff88804da60ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 563.468803][ T31] #1: ffff88804da600b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 563.478563][ T31] #2: ffffffff908978e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 563.488713][ T31] 2 locks held by dhcpcd/14760: [ 563.493606][ T31] #0: ffff888024961440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 563.505693][ T31] #1: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 563.515837][ T31] 1 lock held by dhcpcd/14761: [ 563.520854][ T31] #0: ffff888025e5c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 563.530671][ T31] 1 lock held by dhcpcd/14762: [ 563.535446][ T31] #0: ffff8880774cc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 563.545269][ T31] [ 563.572476][ T31] ============================================= [ 563.572476][ T31] [ 563.594182][ T31] NMI backtrace for cpu 1 [ 563.594208][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.594252][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.594261][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.594276][ T31] Call Trace: [ 563.594284][ T31] [ 563.594294][ T31] dump_stack_lvl+0x100/0x190 [ 563.594327][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 563.594360][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.594389][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 563.594422][ T31] sys_info+0x141/0x190 [ 563.594447][ T31] watchdog+0xcb1/0x1030 [ 563.594491][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 563.594529][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.594566][ T31] ? __kthread_parkme+0x18c/0x230 [ 563.594606][ T31] ? kthread+0x13a/0x450 [ 563.594628][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.594669][ T31] kthread+0x370/0x450 [ 563.594692][ T31] ? __pfx_kthread+0x10/0x10 [ 563.594718][ T31] ret_from_fork+0x72b/0xd50 [ 563.594749][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 563.594780][ T31] ? __switch_to+0x800/0x1100 [ 563.594815][ T31] ? __switch_to_asm+0x39/0x70 [ 563.594848][ T31] ? __pfx_kthread+0x10/0x10 [ 563.594875][ T31] ret_from_fork_asm+0x1a/0x30 [ 563.594925][ T31] [ 563.594946][ T31] Sending NMI from CPU 1 to CPUs 0: [ 563.738415][ C0] NMI backtrace for cpu 0 [ 563.738436][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.738472][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.738482][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.738496][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 563.738537][ C0] Code: 86 94 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 00 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 563.738561][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 563.738580][ C0] RAX: 000000000037e3ef RBX: ffffffff8e4955c0 RCX: ffffffff8b889095 [ 563.738596][ C0] RDX: 0000000000000000 RSI: ffffffff8df1f2e9 RDI: ffffffff8c1c4180 [ 563.738611][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 563.738626][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 563.738641][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d80450 [ 563.738658][ C0] FS: 0000000000000000(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 [ 563.738679][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.738696][ C0] CR2: 000055aa83aad660 CR3: 000000000e596000 CR4: 00000000003526f0 [ 563.738711][ C0] Call Trace: [ 563.738718][ C0] [ 563.738726][ C0] default_idle+0x9/0x10 [ 563.738750][ C0] default_idle_call+0x6c/0xb0 [ 563.738774][ C0] do_idle+0x464/0x590 [ 563.738804][ C0] ? __pfx_do_idle+0x10/0x10 [ 563.738831][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 563.738867][ C0] cpu_startup_entry+0x4f/0x60 [ 563.738896][ C0] rest_init+0x251/0x260 [ 563.738928][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 563.738952][ C0] start_kernel+0x484/0x490 [ 563.738986][ C0] x86_64_start_reservations+0x24/0x30 [ 563.739021][ C0] x86_64_start_kernel+0x12b/0x130 [ 563.739056][ C0] common_startup_64+0x13e/0x148 [ 563.739096][ C0] [ 563.939800][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 563.946690][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.957406][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.962606][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.972668][ T31] Call Trace: [ 563.975946][ T31] [ 563.978884][ T31] dump_stack_lvl+0x100/0x190 [ 563.983573][ T31] vpanic+0x552/0x970 [ 563.987559][ T31] ? __pfx_vpanic+0x10/0x10 [ 563.992074][ T31] panic+0xd1/0xe0 [ 563.995799][ T31] ? __pfx_panic+0x10/0x10 [ 564.000227][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 564.006403][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 564.012576][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 564.018776][ T31] ? watchdog.cold+0x1ec/0x234 [ 564.023553][ T31] ? watchdog+0xcc1/0x1030 [ 564.027998][ T31] watchdog.cold+0x1fd/0x234 [ 564.032639][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.038474][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.043166][ T31] ? __kthread_parkme+0x18c/0x230 [ 564.048293][ T31] ? kthread+0x13a/0x450 [ 564.052540][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.057233][ T31] kthread+0x370/0x450 [ 564.061308][ T31] ? __pfx_kthread+0x10/0x10 [ 564.065903][ T31] ret_from_fork+0x72b/0xd50 [ 564.070522][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 564.075646][ T31] ? __switch_to+0x800/0x1100 [ 564.080338][ T31] ? __switch_to_asm+0x39/0x70 [ 564.085117][ T31] ? __pfx_kthread+0x10/0x10 [ 564.089718][ T31] ret_from_fork_asm+0x1a/0x30 [ 564.094513][ T31] [ 564.097697][ T31] Kernel Offset: disabled [ 564.102011][ T31] Rebooting in 86400 seconds..