last executing test programs: 22m19.45078661s ago: executing program 32 (id=302): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r0, 0x4018620d, 0x9) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = prctl$auto(0x25, 0x20000040000000e, 0x0, 0x8000000000000001, 0x40000000) setsockopt$auto(r1, 0x190, 0x9, 0x0, 0x8) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY2(r1, 0xc0506617, &(0x7f0000000240)={{0x10000, 0x0, @identifier="8e15831e9f1ae0e9984ee4b2151ba9df"}, 0x48, 0x5, '\x00', "244d363e71f51be78a14ec507db4089ec83f223ceaff3d8dd172d22bd020ff830a85e0077099252de5b41aab662c8cfceec1917d5ec881d7de3d5434a4a39198ccbd7fe203d086ce6fce92a1c87d570b2083986027f81c61c39ad1c30163c4180794bdf2e1139914ffff487e8dd5e6abee7410aa18f7b218a118728bd2053867a443ffedda32cd8bf29c2bd5f338c92739cc2c56cf171a9d817c53388c8ca428d4b17a9b75762eb08c4bb628e706904d4e5dc2139fa4cde95a588fd078e9a9429a356af6d592fd3cbab2cfd4d7574eaf41ed367554676e84070aeb96"}) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xf) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) read$auto_debug_help_fops_orangefs_debugfs(r3, &(0x7f00000000c0)=""/60, 0x3c) r4 = ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) cachestat$auto(r4, &(0x7f0000000000)={0x3ac1, 0x1}, &(0x7f0000000040)={0xfff, 0x5, 0x9, 0x5, 0x8d06}, 0x773725b0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffff5fdffe00, 0x0) 20m36.403367008s ago: executing program 33 (id=710): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) write$auto(r1, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid\x00') openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = socket(0x2b, 0x1, 0x1) r3 = io_uring_setup$auto(0x40000002c55, 0x0) r4 = socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a1, 0x4) r5 = socket(0x2, 0x3, 0xa) r6 = socket(0xa, 0x5, 0x0) lseek$auto(0x3, 0x40, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r3, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0400bc8006007d0023000000dcb99687917e5e1996cf388b7ae400982aa923ab6bd770e03ec0bf81f29d890ef5b23d859df2a5d89316a19be0b4edb8bc77dfa15da5eb2e846e6e47be53a45a847d0784143d86db8c1b1fb483151cd58ba9bdb32275fc85afc3587f78f7016fdb49e8f982864cfa67cc2edb9a791658888f6715e3e74cfa6094a56e27e1b12253f807442d0078a3944b2f0a2fbe2eea7aaa4dc1ee81277dcc74a8e79807a8e11b3a35d1c488c7639e65040025800000bc0010800800d100b3000000bede547d4b219a97d477c9addf6e8c50078fbd440b9e492e8c5a3d42f7ff472a35275f3b12373479ed743165eb00d45deb877f6c41cc8f086cfc0225e916eec6ba32fd9c70dfa0be9d7378d4e916a8d70d5010c28e34f1b98ae0b878292d0a6d479ad308007000", @ANYRES32=r2, @ANYBLOB="04008c800400208013b370f654620a5af7945cd61670452015c66c5cf0607a242fae3cbdbfa41174cf6979cf2e90d053a613cb87450879a367409272f1e6b7a247ee56b394210198800300f200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00003f000000ea00ac1414aa00006900", @ANYRES32=r4, @ANYBLOB="00007a8000007b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00001c80000000220b51e8cdd127fa3181ed3e3113b27f1eb7f0c7cd6f061c11619ed3e5a906c34e8986dd19e8c00aaeb59171d20aeedddb380dc5d61485f6e3c8c356ac2574800d4233ab845be69b83bc2aad466ef6eef206054dccdfe47dc3145b935bdbeb8ec392f1e162c705d741e0e116d2ef72ff51cc03d323888b5d99827e38dfc205f260687c424dbe1c0414ab3ffc5b0a0a97c598ca87d13015cc37072e37ce33e69352c66751a6329995ef65c719ed132d3641ebbd216126be32e4310b256ac48eddd0c5ea17e4573a548d497cb3afb50d690db455ba884e4755855809fbe95edcbe8a254bf83e7b240cc3e58a436a2fc800000e800000f300856bf90b008b5c26174c0dafd2488cf0f9acdf3c540dad772d759e77a1014da085ca0426a3da46ecefdb1d4ba1a0c2210d42a190cf6ba2a77d03e6ce6bfee19f6acff2fc469d4d3d34156262a2049581b1a78f56e0a5c562d2251fdcf940764ee793796455bbe01056f804f343c8c704224a069ba964ec871133", @ANYRES32=r6, @ANYBLOB="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"], 0x82c}, 0x1, 0x0, 0x0, 0x10060}, 0x20000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r7, 0x1000000001003, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)=0xdbb) r8 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/total_ps_buffered\x00', 0x141482, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r8, 0x0, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x83c, 0x9}, 0x8, 0x8) rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 15m27.586284528s ago: executing program 1 (id=1919): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) 15m27.42309737s ago: executing program 1 (id=1921): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0xe, 0x0, 0x3, 0x4, 0x400) epoll_wait$auto(0xffffffffffffffff, 0x0, 0x5, 0x4) 15m26.042553953s ago: executing program 1 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptyd1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x1, 0x84) uname$auto(0x0) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd8\x00', 0x60742, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram2\x00', 0x66ec40, 0x0) timerfd_create$auto(0x9, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0x9, 0x9, 0x22, 0x4000000000000d]}, 0x0) 15m25.882947909s ago: executing program 1 (id=1925): madvise$auto(0x1, 0x4, 0x3) madvise$auto(0x6, 0x7, 0x5) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) 15m25.616224238s ago: executing program 1 (id=1926): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = memfd_create$auto(&(0x7f0000000100)='\x00', 0xc) ioctl$auto(r0, 0x4b4a, r1) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0x2) mq_open$auto(0x0, 0x7e, 0x9, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(r2, 0x114, 0x1, 0x0, 0x1c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x3, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x1f, 0x0) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x690, 0xffa1}, 0x5, 0x0, &(0x7f0000000140)={0x4}, 0x8) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd, 0xfd000000}, 0x6a) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$auto_VHOST_SET_VRING_CALL2(r5, 0x4008af21, &(0x7f00000000c0)={0xf27}) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd4/trace/start_lba\x00', 0x22062, 0x0) write$auto(r6, 0x0, 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x1ff, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, [0x0, 0x0, 0x5, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) 15m24.24212755s ago: executing program 1 (id=1929): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1001, 0xffffffffffffffff, 0xf, 0x9, 0xb, 0x1, 0x7ff, 0x2e3, 0x5, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x5, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x4, 0x8, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x4}, 0x47) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) (async, rerun: 64) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (rerun: 64) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 15m8.935534328s ago: executing program 34 (id=1929): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1001, 0xffffffffffffffff, 0xf, 0x9, 0xb, 0x1, 0x7ff, 0x2e3, 0x5, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x5, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x4, 0x8, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x4}, 0x47) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) (async, rerun: 64) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (rerun: 64) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m29.438348439s ago: executing program 5 (id=4971): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) shmctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000000240)={{0x401, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x6, 0x7fc, 0x3ff7}, 0x7, 0xfffffffffffffffa, 0x5, 0x2, @inferred, @raw=0x5, 0x7d50, 0x0, &(0x7f00000000c0)="2a46c377fb43625fcdfb34a66605f01787891b2c9ee7ac07aaed66d6ba197d9372496cd6a038e7a51c3b894021d4930d9c40bf2212e88cdfed18229a40b98ce8d9ed696db9249914795f1f26d150204697a75ae7c6f26a0dfd394308294882ffc33dc3f404931197c0af9d2b9aa25469bf4730d307216742f91ae797cb412cec14cd21811e32f03dc8a3340ade72cf0ecbcad07314aa36cbee77a4a62698bfc397645fa70e6401e2", &(0x7f0000000180)="582b161ce0afbfe1c8f822139725b0451773cf2cdd9cf1d8c01d03fd53f541da8fa16a672bb12ec1e33c7865f92b192fb03ba728dabe03025c1cd9bb131066ccbdcf2fb029c047fbc9efbb897c59d22e834b0f297a107374892395e976d2de5e6aa12b4471a5bc83fc1a8d1930225637b24c88fe524465d9d30ed4ee43623be12ec89b541624c658e7e23c7487a43b9a47980ae1d24bd1c9d1ce9a95c23389be14a3eb9fae2948ea4b4c3df08ce730af403350f442ec70e7e433"}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) io_uring_setup$auto(0x1, 0x0) set_mempolicy$auto(0x3c, &(0x7f0000000080)=0x2, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram0/queue/physical_block_size\x00', 0x82200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/162, 0xa2) r2 = prctl$auto(0x0, 0x10000, 0x0, 0x1, 0x100007) setdomainname$auto(0x0, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4040e00", @ANYRES16=r3, @ANYBLOB="00032dbd7000fcdbdf250f0000000500390100000000d0002280cc00a4800800fa00", @ANYRES32=0x0, @ANYBLOB="1400390000000000000000000000ffffe0000002040034800400ef80aac604b00558ffc9bbf28a3efe69902a860a81f39ae314a9cb1cd1667b83a398964252a425e4410068a4f204e5919b002b6193a97fce0551bf80539ff303a8bb2807d95f9e30795fe12103df092219ae2ef9b57fe6bead83fbd64c03bf395f73d2c1b0035fd66db3acb61cf1f5183b65b4c5d49efab88af06d26cde4bc24fcdbef9bfb1a53198af01badb1b963b31de20400be80090034002a2d212b000000000400bd800800ef000e000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000003c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x7, 0x1406, 0x203, 0x9, r0, 0x5, 0x8}, 0xfffffff8) 2m29.006317816s ago: executing program 5 (id=4975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={"6607a4016f92bc2b1a0470ab060000000000000089246349ee9d0183c400", 0x9, 0x8, 0x3, 0xffffffffffffffff, 0x2, 0x0}) mmap$auto(0x0, 0x2020006, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r3 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0xe6e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22242, 0x154) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/54, 0x36) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000002280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002240)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc180000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000009c0000000313fd9b15c8283285780ead735f426312fdd2cb65dd35503b551968d85b6ee963e627510ebfca270d2902e3d72bcf40c9f100c5c95289d25032e2120a19efb340c3dc19a665e1f31fd339c5e24051", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04009880749848acd7746605ee903825edfdf97637fbc2afb653f5802c4d28b0f00374a57ec2505330409dbbccd058c69414ecc3791a939c71e8f1e8e91b3dc45e4a3910a0db5c2557bb8c03a2517230f4643b04a10db9569eb9a37eb03900c174fe9c1bd1c403fc08005300000000000c00660004000000000000005411cabf6d96921ef3b14fb111cf40f2fdc3cb708ffeffe7e315301606b178156af91259382a0116800d00a4002f6465762f73646100000000e5c8fd3299d50d13966ea00d0c0c3e719907a533c5b8f2a932b7e81abacdd935476538fbfc5139f7fb9b24f649384cdef23fbf931c20006b13bbd5274787c44579680a774303371e5423411be2f43dbfa7c34d0d3fb0fc9b7f1a52e57429fd591d7b6f7bb648eb78cba1c19f16e25f8d5e7dffa87a9d849f1a2f7d70033dffe9fb72d3887788a1776ece439b27597fa66bb6745570acb807616f80d71d7395579fa092ea6827d9130da7725783b03b6b87b8a7230005bed3be967d78cee6d90341e2a4106017187105c904efd3a5900b0768d6c9678d5ee9529be4b89b74ef2822718faddc4629e65ce27f0f37d7eb3b87a0a15b0e0f31af6f8f09dd55517f09a852624f011b3dc62fc4f53b9158ad8f2a3f4d32f14500000e0051002f6465762f7074703000000000"], 0x18fc}, 0x1, 0x0, 0x0, 0x400004c}, 0x40080) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="311667a2d00ac6e40b0d3caba733c08e18eec1ad52327d51c55851d8b6dec0a88a505857b680bcd1aef25dfd8a7f60cf5b94a944a9d5ca78ff3622586764975d1e7920a27d43066f0b1b344efd077d5c5f7bc11557791ca3b237052700ae878dbda9873fa1de48a31437682a782c434e442d24540901ff9ba46a9c1a995a45a6886561ea239e618b1bb4b03c743ec9c0b6f0ef1a771fc70acb10a97590200546026702d5e57910728b43f33693aaebe62406bccf8903e791378d13233e9b428119d56e41393d3cab89dc5671ad6d8633b4745518070551c544224932ff82a257d964e70ead3f", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf2504000009040005000800040009000000"], 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x20040000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x80440, 0x0) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m28.484067148s ago: executing program 5 (id=4978): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mq_open$auto(0x0, 0x7e, 0x9, 0x0) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x5, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) madvise$auto(0x0, 0x6c5, 0x8) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) brk$auto(0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x50) timerfd_create$auto(0x8, 0x1ff) recvmmsg$auto(0x3, 0x0, 0x10020, 0x73f, 0x0) semctl$auto(0x7, 0x6, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x68542, 0x0) pread64$auto(r0, 0x0, 0xb, 0xffe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(0x0, 0x22240, 0x155) r3 = socket(0x10, 0x3, 0x15) mmap$auto(0x2, 0x2020005, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8002) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x974}, 0x1, 0x0, 0x0, 0xd0}, 0x4048001) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43080180}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="00082bbd7000fbdbdf257e0000000400ff0056cabb54f200c5d35dfc522ec651d20d0f6bed6af85efa2b794c8c65678a9a2b664510a5d257b277600665c8f18f0aeb95f53c1488a4aa1a6f"], 0x18}, 0x1, 0x0, 0x0, 0x22000090}, 0x800) 2m27.575909799s ago: executing program 5 (id=4982): mmap$auto(0x0, 0x2020009, 0x3, 0x3ff, 0xfffffffffffffffa, 0x18000) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0x10, 0x4, 0xfffffffc) mmap$auto(0x0, 0x10005, 0x7, 0xeb1, r1, 0xdfffffffffffc) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x600, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r8 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYRESDEC=0x0, @ANYRES32=r7, @ANYBLOB="081800010000710a"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x810) sendmsg$auto_HSR_C_GET_NODE_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYBLOB="2e0026698e1fc9a57eaef5bd7000fddbdf25030000000a0040000180c2000000000008000200", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) read$auto(r3, 0x0, 0x20) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f00000001c0)={0x0, 0x7}, 0x3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x44860) openat$auto_clk_dump_fops_(0xffffffffffffff9c, 0x0, 0x80, 0x0) fanotify_init$auto(0x800, 0x800) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) bpf$auto(0x9, &(0x7f0000000440)=@batch={0x7, 0x441, 0x3, 0x10001, 0x10000000, 0xffffffffffffffff, 0x400, 0x3}, 0x96) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) move_pages$auto(0x0, 0x800, 0x0, &(0x7f0000000280)=0x101, &(0x7f00000002c0)=0xf5, 0x96) socket(0x2, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@xdp={0x2c, 0x2, r7, 0x2}, 0x1c) listen$auto(0x3, 0x81) 2m27.296457522s ago: executing program 5 (id=4985): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x404902, 0x0) ioctl$auto(r0, 0x900066b7, r0) 2m27.105469558s ago: executing program 5 (id=4987): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)="780cb215c9", 0x5) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={0x5b0, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x9c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4d, 0x1, "fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5f1e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6a2fe04e5"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '/\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '{).\\[+}.^%#\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x2ec, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x9a, 0x1, "c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1b9c06fbe54341af1d4"}, @NFSD_A_SOCK_ADDR={0x73, 0x1, "022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd3"}, @NFSD_A_SOCK_ADDR={0xc9, 0x1, "f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302adefe750872c5781ebac68177231cffad9e697dcd71a472ff82fb9eb5f198ac6703ebaa6d35ffedfe2c9a4834faf2c26b6e359430c81c92a44fcd24d89656e54dac31a26aa34625daa406419729d34465d887d0dd49edabd98a4a5f11ecd5387a55f"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "3501"}, @NFSD_A_SOCK_ADDR={0xd8, 0x1, "7d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd78"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '-/@+\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '#:u-*\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '!(\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1e0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x60, 0x1, "407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_ADDR={0xf6, 0x1, "045cce43018600541d2362cf3f7aaa64356dbef2d59e299ff0a9fb47b0d1cf591db6fc9734bde65c6b2fb695eb3b5fa884551992496e23227214bcfe11df54cd8f203172a62903cd53d9673c31f0e6c460193337dc71579142379a9355f3c1d5258bf8f7d0b242168745b14b8699b25d894814a33478124dc66146288300b151410e27d59b5814e72891b6657f883453dbf1fc55bd63dfd30a2fcb13ddce7d897b6c7f8d65cb72071f5ba14d9aae712ce1755e6aa9797c279b11fcc9fbfaf84189d3e97f976ee6a63ee0718b0bbc5ae6dc52d7a69697af8cee1b64411d2ec04c04ea51cb6e8d7bd30b582bf16572dba0248b"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c30"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '!-$%)\x18.:/[}\\-\x8b\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x28, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '[.)(}.-/}\x00'}]}]}, 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) 2m12.126886681s ago: executing program 35 (id=4987): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)="780cb215c9", 0x5) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={0x5b0, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x9c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4d, 0x1, "fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5f1e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6a2fe04e5"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '/\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '{).\\[+}.^%#\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x2ec, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x9a, 0x1, "c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1b9c06fbe54341af1d4"}, @NFSD_A_SOCK_ADDR={0x73, 0x1, "022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd3"}, @NFSD_A_SOCK_ADDR={0xc9, 0x1, "f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302adefe750872c5781ebac68177231cffad9e697dcd71a472ff82fb9eb5f198ac6703ebaa6d35ffedfe2c9a4834faf2c26b6e359430c81c92a44fcd24d89656e54dac31a26aa34625daa406419729d34465d887d0dd49edabd98a4a5f11ecd5387a55f"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "3501"}, @NFSD_A_SOCK_ADDR={0xd8, 0x1, "7d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd78"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '-/@+\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '#:u-*\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '!(\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1e0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x60, 0x1, "407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_ADDR={0xf6, 0x1, "045cce43018600541d2362cf3f7aaa64356dbef2d59e299ff0a9fb47b0d1cf591db6fc9734bde65c6b2fb695eb3b5fa884551992496e23227214bcfe11df54cd8f203172a62903cd53d9673c31f0e6c460193337dc71579142379a9355f3c1d5258bf8f7d0b242168745b14b8699b25d894814a33478124dc66146288300b151410e27d59b5814e72891b6657f883453dbf1fc55bd63dfd30a2fcb13ddce7d897b6c7f8d65cb72071f5ba14d9aae712ce1755e6aa9797c279b11fcc9fbfaf84189d3e97f976ee6a63ee0718b0bbc5ae6dc52d7a69697af8cee1b64411d2ec04c04ea51cb6e8d7bd30b582bf16572dba0248b"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c30"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '!-$%)\x18.:/[}\\-\x8b\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x28, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '[.)(}.-/}\x00'}]}]}, 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) 2m1.261505983s ago: executing program 3 (id=5086): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$auto(r0, &(0x7f0000000540)='\x00', 0xbe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x18b202, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000011c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000e80)=""/215, 0xd7) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="0500004d", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf253f00000028000e00308ba5e870bed0a43dce27b2bbdde3385da8cb73934764dbb462b48c5ea875cdbaaee06f"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x48884) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x2e8604, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000000)={0x9, 0x0, 0x8000, 0x9, 0x9, 0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto_CEC_DQEVENT(r6, 0xc0506107, &(0x7f00000001c0)={0xfffffffffffffffc, 0x4, 0xfffffffe, @lost_msgs={0x7}}) socket(0x10, 0x3, 0x6) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000300)={@raw=0x7, 0x100000000, 0xffffffffffff8000, @btrfs_ioctl_vol_args_v2_3_0={0xffff, &(0x7f0000000280)={0x81, 0x5, 0xffffffff, 0x0, {0xff, 0x6, 0x7f, 0x9, 0x4}, [0x5, 0x1786, 0x9379]}}, @subvolid=0x6}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) 1m58.995217227s ago: executing program 3 (id=5092): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, &(0x7f0000000240)={0x40, 0xfffffff0, 0x4, 0x8, 0x6, 0x9}) (async) mmap$auto(0x1, 0xa, 0xbffffffffffff801, 0x9b72, 0x5, 0x8000) (async) madvise$auto(0xff, 0x1, 0x1) (async) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x18, 0x0, &(0x7f0000000280)=0x1000c0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 64) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) dup3$auto(r1, r1, 0x4) (async, rerun: 64) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0x400080000000000, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) sysfs$auto(0x2, 0x1a, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) (async) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) socket(0x28, 0xa, 0x1) (async) io_uring_setup$auto(0x6, 0x0) 1m58.297566449s ago: executing program 3 (id=5095): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x52, 0x0, 0x9) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) (async) r0 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x2) (async) close_range$auto(0xffffffffffffffff, r0, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/virt_wifi0/base_reachable_time_ms\x00', 0x104000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r1, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) (async) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r1, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x5, &(0x7f0000000200), 0x4) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x4) (async) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010337"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) (async) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mq_open$auto(&(0x7f0000000000)='\xd7\'^(-\x00', 0xfffffffb, 0x10, &(0x7f0000000040)={0x7, 0x7, 0x80000000, 0x401}) 1m58.177436495s ago: executing program 3 (id=5096): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4081, 0x0) mmap$auto(0x2001ffffffffffff, 0x202000d, 0x3, 0x8011, 0xffffffffffffffff, 0x7fff) r0 = io_uring_setup$auto(0x5b, 0x0) close_range$auto(r0, 0x8, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f00000003c0)={@siginfo_0_0={0x69c, 0x1d, 0x3, @_sigfault={&(0x7f0000000300)="037c1fdb145f29ce8e4d664ad35c972b651fc0d0091f287928f847cf0e4731395b9672beaa575abe382cb89541ae7d7a6dc61cd382afe86860989deac280cfcaf021da7756f20df30dc8d08ff3c1382c4cdcf6f3f0295e3cb41111dfdbbec39b6e4cdc115c74b0f75d108c3ba52f164216025620946515cca21ff4e29052fa1dba917cd75b760415a2116dff70a1fa7a3d5af5f136b3", @_addr_pkey={"d32ea227248f5a6a", 0xfffffff8}}}}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) socket(0x25, 0xa, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) mq_open$auto(0x0, 0x5, 0x0, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0xffffffffffffffff, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, &(0x7f0000000180)=""/210, 0xd2) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x28342, 0x0) mmap$auto(0x3446, 0x400007, 0x9, 0x9b72, 0xffffffffffffffff, 0x8) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m56.556946079s ago: executing program 3 (id=5100): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x9, &(0x7f0000000100)="4841a896fe03a763799c9b16db6734079edce53961cad351ef4d91e6a015d1f273a15bb5ca7fe23d3cca91830c982dc6e5d8fd0eeb048971eea49d7ca459d71628c5758e2ed0dff8544eaa362a203115f97510568fb8546e39547c45b54ae5f8ad8de02a1c2f9533cd51993bf975d085417b7520aaa33b4f0eca50da453613b820dc388aa8c27f4a1bc337f20a59f3f4b263ff26a741489207d2293c77e4a5d59aade40c885775cbf6e21d375b4fce8fe54dcc766721469128546350eabb6d6a4449dda600a524dedc") (async) r0 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x9, &(0x7f0000000100)="4841a896fe03a763799c9b16db6734079edce53961cad351ef4d91e6a015d1f273a15bb5ca7fe23d3cca91830c982dc6e5d8fd0eeb048971eea49d7ca459d71628c5758e2ed0dff8544eaa362a203115f97510568fb8546e39547c45b54ae5f8ad8de02a1c2f9533cd51993bf975d085417b7520aaa33b4f0eca50da453613b820dc388aa8c27f4a1bc337f20a59f3f4b263ff26a741489207d2293c77e4a5d59aade40c885775cbf6e21d375b4fce8fe54dcc766721469128546350eabb6d6a4449dda600a524dedc") ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r0, 0x80044100, &(0x7f0000000200)=0x9e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x67b845bd, 0x3, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0x2) (async) epoll_create$auto(0x2) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000240)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0xe04) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$auto(0x80000000, 0x497e, 0x6) (async) socket$auto(0x80000000, 0x497e, 0x6) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454de, 0x6f) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) (async) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) (async) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) 1m55.928619576s ago: executing program 3 (id=5102): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(r2, r0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x29, "0000e1000016d6c1095eefd61400"}, 0x5a) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x5) mmap$auto(0xfffffffffffffffd, 0x200000000001001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000c7cf5891a19f5a06b5724e2164ce6a3803622a057e008ef65be9de90e93390844e5da5147e3b396194f9767816d812d58c1511daf581390e8e0547973209857df082fdce8b96019ca111388c78378d946fbc94e0bfff2f624210c26a65f59ccc572f4117513e9738cae35bca3ed5e8ccb7e0dc4e7dc49c90db62", @ANYRES16=r5, @ANYBLOB="01032cb57000fbdbdf250a0000000600010018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m40.481907925s ago: executing program 36 (id=5102): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(r2, r0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x29, "0000e1000016d6c1095eefd61400"}, 0x5a) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x5) mmap$auto(0xfffffffffffffffd, 0x200000000001001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000c7cf5891a19f5a06b5724e2164ce6a3803622a057e008ef65be9de90e93390844e5da5147e3b396194f9767816d812d58c1511daf581390e8e0547973209857df082fdce8b96019ca111388c78378d946fbc94e0bfff2f624210c26a65f59ccc572f4117513e9738cae35bca3ed5e8ccb7e0dc4e7dc49c90db62", @ANYRES16=r5, @ANYBLOB="01032cb57000fbdbdf250a0000000600010018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m32.704380822s ago: executing program 7 (id=5151): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m32.285409802s ago: executing program 7 (id=5152): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, r1, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) socket(0x2a, 0x2, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) ioctl$auto_EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)={0x80, 0x3, 0x9, 0xf, "1920f0616f9aa2bf9b3f4f66ce8d2ecde0fa64f700e2fa689716a786b1fcb63f"}) io_setup$auto(0xa, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x20480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26fddb7b62b67bd764f9"}, 0x0, @integer64=@value=[0x5, 0x3, 0x6, 0x6, 0x90f, 0x258000000, 0x7fffffffffffffff, 0x2, 0x3, 0x3, 0x3, 0x6, 0x1, 0x6, 0x662, 0x6a9, 0x332, 0x0, 0x6, 0x10001, 0x6d4, 0x80000000, 0xffffffffb7ac5308, 0x3, 0xffffffff, 0xba39, 0x7, 0x0, 0xe91, 0x1ee, 0xdb, 0x40, 0xb, 0x2, 0x6, 0x0, 0x4a3, 0x7, 0x6, 0x2, 0x7, 0x10000000000000, 0x8, 0x7, 0x7, 0x4, 0x401, 0xfffffffffffffff9, 0xffffffff, 0x7, 0xb3, 0xfffffffffffffffb, 0x2000, 0x2, 0x80000001, 0x0, 0x4, 0x1000, 0x5, 0x3, 0x80000001, 0x2, 0x0, 0x6], "72ad000cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925a872857fd2f672f85343275f80200000000000000ab45f7259ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c200"}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) 1m30.545526063s ago: executing program 7 (id=5154): r0 = socket(0x2b, 0x1, 0x0) r1 = getsockopt$auto(r0, 0xd, 0x2, &(0x7f0000000000)='+@\x00', &(0x7f0000000040)=0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000006c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r2) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x38, 0x400, 0x1ffde, 0x7, 0x7, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) semctl$auto_GETPID(0x0, 0xffffe76d, 0xb, 0x80) ioctl$auto_XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000080)={0x1, 0x16f8, 0x1, 0x2, 0xc0, 0x9, 0x3e3d, 0x5, 0x2, 0x9, 0xc, 0x10000, "c57caec2cc7e509e2aca80b46a0bfb3e", 0x81, 0x6e, 0x8, 0x3, 0x9696, 0xf666, 0x4, 0x5}) 1m30.103086714s ago: executing program 7 (id=5155): close_range$auto(0x2, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x20, &(0x7f00000000c0), 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations\x00', 0x400800, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x20005, 0x7, 0x10, 0x401, 0x8000) getsockopt$auto(r0, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x123002, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) 1m28.831133009s ago: executing program 7 (id=5159): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230001, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x6f, 0x1, 0x0, 0x80000000, 0x3) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) set_tid_address$auto(&(0x7f0000000180)=0xf0) waitid$auto_P_PIDFD(0x3, r1, &(0x7f00000005c0)={@_si_pad}, 0x20f5, &(0x7f0000000640)={{0xfffffffffffffff9, 0x3}, {0x5f, 0xd}, 0x0, 0x20010, 0x80000001, 0x8, 0x1ff, 0x22, 0x5, 0x501, 0xfff, 0x3, 0x3, 0x9, 0xc, 0xc}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f00000003c0)="867749469f46970ff5d044900882ecae0b8be7ff22afccd61fda885447432cc9b32965e81f42e5e32648d6571987d4628155d9a4afe1f9280bcce0ad011ad5af3c78bdf13e6044fc669f2882cc4b84c9458aa255fd3568795930919d18a2f05754982d4950944a953790c688005d02261e3efaee21b9df97") madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b21890837030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) r3 = fsopen$auto(&(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4000000000df, 0x336, r3, 0x6) socket(0xa, 0x4, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) timer_create$auto(0x3, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) 1m27.358139059s ago: executing program 7 (id=5161): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/suspend_stats/success\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x8) r2 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f00000000c0)=""/45, 0x2d) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) bind$auto(r0, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000300)={0x0, 0xf22}, 0x80000001, &(0x7f0000000280)={&(0x7f0000000480)="bdcd4608ffeaf958309322425e3481f463cd52fe358d3a27b3ab3b3a6e0bf761267ad0b64e7283a06ccb7b061c3038316fc07b8b842d2dc711507d44030ad60268961db9d39c0eb79c29d5fec2190406d39aa07a74974c3b910aaccf0f28bdf51f16878308842bff8d02b5024853f9466cb0bad32566c80d588678b667e6a28895de17055aa9cdac2bf139a04e08a5dbb8dfc93c0967d89e39ae3b806f4bd2bf70243df89b878aca0190553ac0021bb0afe2628353c636d61f5bc98f724839a9e0e8591ecc", 0xffffffff}, 0x6, 0x3) process_madvise$auto_MADV_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000180)="0f2266481d8d208e96fc4896a99cc99af49fd336d8233e0fd57eabaa14b0e1cdcd2658c8c1c862b220254630d3818545e1e9c340662b0993651be9d4440e895d47196bd991797d1554abb3e736bfcff23bdb0014ff95dd13f37b3a7aa552a77d919b20e13e53e5841fd9f984331bf1947b43e6aa1b5ced20802a2fe11a782a5b16b155e30856f6ac82e3e8fd9ed22e79cc534ec5e6b00ee0e44f9077763dfd70156995", 0x3}, 0x101, 0x9, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) ioctl$auto_XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000002c0)="6cdbb7110fb35e2a7fa8172a4f0448790ca2b129908e42fd88ebdc0e0657fb833bad510069ee75bdd9102869e170e3b84641f15d9b675c10d4c67f00") sendfile$auto(r5, r3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) r6 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r6, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 1m11.989102661s ago: executing program 37 (id=5161): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/suspend_stats/success\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x8) r2 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f00000000c0)=""/45, 0x2d) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) bind$auto(r0, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000300)={0x0, 0xf22}, 0x80000001, &(0x7f0000000280)={&(0x7f0000000480)="bdcd4608ffeaf958309322425e3481f463cd52fe358d3a27b3ab3b3a6e0bf761267ad0b64e7283a06ccb7b061c3038316fc07b8b842d2dc711507d44030ad60268961db9d39c0eb79c29d5fec2190406d39aa07a74974c3b910aaccf0f28bdf51f16878308842bff8d02b5024853f9466cb0bad32566c80d588678b667e6a28895de17055aa9cdac2bf139a04e08a5dbb8dfc93c0967d89e39ae3b806f4bd2bf70243df89b878aca0190553ac0021bb0afe2628353c636d61f5bc98f724839a9e0e8591ecc", 0xffffffff}, 0x6, 0x3) process_madvise$auto_MADV_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000180)="0f2266481d8d208e96fc4896a99cc99af49fd336d8233e0fd57eabaa14b0e1cdcd2658c8c1c862b220254630d3818545e1e9c340662b0993651be9d4440e895d47196bd991797d1554abb3e736bfcff23bdb0014ff95dd13f37b3a7aa552a77d919b20e13e53e5841fd9f984331bf1947b43e6aa1b5ced20802a2fe11a782a5b16b155e30856f6ac82e3e8fd9ed22e79cc534ec5e6b00ee0e44f9077763dfd70156995", 0x3}, 0x101, 0x9, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) ioctl$auto_XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000002c0)="6cdbb7110fb35e2a7fa8172a4f0448790ca2b129908e42fd88ebdc0e0657fb833bad510069ee75bdd9102869e170e3b84641f15d9b675c10d4c67f00") sendfile$auto(r5, r3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) r6 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r6, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 52.067268215s ago: executing program 8 (id=5244): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x97d) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000003240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000000240)={0x1c, r1, 0xd21, 0x70bd27, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) 51.537726039s ago: executing program 8 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r4 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) 51.232187642s ago: executing program 8 (id=5248): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x20004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/scsi_host/host1/uevent\x00', 0x2, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x1, 0x1000) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x6, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x801, 0x84) listen$auto(r1, 0x3) getsockopt$auto(r1, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) inotify_add_watch$auto(r1, &(0x7f0000000000)='./file0\x00', 0x8) mmap$auto(0x0, 0xc, 0x8000000000000003, 0x16, r0, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nvme_core/parameters/max_retries\x00', 0x101142, 0x0) 50.562869172s ago: executing program 8 (id=5250): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0xfffffffffffffffe, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x200fa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0xb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000) r1 = memfd_create$auto(0x0, 0x4) statx$auto(r1, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 50.389799405s ago: executing program 8 (id=5251): close_range$auto(0x0, 0xffffeffe, 0x2) mmap$auto(0x4, 0x7ff, 0x8, 0x9b72, 0x7, 0x2000028000) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x4000000000002, 0x4020009, 0xdf, 0x11, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0x8c7) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000045, 0x400000000000413e) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001280)) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x9, &(0x7f0000000040)='\"\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1PFv\xfb&L\xeb=j\a\xf1y\xb3\"', 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000240)={0x93}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rxrpc/locals\x00', 0x600040, 0x0) write$auto(r4, 0x0, 0x4) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x511002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x3}, 0x0, &(0x7f00000001c0)={0x2f01, 0x1}, &(0x7f0000000200)={0x80000000}, 0x8) prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000400)={r6, &(0x7f0000000440)="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", 0x9, &(0x7f0000000300)="780b2f401faaae0150494cb4d2fefb771004783b62ad5991db218142d9a9ab6ba6c2f23cc5af830b7298f882cd0aca6ea6d8f2cd4318de7d63ae59e761bb0012e3e6cc7a573c1d40a82aaa548b907a7f80d1d46932a40204116aeead6038cc", 0xfffffffa, &(0x7f0000000580)="64f9877cbd5c60a8c9d8b16167b612d4782d0f6f778fa7d3bb2ff8d2db15d1bf8139c0601876e9c4be7828a8a6015ff7019c355c470a4dc95ee50549faa5ec0f0eed9c44ba3f4881a2a4", &(0x7f0000000280)=0xe6}) sendto$auto(0xffffffffffffffff, 0x0, 0x9, 0x6, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 48.560187193s ago: executing program 8 (id=5257): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(0x0, 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000180)='.\x00', 0x2400, 0x7b) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1655) sysfs$auto(0x2, 0x10000000000002e, 0x0) fsopen$auto(0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="45000000966f0ef2045ab0d8dd7b5c0ef7c4e95d9433ada6e9fc9bf9bfdce48526819c922d1904cb86d54da61c24115d9995f88319f36d8059f6e8805a7dd553dc935c7eb2805b0f2e54f9890418414c1307b7158828482e69d5cdcc433bfb4ddd6f141aa8fea32bca50a42f559ae7c2f96f924426f91b7fcb6961e46c236ca4687e38a767d861f203dce4cfbfad32f13e7945dcd33af0f2a95e189e74b56d522765f406ab2acb5e803acf1c491180f97f5aa919e2e07b9d6f6b5387ade3edc73201", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25010000000500060002000000050005000800000008000300ff0300000c000400ef20bbf0b6e731c5"], 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x80000001, 0x400004, 0xffffffffffffffff, 0xe7b, "0000fbff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRESOCT=r3, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES64=r3, @ANYBLOB="08000acbb828cc9dcf69b8ea2104f1e4c2"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40095) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 46.415008589s ago: executing program 6 (id=5261): r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_mgts_fops_(r0, &(0x7f0000000040)=""/108, 0x6c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x10002, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0xa, 0x73) socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890c, 0x8) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) 46.245453715s ago: executing program 6 (id=5263): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) socket(0x2b, 0x1, 0x0) (async) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000f7dbdf251a0000003d004300c7cdd123969780c92c3683b725d98c8ba6f31f4441be8a3fe7dd77ee6a8085876c4e6a2bc33a9c242f92d399b99172613cf52b3263f9417b058817f9"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000f7dbdf251a0000003d004300c7cdd123969780c92c3683b725d98c8ba6f31f4441be8a3fe7dd77ee6a8085876c4e6a2bc33a9c242f92d399b99172613cf52b3263f9417b058817f9"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cb5b"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @multicast2}, 0x68) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sched_setscheduler$auto(0x0, 0x1, &(0x7f00000019c0)={0xb}) (async) sched_setscheduler$auto(0x0, 0x1, &(0x7f00000019c0)={0xb}) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) (async) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) 45.597788231s ago: executing program 6 (id=5265): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000140)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r1, 0x2f}, 0x22) open(0x0, 0x22240, 0x154) bpf$auto(0x7, 0x0, 0xa3) 45.392784131s ago: executing program 6 (id=5267): r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/timestamp_mode\x00', 0x121001, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0xf3) (async) r1 = open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000080)={0xbeb0, [{0xe, 0x8001}, {0x1000, 0x6c64}, {0x6, 0x10001}, {0xffffffff, 0x5}, {0x2, 0x1}, {0x2, 0x5}, {0xfff, 0x7fff}, {0x1, 0x8}, {0x3f2, 0x2}, {0x91, 0x4}, {0x6, 0x2}, {0x0, 0x80000000000000}, {0x0, 0x10}, {0x5, 0x73}, {0x7, 0x9}, {0x81, 0x855c}, {0x8, 0xfffffffffffffffb}, {0xfffffffffffffffe, 0xc23}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x2d}, {0x3, 0xff}, {0x8, 0x3}, {0x4, 0x932}, {0x2}, {0x7fffffff, 0xe}, {0x10, 0x2e43}, {0x91b, 0x80}, {0x8000, 0x4}, {0x872, 0x1}, {0x1ff, 0xd}, {0x2, 0x7040}, {0x3, 0x5}, {0x9, 0x4}, {0x5, 0xaafa}, {0xf849, 0x3}, {0x3, 0xffffffffffffff91}, {0x5, 0x2}, {0x3, 0x200}, {0x7f, 0x7df6f1e0}, {0x3, 0x1}, {0x2}, {0x3, 0x3ac3}, {0x6, 0x1}, {0x101, 0x1}, {0x1, 0xfffffffffffffffa}, {0x8, 0x2}, {0x0, 0x5}, {0xd80, 0xfffffffffffffff9}, {0xec0, 0xff}, {0x9, 0x1000}, {0x8000, 0xfffffffffffffffe}, {0x1, 0x2}, {0xfffffffffffffffd, 0x6}, {0x1, 0x2}, {0xffffffff, 0x5040}, {0x5, 0x3}, {0x7fff, 0xc2a}, {0x5, 0x4}, {0x2}, {0x4, 0x7}, {0x5, 0x5}, {0x3, 0x1}, {0xffffffffffffffc0, 0x6}, {0xd}, {0x0, 0x6}, {0x2, 0xffffffffffffff27}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x78f87a8a, 0x6afd}, {0xffffffffffff82b6, 0xd}, {0x9, 0x8}, {0x3, 0x9}, {0x800, 0xd1}, {0x2, 0x4}, {0x9, 0xffffffffffffffff}, {0x8000000000000001, 0x4}, {0xb6, 0x9}, {0x8230, 0x6a}, {0x9, 0x4}, {0x5, 0x5}, {0xff, 0x8}, {0x8, 0xfffffffffffffffc}, {0x8, 0x2}, {0x3, 0x9e1}, {0x100000001, 0x5}, {0xe, 0x10001}, {0x0, 0x92}, {0x100000001, 0x600}, {0x2, 0x4}, {0x7, 0xcdbf}, {0x9, 0x3e2040}, {0x4, 0x4}, {0x100000000, 0x16}, {0xb, 0x3}, {0x1ff, 0x6}, {0x225, 0x9}, {0x4, 0x4}, {0x200, 0x1ff}, {0xf, 0xffffffff}, {0x1, 0x718b7da2}, {0x8, 0x800}, {0xfffffffffffffffb, 0x400}, {0x0, 0x2}, {0xf73, 0x8}, {0x400, 0x100}, {0x0, 0x1}, {0xffffffffffffff91}, {0x0, 0x800}, {0x4, 0x2}, {0x8, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0xfffffffffffffffb, 0xfffffffffffffff8}, {0x4, 0x7}, {0x40, 0xfffffffffffffc01}, {0xab, 0x8}, {0xb}, {0x7, 0x9}, {0x1000}, {0x0, 0xc0}, {0xf2dd, 0x800}, {0x2, 0x5}, {0x5e1b}, {0x5, 0x6e4}, {0x73f85cbc, 0x3}, {0x6, 0x3}, {0xa03, 0x101}, {0x5c, 0x3}, {0x1, 0xfffffffffffffaef}, {0x817, 0xfffffffffffffff8}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x9}, {0x70c, 0x5}, {0x2, 0x100000001}, {0x180000000000000}, {0xc, 0x1}, {0x2, 0x57}, {0x8, 0x3c}, {0xe, 0x5}, {0x6, 0x8}, {0xe658, 0x1}, {0x8, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0xc87b}, {0x6, 0x2}, {0x0, 0x8000}, {0x1000, 0x9}, {0xf2, 0x8740}, {0x100000000, 0x401}, {0x4, 0x5ef6}, {0x9, 0xa}, {0x5, 0x1}, {}, {0x5, 0x9}, {0xdec7, 0x5}, {0xc62, 0x9}, {0xffffffffffff7fff, 0x26}, {0xe2, 0x7ff}, {0xfffffffffffff001, 0x9}, {0x7fffffff, 0x4}, {0x4c80, 0x25ebebdf}, {0xfffffffffffffffc, 0x9fc}, {0x5bd, 0x9}, {0x8}, {0x27d, 0xffffffffffffffff}, {0x7fffffff, 0x2}, {0x1, 0x8000}, {0xffff, 0xffffffffffffff80}, {0x2}, {0x100, 0x9}, {0xfe1, 0x7}, {0x8a69, 0xfdd5}, {0x6, 0x4}, {0x8001}, {0x400, 0x9}, {0x4, 0x10}, {0x5, 0x6}, {0x3c9a, 0x2}, {0x800, 0x7}, {0xf62, 0x5}, {0x6, 0xfffffffffffffffb}, {0xc, 0x8}, {0x100000000, 0x3ff}, {0xf6, 0x1000}, {0x1, 0x6}, {0x9, 0x81}, {0x1000, 0x10001}, {0x9, 0x1}, {0x678, 0x7ff}, {0x1000, 0x800}, {0x1, 0x7fff}, {0x5, 0xbbb}, {0x5}, {0x795, 0xaa000000000}, {0x3, 0x8}, {0x9, 0x1}, {0x5, 0x14}, {0x0, 0x100000001}, {0x4, 0x92}, {0x3, 0x2}, {0x4, 0x200}, {0xfdad, 0x2}, {0xfffffffffffff001, 0xe1}, {0xca63, 0x6}, {0x8, 0x3}, {0xfffffffffffff000, 0xa0}, {0x3}, {0x7c, 0x4b66413e}, {0x5, 0x811}, {0x6, 0x5}, {0x40, 0x9}, {0xffff, 0x6}, {0xb, 0x4}, {0x8001, 0x1875}, {0x7, 0x4}, {0x300000000000000, 0x1}, {0x2, 0xe}, {0x1, 0xfffffffffffffffe}, {0x8, 0x1}, {0x3, 0x2}, {0x3, 0x2}, {0x4, 0xc051}, {0x3, 0x949c}, {0x1ab5, 0x7}, {0x400, 0x5}, {0x3, 0x81}, {0x4, 0x7321}, {0x6f7, 0x7}, {0xc, 0x1ff}, {0x9, 0xe1}, {0x4, 0x3ff}, {0x2, 0xc}, {0x4, 0x8000000000000001}, {0x0, 0x3284}, {0x300000000, 0x7b5}, {0x5, 0xea}, {}, {}, {0x8, 0x9}, {0x70, 0x4}, {0x1, 0x8}, {0x5, 0x100000000}, {0x5, 0x6688}, {0x5, 0x657}, {0x4, 0x7}, {0x7f, 0x1}, {0x0, 0x2}, {0xfbc1, 0xffffffffffffffff}, {0x7, 0x8}], 0x6, "1a395972821488"}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001080)='/dev/audio\x00', 0x448182, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f00000010c0)="b6db7fd08bb47697a3ae2473c8f6d235446f5b72781ffec7db8d996140cf8e8e6033e4b1b4aa3b7fc47c64f21f800248b4a5a551751c25dc73c81bfee16a93b506b6b5aa6f66b179cfa0ba061a021488d40d4d93be32f6f4841e398a67294d441b73e86cc8db2071c5eb3b897bda5a1d357eff14ac59908658879eaa6bae31b400c462bd0ab2be1cec4accd396b56505c710400cda3da1d3fcb7e0c87acc4b9fc84613e7ae6b3fd2a15774f2392b0e06008dc03d086a9af11df2728ebf") (async) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001200)={@inferred=r0, 0x7, 0x0, @btrfs_ioctl_vol_args_v2_3_0={0x7, &(0x7f0000001180)={0x1, 0x6, 0x3, 0xc0, {0xd8, 0x5, 0x4, 0x5, 0x3}, [0x5, 0x7, 0x100000001, 0x1, 0x9]}}, @subvolid=0x7ff}) write$auto_aoe_fops_aoechr(r3, &(0x7f0000002200)="ad21a6a94f18babb9b7572eb72d3dbf2eb21a1be51acfb28761e864b736c7be5d54f53df5d676b83d8527afcf9596b2d22d33fb342d01df92cb5f0c5792a4e7b45978f7f0f2af566c887e36831bc1306f1118cd7ee95500bdc091fc605f61295061c59db7e40dd918f1f", 0x6a) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000022c0), r3) sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x3c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "c1afae059750126bde3093bfce5efd7243eab4f2b690ee21330d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) (async) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002400), r3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x200000c4) (async) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002500)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r6, 0xc08c5114, &(0x7f0000002540)="dd85671e0e6f5dda177d321ee7f63978f811928e1fa23bf55d512544a378bf2d94e886ed9185f6933bfe8505c3155bb61fe9fba9104af2554c4ba2a8eb8ab4cfc83190f8af32b2a7f9c1f4f8a16e6b4f09d823b1533a93dc0640fdeaf5463ae5392d5edfba98157429e9e352dcbaa9c945da9f1af77da12f2e0e4abb977c91b2665486d49b5c4356e099a2ec194ca7bb9279bff7b07bebe71c763bea627eddd9840ce3c77e6418ec9cc61f87b35583a5c419e7210db161b71f99b0434db04739e6dc049a36df708462460791bff600abe106864b487f21d5ca2d695f1cbe15adc6f1dd75fdf6ae9d") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/neigh/batadv_slave_1/base_reachable_time_ms\x00', 0x14642, 0x0) r7 = ioctl$auto_TUNSETVNETHDRSZ2(r2, 0x400454d8, &(0x7f0000002680)=0x42) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002700), r3) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x58, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_KEK={0x42, 0xf2, "997b2fdc2a25b4b4745d6196af1147a3466fe5250702e107dc41019209dd1f9829a5937c33290dd8d478c2da6215ffff372e9fe0054f512cba5c1912bf9e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40004) r9 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000002880), r1) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000002980)='/dev/sr0\x00', 0x109282, 0x0) (async) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002a00), r3) sendmsg$auto_NL80211_CMD_FRAME(r3, &(0x7f0000002c40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000002c00)={&(0x7f0000002a40)={0x1a8, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x66}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MLO_TTLM_ULINK={0xc4, 0x149, "0b69ab7ba1357029887f9b62162c64a41882f73e698ff462bd847260f25483794188f1da05fc828ea90a6fd1c602e3fe63b06ab9d97cd5dd299b02fe9f6973c08862da6fd88e46cde711cc122e05fae0008262a88f7a0da12f92041b532a01a30ef4f4aeafd1b6767b4373f5dacfb9f55cfca6fe89c228ba00c2607c94577c05e2050048285d376d9f3fe88c93521d312d7f91d375b8dfb1cef0f645a9ef33e8aae0b22249a3c661995b49eef4cdaa8c33656a751222ec6cc4892c60260871ed"}, @NL80211_ATTR_MLO_TTLM_ULINK={0xbf, 0x149, "916075f58b4e448265224ac7c7ebccead3651aa69696c8c64c6d5064e45fa40be57fd95d71e4eae50972f28de29131f02b67ae84ac893a79ce3b6106edd50412c6063dd760ea8033ae875ea41bcad936b358f16cd4986ce5121ba096e02681e81953fffbfea1a3115fc08a5d5a2bdfff62da3f482d146a4231c02888651f2d36de6c8c3be2a5440e4f99c88b43e24b1a90d8d7c430643bd49877142a903b7d083ce8034592035281c9e1a95e4621680beac8361957cdde173e71be"}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x40800) (async) ppoll$auto(&(0x7f0000002c80)={r1, 0x3a6, 0x3}, 0x1, &(0x7f0000002cc0)={0x100000000, 0x7}, &(0x7f0000002d00)={0x40}, 0x8) (async) ioctl$auto_BLKGETSIZE64(r10, 0x80081272, &(0x7f0000002d40)=0x765) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002dc0), r3) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r12, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x1c, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3ff}]}, 0x1c}}, 0x8801) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r12, &(0x7f0000003040)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x68, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x8001}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0xfdc4}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x8}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xd, 0x2, '/dev/sr0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 44.929698243s ago: executing program 6 (id=5268): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x50) r0 = socket(0x25, 0x3, 0xcb) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000380)="365e974f13bcf97df42539526815354b0cf986fc868c074154390fa6a85162e0b7337424922989690e6b7e775aab4dd6af46c9b3ec0779b6f4e07233a03af5207931d3b104e8772938ca32f33461b0f57c3e6554f607180d162b94d4099b74851a27ce745e1bf750edcaff0d05d3b3eb15eb75942f90c89d06fd093ea1b436b5241cff827f76cab00481fda1fc88bf80c387e0f7f1", 0x95) (async) write$auto_console_fops_tty_io(r1, &(0x7f0000000380)="365e974f13bcf97df42539526815354b0cf986fc868c074154390fa6a85162e0b7337424922989690e6b7e775aab4dd6af46c9b3ec0779b6f4e07233a03af5207931d3b104e8772938ca32f33461b0f57c3e6554f607180d162b94d4099b74851a27ce745e1bf750edcaff0d05d3b3eb15eb75942f90c89d06fd093ea1b436b5241cff827f76cab00481fda1fc88bf80c387e0f7f1", 0x95) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000000c0)=0xa8ab) mmap$auto(0x0, 0xe981, 0xdf, 0x18, 0x401, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) write$auto(r2, &(0x7f0000000040)='+\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(r3, r0, 0x4) (async) close_range$auto(r3, r0, 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000840)="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", 0x80000001, &(0x7f0000000540)={&(0x7f0000000280)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f80900000065a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad302886710e4633eb197159ec1c6a616015a660ff3aa3fd59583911a5239ff895b0871d32f098c6cfdef0b944fe926c04548982406b746ea4b541e6e5c969bb2955ab13"}, 0xc87, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e7fcc9916d6a7139c731bdeed", 0x4, 0xc77}, 0x8}, 0x6, 0xd3) sendmmsg$auto(0x3, 0x0, 0x9a3, 0x7000000) 44.007952054s ago: executing program 6 (id=5269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf2506000000f6739eb0936645db0f7f772523aff57ea3cc"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x5, 0x6, 0x1, 0x5}, 0x6) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5}, 0xe) io_uring_setup$auto(0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0x29, 0x6, 0x3) mmap$auto(0xffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') r4 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x10042, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x800) r5 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) r6 = socket(0x18, 0x4, 0x6) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r5, 0x0, 0x5c8) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a401, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000d80)="b6", 0x1) close_range$auto(r6, 0xfffffffffffff000, 0x4000000000002) r9 = ioctl$auto_TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000000)=0x9) ioctl$auto_BLKZEROOUT(r7, 0x127f, 0x0) open_by_handle_at$auto(r9, &(0x7f0000000240)={0xb9, 0x8006, "9a596d3e2d9fa3e8d2f468a31c8571e10c8b9a263a911d537d0c35565369b0fb48a2cf54d8f10bb32af834f56d46a8dbf063a147061c95f7c9642a1f26f9e87820f21779ffac130e8b9c5684647f748af87e6e0f88e0a83322dfd8480a926f5c84a5dc84ce6039ecfb57d40bc4da972fe306cb60eceeb3c4f5109df42d3b87bbbdbe99b1e1f16346969f9201f50842a035bd06394ac9b9d0fbb7952baa9f653172557ce264282b600965e732adba5dc6575d9690e8108d17af"}, 0x4) io_uring_setup$auto(0x6, 0x0) 33.54904361s ago: executing program 38 (id=5257): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(0x0, 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000180)='.\x00', 0x2400, 0x7b) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1655) sysfs$auto(0x2, 0x10000000000002e, 0x0) fsopen$auto(0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="45000000966f0ef2045ab0d8dd7b5c0ef7c4e95d9433ada6e9fc9bf9bfdce48526819c922d1904cb86d54da61c24115d9995f88319f36d8059f6e8805a7dd553dc935c7eb2805b0f2e54f9890418414c1307b7158828482e69d5cdcc433bfb4ddd6f141aa8fea32bca50a42f559ae7c2f96f924426f91b7fcb6961e46c236ca4687e38a767d861f203dce4cfbfad32f13e7945dcd33af0f2a95e189e74b56d522765f406ab2acb5e803acf1c491180f97f5aa919e2e07b9d6f6b5387ade3edc73201", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25010000000500060002000000050005000800000008000300ff0300000c000400ef20bbf0b6e731c5"], 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x80000001, 0x400004, 0xffffffffffffffff, 0xe7b, "0000fbff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRESOCT=r3, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES64=r3, @ANYBLOB="08000acbb828cc9dcf69b8ea2104f1e4c2"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40095) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 28.556794715s ago: executing program 39 (id=5269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf2506000000f6739eb0936645db0f7f772523aff57ea3cc"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x5, 0x6, 0x1, 0x5}, 0x6) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5}, 0xe) io_uring_setup$auto(0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0x29, 0x6, 0x3) mmap$auto(0xffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') r4 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x10042, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x800) r5 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) r6 = socket(0x18, 0x4, 0x6) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r5, 0x0, 0x5c8) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a401, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000d80)="b6", 0x1) close_range$auto(r6, 0xfffffffffffff000, 0x4000000000002) r9 = ioctl$auto_TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000000)=0x9) ioctl$auto_BLKZEROOUT(r7, 0x127f, 0x0) open_by_handle_at$auto(r9, &(0x7f0000000240)={0xb9, 0x8006, "9a596d3e2d9fa3e8d2f468a31c8571e10c8b9a263a911d537d0c35565369b0fb48a2cf54d8f10bb32af834f56d46a8dbf063a147061c95f7c9642a1f26f9e87820f21779ffac130e8b9c5684647f748af87e6e0f88e0a83322dfd8480a926f5c84a5dc84ce6039ecfb57d40bc4da972fe306cb60eceeb3c4f5109df42d3b87bbbdbe99b1e1f16346969f9201f50842a035bd06394ac9b9d0fbb7952baa9f653172557ce264282b600965e732adba5dc6575d9690e8108d17af"}, 0x4) io_uring_setup$auto(0x6, 0x0) 9.304524649s ago: executing program 9 (id=5350): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000540), 0x40102, 0x0) writev$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x1000000031) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) fsconfig$auto_SHMEM_HUGE_DENY(r2, 0x9, &(0x7f0000000140)='\x00', &(0x7f0000000180)="f54f07e7fc5271bd2d206acf46f392fbfd768b405d9a62deb248d81bbcd71f19e703bf4efbc48303395edff9f1fb1395540d963ca783eda52f8e21d43105d6c3072db755cb8e97ab290f7235a7f42a112bf23e2fcee9aaf8901d95e7f4970f3cc6cb69ccdbfc57a2153e38aa22903defb8b8643cb3f62e3ff2b05cffea0711664ea75c3c12fb3ed50ba2710bee4cf12691a774365cd68861e4e4af110811748cef2b57db85e6efdc888c63032b491296a2466e07a571eeb073f04628", 0xffffffffffffffff) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/max_desync_factor\x00', 0x42402, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x80201, 0x0) writev$auto(r4, &(0x7f0000005f00)={0x0, 0x4}, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048890}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 9.085442647s ago: executing program 0 (id=5351): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rxrpc/conns\x00', 0x7f7382, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) shmat$auto(0xbffffffd, 0x0, 0x873) close_range$auto(0x0, 0xffffffffffffffff, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = io_uring_setup$auto(0x59, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r4) r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000180), r1) r6 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r6, 0x107, 0xd, 0x0, 0x8000) sendmsg$auto_CGROUPSTATS_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r6}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40011) 8.465266438s ago: executing program 0 (id=5352): setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x4) 8.201697764s ago: executing program 0 (id=5353): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = pidfd_open$auto(0x1, 0x0) r1 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) unshare$auto(0x20000080) setns(r0, 0x60020000) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57) 6.43055311s ago: executing program 9 (id=5362): r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x7fff, 0x0, 0x4}, 0x14) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100)=[{0x200000000040, 0x2, 0x8989}, {0x5, 0x8, 0x8}, {0x7, 0xc94, 0x400}]) mmap$auto(0x67e641fd, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xfffffffffffffffa, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4081, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0x6b1, 0xffffffffffffffff, 0x8000) r2 = io_uring_setup$auto(0x5b, 0x0) close_range$auto(r1, r0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80001, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) mq_open$auto(0x0, 0x5, 0x0, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, &(0x7f0000000180)=""/210, 0xd2) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 6.265421674s ago: executing program 0 (id=5364): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) setsockopt$auto(r0, 0x107, 0x8, 0x0, 0x6) recvmmsg$auto(r0, 0x0, 0x10001, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000440)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x06\b\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0x68ba, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0xffffffffffffff9c, 0x0, 0x1000, 0xc00000, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') rename$auto(&(0x7f0000000280)='./file1\x00', 0x0) 5.076274275s ago: executing program 9 (id=5367): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r1, 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) (async) pwrite64$auto(r0, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) 4.522752439s ago: executing program 4 (id=5369): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000500), 0x82800, 0x0) fcntl$auto(r0, 0x4, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) (async) madvise$auto(0x0, 0x20499d, 0x9) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x149103, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) 4.261774514s ago: executing program 9 (id=5371): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) (rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x58400, 0x22) fchmod$auto(r1, 0xc) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32) shutdown$auto(0x200000003, 0x2) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdef) (async) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80000, 0x0) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) pread64$auto(r0, 0x0, 0x2, 0x7ff) (async, rerun: 32) sysfs$auto(0x2, 0x40, 0x2) (async, rerun: 32) read$auto(0xffffffffffffffff, 0x0, 0x1f40) (async, rerun: 32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyu9\x00', 0x2a0000, 0x0) (async) ioctl$auto(r2, 0x4b49, 0x1) (async, rerun: 64) write$auto(0xffffffffffffffff, 0x0, 0xffff) (rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto(0xf, r3, 0x1, 0x4053) (async) timer_create$auto(0x0, &(0x7f0000000080)={@sival_int=0xed0000, @raw=0x7, 0x68, @_tid=r3}, &(0x7f00000000c0)=0x10) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 3.762285869s ago: executing program 2 (id=5373): setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x4) 3.601606809s ago: executing program 9 (id=5374): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfa3, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$auto(r0, 0x4, 0xffffffffffffffff) close_range$auto(r0, 0x8, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000006, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x10, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000002640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002600)={&(0x7f0000001200)={0x13e8, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_SAR_SPEC={0x3c8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x800}, @NL80211_SAR_ATTR_SPECS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbfe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe04}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS={0x80, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb02}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}]}, @NL80211_SAR_ATTR_SPECS={0x140, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xed60}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x20}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa000000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1d0}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5a}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x70e7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2719b676}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x17}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb75e}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x13}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}]}, @NL80211_SAR_ATTR_SPECS={0x44, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xca08}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x52}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}]}, @NL80211_SAR_ATTR_SPECS={0x11c, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x800}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x42b}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffff00}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff00000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xdc67}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10e}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4139}]}]}, @NL80211_SAR_ATTR_SPECS={0x6c, 0x2, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa750}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffa}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffbff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6ed}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}]}, @NL80211_ATTR_HT_CAPABILITY={0x1004, 0x1f, "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"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x800}, 0x4108) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x6000000000, 0x8, 0x7) madvise$auto(0x0, 0x400053, 0x9) shmdt$auto(0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000240)={0x7, 0x0, [{0x175, 0xc, 0x40010}, {0x100, 0x14000, 0x23b}, {0xc2c, 0x27, 0x1}, {0xb, 0xd5, 0x3}]}) r6 = socket(0xa, 0x2, 0x0) setsockopt$auto(r6, 0x29, 0x32, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\xf7P\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\"t\xde\x14\xe4\xa5\xfe\xb5\x00\x00\x00', 0x110) 3.566091237s ago: executing program 2 (id=5375): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c80", @ANYRES32, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x23, 0x80002, 0x73) ioctl$auto(0x4000000000000c8, 0x400454d0, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4088000}, 0x2000c014) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r1, 0x80047c05, 0x0) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x43, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x4, &(0x7f0000000000)='b\x00\x00\x01\x00\x00\x00\x00\x00\t', &(0x7f0000000100), 0x4) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffff, 0x17) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyz2\x00', 0x412200, 0x0) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r3, 0x720, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/version\x00', 0x58d002, 0x0) 3.3138094s ago: executing program 4 (id=5376): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x123042, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) 2.843548316s ago: executing program 2 (id=5377): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) unshare$auto(0x40000080) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="11000000000000000000000000000100", 0x10) pwrite64$auto(0xc8, 0x0, 0xe, 0x4) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xf, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="1b0026bd7400fddbdf2503000000040008005400038004000f800400110008001e00", @ANYRES32=0x0, @ANYBLOB="3e00ba809bdd3500e6006e4f74b952aa5712f88a7a8fb419c8806810e9132c14bc81998b9330fea5b928ceda31c689e030e397a640b5db26e4077700000000001200010089877148000000000000000000000000040002"], 0x84}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shmctl$auto(0x4, 0x6, &(0x7f0000000300)={{0xe9, 0xee01, 0xee00, 0x3, 0x80000000, 0x7bef26fc, 0x100}, 0x80000000, 0xed8, 0x7, 0x8000000000000000, @raw, @inferred=r0, 0x8, 0x0, 0x0, &(0x7f0000000240)="401c20a15ebcca215b6699300b690e97d5582a9026ab730bc1b587719b81a1cc97971ceaf608eb4036175e03c4b82daeba258ed195000f5e86033ceec7130321d11a0fff164400173a1ca624e23abd4160e8b60efdb781400c45036db507e133e126a78b77b336af95d105e6aecb85bb474024d8651e6072cccce685851908b81ee180cc"}) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 1.81460834s ago: executing program 4 (id=5378): r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x4) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x4004550c, r1) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCCONS(r2, 0x541d, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800c1000ca164fc287c032ad348a68193", @ANYRES32=r3, @ANYRESOCT], 0x740}, 0x1, 0x0, 0x0, 0x20008040}, 0x4800) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r5, 0x5422, 0x0) mmap$auto(0x6, 0xa96, 0x2000000df, 0x9b72, r0, 0x3) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_btf_obj_fd=r5, 0x0, 0x3, 0x5b, 0xa96b0f4, 0x6}, 0x40) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x8000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r6, 0x40045730, &(0x7f00000001c0)=0x4) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r7 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x161700, 0x0) preadv$auto(r7, &(0x7f0000000100)={0x0, 0x7e}, 0x8, 0x2, 0x6) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x5403, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0xffffe, 0xfffffffffffffffd, 0x15) r8 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r8, 0x0, 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) 1.221080016s ago: executing program 4 (id=5379): openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/sessionid\x00', 0x0, 0x0) (async) fcntl$auto(0xff80000000000000, 0x406, 0x1) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001440)='/dev/dmmidi2\x00', 0x800, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, 0xfffffffffffffffd) (async) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) 1.091072432s ago: executing program 0 (id=5380): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x19e) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 998.032564ms ago: executing program 2 (id=5381): r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r1, 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], 0x9c}}, 0x81) r3 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) (async) ioctl$auto_TIOCNOTTY(r3, 0x5422, &(0x7f0000000340)="8c4ed78965711ac3c694aca0f9b3e0b3a7035852de4aeb83c36e4001d7d96ef0a0401ed343798875cd42ae5f766707f67e86d60f2cc0dd36e0456f6f1b5984eede5af73069aeef809381755b49d5dc109b991a9914712a0d5a8c3007befc9f778c7262e03ebc5a2086faa2b6ea7b0e6ce26f03bc2c217fe9052b2cc0ef624459a970e6286acf474c0c8be417739051dadc72e7c882949679664ce88705099cc74b9f5d0f130b60ac8b9607d7dfe27f1f5a0e198f3285982838aff3dc989d447cbb38e40600aff4") 897.741607ms ago: executing program 4 (id=5382): socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media13\x00', 0x8e000, 0x0) r0 = socket(0x21, 0x801, 0x84) getsockopt$auto(r0, 0x40000000029, 0xb, 0xfffffffffffffffe, 0x0) 707.306155ms ago: executing program 2 (id=5383): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b042cbd7000ffdbdf250d000000180001801400020076657468305f6d616376746170000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x76, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x4) 626.44763ms ago: executing program 4 (id=5384): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x0, 0x1009}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, 0x0, 0x7, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cb5b"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x0, 0x1009}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, r3, 0x2, 0x8}, 0x100000cf) r5 = socket(0x29, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto_HPET_DPI(r4, 0x6805, 0x0) ioctl$auto(r5, 0x89f0, 0x24) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x89f1, 0x24) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) recvmmsg$auto(r0, 0x0, 0x7, 0x6, 0x0) 462.529818ms ago: executing program 0 (id=5385): setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xb, 0x800, 0x15) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) r0 = socket(0x0, 0x4, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r1 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000000c0)={@siginfo_0_0={0x100, 0x7fffffff, 0x3, @_sigfault={&(0x7f0000000000)="efcb278cbf41a2c2de322e3bc95e6b658ac9600dc102315a19c888655104e161461c1ef4dfff3f81643c59999a2f205e5aa86aa2261c54bd8d10c131a662d329ff1eb84c961f57753e33623ad60441fa6935abaedd7bdf6a2ca39e3402d7cc31486dc69401de25c246212738325901225749e976b9cc885913d5e5e65a1a3dbdc2374192709e7d233afc0540eeaed5c0cb0388c2e7", @_trapno=0xb2}}}, 0xfffffff8, &(0x7f0000000140)={{0x4}, {0xb549}, 0x9, 0x44, 0xb5, 0x3, 0x8000000000000001, 0x3, 0x2, 0x10000, 0x4, 0x1, 0xc, 0x1, 0xab47, 0x2}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_KILL(0x8, r2, 0x6, 0x9) kcmp$auto_KCMP_FILE(r1, r2, 0x0, 0xffffffffffffffff, r0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0xa, 0x2, 0x73) setsockopt$auto_SO_BINDTOIFINDEX(r4, 0x6, 0x3e, 0x0, 0xac8) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r4, 0x0, 0x20044894) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, 0x0, 0x84) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 263.358588ms ago: executing program 9 (id=5386): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async, rerun: 32) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x0, 0x0, 0xd) (async, rerun: 32) r1 = getpid() (async, rerun: 32) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x40) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) (async, rerun: 32) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 32) socket(0x2c, 0x3, 0x10000) (async, rerun: 64) setuid$auto(0xe) (async, rerun: 64) mprotect$auto(0x200000000000, 0x8000806121, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, &(0x7f0000000040), 0x1) 0s ago: executing program 2 (id=5387): openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x210000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(r2, 0x4004550c, r2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x23, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) setresuid$auto(r4, r5, r4) r8 = getpgrp(0x0) kcmp$auto(0x0, r8, 0x2c, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2dc, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x288, 0x2d, 0x0, 0x1, [@nested={0x11, 0xd7, 0x0, 0x1, [@generic="6b76c1710eb86e3a07da9936cc"]}, @nested={0x1c0, 0x129, 0x0, 0x1, [@generic="4f3c8ec6d7cdcce0f34e2aa5d2f555781922c6911bfbba01ec5ab7053990e5cc195215380644a7528dd6402b88499f55b02355085dfff3b5e2bfb1001cf1d91cc00987754ea72b6a80da04b15d0ce7", @nested={0x4, 0x83}, @nested={0x4, 0x13}, @typed={0x8, 0xf2, 0x0, 0x0, @pid=r1}, @generic="61e6226a8b63a73da30cc0e54567aecadf7812f15cb310ba8579679245810c2df983fd6202a60791ad67d759fcdafa179b8f1fbfe94700bd29259ac146d1ae18ee74e1f03594db1aaf10ae66e2d7b130a5320933cc6a1ef65113fe7f16d0872fa87afc16f40208491ac51a8d2e50aaeef83358262c4adb34647af75ed1171584c9f699e1c5617b1c14818691426408e1650597f82f2a8edce95ba4c28a21f7c82f7b6cdd81610e721dc572f9a40dc9db9306f368fe145a90f2195c112151961dcd2fd63e1a255225d15ffef06fbab0b6f6df35b0d77c5fd34d794f61e2cceb5fb80c15", @generic="e99356683ef91c9846f16302dfbf650c15c136f742772115980d05b35b24a573c94a7276e87da5a1c9d543ee15dd01774f46872f9522bd6ba68fc094a1b72453ac1c6a0811fcfcfc3e6a207546764b0a775ed896ec9f956fc1bcb73e8c7a65faa00f62033b582df88767ca269eb6e937a601e99572ef57a59a03"]}, @generic="1c26eff2410b6791338eb25af5bdb4ce6ba7e0283e620c44098d0ed02f33856a2143b859976d990a42f0db786b951720c553279505dfb2ba81815757b56c47ef82f460918384db131fc1625364d4e4609c6679b1530738cad75b139b7a7743aaaaae1e0085d3d393604e8b0737b0d850f13a1566d86ed5382cc7749639bcff27b8ee9a25461c42d51b15058a026ab4239daf247163f9fa08f3fdf79d92c58b7e5f2bfa3c", @typed={0x8, 0xc5, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0x2f}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @uid=r5}]}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x7}, @NL802154_ATTR_COORDINATOR={0xc, 0x1e, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @ipv4=@loopback}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x1e}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4040080}, 0xc) kernel console output (not intermixed with test programs): [T28601] ? __pfx___handle_mm_fault+0x10/0x10 [ 1243.398498][T28601] ? __pfx_mt_find+0x10/0x10 [ 1243.398527][T28601] handle_mm_fault+0x36d/0xa20 [ 1243.398553][T28601] __get_user_pages+0x1178/0x32a0 [ 1243.398580][T28601] ? __pfx___get_user_pages+0x10/0x10 [ 1243.398606][T28601] populate_vma_page_range+0x267/0x3f0 [ 1243.398628][T28601] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1243.398648][T28601] ? __pfx_find_vma_intersection+0x10/0x10 [ 1243.398668][T28601] ? do_mmap+0x93f/0x12f0 [ 1243.398688][T28601] __mm_populate+0x107/0x3a0 [ 1243.398708][T28601] ? __pfx___mm_populate+0x10/0x10 [ 1243.398730][T28601] ? up_write+0x28c/0x4f0 [ 1243.398749][T28601] vm_mmap_pgoff+0x37f/0x470 [ 1243.398771][T28601] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1243.398792][T28601] ? do_futex+0x192/0x350 [ 1243.398809][T28601] ? __pfx_do_futex+0x10/0x10 [ 1243.398829][T28601] ksys_mmap_pgoff+0xe4/0x610 [ 1243.398847][T28601] ? __x64_sys_futex+0x358/0x4d0 [ 1243.398865][T28601] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1243.398882][T28601] ? xfd_validate_state+0x129/0x190 [ 1243.398898][T28601] ? ksys_write+0x1ac/0x250 [ 1243.398918][T28601] __x64_sys_mmap+0x125/0x190 [ 1243.398937][T28601] do_syscall_64+0x10b/0xf80 [ 1243.398960][T28601] ? clear_bhb_loop+0x40/0x90 [ 1243.398978][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.398994][T28601] RIP: 0033:0x7f6bfb99ce59 [ 1243.399007][T28601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.399021][T28601] RSP: 002b:00007f6bfc7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1243.399036][T28601] RAX: ffffffffffffffda RBX: 00007f6bfbc16090 RCX: 00007f6bfb99ce59 [ 1243.399047][T28601] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1243.399056][T28601] RBP: 00007f6bfba32d6f R08: 0000000000000007 R09: 0000000000028000 [ 1243.399065][T28601] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1243.399074][T28601] R13: 00007f6bfbc16128 R14: 00007f6bfbc16090 R15: 00007ffea9a46848 [ 1243.399093][T28601] [ 1243.957697][T28603] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1244.200841][T28248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.653570][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1244.750604][ T5729] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1245.745442][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1245.776845][T28248] veth0_vlan: entered promiscuous mode [ 1245.861648][T28248] veth1_vlan: entered promiscuous mode [ 1245.983788][T28248] veth0_macvtap: entered promiscuous mode [ 1246.053526][T28248] veth1_macvtap: entered promiscuous mode [ 1246.153202][T28248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.219824][T28248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.301064][ T7572] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.370054][ T7572] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.429238][ T7572] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.529233][ T7572] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.690725][T28671] random: crng reseeded on system resumption [ 1246.704754][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1246.741561][T28673] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1246.814464][T14674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.859982][T14674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.142855][T21808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.184090][T21808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.460285][T28694] random: crng reseeded on system resumption [ 1247.735339][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1248.730954][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1248.773456][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1249.453191][T28737] random: crng reseeded on system resumption [ 1249.724892][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1250.709668][T28775] futex_wake_op: syz.5.4536 tries to shift op by -2048; fix this program [ 1250.724340][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1250.757064][T28775] futex_wake_op: syz.5.4536 tries to shift op by -2048; fix this program [ 1250.845202][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1251.714363][T16012] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1252.044063][T28801] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1252.709637][T28673] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1252.912222][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1252.950949][ T30] audit: type=1800 audit(4294967487.731:56): pid=28819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4543" name="sr0" dev="devtmpfs" ino=2809 res=0 errno=0 [ 1253.747114][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1253.957980][T28842] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1254.142209][T27345] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1254.701532][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1254.982358][ T6072] Bluetooth: hci4: command 0x0c1a tx timeout [ 1255.116397][T28833] FAULT_INJECTION: forcing a failure. [ 1255.116397][T28833] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.237907][T28833] CPU: 0 UID: 0 PID: 28833 Comm: syz.6.4548 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1255.237934][T28833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1255.237941][T28833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1255.237950][T28833] Call Trace: [ 1255.237956][T28833] [ 1255.237962][T28833] dump_stack_lvl+0x100/0x190 [ 1255.237983][T28833] should_fail_ex.cold+0x5/0xa [ 1255.238002][T28833] should_failslab+0xc2/0x120 [ 1255.238021][T28833] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1255.238045][T28833] ? jbd2__journal_start+0x194/0x6a0 [ 1255.238075][T28833] jbd2__journal_start+0x194/0x6a0 [ 1255.238097][T28833] __ext4_journal_start_sb+0x36d/0x670 [ 1255.238114][T28833] ? ext4_dirty_inode+0xa1/0x130 [ 1255.238133][T28833] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1255.238150][T28833] ext4_dirty_inode+0xa1/0x130 [ 1255.238166][T28833] ? rcu_is_watching+0x12/0xc0 [ 1255.238185][T28833] __mark_inode_dirty+0x1f3/0x1720 [ 1255.238204][T28833] file_update_time_flags+0x46b/0x500 [ 1255.238230][T28833] ext4_page_mkwrite+0x324/0x1890 [ 1255.238250][T28833] ? trace_pelt_se_tp+0x13b/0x190 [ 1255.238266][T28833] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1255.238284][T28833] ? vm_normal_page+0x1d5/0x390 [ 1255.238309][T28833] ? find_held_lock+0x2b/0x80 [ 1255.238328][T28833] ? rcu_read_unlock+0x2d/0xb0 [ 1255.238353][T28833] do_page_mkwrite+0x17a/0x440 [ 1255.238371][T28833] do_wp_page+0xa77/0x4350 [ 1255.238397][T28833] ? __pfx_do_wp_page+0x10/0x10 [ 1255.238416][T28833] ? do_raw_spin_lock+0x128/0x260 [ 1255.238434][T28833] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1255.238457][T28833] __handle_mm_fault+0x1ab6/0x2a00 [ 1255.238484][T28833] ? reacquire_held_locks+0xce/0x1e0 [ 1255.238500][T28833] ? __pfx___handle_mm_fault+0x10/0x10 [ 1255.238525][T28833] ? lock_vma_under_rcu+0x17c/0x590 [ 1255.238558][T28833] handle_mm_fault+0x36d/0xa20 [ 1255.238584][T28833] do_user_addr_fault+0x5a3/0x12f0 [ 1255.238608][T28833] exc_page_fault+0x6f/0xd0 [ 1255.238632][T28833] asm_exc_page_fault+0x26/0x30 [ 1255.238647][T28833] RIP: 0033:0x7f2448e71e74 [ 1255.238660][T28833] Code: 07 0f 87 5c fe ff ff e9 4f fe ff ff 4c 89 fe 48 89 df e8 ef 8a fe ff 48 8b 43 40 44 01 7b 30 4c 29 f8 41 83 e4 06 48 89 43 40 00 00 b8 01 00 00 00 0f 84 38 fe ff ff 66 66 2e 0f 1f 84 00 00 [ 1255.238675][T28833] RSP: 002b:00007ffe07ff91e0 EFLAGS: 00010202 [ 1255.238687][T28833] RAX: 0000001b322a80a0 RBX: 00007f2449d45720 RCX: ffffffff8b82c952 [ 1255.238698][T28833] RDX: 0000001b31d24224 RSI: 0000000000000004 RDI: 00007f2449d45720 [ 1255.238707][T28833] RBP: 0000000000000867 R08: 00007f2449200000 R09: 00007f2449216218 [ 1255.238717][T28833] R10: 0000000000000007 R11: 0000000000000015 R12: 0000000000000004 [ 1255.238725][T28833] R13: 00007f2449216218 R14: 0000000000000000 R15: 0000000000000004 [ 1255.238740][T28833] ? mas_store_gfp+0x1062/0x1350 [ 1255.238761][T28833] [ 1256.689673][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1257.050605][ T6072] Bluetooth: hci4: command 0x0c1a tx timeout [ 1257.683354][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1258.678290][T28673] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1258.927361][T28984] FAULT_INJECTION: forcing a failure. [ 1258.927361][T28984] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.048247][T28984] CPU: 0 UID: 0 PID: 28984 Comm: syz.4.4564 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1259.048276][T28984] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1259.048283][T28984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.048293][T28984] Call Trace: [ 1259.048298][T28984] [ 1259.048305][T28984] dump_stack_lvl+0x100/0x190 [ 1259.048328][T28984] should_fail_ex.cold+0x5/0xa [ 1259.048348][T28984] ? pkcs7_digest+0x25b/0x950 [ 1259.048367][T28984] should_failslab+0xc2/0x120 [ 1259.048386][T28984] __kmalloc_noprof+0xe0/0x850 [ 1259.048404][T28984] pkcs7_digest+0x25b/0x950 [ 1259.048427][T28984] pkcs7_verify+0x150/0x1940 [ 1259.048451][T28984] verify_pkcs7_message_sig+0xdd/0x230 [ 1259.048469][T28984] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 1259.048486][T28984] ? pkcs7_parse_message+0x5b1/0x870 [ 1259.048504][T28984] ? kfree+0x223/0x6c0 [ 1259.048528][T28984] ? pkcs7_parse_message+0x5b6/0x870 [ 1259.048549][T28984] verify_pkcs7_signature+0x6d/0xa0 [ 1259.048567][T28984] valid_regdb+0x211/0x590 [ 1259.048589][T28984] ? __pfx_valid_regdb+0x10/0x10 [ 1259.048612][T28984] reg_reload_regdb+0x11a/0x460 [ 1259.048633][T28984] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1259.048656][T28984] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1259.048671][T28984] ? nl80211_pre_doit+0x19a/0xae0 [ 1259.048689][T28984] genl_family_rcv_msg_doit+0x214/0x300 [ 1259.048708][T28984] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1259.048723][T28984] ? genl_get_cmd+0x3e7/0x760 [ 1259.048754][T28984] ? bpf_lsm_capable+0x9/0x10 [ 1259.048771][T28984] ? security_capable+0x80/0x260 [ 1259.048799][T28984] genl_rcv_msg+0x560/0x800 [ 1259.048816][T28984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1259.048831][T28984] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1259.048846][T28984] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1259.048865][T28984] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1259.048887][T28984] netlink_rcv_skb+0x159/0x420 [ 1259.048909][T28984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1259.048925][T28984] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1259.048963][T28984] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1259.048988][T28984] genl_rcv+0x28/0x40 [ 1259.049010][T28984] netlink_unicast+0x585/0x850 [ 1259.049035][T28984] ? __pfx_netlink_unicast+0x10/0x10 [ 1259.049063][T28984] netlink_sendmsg+0x8b0/0xda0 [ 1259.049089][T28984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1259.049110][T28984] ? __import_iovec+0x1d2/0x640 [ 1259.049128][T28984] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1259.049154][T28984] ____sys_sendmsg+0x9e1/0xb70 [ 1259.049175][T28984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1259.049198][T28984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1259.049219][T28984] ? preempt_schedule_thunk+0x16/0x30 [ 1259.049245][T28984] ? try_to_wake_up+0x5f6/0x1900 [ 1259.049268][T28984] ___sys_sendmsg+0x190/0x1e0 [ 1259.049292][T28984] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.049315][T28984] ? futex_private_hash_put+0x107/0x1c0 [ 1259.049352][T28984] __sys_sendmsg+0x170/0x220 [ 1259.049370][T28984] ? __pfx___sys_sendmsg+0x10/0x10 [ 1259.049387][T28984] ? __x64_sys_futex+0x34f/0x4d0 [ 1259.049411][T28984] ? rcu_is_watching+0x12/0xc0 [ 1259.049432][T28984] do_syscall_64+0x10b/0xf80 [ 1259.049454][T28984] ? clear_bhb_loop+0x40/0x90 [ 1259.049472][T28984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.049488][T28984] RIP: 0033:0x7f6bfb99ce59 [ 1259.049501][T28984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.049517][T28984] RSP: 002b:00007f6bfc7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.049532][T28984] RAX: ffffffffffffffda RBX: 00007f6bfbc15fa0 RCX: 00007f6bfb99ce59 [ 1259.049543][T28984] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1259.049553][T28984] RBP: 00007f6bfba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1259.049563][T28984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.049572][T28984] R13: 00007f6bfbc16038 R14: 00007f6bfbc15fa0 R15: 00007ffea9a46848 [ 1259.049593][T28984] [ 1259.511058][ T6072] Bluetooth: hci4: command 0x0c1a tx timeout [ 1259.768334][T28995] FAULT_INJECTION: forcing a failure. [ 1259.768334][T28995] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.781393][T28995] CPU: 0 UID: 0 PID: 28995 Comm: syz.4.4567 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1259.781421][T28995] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1259.781427][T28995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.781438][T28995] Call Trace: [ 1259.781444][T28995] [ 1259.781450][T28995] dump_stack_lvl+0x100/0x190 [ 1259.781473][T28995] should_fail_ex.cold+0x5/0xa [ 1259.781494][T28995] should_failslab+0xc2/0x120 [ 1259.781513][T28995] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1259.781534][T28995] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 1259.781564][T28995] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 1259.781587][T28995] ? trace_contention_end+0x125/0x170 [ 1259.781607][T28995] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 1259.781632][T28995] ? kasan_quarantine_put+0x104/0x240 [ 1259.781649][T28995] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1259.781672][T28995] ? __pfx___mutex_lock+0x10/0x10 [ 1259.781685][T28995] ? find_held_lock+0x2b/0x80 [ 1259.781704][T28995] ? tomoyo_path_number_perm+0x28f/0x580 [ 1259.781721][T28995] ? tomoyo_path_number_perm+0x28f/0x580 [ 1259.781742][T28995] ? __lock_acquire+0x4a5/0x2630 [ 1259.781757][T28995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1259.781773][T28995] ? futex_wait+0x11e/0x370 [ 1259.781796][T28995] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 1259.781828][T28995] snd_pcm_oss_get_formats+0x7d/0x350 [ 1259.781860][T28995] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1259.781890][T28995] snd_pcm_oss_ioctl+0x1853/0x37c0 [ 1259.781914][T28995] ? find_held_lock+0x2b/0x80 [ 1259.781933][T28995] ? __fget_files+0x215/0x3d0 [ 1259.781950][T28995] ? hook_file_ioctl_common+0x149/0x410 [ 1259.781969][T28995] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1259.781994][T28995] ? __fget_files+0x21f/0x3d0 [ 1259.782014][T28995] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1259.782039][T28995] __x64_sys_ioctl+0x18e/0x210 [ 1259.782056][T28995] do_syscall_64+0x10b/0xf80 [ 1259.782077][T28995] ? clear_bhb_loop+0x40/0x90 [ 1259.782096][T28995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.782112][T28995] RIP: 0033:0x7f6bfb99ce59 [ 1259.782125][T28995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.782140][T28995] RSP: 002b:00007f6bfc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.782155][T28995] RAX: ffffffffffffffda RBX: 00007f6bfbc15fa0 RCX: 00007f6bfb99ce59 [ 1259.782165][T28995] RDX: 0000200000000100 RSI: 00000000c0045005 RDI: 0000000000000005 [ 1259.782176][T28995] RBP: 00007f6bfba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1259.782186][T28995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.782196][T28995] R13: 00007f6bfbc16038 R14: 00007f6bfbc15fa0 R15: 00007ffea9a46848 [ 1259.782216][T28995] [ 1260.668363][T16012] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1260.862109][T27345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1260.937302][T27345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1260.956851][T27345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1260.989094][T27345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1261.047811][T27345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1261.507173][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1261.523827][T29015] ubi0: attaching mtd0 [ 1261.589011][T29015] ubi0: scanning is finished [ 1261.623414][T29015] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1261.685024][T16012] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1261.987179][T29015] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1262.612406][T14674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.658386][T16012] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1262.723947][T29034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4572'. [ 1263.183168][T27345] Bluetooth: hci2: command tx timeout [ 1263.199516][T14674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.444980][T14674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.569634][T28995] Process accounting paused [ 1263.579595][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1263.653540][T28673] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1263.705261][T14674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.798418][T29040] FAULT_INJECTION: forcing a failure. [ 1263.798418][T29040] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.873247][T29040] CPU: 0 UID: 0 PID: 29040 Comm: syz.4.4573 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1263.873277][T29040] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1263.873283][T29040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.873293][T29040] Call Trace: [ 1263.873298][T29040] [ 1263.873305][T29040] dump_stack_lvl+0x100/0x190 [ 1263.873328][T29040] should_fail_ex.cold+0x5/0xa [ 1263.873349][T29040] should_failslab+0xc2/0x120 [ 1263.873367][T29040] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1263.873392][T29040] ? __d_alloc+0x34/0xa40 [ 1263.873411][T29040] ? __pfx_stack_trace_save+0x10/0x10 [ 1263.873436][T29040] __d_alloc+0x34/0xa40 [ 1263.873457][T29040] d_alloc_parallel+0x111/0x14e0 [ 1263.873485][T29040] ? find_held_lock+0x2b/0x80 [ 1263.873505][T29040] ? __d_lookup+0x25c/0x4a0 [ 1263.873521][T29040] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1263.873539][T29040] ? __d_lookup+0x266/0x4a0 [ 1263.873559][T29040] lookup_open.isra.0+0x57c/0x11b0 [ 1263.873581][T29040] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1263.873608][T29040] ? mnt_get_write_access+0x1e9/0x2f0 [ 1263.873635][T29040] path_openat+0xa98/0x31a0 [ 1263.873660][T29040] ? __pfx_path_openat+0x10/0x10 [ 1263.873686][T29040] do_file_open+0x20e/0x430 [ 1263.873706][T29040] ? __pfx_do_file_open+0x10/0x10 [ 1263.873739][T29040] ? alloc_fd+0x476/0x790 [ 1263.873759][T29040] ? do_getname+0x191/0x390 [ 1263.873782][T29040] do_sys_openat2+0x10d/0x1e0 [ 1263.873805][T29040] ? __pfx_do_sys_openat2+0x10/0x10 [ 1263.873835][T29040] __x64_sys_openat+0x12d/0x210 [ 1263.873858][T29040] ? __pfx___x64_sys_openat+0x10/0x10 [ 1263.873880][T29040] ? ksys_write+0x1ac/0x250 [ 1263.873900][T29040] ? rcu_is_watching+0x12/0xc0 [ 1263.873921][T29040] do_syscall_64+0x10b/0xf80 [ 1263.873944][T29040] ? clear_bhb_loop+0x40/0x90 [ 1263.873963][T29040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.873979][T29040] RIP: 0033:0x7f6bfb99ce59 [ 1263.873994][T29040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.874009][T29040] RSP: 002b:00007f6bfc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1263.874025][T29040] RAX: ffffffffffffffda RBX: 00007f6bfbc15fa0 RCX: 00007f6bfb99ce59 [ 1263.874035][T29040] RDX: 0000000000080001 RSI: 0000200000000a40 RDI: ffffffffffffff9c [ 1263.874045][T29040] RBP: 00007f6bfba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1263.874055][T29040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.874064][T29040] R13: 00007f6bfbc16038 R14: 00007f6bfbc15fa0 R15: 00007ffea9a46848 [ 1263.874084][T29040] [ 1264.623312][T29050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1264.685482][T16012] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1265.174085][T14674] bridge_slave_1: left allmulticast mode [ 1265.184188][T14674] bridge_slave_1: left promiscuous mode [ 1265.204491][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.256406][T27345] Bluetooth: hci2: command tx timeout [ 1265.266082][T14674] bridge_slave_0: left allmulticast mode [ 1265.279954][T14674] bridge_slave_0: left promiscuous mode [ 1265.294713][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.364947][T29040] vivid-007: ================= START STATUS ================= [ 1265.402941][T29040] vivid-007: Generate PTS: true [ 1265.428475][T29040] vivid-007: Generate SCR: true [ 1265.458723][T29040] tpg source WxH: 320x240 (Y'CbCr) [ 1265.481885][T29040] tpg field: 1 [ 1265.504436][T29040] tpg crop: (0,0)/320x240 [ 1265.542606][T29040] tpg compose: (0,0)/320x240 [ 1265.562682][T29040] tpg colorspace: 8 [ 1265.579882][T29040] tpg transfer function: 0/0 [ 1265.641960][T14707] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1265.651026][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1265.704202][T29040] tpg Y'CbCr encoding: 0/0 [ 1265.728509][T29040] tpg quantization: 0/0 [ 1265.748570][T29040] tpg RGB range: 0/2 [ 1265.783438][T29040] vivid-007: ================== END STATUS ================== [ 1265.814334][T14674] bond0 (unregistering): (slave ›): Releasing backup interface [ 1265.843686][T14674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.872153][T14674] bond0 (unregistering): Released all slaves [ 1266.136843][T14674] ovs_ÿþÿþ?: left promiscuous mode [ 1266.226279][T29005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.271197][T29005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.316908][T29005] bridge_slave_0: entered allmulticast mode [ 1266.384684][T29005] bridge_slave_0: entered promiscuous mode [ 1266.600253][T29005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.636770][T28673] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1266.655128][T29005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.707124][T29005] bridge_slave_1: entered allmulticast mode [ 1266.751918][T29005] bridge_slave_1: entered promiscuous mode [ 1266.852578][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1266.972668][T29005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.051557][T29005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.280289][T29005] team0: Port device team_slave_0 added [ 1267.323836][T27345] Bluetooth: hci2: command tx timeout [ 1267.419463][T29005] team0: Port device team_slave_1 added [ 1267.631634][T17442] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1267.719307][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1267.911334][T29005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.948292][T29005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.093739][T29005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.195421][T29005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.243747][T29005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.357197][T29005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.458692][T14674] hsr_slave_0: left promiscuous mode [ 1268.484407][T14674] hsr_slave_1: left promiscuous mode [ 1268.505607][T14674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.532973][T14674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.575459][T14674] veth1_macvtap: left promiscuous mode [ 1268.599152][T14674] veth0_macvtap: left promiscuous mode [ 1268.626453][T14707] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1269.033816][T14674] team0 (unregistering): Port device team_slave_1 removed [ 1269.241535][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1269.386432][T27345] Bluetooth: hci2: command tx timeout [ 1269.403543][T29005] hsr_slave_0: entered promiscuous mode [ 1269.427918][T29005] hsr_slave_1: entered promiscuous mode [ 1269.621304][T17442] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1269.796337][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1270.618116][T28673] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1270.832736][T29156] vhci_hcd vhci_hcd.2: invalid port number 135 [ 1270.889356][T29156] vhci_hcd vhci_hcd.2: default hub control req: 23fe v0e00 i0087 l8 [ 1271.610921][T17442] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1272.605747][T14707] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1272.796644][T29005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1272.922020][T29005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1272.973238][T29005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1273.040533][T29005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1273.168488][T29005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1273.237483][T29005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1273.459677][T29005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1273.510720][T29005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1274.357322][T29005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.453724][T29005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.517669][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.524824][ T6810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.632751][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.639891][ T6810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.101262][T29005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1276.959289][T29005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.290595][T29309] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1277.371355][T29005] veth0_vlan: entered promiscuous mode [ 1277.432414][T29005] veth1_vlan: entered promiscuous mode [ 1277.599622][T29005] veth0_macvtap: entered promiscuous mode [ 1277.636106][T29309] File: /dev/ram8 PID: 29309 Comm: syz.4.4610 [ 1277.670931][T29005] veth1_macvtap: entered promiscuous mode [ 1277.714206][T29324] netlink: 'syz.5.4613': attribute type 1 has an invalid length. [ 1277.773504][T29005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.855896][T29005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.950816][ T6810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.006282][ T6810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.068875][ T6810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.139420][ T6810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.524709][T14674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.580126][T14674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.869694][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.885273][T29264] kexec: Could not allocate control_code_buffer [ 1278.941881][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.883149][T27345] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1282.057794][ T30] audit: type=1804 audit(1843104528.398:57): pid=29393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4627" name="/newroot/24/file0" dev="tmpfs" ino=146 res=1 errno=0 [ 1282.268799][ T30] audit: type=1804 audit(1843104528.438:58): pid=29394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4627" name="/newroot/24/file0" dev="tmpfs" ino=146 res=1 errno=0 [ 1282.432473][ T30] audit: type=1800 audit(1843104528.448:59): pid=29393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4627" name="file0" dev="tmpfs" ino=146 res=0 errno=0 [ 1283.100619][T29410] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1285.563476][T29474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1285.676901][T29476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4646'. [ 1286.492327][T29500] can: request_module (can-proto-0) failed. [ 1286.562924][T29504] can: request_module (can-proto-0) failed. [ 1288.356885][T29551] FAULT_INJECTION: forcing a failure. [ 1288.356885][T29551] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.511850][T29551] CPU: 0 UID: 0 PID: 29551 Comm: syz.6.4662 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1288.511878][T29551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1288.511884][T29551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.511894][T29551] Call Trace: [ 1288.511900][T29551] [ 1288.511906][T29551] dump_stack_lvl+0x100/0x190 [ 1288.511928][T29551] should_fail_ex.cold+0x5/0xa [ 1288.511948][T29551] should_failslab+0xc2/0x120 [ 1288.511967][T29551] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1288.511991][T29551] ? jbd2__journal_start+0x194/0x6a0 [ 1288.512016][T29551] jbd2__journal_start+0x194/0x6a0 [ 1288.512039][T29551] __ext4_journal_start_sb+0x36d/0x670 [ 1288.512056][T29551] ? ext4_dirty_inode+0xa1/0x130 [ 1288.512075][T29551] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1288.512091][T29551] ext4_dirty_inode+0xa1/0x130 [ 1288.512114][T29551] ? rcu_is_watching+0x12/0xc0 [ 1288.512133][T29551] __mark_inode_dirty+0x1f3/0x1720 [ 1288.512152][T29551] file_update_time_flags+0x46b/0x500 [ 1288.512177][T29551] ext4_page_mkwrite+0x324/0x1890 [ 1288.512200][T29551] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1288.512223][T29551] do_page_mkwrite+0x17a/0x440 [ 1288.512242][T29551] ? __pfx_filemap_map_pages+0x10/0x10 [ 1288.512266][T29551] do_fault+0x3b5/0x1750 [ 1288.512287][T29551] __handle_mm_fault+0x187d/0x2a00 [ 1288.512314][T29551] ? reacquire_held_locks+0xce/0x1e0 [ 1288.512331][T29551] ? __pfx___handle_mm_fault+0x10/0x10 [ 1288.512356][T29551] ? lock_vma_under_rcu+0x17c/0x590 [ 1288.512383][T29551] ? lockdep_hardirqs_on+0x78/0x100 [ 1288.512411][T29551] handle_mm_fault+0x36d/0xa20 [ 1288.512437][T29551] do_user_addr_fault+0x5a3/0x12f0 [ 1288.512462][T29551] exc_page_fault+0x6f/0xd0 [ 1288.512485][T29551] asm_exc_page_fault+0x26/0x30 [ 1288.512500][T29551] RIP: 0033:0x7f2448e71580 [ 1288.512514][T29551] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 1288.512528][T29551] RSP: 002b:00007ffe07ff91d0 EFLAGS: 00010202 [ 1288.512542][T29551] RAX: 0000001b322e1000 RBX: ffffffff852ac990 RCX: 0000001b322e0ff8 [ 1288.512552][T29551] RDX: 0000001b31d24220 RSI: 0000000000000008 RDI: 00007f2449d45720 [ 1288.512562][T29551] RBP: 0000000000000139 R08: 00007f2449200000 R09: 00007f2449202000 [ 1288.512572][T29551] R10: 00000000852ac994 R11: 0000000000000015 R12: 00007f2449216128 [ 1288.512581][T29551] R13: 00000000000001a5 R14: ffffffff852ac261 R15: 00007f2449d45720 [ 1288.512592][T29551] ? percpu_counter_add_batch+0x81/0x230 [ 1288.512611][T29551] ? __percpu_counter_init_many+0x150/0x3b0 [ 1288.512634][T29551] [ 1293.876803][T29682] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1295.059315][T29647] Process accounting resumed [ 1295.563088][T29719] nbd: illegal input index 37139 [ 1296.765522][T29732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1296.816754][T29732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1296.852559][T29732] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1296.909434][T29732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1296.957555][T29732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1297.021313][T29732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1298.356369][T27345] Bluetooth: hci4: command 0x0c1a tx timeout [ 1298.475001][T29808] FAULT_INJECTION: forcing a failure. [ 1298.475001][T29808] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1298.516903][T29808] CPU: 0 UID: 0 PID: 29808 Comm: syz.3.4715 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1298.516931][T29808] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1298.516937][T29808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1298.516947][T29808] Call Trace: [ 1298.516953][T29808] [ 1298.516959][T29808] dump_stack_lvl+0x100/0x190 [ 1298.516981][T29808] should_fail_ex.cold+0x5/0xa [ 1298.517002][T29808] get_futex_key+0x1d2/0x1510 [ 1298.517021][T29808] ? __pfx_get_futex_key+0x10/0x10 [ 1298.517035][T29808] ? pick_eevdf+0x4d3/0x860 [ 1298.517057][T29808] ? update_se+0x94/0x770 [ 1298.517087][T29808] futex_wait_setup+0x83/0x510 [ 1298.517112][T29808] __futex_wait+0x19f/0x300 [ 1298.517133][T29808] ? __pfx___futex_wait+0x10/0x10 [ 1298.517152][T29808] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1298.517177][T29808] ? __pfx_futex_wake_mark+0x10/0x10 [ 1298.517199][T29808] ? find_held_lock+0x2b/0x80 [ 1298.517219][T29808] ? futex_wake+0x456/0x530 [ 1298.517243][T29808] futex_wait+0xe6/0x370 [ 1298.517264][T29808] ? __pfx_futex_wait+0x10/0x10 [ 1298.517288][T29808] ? putname+0xb1/0x110 [ 1298.517320][T29808] ? kmem_cache_free+0x127/0x6c0 [ 1298.517348][T29808] do_futex+0x1ef/0x350 [ 1298.517367][T29808] ? __pfx_do_futex+0x10/0x10 [ 1298.517383][T29808] ? __pfx_do_sys_openat2+0x10/0x10 [ 1298.517407][T29808] ? __fget_files+0x21f/0x3d0 [ 1298.517427][T29808] __x64_sys_futex+0x34f/0x4d0 [ 1298.517446][T29808] ? __pfx___x64_sys_futex+0x10/0x10 [ 1298.517467][T29808] ? rcu_is_watching+0x12/0xc0 [ 1298.517487][T29808] do_syscall_64+0x10b/0xf80 [ 1298.517509][T29808] ? clear_bhb_loop+0x40/0x90 [ 1298.517527][T29808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.517543][T29808] RIP: 0033:0x7f241b79ce59 [ 1298.517557][T29808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.517572][T29808] RSP: 002b:00007f241c6b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1298.517588][T29808] RAX: ffffffffffffffda RBX: 00007f241ba15fa8 RCX: 00007f241b79ce59 [ 1298.517598][T29808] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f241ba15fa8 [ 1298.517607][T29808] RBP: 00007f241ba15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1298.517617][T29808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.517625][T29808] R13: 00007f241ba16038 R14: 00007ffcfc1f47a0 R15: 00007ffcfc1f4888 [ 1298.517645][T29808] [ 1299.095360][T27345] Bluetooth: hci1: command 0x040f tx timeout [ 1299.101394][T27345] Bluetooth: hci2: command 0x0c1a tx timeout [ 1299.114092][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.124294][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.474542][T29822] sctp: [Deprecated]: syz.6.4718 (pid 29822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1299.474542][T29822] Use struct sctp_sack_info instead [ 1301.141244][ T6072] Bluetooth: hci2: command 0x0c1a tx timeout [ 1301.147405][T27345] Bluetooth: hci1: command 0x040f tx timeout [ 1303.210461][ T6072] Bluetooth: hci2: command 0x0c1a tx timeout [ 1303.574385][T29918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4738'. [ 1303.875741][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4739'. [ 1305.105676][T29953] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1305.196948][T29953] bond0: entered promiscuous mode [ 1305.211408][T29953] bond_slave_0: entered promiscuous mode [ 1305.273316][T29953] bond_slave_1: entered promiscuous mode [ 1305.294805][T29961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4750'. [ 1305.413793][T29953] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input34 [ 1305.733477][ T6072] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 1305.733503][ T6072] Bluetooth: hci1: unexpected subevent 0x06 length: 725 > 10 [ 1305.830917][T29979] [ 1307.746645][ T6072] Bluetooth: hci1: command 0x040f tx timeout [ 1308.302698][T30046] block2mtd: device name too long [ 1308.807966][T30063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1309.777813][T30095] input: f¬ as /devices/virtual/input/input35 [ 1310.106537][T30087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4771'. [ 1310.281803][T30087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4771'. [ 1310.997893][T30116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4777'. [ 1311.118813][T30116] bridge_slave_1: left allmulticast mode [ 1311.166689][T30116] bridge_slave_1: left promiscuous mode [ 1311.216811][T30116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.316977][T30116] bridge_slave_0: left allmulticast mode [ 1311.349519][T30116] bridge_slave_0: left promiscuous mode [ 1311.386515][T30116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.581277][T30116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4777'. [ 1312.652185][T30146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1312.721124][T30146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.780673][T30146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.806106][T30146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.833153][T30146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.980059][T30207] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1316.002942][T30210] netlink: 86 bytes leftover after parsing attributes in process `syz.5.4800'. [ 1316.825061][T30226] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 1317.178140][T30228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4804'. [ 1319.063390][T30271] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1320.298131][ T6072] block nbd0: Receive control failed (result -32) [ 1320.578841][ T6072] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 1321.647074][T30310] FAULT_INJECTION: forcing a failure. [ 1321.647074][T30310] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.814353][T30310] CPU: 0 UID: 0 PID: 30310 Comm: syz.4.4820 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1321.814382][T30310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1321.814389][T30310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1321.814399][T30310] Call Trace: [ 1321.814405][T30310] [ 1321.814412][T30310] dump_stack_lvl+0x100/0x190 [ 1321.814434][T30310] should_fail_ex.cold+0x5/0xa [ 1321.814455][T30310] should_failslab+0xc2/0x120 [ 1321.814473][T30310] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1321.814498][T30310] ? __alloc_skb+0x140/0x710 [ 1321.814513][T30310] ? irqentry_exit+0x24d/0x7e0 [ 1321.814539][T30310] __alloc_skb+0x140/0x710 [ 1321.814555][T30310] ? __pfx___alloc_skb+0x10/0x10 [ 1321.814572][T30310] ? find_held_lock+0x2b/0x80 [ 1321.814591][T30310] ? tipc_node_xmit+0x1f6/0xfb0 [ 1321.814614][T30310] ? lockdep_init_map_type+0x5c/0x250 [ 1321.814632][T30310] tipc_buf_acquire+0x26/0xe0 [ 1321.814652][T30310] tipc_msg_build+0x112/0x1100 [ 1321.814675][T30310] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1321.814698][T30310] ? __pfx_tipc_msg_build+0x10/0x10 [ 1321.814722][T30310] ? register_lock_class+0x40/0x560 [ 1321.814741][T30310] __tipc_sendstream+0x6a6/0x10f0 [ 1321.814768][T30310] ? __pfx___tipc_sendstream+0x10/0x10 [ 1321.814787][T30310] ? do_raw_spin_lock+0x128/0x260 [ 1321.814805][T30310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1321.814823][T30310] ? __pfx_woken_wake_function+0x10/0x10 [ 1321.814844][T30310] ? __local_bh_enable_ip+0x9e/0x120 [ 1321.814866][T30310] tipc_send_packet+0x6c/0xa0 [ 1321.814886][T30310] ____sys_sendmsg+0x9e1/0xb70 [ 1321.814907][T30310] ? __pfx_tipc_send_packet+0x10/0x10 [ 1321.814936][T30310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1321.814961][T30310] ? rcu_is_watching+0x12/0xc0 [ 1321.814980][T30310] ? ___sys_sendmsg+0x19d/0x1e0 [ 1321.815002][T30310] ? kfree+0x1dd/0x6c0 [ 1321.815026][T30310] ___sys_sendmsg+0x190/0x1e0 [ 1321.815049][T30310] ? __pfx____sys_sendmsg+0x10/0x10 [ 1321.815089][T30310] ? __pfx___might_resched+0x10/0x10 [ 1321.815110][T30310] __sys_sendmmsg+0x205/0x430 [ 1321.815130][T30310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1321.815153][T30310] ? __pfx_do_futex+0x10/0x10 [ 1321.815179][T30310] ? xfd_validate_state+0x129/0x190 [ 1321.815194][T30310] ? ksys_write+0x1ac/0x250 [ 1321.815216][T30310] __x64_sys_sendmmsg+0x9c/0x100 [ 1321.815234][T30310] ? lockdep_hardirqs_on+0x78/0x100 [ 1321.815256][T30310] do_syscall_64+0x10b/0xf80 [ 1321.815277][T30310] ? clear_bhb_loop+0x40/0x90 [ 1321.815296][T30310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.815312][T30310] RIP: 0033:0x7f6bfb99ce59 [ 1321.815326][T30310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.815340][T30310] RSP: 002b:00007f6bfc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1321.815356][T30310] RAX: ffffffffffffffda RBX: 00007f6bfbc15fa0 RCX: 00007f6bfb99ce59 [ 1321.815366][T30310] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1321.815376][T30310] RBP: 00007f6bfba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1321.815385][T30310] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000000 [ 1321.815394][T30310] R13: 00007f6bfbc16038 R14: 00007f6bfbc15fa0 R15: 00007ffea9a46848 [ 1321.815415][T30310] [ 1324.431022][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4840'. [ 1325.746355][T30418] Process accounting paused [ 1326.377322][T30462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4851'. [ 1327.869329][T30486] random: crng reseeded on system resumption [ 1328.722620][T30516] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1334.512729][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4888'. [ 1334.559711][T30659] blkio.reset_stats is deprecated [ 1334.891363][T30673] vivid-007: ================= START STATUS ================= [ 1334.939054][T30673] vivid-007: Generate PTS: true [ 1334.978149][T30673] vivid-007: Generate SCR: true [ 1335.005738][T30673] tpg source WxH: 320x240 (Y'CbCr) [ 1335.055188][T30673] tpg field: 1 [ 1335.073809][T30673] tpg crop: (0,0)/320x240 [ 1335.105633][T30673] tpg compose: (0,0)/320x240 [ 1335.158944][T30673] tpg colorspace: 8 [ 1335.180583][T30673] tpg transfer function: 0/0 [ 1335.206161][T30673] tpg Y'CbCr encoding: 0/0 [ 1335.225543][T30673] tpg quantization: 0/0 [ 1335.239981][T30673] tpg RGB range: 0/2 [ 1335.260061][T30673] vivid-007: ================== END STATUS ================== [ 1335.290228][T30682] [U] ^R [ 1338.212487][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880344bc800: rx timeout, send abort [ 1338.222607][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880344bc800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1338.473487][T30733] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1339.373143][T30754] netlink: 'syz.6.4911': attribute type 10 has an invalid length. [ 1339.507074][T30755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4905'. [ 1339.616263][T30755] team0: Port device team_slave_1 removed [ 1341.763228][T30803] HfR: entered promiscuous mode [ 1341.779872][T30813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4924'. [ 1346.071314][T30866] netlink: Invalid conntrack timeout [ 1346.422351][T30872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1347.784877][T30897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4941'. [ 1348.334409][T30920] FAULT_INJECTION: forcing a failure. [ 1348.334409][T30920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1348.470978][T30920] CPU: 0 UID: 0 PID: 30920 Comm: syz.4.4945 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1348.471006][T30920] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1348.471012][T30920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1348.471022][T30920] Call Trace: [ 1348.471027][T30920] [ 1348.471034][T30920] dump_stack_lvl+0x100/0x190 [ 1348.471056][T30920] should_fail_ex.cold+0x5/0xa [ 1348.471072][T30920] ? prepare_alloc_pages+0x16d/0x5f0 [ 1348.471093][T30920] should_fail_alloc_page+0xeb/0x140 [ 1348.471113][T30920] prepare_alloc_pages+0x1f0/0x5f0 [ 1348.471135][T30920] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1348.471162][T30920] ? __pfx_stack_trace_save+0x10/0x10 [ 1348.471184][T30920] ? stack_depot_save_flags+0x27/0x9d0 [ 1348.471202][T30920] ? kasan_save_stack+0x3f/0x50 [ 1348.471219][T30920] ? kasan_save_stack+0x30/0x50 [ 1348.471233][T30920] ? kasan_save_track+0x14/0x30 [ 1348.471250][T30920] ? kasan_save_stack+0x3f/0x50 [ 1348.471267][T30920] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1348.471291][T30920] ? __lock_acquire+0x4a5/0x2630 [ 1348.471307][T30920] ? __x64_sys_mmap+0x125/0x190 [ 1348.471322][T30920] ? do_syscall_64+0x10b/0xf80 [ 1348.471351][T30920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.471372][T30920] ? __lock_acquire+0x4a5/0x2630 [ 1348.471389][T30920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1348.471413][T30920] ? policy_nodemask+0xed/0x4f0 [ 1348.471432][T30920] alloc_pages_mpol+0x1fb/0x540 [ 1348.471451][T30920] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1348.471469][T30920] ? __anon_vma_prepare+0x2db/0x5e0 [ 1348.471491][T30920] ? __anon_vma_prepare+0x2db/0x5e0 [ 1348.471515][T30920] folio_alloc_mpol_noprof+0x36/0x260 [ 1348.471537][T30920] vma_alloc_folio_noprof+0xed/0x1d0 [ 1348.471557][T30920] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1348.471577][T30920] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1348.471604][T30920] do_anonymous_page+0xb46/0x2050 [ 1348.471628][T30920] ? __pfx_pgd_none+0x10/0x10 [ 1348.471654][T30920] __handle_mm_fault+0x1d2c/0x2a00 [ 1348.471679][T30920] ? mt_find+0x45e/0x8e0 [ 1348.471695][T30920] ? __pfx___handle_mm_fault+0x10/0x10 [ 1348.471715][T30920] ? __pfx_mt_find+0x10/0x10 [ 1348.471744][T30920] handle_mm_fault+0x36d/0xa20 [ 1348.471770][T30920] __get_user_pages+0x1178/0x32a0 [ 1348.471796][T30920] ? __pfx___get_user_pages+0x10/0x10 [ 1348.471820][T30920] populate_vma_page_range+0x267/0x3f0 [ 1348.471841][T30920] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1348.471860][T30920] ? __pfx_find_vma_intersection+0x10/0x10 [ 1348.471879][T30920] ? do_mmap+0x93f/0x12f0 [ 1348.471899][T30920] __mm_populate+0x107/0x3a0 [ 1348.471920][T30920] ? __pfx___mm_populate+0x10/0x10 [ 1348.471941][T30920] ? up_write+0x28c/0x4f0 [ 1348.471960][T30920] vm_mmap_pgoff+0x37f/0x470 [ 1348.471981][T30920] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1348.472002][T30920] ? do_futex+0x192/0x350 [ 1348.472018][T30920] ? __pfx_do_futex+0x10/0x10 [ 1348.472034][T30920] ? __pfx_do_sys_openat2+0x10/0x10 [ 1348.472060][T30920] ksys_mmap_pgoff+0xe4/0x610 [ 1348.472078][T30920] ? __x64_sys_futex+0x358/0x4d0 [ 1348.472095][T30920] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1348.472113][T30920] ? xfd_validate_state+0x129/0x190 [ 1348.472134][T30920] __x64_sys_mmap+0x125/0x190 [ 1348.472152][T30920] do_syscall_64+0x10b/0xf80 [ 1348.472174][T30920] ? clear_bhb_loop+0x40/0x90 [ 1348.472193][T30920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.472209][T30920] RIP: 0033:0x7f6bfb99ce59 [ 1348.472221][T30920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.472235][T30920] RSP: 002b:00007f6bfc7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1348.472251][T30920] RAX: ffffffffffffffda RBX: 00007f6bfbc16090 RCX: 00007f6bfb99ce59 [ 1348.472261][T30920] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000401000 [ 1348.472270][T30920] RBP: 00007f6bfba32d6f R08: 0000000000000002 R09: 0000000000008000 [ 1348.472279][T30920] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1348.472288][T30920] R13: 00007f6bfbc16128 R14: 00007f6bfbc16090 R15: 00007ffea9a46848 [ 1348.472308][T30920] [ 1349.639486][T30934] FAULT_INJECTION: forcing a failure. [ 1349.639486][T30934] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1349.680021][T30934] CPU: 0 UID: 0 PID: 30934 Comm: syz.6.4948 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1349.680049][T30934] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1349.680056][T30934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.680066][T30934] Call Trace: [ 1349.680071][T30934] [ 1349.680078][T30934] dump_stack_lvl+0x100/0x190 [ 1349.680100][T30934] should_fail_ex.cold+0x5/0xa [ 1349.680121][T30934] get_futex_key+0x1d2/0x1510 [ 1349.680140][T30934] ? __pfx_get_futex_key+0x10/0x10 [ 1349.680155][T30934] ? find_held_lock+0x2b/0x80 [ 1349.680175][T30934] ? futex_wake+0x456/0x530 [ 1349.680199][T30934] futex_wake+0xea/0x530 [ 1349.680220][T30934] ? __pfx_futex_wake+0x10/0x10 [ 1349.680239][T30934] ? _copy_to_user+0xaf/0xd0 [ 1349.680263][T30934] ? poll_select_finish+0x36e/0x670 [ 1349.680282][T30934] ? __pfx_poll_select_finish+0x10/0x10 [ 1349.680302][T30934] do_futex+0x32b/0x350 [ 1349.680320][T30934] ? __pfx_do_futex+0x10/0x10 [ 1349.680337][T30934] ? fdget+0x18b/0x210 [ 1349.680357][T30934] ? __sys_sendmsg+0x18f/0x220 [ 1349.680377][T30934] __x64_sys_futex+0x34f/0x4d0 [ 1349.680396][T30934] ? __pfx___x64_sys_futex+0x10/0x10 [ 1349.680416][T30934] ? rcu_is_watching+0x12/0xc0 [ 1349.680437][T30934] do_syscall_64+0x10b/0xf80 [ 1349.680460][T30934] ? clear_bhb_loop+0x40/0x90 [ 1349.680478][T30934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.680493][T30934] RIP: 0033:0x7f2448f9ce59 [ 1349.680507][T30934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.680521][T30934] RSP: 002b:00007f24471f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1349.680536][T30934] RAX: ffffffffffffffda RBX: 00007f2449215fa8 RCX: 00007f2448f9ce59 [ 1349.680547][T30934] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2449215fac [ 1349.680557][T30934] RBP: 00007f2449215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1349.680566][T30934] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1349.680576][T30934] R13: 00007f2449216038 R14: 00007ffe07ff90a0 R15: 00007ffe07ff9188 [ 1349.680596][T30934] [ 1350.409067][T30940] random: crng reseeded on system resumption [ 1350.649063][ T30] audit: type=1800 audit(1843104525.845:60): pid=30943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4951" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1352.165936][T30988] vivid-011: ================= START STATUS ================= [ 1352.215942][T30988] vivid-011: Interlaced VBI Format: false [ 1352.280969][ T6072] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 1352.281004][ T6072] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 1352.296657][ T6072] Bluetooth: hci4: Dropping invalid advertising data [ 1352.303635][ T6072] Bluetooth: hci4: Dropping invalid advertising data [ 1352.311732][ T6072] Bluetooth: hci4: unknown advertising packet type: 0x07 [ 1352.311754][ T6072] Bluetooth: hci4: unknown advertising packet type: 0x80 [ 1352.320074][ T6072] Bluetooth: hci4: Dropping invalid advertising data [ 1352.334246][ T6072] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1352.377341][T30988] vivid-011: ================== END STATUS ================== [ 1352.432671][T30989] vivid-011: ================= START STATUS ================= [ 1352.472594][T30989] vivid-011: Interlaced VBI Format: false [ 1352.507007][T30989] vivid-011: ================== END STATUS ================== [ 1353.622179][T31035] random: crng reseeded on system resumption [ 1353.746938][T31027] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1353.910374][T31027] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1354.048560][T31043] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1354.151596][T31043] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1356.008976][T31065] Process accounting resumed [ 1356.436800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b6d8c00: rx timeout, send abort [ 1356.445244][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b6d8c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1356.667583][T31120] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4986'. [ 1356.713588][T31121] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4986'. [ 1360.037743][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.044312][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.634150][T31223] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1366.372115][T31289] netlink: 146 bytes leftover after parsing attributes in process `syz.4.5023'. [ 1367.763036][ T6072] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 1367.910470][T31310] FAULT_INJECTION: forcing a failure. [ 1367.910470][T31310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.955979][T31310] CPU: 0 UID: 0 PID: 31310 Comm: syz.6.5028 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1367.956005][T31310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1367.956011][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1367.956021][T31310] Call Trace: [ 1367.956026][T31310] [ 1367.956032][T31310] dump_stack_lvl+0x100/0x190 [ 1367.956054][T31310] should_fail_ex.cold+0x5/0xa [ 1367.956073][T31310] _copy_from_user+0x2e/0xd0 [ 1367.956090][T31310] restore_altstack+0x98/0x170 [ 1367.956114][T31310] ? __pfx_restore_altstack+0x10/0x10 [ 1367.956139][T31310] ? _raw_spin_unlock_irq+0x23/0x50 [ 1367.956160][T31310] ? lockdep_hardirqs_on+0x78/0x100 [ 1367.956182][T31310] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1367.956204][T31310] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 1367.956228][T31310] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1367.956250][T31310] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 1367.956267][T31310] ? rcu_is_watching+0x12/0xc0 [ 1367.956288][T31310] do_syscall_64+0x10b/0xf80 [ 1367.956310][T31310] ? clear_bhb_loop+0x40/0x90 [ 1367.956328][T31310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.956344][T31310] RIP: 0033:0x7f2448f3e1d9 [ 1367.956358][T31310] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1367.956374][T31310] RSP: 002b:00007f24471f5a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1367.956390][T31310] RAX: ffffffffffffffda RBX: 00007f2449215fa0 RCX: 00007f2448f3e1d9 [ 1367.956400][T31310] RDX: 00007f24471f5a80 RSI: 00007f24471f5bb0 RDI: 0000000000000011 [ 1367.956410][T31310] RBP: 00007f24471f6090 R08: 0000000000000008 R09: 0000000000000000 [ 1367.956419][T31310] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1367.956440][T31310] R13: 00007f2449216038 R14: 00007f2449215fa0 R15: 00007ffe07ff9188 [ 1367.956465][T31310] [ 1370.190767][T31336] netlink: 'syz.6.5035': attribute type 2 has an invalid length. [ 1370.811559][T31341] FAULT_INJECTION: forcing a failure. [ 1370.811559][T31341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.895853][T31341] CPU: 0 UID: 0 PID: 31341 Comm: syz.6.5038 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1370.895880][T31341] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1370.895886][T31341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1370.895896][T31341] Call Trace: [ 1370.895901][T31341] [ 1370.895907][T31341] dump_stack_lvl+0x100/0x190 [ 1370.895930][T31341] should_fail_ex.cold+0x5/0xa [ 1370.895949][T31341] _copy_from_user+0x2e/0xd0 [ 1370.895966][T31341] restore_sigcontext+0xcd/0x6a0 [ 1370.895989][T31341] ? __pfx_restore_sigcontext+0x10/0x10 [ 1370.896024][T31341] ? __pfx_restore_altstack+0x10/0x10 [ 1370.896049][T31341] ? _raw_spin_unlock_irq+0x23/0x50 [ 1370.896070][T31341] ? lockdep_hardirqs_on+0x78/0x100 [ 1370.896095][T31341] __do_sys_rt_sigreturn+0x229/0x2c0 [ 1370.896117][T31341] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1370.896139][T31341] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 1370.896173][T31341] ? rcu_is_watching+0x12/0xc0 [ 1370.896194][T31341] do_syscall_64+0x10b/0xf80 [ 1370.896216][T31341] ? clear_bhb_loop+0x40/0x90 [ 1370.896234][T31341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.896250][T31341] RIP: 0033:0x7f2448f3e1d9 [ 1370.896263][T31341] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1370.896277][T31341] RSP: 002b:00007f24471f5a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1370.896292][T31341] RAX: ffffffffffffffda RBX: 00007f2449215fa0 RCX: 00007f2448f3e1d9 [ 1370.896303][T31341] RDX: 00007f24471f5a80 RSI: 00007f24471f5bb0 RDI: 0000000000000011 [ 1370.896313][T31341] RBP: 00007f24471f6090 R08: 0000000000000008 R09: 0000000000000000 [ 1370.896322][T31341] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1370.896331][T31341] R13: 00007f2449216038 R14: 00007f2449215fa0 R15: 00007ffe07ff9188 [ 1370.896350][T31341] [ 1372.107294][T27345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1372.124879][T27345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1372.139222][T27345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1372.147982][T27345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1372.156136][T27345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1373.377742][T31366] nbd: must specify at least one socket [ 1373.497005][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078d27c00: rx timeout, send abort [ 1373.505358][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078d27c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1374.205247][T27345] Bluetooth: hci0: command tx timeout [ 1375.580501][T31414] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 1375.657958][T31418] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1375.815058][T31361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.865283][T31361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.915383][T31361] bridge_slave_0: entered allmulticast mode [ 1375.957987][T31361] bridge_slave_0: entered promiscuous mode [ 1376.007242][T31361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.044497][T31361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.087601][T31361] bridge_slave_1: entered allmulticast mode [ 1376.126807][T31361] bridge_slave_1: entered promiscuous mode [ 1376.271570][T27345] Bluetooth: hci0: command tx timeout [ 1376.337960][T31361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.395679][T31361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.556864][T31361] team0: Port device team_slave_0 added [ 1376.601610][T31361] team0: Port device team_slave_1 added [ 1376.775270][T31361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.805598][T31361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.905366][T31361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.944629][T31361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.992260][T31361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.128253][T31361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.268002][T31361] hsr_slave_0: entered promiscuous mode [ 1377.294825][T31361] hsr_slave_1: entered promiscuous mode [ 1377.303509][T31450] FAULT_INJECTION: forcing a failure. [ 1377.303509][T31450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.326730][T31361] debugfs: 'hsr0' already exists in 'hsr' [ 1377.340394][T31361] Cannot create hsr debugfs directory [ 1377.350625][T31450] CPU: 0 UID: 0 PID: 31450 Comm: syz.4.5061 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1377.350650][T31450] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1377.350657][T31450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1377.350666][T31450] Call Trace: [ 1377.350672][T31450] [ 1377.350678][T31450] dump_stack_lvl+0x100/0x190 [ 1377.350699][T31450] should_fail_ex.cold+0x5/0xa [ 1377.350719][T31450] _copy_to_user+0x32/0xd0 [ 1377.350737][T31450] simple_read_from_buffer+0xcb/0x170 [ 1377.350757][T31450] proc_fail_nth_read+0x1af/0x230 [ 1377.350782][T31450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1377.350807][T31450] ? rw_verify_area+0xce/0x6d0 [ 1377.350823][T31450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1377.350846][T31450] vfs_read+0x1e4/0xb30 [ 1377.350865][T31450] ? __pfx_vfs_read+0x10/0x10 [ 1377.350882][T31450] ? __fget_files+0x215/0x3d0 [ 1377.350904][T31450] ? __fget_files+0x21f/0x3d0 [ 1377.350926][T31450] ksys_read+0x12a/0x250 [ 1377.350943][T31450] ? __pfx_ksys_read+0x10/0x10 [ 1377.350959][T31450] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 1377.350976][T31450] ? rcu_is_watching+0x12/0xc0 [ 1377.350997][T31450] do_syscall_64+0x10b/0xf80 [ 1377.351019][T31450] ? clear_bhb_loop+0x40/0x90 [ 1377.351037][T31450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.351056][T31450] RIP: 0033:0x7f6bfb95d68e [ 1377.351069][T31450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1377.351084][T31450] RSP: 002b:00007f6bfc7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1377.351099][T31450] RAX: ffffffffffffffda RBX: 00007f6bfc7f76c0 RCX: 00007f6bfb95d68e [ 1377.351109][T31450] RDX: 000000000000000f RSI: 00007f6bfc7f70a0 RDI: 0000000000000004 [ 1377.351118][T31450] RBP: 00007f6bfc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.351128][T31450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.351137][T31450] R13: 00007f6bfbc16038 R14: 00007f6bfbc15fa0 R15: 00007ffea9a46848 [ 1377.351156][T31450] [ 1378.010758][T31468] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1378.346249][T27345] Bluetooth: hci0: command tx timeout [ 1378.461217][T31476] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1379.105945][T31493] usb usb2: usbfs: process 31493 (syz.4.5069) did not claim interface 4 before use [ 1379.137880][T31361] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1379.161360][T31361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1379.193062][T31361] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1379.246362][T31361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1379.280160][T31361] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1379.322287][T31361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1379.351286][T31361] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1379.401046][T31361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1379.558777][T31512] netlink: 'syz.3.5072': attribute type 21 has an invalid length. [ 1379.597428][T31512] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5072'. [ 1379.681717][T31361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.761641][T31361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.831235][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.838408][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.950520][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.957675][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.988751][T31534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5074'. [ 1380.412230][T27345] Bluetooth: hci0: command tx timeout [ 1380.746757][T31563] QAT: Invalid ioctl 21531 [ 1381.156921][T31572] FAULT_INJECTION: forcing a failure. [ 1381.156921][T31572] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.250718][T31572] CPU: 0 UID: 0 PID: 31572 Comm: syz.4.5080 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1381.250748][T31572] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1381.250755][T31572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1381.250764][T31572] Call Trace: [ 1381.250770][T31572] [ 1381.250777][T31572] dump_stack_lvl+0x100/0x190 [ 1381.250803][T31572] should_fail_ex.cold+0x5/0xa [ 1381.250824][T31572] should_failslab+0xc2/0x120 [ 1381.250843][T31572] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1381.250868][T31572] ? __d_alloc+0x34/0xa40 [ 1381.250892][T31572] __d_alloc+0x34/0xa40 [ 1381.250913][T31572] d_alloc_pseudo+0x1c/0xc0 [ 1381.250929][T31572] alloc_file_pseudo+0xcf/0x230 [ 1381.250952][T31572] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1381.250975][T31572] ? alloc_fd+0x476/0x790 [ 1381.250996][T31572] sock_alloc_file+0x50/0x210 [ 1381.251016][T31572] __sys_socket+0x1c0/0x260 [ 1381.251038][T31572] ? __pfx___sys_socket+0x10/0x10 [ 1381.251061][T31572] ? ksys_write+0x1ac/0x250 [ 1381.251083][T31572] __x64_sys_socket+0x72/0xb0 [ 1381.251106][T31572] ? lockdep_hardirqs_on+0x78/0x100 [ 1381.251128][T31572] do_syscall_64+0x10b/0xf80 [ 1381.251150][T31572] ? clear_bhb_loop+0x40/0x90 [ 1381.251168][T31572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.251184][T31572] RIP: 0033:0x7f6bfb99ce59 [ 1381.251198][T31572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.251212][T31572] RSP: 002b:00007f6bfc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1381.251228][T31572] RAX: ffffffffffffffda RBX: 00007f6bfbc15fa0 RCX: 00007f6bfb99ce59 [ 1381.251238][T31572] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 1381.251248][T31572] RBP: 00007f6bfba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1381.251257][T31572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.251267][T31572] R13: 00007f6bfbc16038 R14: 00007f6bfbc15fa0 R15: 00007ffea9a46848 [ 1381.251287][T31572] [ 1381.509843][T31576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.518554][T31576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.092657][T31597] random: crng reseeded on system resumption [ 1382.128651][ T30] audit: type=1800 audit(1843104557.539:61): pid=31594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5083" name="features" dev="configfs" ino=144265 res=0 errno=0 [ 1382.213464][T31361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.974964][T31623] ubi9: attaching mtd0 [ 1383.128912][T31623] ubi9 error: ubi_attach_mtd_dev: bad VID header (32768) or data offsets (32832) [ 1383.618637][T31361] veth0_vlan: entered promiscuous mode [ 1383.788115][T31361] veth1_vlan: entered promiscuous mode [ 1384.022176][T31361] veth0_macvtap: entered promiscuous mode [ 1384.135464][T31361] veth1_macvtap: entered promiscuous mode [ 1384.480373][T31361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.549288][T31361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.768462][T31525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.892445][T31525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.008855][T31525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.022099][T31656] random: crng reseeded on system resumption [ 1385.243442][T31525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.596185][T24118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.638836][T24118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.840175][T31527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.906408][T31674] FAULT_INJECTION: forcing a failure. [ 1385.906408][T31674] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.923569][T31527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.954176][T31646] Process accounting paused [ 1386.023283][T31674] CPU: 0 UID: 0 PID: 31674 Comm: syz.3.5096 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1386.023312][T31674] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1386.023319][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1386.023329][T31674] Call Trace: [ 1386.023335][T31674] [ 1386.023341][T31674] dump_stack_lvl+0x100/0x190 [ 1386.023363][T31674] should_fail_ex.cold+0x5/0xa [ 1386.023383][T31674] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1386.023403][T31674] should_failslab+0xc2/0x120 [ 1386.023423][T31674] __kmalloc_noprof+0xe0/0x850 [ 1386.023437][T31674] ? kfree+0x1dd/0x6c0 [ 1386.023461][T31674] tomoyo_realpath_from_path+0xb6/0x690 [ 1386.023485][T31674] tomoyo_check_open_permission+0x2af/0x3c0 [ 1386.023504][T31674] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1386.023528][T31674] ? hook_file_open+0x24e/0x7a0 [ 1386.023558][T31674] ? path_get+0x61/0x80 [ 1386.023580][T31674] tomoyo_file_open+0x6b/0x90 [ 1386.023602][T31674] security_file_open+0xb5/0x1e0 [ 1386.023620][T31674] do_dentry_open+0x5aa/0x1660 [ 1386.023641][T31674] ? security_inode_permission+0xbf/0x250 [ 1386.023661][T31674] vfs_open+0x82/0x3f0 [ 1386.023684][T31674] path_openat+0x208c/0x31a0 [ 1386.023710][T31674] ? __pfx_path_openat+0x10/0x10 [ 1386.023736][T31674] do_file_open+0x20e/0x430 [ 1386.023756][T31674] ? __pfx_do_file_open+0x10/0x10 [ 1386.023789][T31674] ? alloc_fd+0x476/0x790 [ 1386.023809][T31674] ? do_getname+0x191/0x390 [ 1386.023843][T31674] do_sys_openat2+0x10d/0x1e0 [ 1386.023866][T31674] ? __pfx_do_sys_openat2+0x10/0x10 [ 1386.023896][T31674] __x64_sys_openat+0x12d/0x210 [ 1386.023920][T31674] ? __pfx___x64_sys_openat+0x10/0x10 [ 1386.023947][T31674] ? rcu_is_watching+0x12/0xc0 [ 1386.023967][T31674] do_syscall_64+0x10b/0xf80 [ 1386.023990][T31674] ? clear_bhb_loop+0x40/0x90 [ 1386.024012][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.024029][T31674] RIP: 0033:0x7f241b79ce59 [ 1386.024042][T31674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.024057][T31674] RSP: 002b:00007f241c6b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1386.024073][T31674] RAX: ffffffffffffffda RBX: 00007f241ba15fa0 RCX: 00007f241b79ce59 [ 1386.024084][T31674] RDX: 0000000000028342 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1386.024093][T31674] RBP: 00007f241b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1386.024103][T31674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.024113][T31674] R13: 00007f241ba16038 R14: 00007f241ba15fa0 R15: 00007ffcfc1f4888 [ 1386.024133][T31674] [ 1386.024155][T31674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1386.620579][T31684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5098'. [ 1387.178354][T31674] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1390.032650][T31731] netlink: 'syz.6.5104': attribute type 11 has an invalid length. [ 1390.076294][T31731] netlink: 'syz.6.5104': attribute type 11 has an invalid length. [ 1390.131956][T31731] netlink: 'syz.6.5104': attribute type 11 has an invalid length. [ 1390.173308][T31731] netlink: 'syz.6.5104': attribute type 11 has an invalid length. [ 1390.730721][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5110'. [ 1390.788509][T31752] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1391.371635][T31762] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1392.041079][T31772] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1392.773809][T31780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5123'. [ 1393.845552][T31791] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1394.915526][T31815] CIFS: VFS: Invalid SecurityFlags: (errno 9) [ 1394.915526][T31815] [ 1396.411270][T31843] block2mtd: too many arguments [ 1396.429279][ T6072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1396.446979][ T6072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1396.456097][ T6072] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1396.464030][ T6072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1396.481435][ T6072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1398.258337][T31527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.561718][ T6072] Bluetooth: hci5: command tx timeout [ 1398.745386][T31870] blktrace: Concurrent blktraces are not allowed on sg0 [ 1398.797378][T31527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.990285][T31527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.259020][T31527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.478125][T31527] bridge_slave_1: left allmulticast mode [ 1400.496977][T31527] bridge_slave_1: left promiscuous mode [ 1400.523574][T31527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.640961][ T6072] Bluetooth: hci5: command tx timeout [ 1400.886920][T31527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.909930][T31527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.930691][T31527] bond0 (unregistering): Released all slaves [ 1401.167178][T31527] &#$@\]\-: left promiscuous mode [ 1401.486116][T31842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.516290][T31842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.555078][T31842] bridge_slave_0: entered allmulticast mode [ 1401.586831][T31842] bridge_slave_0: entered promiscuous mode [ 1401.752171][T31842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.794701][T31842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.827225][T31842] bridge_slave_1: entered allmulticast mode [ 1401.854874][T31842] bridge_slave_1: entered promiscuous mode [ 1402.296284][T31842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.333765][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1402.398699][T31842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.629275][T31842] team0: Port device team_slave_0 added [ 1402.671557][T31842] team0: Port device team_slave_1 added [ 1402.694673][ T6072] Bluetooth: hci5: command tx timeout [ 1402.882494][T31842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.910073][T31842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.032714][T31842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.119563][T31925] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5137'. [ 1403.195759][T31842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.234321][T31842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.390875][T31842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.716921][T31527] hsr_slave_0: left promiscuous mode [ 1403.753850][T31527] hsr_slave_1: left promiscuous mode [ 1403.782359][T31527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.814840][T31527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.881016][T31527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.930951][T27345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1403.959258][T27345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1403.970398][T27345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1403.978469][T27345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1403.987469][T27345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1403.998262][T31527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.079064][T31527] veth1_macvtap: left promiscuous mode [ 1404.104183][T31527] veth0_macvtap: left promiscuous mode [ 1404.132834][T31527] veth1_vlan: left promiscuous mode [ 1404.159191][T31527] veth0_vlan: left promiscuous mode [ 1404.435979][T31958] blktrace: Concurrent blktraces are not allowed on loop2 [ 1404.739149][T31527] team0 (unregistering): Port device team_slave_1 removed [ 1404.762223][T27345] Bluetooth: hci5: command tx timeout [ 1404.775795][T31527] team0 (unregistering): Port device team_slave_0 removed [ 1405.026821][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1405.071501][T31842] hsr_slave_0: entered promiscuous mode [ 1405.092896][T31842] hsr_slave_1: entered promiscuous mode [ 1405.113780][T31842] debugfs: 'hsr0' already exists in 'hsr' [ 1405.135588][T31842] Cannot create hsr debugfs directory [ 1405.779523][T31969] ubi0: attaching mtd0 [ 1405.813599][T31969] ubi0: scanning is finished [ 1405.870907][T31969] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1405.950962][T31978] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1406.037305][T27345] Bluetooth: hci3: command tx timeout [ 1406.235170][T31969] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1407.497157][T32000] netlink: 'syz.6.5146': attribute type 33 has an invalid length. [ 1408.105429][T27345] Bluetooth: hci3: command tx timeout [ 1408.800878][T31949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.860894][T31949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.910278][T31949] bridge_slave_0: entered allmulticast mode [ 1408.957912][T31949] bridge_slave_0: entered promiscuous mode [ 1409.334975][T31949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.382678][T31949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.437834][T31949] bridge_slave_1: entered allmulticast mode [ 1409.485994][T31949] bridge_slave_1: entered promiscuous mode [ 1409.649274][T31842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1409.695167][T31842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1409.865411][T31949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.928911][T31842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1409.985872][T31842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1410.038498][T31842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1410.126523][T31842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1410.174213][T27345] Bluetooth: hci3: command tx timeout [ 1410.210868][T31949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.368569][T31842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1410.423892][T31842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1410.588099][T31949] team0: Port device team_slave_0 added [ 1410.627863][T31949] team0: Port device team_slave_1 added [ 1410.787763][T31949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.824675][T31949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.950777][T31949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.021345][T31949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.059491][T31949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.199015][T31949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.343327][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5151'. [ 1411.479111][T31949] hsr_slave_0: entered promiscuous mode [ 1411.511875][T31949] hsr_slave_1: entered promiscuous mode [ 1411.536707][T31949] debugfs: 'hsr0' already exists in 'hsr' [ 1411.580748][T31949] Cannot create hsr debugfs directory [ 1412.245271][ T6072] Bluetooth: hci3: command tx timeout [ 1412.622724][T31842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.824018][T31842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.897774][T31525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.904931][T31525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.042247][T31525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.049368][T31525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.448786][T32103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5154'. [ 1414.039958][T31949] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1414.095390][T31949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1414.130928][T31949] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1414.189453][T31949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1414.247796][T31949] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1414.311739][T31949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1414.348582][T31949] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1414.387944][T31949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1415.299626][T31949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.565287][T32141] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1415.721909][T31949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.902467][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.909653][T31529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.039259][T31842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.080416][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.087606][T31529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.131852][T31842] veth0_vlan: entered promiscuous mode [ 1417.223613][T31842] veth1_vlan: entered promiscuous mode [ 1417.395934][T31842] veth0_macvtap: entered promiscuous mode [ 1417.454246][T31842] veth1_macvtap: entered promiscuous mode [ 1417.542478][T31842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.585275][T31842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.668486][T24118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.692998][T24118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.735442][T24118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.782924][T24118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.161907][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.209555][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.345779][T31949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.381034][T31529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.419714][T31529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.820752][T32198] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1419.455182][T31949] veth0_vlan: entered promiscuous mode [ 1419.550603][T31949] veth1_vlan: entered promiscuous mode [ 1419.691417][T31949] veth0_macvtap: entered promiscuous mode [ 1419.757726][T31949] veth1_macvtap: entered promiscuous mode [ 1419.845696][T31949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.898915][T31949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.968124][ T6081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.014695][ T6081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.034970][T32219] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 1420.064832][ T6081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.099787][ T6081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.324263][T32215] FAULT_INJECTION: forcing a failure. [ 1420.324263][T32215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.378780][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.419764][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.483818][T32215] CPU: 0 UID: 0 PID: 32215 Comm: syz.4.5169 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1420.483845][T32215] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1420.483851][T32215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1420.483860][T32215] Call Trace: [ 1420.483866][T32215] [ 1420.483872][T32215] dump_stack_lvl+0x100/0x190 [ 1420.483893][T32215] should_fail_ex.cold+0x5/0xa [ 1420.483913][T32215] _copy_from_user+0x2e/0xd0 [ 1420.483930][T32215] get_timespec64+0x8b/0x1b0 [ 1420.483953][T32215] ? __pfx_get_timespec64+0x10/0x10 [ 1420.483974][T32215] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1420.484002][T32215] __x64_sys_futex+0x21a/0x4d0 [ 1420.484022][T32215] ? __pfx___x64_sys_futex+0x10/0x10 [ 1420.484042][T32215] ? rcu_is_watching+0x12/0xc0 [ 1420.484063][T32215] do_syscall_64+0x10b/0xf80 [ 1420.484086][T32215] ? clear_bhb_loop+0x40/0x90 [ 1420.484105][T32215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.484121][T32215] RIP: 0033:0x7ff85d59ce59 [ 1420.484134][T32215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.484149][T32215] RSP: 002b:00007ffea2e9b1a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1420.484165][T32215] RAX: ffffffffffffffda RBX: 000000000015b33f RCX: 00007ff85d59ce59 [ 1420.484176][T32215] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff85d81609c [ 1420.484185][T32215] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 1420.484193][T32215] R10: 00007ffea2e9b2b0 R11: 0000000000000246 R12: 00007ffea2e9b2d0 [ 1420.484203][T32215] R13: 00007ff85d81609c R14: 000000000015b371 R15: 00007ffea2e9b2b0 [ 1420.484222][T32215] [ 1421.227956][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1421.235317][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1421.431869][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.440434][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.072566][T32277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5184'. [ 1426.323454][T32298] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1426.808354][T27345] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1428.300075][T32332] FAULT_INJECTION: forcing a failure. [ 1428.300075][T32332] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1428.433852][T32332] CPU: 0 UID: 0 PID: 32332 Comm: syz.4.5194 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1428.433882][T32332] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1428.433889][T32332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1428.433903][T32332] Call Trace: [ 1428.433909][T32332] [ 1428.433916][T32332] dump_stack_lvl+0x100/0x190 [ 1428.433940][T32332] should_fail_ex.cold+0x5/0xa [ 1428.433960][T32332] get_futex_key+0x1d2/0x1510 [ 1428.433981][T32332] ? __pfx_get_futex_key+0x10/0x10 [ 1428.433996][T32332] ? futex_hash+0x2ad/0x370 [ 1428.434012][T32332] ? futex_hash+0x141/0x370 [ 1428.434029][T32332] futex_wake+0xea/0x530 [ 1428.434049][T32332] ? __pfx_futex_wait+0x10/0x10 [ 1428.434068][T32332] ? __pfx_futex_wake+0x10/0x10 [ 1428.434091][T32332] ? do_vfs_ioctl+0x226/0x13e0 [ 1428.434109][T32332] do_futex+0x32b/0x350 [ 1428.434126][T32332] ? __pfx_do_futex+0x10/0x10 [ 1428.434144][T32332] ? find_held_lock+0x2b/0x80 [ 1428.434166][T32332] __x64_sys_futex+0x34f/0x4d0 [ 1428.434185][T32332] ? __pfx___x64_sys_futex+0x10/0x10 [ 1428.434206][T32332] ? rcu_is_watching+0x12/0xc0 [ 1428.434226][T32332] do_syscall_64+0x10b/0xf80 [ 1428.434248][T32332] ? clear_bhb_loop+0x40/0x90 [ 1428.434266][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.434282][T32332] RIP: 0033:0x7ff85d59ce59 [ 1428.434296][T32332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.434311][T32332] RSP: 002b:00007ff85e4da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1428.434326][T32332] RAX: ffffffffffffffda RBX: 00007ff85d815fa8 RCX: 00007ff85d59ce59 [ 1428.434336][T32332] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff85d815fac [ 1428.434346][T32332] RBP: 00007ff85d815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1428.434356][T32332] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1428.434366][T32332] R13: 00007ff85d816038 R14: 00007ffea2e9af60 R15: 00007ffea2e9b048 [ 1428.434386][T32332] [ 1431.720748][T32337] Process accounting resumed [ 1432.411284][ T6072] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1432.427991][ T6072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1432.436131][ T6072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1432.457271][ T6072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1432.471176][ T6072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1434.528960][ T6072] Bluetooth: hci6: command tx timeout [ 1436.596718][ T6072] Bluetooth: hci6: command tx timeout [ 1437.561174][T32357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.621606][T32357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.669067][T32357] bridge_slave_0: entered allmulticast mode [ 1437.675507][T32457] random: crng reseeded on system resumption [ 1437.709660][T32357] bridge_slave_0: entered promiscuous mode [ 1437.755576][T32357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.814034][T32357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.855961][T32357] bridge_slave_1: entered allmulticast mode [ 1437.894235][T32357] bridge_slave_1: entered promiscuous mode [ 1438.052828][T32357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.115746][T32357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.666070][ T6072] Bluetooth: hci6: command tx timeout [ 1438.956654][T32357] team0: Port device team_slave_0 added [ 1439.003379][T32357] team0: Port device team_slave_1 added [ 1439.452345][T32357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.495926][T32357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.615364][T32357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.779627][T32357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.813947][T32357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.901973][T32357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.262568][T32357] hsr_slave_0: entered promiscuous mode [ 1440.284682][T32357] hsr_slave_1: entered promiscuous mode [ 1440.305820][T32357] debugfs: 'hsr0' already exists in 'hsr' [ 1440.332410][T32357] Cannot create hsr debugfs directory [ 1440.737928][ T6072] Bluetooth: hci6: command tx timeout [ 1441.121404][T32476] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1441.356813][T32472] mtrr: base(0x10000) is not aligned on a size(0x2000000000) boundary [ 1442.272831][T32357] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1442.317269][T32357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.358409][T32357] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1442.392395][T32357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.581821][T32357] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1442.649656][T32357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.695545][T32357] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1443.797021][T32357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.350543][T32507] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1444.469531][T32357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.580806][T32357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.658327][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.665480][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.822511][T32519] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 1444.841434][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.848557][ T6844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.922984][T32519] net gretap0: uevent: failed to send synthetic uevent: -22 [ 1447.862694][T32357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.493502][T32357] veth0_vlan: entered promiscuous mode [ 1449.573821][T32357] veth1_vlan: entered promiscuous mode [ 1449.736972][T32357] veth0_macvtap: entered promiscuous mode [ 1449.825210][T32357] veth1_macvtap: entered promiscuous mode [ 1449.946244][T32357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.099041][T32357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.350149][ T6081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.386781][ T6081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.467417][ T6081] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.577318][ T6081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.280567][T31529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.355832][T31529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.570942][T31527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.644029][T31527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.031110][ T6072] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1452.569518][T32671] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1452.819912][T32650] random: crng reseeded on system resumption [ 1453.571461][T32689] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1453.648793][T32689] random: crng reseeded on system resumption [ 1454.106372][T27345] Bluetooth: hci5: command 0x2016 tx timeout [ 1455.155661][T32716] FAULT_INJECTION: forcing a failure. [ 1455.155661][T32716] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.417234][T32716] CPU: 0 UID: 0 PID: 32716 Comm: syz.6.5256 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1455.417263][T32716] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1455.417270][T32716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1455.417280][T32716] Call Trace: [ 1455.417286][T32716] [ 1455.417292][T32716] dump_stack_lvl+0x100/0x190 [ 1455.417315][T32716] should_fail_ex.cold+0x5/0xa [ 1455.417335][T32716] should_failslab+0xc2/0x120 [ 1455.417354][T32716] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1455.417372][T32716] ? key_alloc+0x423/0x1310 [ 1455.417390][T32716] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1455.417416][T32716] kmemdup_noprof+0x29/0x60 [ 1455.417433][T32716] key_alloc+0x423/0x1310 [ 1455.417458][T32716] ? __pfx_key_alloc+0x10/0x10 [ 1455.417475][T32716] ? __pfx_key_default_cmp+0x10/0x10 [ 1455.417495][T32716] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1455.417517][T32716] keyring_alloc+0x44/0xc0 [ 1455.417538][T32716] look_up_user_keyrings+0x465/0x790 [ 1455.417558][T32716] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1455.417581][T32716] lookup_user_key+0xbb1/0x1300 [ 1455.417599][T32716] ? __pfx_lookup_user_key+0x10/0x10 [ 1455.417615][T32716] ? __pfx_do_futex+0x10/0x10 [ 1455.417636][T32716] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1455.417657][T32716] ? xfd_validate_state+0x129/0x190 [ 1455.417672][T32716] ? ksys_write+0x1ac/0x250 [ 1455.417693][T32716] keyctl_keyring_unlink+0x1f/0x1b0 [ 1455.417716][T32716] __do_sys_keyctl+0x3dd/0x5a0 [ 1455.417732][T32716] do_syscall_64+0x10b/0xf80 [ 1455.417754][T32716] ? clear_bhb_loop+0x40/0x90 [ 1455.417773][T32716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.417788][T32716] RIP: 0033:0x7f2448f9ce59 [ 1455.417803][T32716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.417818][T32716] RSP: 002b:00007f24471d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1455.417833][T32716] RAX: ffffffffffffffda RBX: 00007f2449216090 RCX: 00007f2448f9ce59 [ 1455.417843][T32716] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000009 [ 1455.417854][T32716] RBP: 00007f2449032d6f R08: 0000000000000008 R09: 0000000000000000 [ 1455.417863][T32716] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1455.417874][T32716] R13: 00007f2449216128 R14: 00007f2449216090 R15: 00007ffe07ff9188 [ 1455.417895][T32716] [ 1456.184259][T27345] Bluetooth: hci5: command 0x2016 tx timeout [ 1457.644545][T32742] random: crng reseeded on system resumption [ 1460.270461][ T310] FAULT_INJECTION: forcing a failure. [ 1460.270461][ T310] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.334998][ T310] CPU: 0 UID: 5 PID: 310 Comm: syz.9.5270 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1460.335027][ T310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1460.335034][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1460.335045][ T310] Call Trace: [ 1460.335051][ T310] [ 1460.335058][ T310] dump_stack_lvl+0x100/0x190 [ 1460.335081][ T310] should_fail_ex.cold+0x5/0xa [ 1460.335101][ T310] ? fib_default_rule_add+0x4f/0x420 [ 1460.335122][ T310] should_failslab+0xc2/0x120 [ 1460.335141][ T310] __kmalloc_noprof+0xe0/0x850 [ 1460.335160][ T310] fib_default_rule_add+0x4f/0x420 [ 1460.335183][ T310] fib4_rules_init+0xa6/0x1c0 [ 1460.335201][ T310] fib_net_init+0x1dc/0x3f0 [ 1460.335221][ T310] ? is_module_address+0x69/0xf0 [ 1460.335237][ T310] ? __pfx_fib_net_init+0x10/0x10 [ 1460.335258][ T310] ? timer_init_key+0x155/0x330 [ 1460.335283][ T310] ? devinet_init_net+0x56c/0x8d0 [ 1460.335308][ T310] ? __pfx_fib_net_init+0x10/0x10 [ 1460.335329][ T310] ops_init+0x1e2/0x5f0 [ 1460.335350][ T310] setup_net+0x118/0x3a0 [ 1460.335368][ T310] ? __pfx_setup_net+0x10/0x10 [ 1460.335390][ T310] ? mutex_init_lockdep+0xf1/0x120 [ 1460.335410][ T310] copy_net_ns+0x46f/0x7c0 [ 1460.335431][ T310] create_new_namespaces+0x3ea/0xac0 [ 1460.335457][ T310] unshare_nsproxy_namespaces+0xf2/0x220 [ 1460.335479][ T310] ksys_unshare+0x438/0xab0 [ 1460.335502][ T310] ? __pfx_ksys_unshare+0x10/0x10 [ 1460.335522][ T310] ? xfd_validate_state+0x129/0x190 [ 1460.335551][ T310] __x64_sys_unshare+0x31/0x40 [ 1460.335574][ T310] do_syscall_64+0x10b/0xf80 [ 1460.335598][ T310] ? clear_bhb_loop+0x40/0x90 [ 1460.335617][ T310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.335634][ T310] RIP: 0033:0x7efd3599ce59 [ 1460.335647][ T310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.335661][ T310] RSP: 002b:00007efd36885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1460.335677][ T310] RAX: ffffffffffffffda RBX: 00007efd35c15fa0 RCX: 00007efd3599ce59 [ 1460.335687][ T310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1460.335696][ T310] RBP: 00007efd35a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1460.335705][ T310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.335715][ T310] R13: 00007efd35c16038 R14: 00007efd35c15fa0 R15: 00007ffd51ccc338 [ 1460.335735][ T310] [ 1460.884329][ T315] FAULT_INJECTION: forcing a failure. [ 1460.884329][ T315] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.967351][ T315] CPU: 0 UID: 0 PID: 315 Comm: syz.4.5271 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1460.967377][ T315] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1460.967383][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1460.967392][ T315] Call Trace: [ 1460.967398][ T315] [ 1460.967404][ T315] dump_stack_lvl+0x100/0x190 [ 1460.967426][ T315] should_fail_ex.cold+0x5/0xa [ 1460.967446][ T315] should_failslab+0xc2/0x120 [ 1460.967464][ T315] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1460.967504][ T315] ? alloc_empty_file+0x5b/0x1c0 [ 1460.967528][ T315] ? __pfx_stack_trace_save+0x10/0x10 [ 1460.967552][ T315] alloc_empty_file+0x5b/0x1c0 [ 1460.967574][ T315] path_openat+0xe8/0x31a0 [ 1460.967592][ T315] ? kasan_save_stack+0x3f/0x50 [ 1460.967607][ T315] ? kasan_save_stack+0x30/0x50 [ 1460.967621][ T315] ? kasan_save_track+0x14/0x30 [ 1460.967635][ T315] ? __kasan_slab_alloc+0x89/0x90 [ 1460.967650][ T315] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1460.967673][ T315] ? do_getname+0x35/0x390 [ 1460.967694][ T315] ? do_sys_openat2+0xc5/0x1e0 [ 1460.967716][ T315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.967734][ T315] ? __pfx_path_openat+0x10/0x10 [ 1460.967760][ T315] do_file_open+0x20e/0x430 [ 1460.967780][ T315] ? __pfx_do_file_open+0x10/0x10 [ 1460.967812][ T315] ? alloc_fd+0x476/0x790 [ 1460.967832][ T315] ? do_getname+0x191/0x390 [ 1460.967855][ T315] do_sys_openat2+0x10d/0x1e0 [ 1460.967878][ T315] ? __pfx_do_sys_openat2+0x10/0x10 [ 1460.967902][ T315] ? map_id_range_down+0x2bc/0x3b0 [ 1460.967927][ T315] __x64_sys_openat+0x12d/0x210 [ 1460.967951][ T315] ? __pfx___x64_sys_openat+0x10/0x10 [ 1460.967977][ T315] ? rcu_is_watching+0x12/0xc0 [ 1460.968000][ T315] do_syscall_64+0x10b/0xf80 [ 1460.968022][ T315] ? clear_bhb_loop+0x40/0x90 [ 1460.968041][ T315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.968056][ T315] RIP: 0033:0x7ff85d59ce59 [ 1460.968069][ T315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.968083][ T315] RSP: 002b:00007ff85e4da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1460.968098][ T315] RAX: ffffffffffffffda RBX: 00007ff85d815fa0 RCX: 00007ff85d59ce59 [ 1460.968108][ T315] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1460.968118][ T315] RBP: 00007ff85d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1460.968127][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.968136][ T315] R13: 00007ff85d816038 R14: 00007ff85d815fa0 R15: 00007ffea2e9b048 [ 1460.968155][ T315] [ 1461.849021][ T318] Process accounting paused [ 1462.074249][ T334] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 1462.339844][ T338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1462.409216][ T340] FAULT_INJECTION: forcing a failure. [ 1462.409216][ T340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1462.509735][ T340] CPU: 0 UID: 0 PID: 340 Comm: syz.4.5275 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1462.509763][ T340] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1462.509770][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1462.509780][ T340] Call Trace: [ 1462.509786][ T340] [ 1462.509793][ T340] dump_stack_lvl+0x100/0x190 [ 1462.509817][ T340] should_fail_ex.cold+0x5/0xa [ 1462.509834][ T340] ? prepare_alloc_pages+0x16d/0x5f0 [ 1462.509856][ T340] should_fail_alloc_page+0xeb/0x140 [ 1462.509877][ T340] prepare_alloc_pages+0x1f0/0x5f0 [ 1462.509899][ T340] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1462.509925][ T340] ? __pfx_stack_trace_save+0x10/0x10 [ 1462.509947][ T340] ? stack_depot_save_flags+0x27/0x9d0 [ 1462.509966][ T340] ? update_irq_load_avg+0xae/0xe40 [ 1462.509991][ T340] ? kasan_save_stack+0x30/0x50 [ 1462.510009][ T340] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1462.510034][ T340] ? __lock_acquire+0x4a5/0x2630 [ 1462.510050][ T340] ? __x64_sys_execveat+0xdf/0x130 [ 1462.510066][ T340] ? do_syscall_64+0x10b/0xf80 [ 1462.510088][ T340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.510110][ T340] ? __lock_acquire+0x4a5/0x2630 [ 1462.510126][ T340] ? find_held_lock+0x2b/0x80 [ 1462.510146][ T340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1462.510169][ T340] ? policy_nodemask+0xed/0x4f0 [ 1462.510188][ T340] alloc_pages_mpol+0x1fb/0x540 [ 1462.510206][ T340] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1462.510224][ T340] ? __anon_vma_prepare+0x2db/0x5e0 [ 1462.510246][ T340] ? __anon_vma_prepare+0x2db/0x5e0 [ 1462.510270][ T340] folio_alloc_mpol_noprof+0x36/0x260 [ 1462.510292][ T340] vma_alloc_folio_noprof+0xed/0x1d0 [ 1462.510312][ T340] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1462.510334][ T340] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1462.510371][ T340] do_anonymous_page+0xb46/0x2050 [ 1462.510401][ T340] __handle_mm_fault+0x1d2c/0x2a00 [ 1462.510427][ T340] ? mt_find+0x45e/0x8e0 [ 1462.510444][ T340] ? __pfx___handle_mm_fault+0x10/0x10 [ 1462.510465][ T340] ? __pfx_mt_find+0x10/0x10 [ 1462.510495][ T340] handle_mm_fault+0x36d/0xa20 [ 1462.510521][ T340] __get_user_pages+0x1178/0x32a0 [ 1462.510547][ T340] ? __pfx___get_user_pages+0x10/0x10 [ 1462.510571][ T340] get_user_pages_remote+0x3d2/0xb10 [ 1462.510594][ T340] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1462.510614][ T340] ? __pfx_create_init_stack_vma+0x10/0x10 [ 1462.510636][ T340] get_arg_page+0xf4/0x310 [ 1462.510653][ T340] ? __pfx_get_arg_page+0x10/0x10 [ 1462.510669][ T340] ? alloc_bprm+0x3da/0x710 [ 1462.510684][ T340] ? alloc_bprm+0x3da/0x710 [ 1462.510701][ T340] copy_string_kernel+0x17d/0x3f0 [ 1462.510719][ T340] ? alloc_bprm+0x420/0x710 [ 1462.510737][ T340] do_execveat_common.isra.0+0x2e6/0x580 [ 1462.510759][ T340] __x64_sys_execveat+0xdf/0x130 [ 1462.510777][ T340] do_syscall_64+0x10b/0xf80 [ 1462.510799][ T340] ? clear_bhb_loop+0x40/0x90 [ 1462.510817][ T340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.510833][ T340] RIP: 0033:0x7ff85d59ce59 [ 1462.510847][ T340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.510861][ T340] RSP: 002b:00007ff85e4da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1462.510877][ T340] RAX: ffffffffffffffda RBX: 00007ff85d815fa0 RCX: 00007ff85d59ce59 [ 1462.510889][ T340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1462.510898][ T340] RBP: 00007ff85d632d6f R08: 0000000000001000 R09: 0000000000000000 [ 1462.510908][ T340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.510918][ T340] R13: 00007ff85d816038 R14: 00007ff85d815fa0 R15: 00007ffea2e9b048 [ 1462.510938][ T340] [ 1462.902730][ T341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 1466.246869][ T372] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5281'. [ 1466.480101][ T379] HfR: entered promiscuous mode [ 1466.785152][ T381] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1468.345572][ T397] netlink: 'syz.9.5285': attribute type 8 has an invalid length. [ 1470.458428][ T430] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5292'. [ 1470.774711][T27345] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1470.798117][T27345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1470.806678][T27345] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1470.817981][T27345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1470.829920][T27345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1472.887902][T27345] Bluetooth: hci7: command tx timeout [ 1472.974209][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.049085][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.108266][ T436] bridge_slave_0: entered allmulticast mode [ 1473.185527][ T436] bridge_slave_0: entered promiscuous mode [ 1473.276358][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.340585][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.390393][ T436] bridge_slave_1: entered allmulticast mode [ 1473.420200][ T436] bridge_slave_1: entered promiscuous mode [ 1473.573741][ T436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.631091][ T436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.845615][ T436] team0: Port device team_slave_0 added [ 1473.935751][ T436] team0: Port device team_slave_1 added [ 1474.106123][ T436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.139198][ T436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.289008][ T494] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1474.309200][ T436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.492016][ T436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.541988][ T436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.699255][ T436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.938530][ T436] hsr_slave_0: entered promiscuous mode [ 1474.957173][T27345] Bluetooth: hci7: command tx timeout [ 1474.973108][ T436] hsr_slave_1: entered promiscuous mode [ 1474.994334][ T436] debugfs: 'hsr0' already exists in 'hsr' [ 1475.015603][ T436] Cannot create hsr debugfs directory [ 1475.783511][ T6072] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1475.803672][ T6072] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1475.814811][ T6072] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1475.824541][ T6072] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1475.833330][ T6072] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1476.194034][ T526] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5309'. [ 1477.027791][ T6072] Bluetooth: hci7: command tx timeout [ 1477.909169][ T6072] Bluetooth: hci8: command tx timeout [ 1479.097532][ T6072] Bluetooth: hci7: command tx timeout [ 1479.660363][ T587] netlink: zone id is out of range [ 1479.693283][ T587] netlink: zone id is out of range [ 1479.741178][ T587] netlink: zone id is out of range [ 1479.785632][ T595] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1479.857390][ T587] netlink: zone id is out of range [ 1479.897668][ T595] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1479.954352][ T587] netlink: zone id is out of range [ 1479.972460][ T6072] Bluetooth: hci8: command tx timeout [ 1479.998148][ T587] netlink: zone id is out of range [ 1480.038393][ T587] netlink: zone id is out of range [ 1480.102884][ T587] netlink: zone id is out of range [ 1480.140174][ T587] netlink: zone id is out of range [ 1480.172224][ T587] netlink: zone id is out of range [ 1480.192496][ T436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1480.252613][ T436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1480.296001][ T436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1480.359912][ T436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1480.488164][ T436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1480.522925][ T436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1480.584436][ T436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1480.621972][ T436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1480.927854][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.974337][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.034957][ T517] bridge_slave_0: entered allmulticast mode [ 1481.093267][ T517] bridge_slave_0: entered promiscuous mode [ 1481.144022][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.191295][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.230504][ T517] bridge_slave_1: entered allmulticast mode [ 1481.263169][ T517] bridge_slave_1: entered promiscuous mode [ 1481.418305][ T517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.498013][ T517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.739459][ T517] team0: Port device team_slave_0 added [ 1481.783272][ T517] team0: Port device team_slave_1 added [ 1481.928072][ T517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.977493][ T517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.060201][ T6072] Bluetooth: hci8: command tx timeout [ 1482.103201][ T517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.146498][ T517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.162906][ T517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.223529][ T517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.287682][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1482.295766][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1482.497715][ T517] hsr_slave_0: entered promiscuous mode [ 1482.540858][ T517] hsr_slave_1: entered promiscuous mode [ 1482.563597][ T517] debugfs: 'hsr0' already exists in 'hsr' [ 1482.592348][ T517] Cannot create hsr debugfs directory [ 1482.875743][ T436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.368260][ T436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.638254][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.645430][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.896455][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.903603][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.109885][ T6072] Bluetooth: hci8: command tx timeout [ 1484.373211][ T669] futex_wake_op: syz.4.5323 tries to shift op by -2048; fix this program [ 1484.426294][ T669] 0x000000000001-0x000000020000 : "" [ 1484.464860][ T669] ftl_cs: FTL header corrupt! [ 1486.277652][ T717] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* »' [ 1486.468978][ T722] MTRR 3 not used [ 1487.009592][ T733] program syz.4.5331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.021289][ T517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1487.078517][ T733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1487.091465][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1487.143005][ T517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1487.186739][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1487.262937][ T517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1487.364488][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1487.434466][ T517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1487.496535][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1487.555266][ T436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.236909][ T759] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1488.843654][ T436] veth0_vlan: entered promiscuous mode [ 1488.933354][ T436] veth1_vlan: entered promiscuous mode [ 1489.077194][ T517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.409471][ T436] veth0_macvtap: entered promiscuous mode [ 1489.547773][ T436] veth1_macvtap: entered promiscuous mode [ 1489.582985][ T517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.678796][T24118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.685976][T24118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.787499][ T436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.844784][T24118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.851920][T24118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.970099][ T436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.053427][T31526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.107470][T31526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.213958][T31526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.266728][ T791] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1490.277148][T31526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.694953][ T795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5337'. [ 1490.725746][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.733566][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.978099][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.032969][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.272080][ T827] Process accounting resumed [ 1492.557668][ T517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.571212][ T845] netlink: 'syz.4.5343': attribute type 22 has an invalid length. [ 1492.651010][ T845] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5343'. [ 1492.922263][ T517] veth0_vlan: entered promiscuous mode [ 1493.021298][ T517] veth1_vlan: entered promiscuous mode [ 1493.196677][ T517] veth0_macvtap: entered promiscuous mode [ 1493.277994][ T517] veth1_macvtap: entered promiscuous mode [ 1493.588150][ T517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.696999][ T517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.808440][T31527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.914103][ T6081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.973543][ T6081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.063442][ T6081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.471854][T31529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.536129][T27345] Bluetooth: hci0: command 0x0406 tx timeout [ 1494.576990][T31529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.760945][T31525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.811480][T31525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.227411][ T30] audit: type=1806 audit(1843104671.227:62): res=-14 [ 1495.781478][ T907] Line length is too long: Should be less than 4094 [ 1495.893266][ T912] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1496.010846][ T887] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5350'. [ 1496.031143][ T913] net_ratelimit: 21 callbacks suppressed [ 1496.031158][ T913] openvswitch: netlink: Key type 231 is out of range max 32 [ 1496.665752][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5353'. [ 1497.634498][ T973] FAULT_INJECTION: forcing a failure. [ 1497.634498][ T973] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.785658][ T973] CPU: 0 UID: 0 PID: 973 Comm: syz.9.5362 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1497.785688][ T973] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1497.785694][ T973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1497.785704][ T973] Call Trace: [ 1497.785710][ T973] [ 1497.785717][ T973] dump_stack_lvl+0x100/0x190 [ 1497.785740][ T973] should_fail_ex.cold+0x5/0xa [ 1497.785761][ T973] should_failslab+0xc2/0x120 [ 1497.785780][ T973] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1497.785803][ T973] ? vkms_plane_duplicate_state+0x45/0x130 [ 1497.785826][ T973] vkms_plane_duplicate_state+0x45/0x130 [ 1497.785845][ T973] drm_atomic_get_plane_state+0x279/0x760 [ 1497.785871][ T973] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1497.785887][ T973] ? rcu_is_watching+0x12/0xc0 [ 1497.785910][ T973] ? __mutex_lock+0x26d/0x1b10 [ 1497.785926][ T973] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1497.785967][ T973] ? drm_master_internal_acquire+0x21/0x80 [ 1497.786011][ T973] drm_client_modeset_commit_locked+0x14d/0x580 [ 1497.786032][ T973] drm_client_modeset_commit+0x4f/0x80 [ 1497.786049][ T973] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1497.786077][ T973] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1497.786103][ T973] drm_fbdev_client_restore+0x1b/0x30 [ 1497.786123][ T973] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1497.786143][ T973] drm_client_dev_restore+0x205/0x2a0 [ 1497.786163][ T973] drm_release+0x2c6/0x360 [ 1497.786186][ T973] ? __pfx_drm_release+0x10/0x10 [ 1497.786209][ T973] __fput+0x3ff/0xb50 [ 1497.786235][ T973] task_work_run+0x150/0x240 [ 1497.786253][ T973] ? __pfx_task_work_run+0x10/0x10 [ 1497.786270][ T973] ? rcu_is_watching+0x12/0xc0 [ 1497.786291][ T973] exit_to_user_mode_loop+0x107/0x4f0 [ 1497.786307][ T973] ? rcu_is_watching+0x12/0xc0 [ 1497.786327][ T973] do_syscall_64+0x6f2/0xf80 [ 1497.786349][ T973] ? clear_bhb_loop+0x40/0x90 [ 1497.786369][ T973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.786384][ T973] RIP: 0033:0x7efd3599ce59 [ 1497.786398][ T973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.786414][ T973] RSP: 002b:00007efd36885028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1497.786433][ T973] RAX: 0000000000000000 RBX: 00007efd35c15fa0 RCX: 00007efd3599ce59 [ 1497.786443][ T973] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1497.786453][ T973] RBP: 00007efd35a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1497.786462][ T973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.786472][ T973] R13: 00007efd35c16038 R14: 00007efd35c15fa0 R15: 00007ffd51ccc338 [ 1497.786493][ T973] [ 1498.974445][ T992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5368'. [ 1499.162889][ T989] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 1499.178507][ T997] netlink: 'syz.2.5368': attribute type 1 has an invalid length. [ 1499.249082][ T989] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1499.320183][ T993] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 1499.372633][ T993] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1502.511506][ T1022] kexec: Could not allocate control_code_buffer [ 1503.173164][ T1108] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1503.927592][ T31] INFO: task syz.5.4987:31132 blocked for more than 143 seconds. [ 1503.956851][ T31] Tainted: G U L syzkaller #0 [ 1504.028957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1504.132558][ T31] task:syz.5.4987 state:D stack:28136 pid:31132 tgid:31123 ppid:21805 task_flags:0x400140 flags:0x00080002 [ 1504.260862][ T31] Call Trace: [ 1504.297358][ T31] [ 1504.326809][ T31] __schedule+0x1295/0x67a0 [ 1504.362581][ T31] ? __pfx___schedule+0x10/0x10 [ 1504.402380][ T31] ? find_held_lock+0x2b/0x80 [ 1504.429532][ T31] ? schedule+0x2bf/0x390 [ 1504.456453][ T31] schedule+0xdd/0x390 [ 1504.481750][ T31] schedule_preempt_disabled+0x13/0x30 [ 1504.516063][ T31] __mutex_lock+0xced/0x1b10 [ 1504.540123][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 1504.580251][ T31] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 1504.604142][ T1145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5387'. [ 1504.627060][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1504.648343][ T31] ? kmalloc_reserve+0xf9/0x350 [ 1504.668061][ T31] ? skb_put+0x138/0x180 [ 1504.687204][ T31] ? __nlmsg_put+0x152/0x1c0 [ 1504.702060][ T1145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5387'. [ 1504.721125][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 1504.742226][ T31] nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 1504.769993][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1504.805788][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1504.840117][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1504.863925][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1504.889307][ T31] ? genl_get_cmd+0x3e7/0x760 [ 1504.910437][ T31] ? __dev_queue_xmit+0xa10/0x4950 [ 1504.930071][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 1504.948857][ T31] genl_rcv_msg+0x560/0x800 [ 1504.964435][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1504.980070][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1505.000621][ T31] netlink_rcv_skb+0x159/0x420 [ 1505.024132][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.044594][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.063067][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1505.079019][ T31] genl_rcv+0x28/0x40 [ 1505.092186][ T31] netlink_unicast+0x585/0x850 [ 1505.109679][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1505.139161][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1505.155635][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.173452][ T31] ? __import_iovec+0x1d2/0x640 [ 1505.189093][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1505.211799][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 1505.228656][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.248221][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.265790][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1505.285518][ T31] ? try_to_wake_up+0x5f6/0x1900 [ 1505.301606][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1505.321346][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.339857][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 1505.357649][ T31] __sys_sendmsg+0x170/0x220 [ 1505.375304][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1505.392029][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1505.408273][ T31] ? rcu_is_watching+0x12/0xc0 [ 1505.429471][ T31] do_syscall_64+0x10b/0xf80 [ 1505.447326][ T31] ? clear_bhb_loop+0x40/0x90 [ 1505.463340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.477528][ T31] RIP: 0033:0x7f07ca99ce59 [ 1505.489527][ T31] RSP: 002b:00007f07cb897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.507028][ T31] RAX: ffffffffffffffda RBX: 00007f07cac16090 RCX: 00007f07ca99ce59 [ 1505.528935][ T31] RDX: 0000000020010090 RSI: 0000200000000380 RDI: 0000000000000003 [ 1505.546705][ T31] RBP: 00007f07caa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1505.565449][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.583364][ T31] R13: 00007f07cac16128 R14: 00007f07cac16090 R15: 00007ffd3e13f578 [ 1505.602149][ T31] [ 1505.745197][ T31] [ 1505.745197][ T31] Showing all locks held in the system: [ 1505.806517][ T31] 1 lock held by khungtaskd/31: [ 1505.853187][ T31] #0: ffffffff8e7e55a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1505.930373][ T31] 2 locks held by getty/23715: [ 1505.965543][ T31] #0: ffff888036ddf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1506.020286][ T31] #1: ffffc90004df32e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1506.071369][ T31] 2 locks held by syz.5.4987/31125: [ 1506.100022][ T31] #0: ffffffff906bea48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1506.140162][ T31] #1: ffffffff8ec61de0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 1506.192408][ T31] 2 locks held by syz.5.4987/31132: [ 1506.218189][ T31] #0: ffffffff906bea48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1506.250299][ T31] #1: ffffffff8ec61de0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 1506.286512][ T31] 1 lock held by syz.3.5102/31711: [ 1506.303204][ T31] 2 locks held by syz-executor/31949: [ 1506.323673][ T31] #0: ffff88804f5fc0d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1506.365586][ T31] #1: ffffffff8ec61de0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1506.395685][ T31] 2 locks held by syz.7.5161/32165: [ 1506.413497][ T31] #0: ffff88802c14a0d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1506.449464][ T31] #1: ffffffff8ec61de0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1506.489629][ T31] 2 locks held by syz.6.5269/307: [ 1506.508281][ T31] #0: ffffffff906bea48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1506.535555][ T31] #1: ffffffff8ec61de0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1506.570140][ T31] 1 lock held by cmp/1174: [ 1506.586901][ T31] [ 1506.631562][ T31] ============================================= [ 1506.631562][ T31] [ 1506.665133][ T31] NMI backtrace for cpu 0 [ 1506.665150][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1506.665173][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1506.665179][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1506.665189][ T31] Call Trace: [ 1506.665194][ T31] [ 1506.665200][ T31] dump_stack_lvl+0x100/0x190 [ 1506.665222][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1506.665241][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1506.665260][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1506.665282][ T31] sys_info+0x141/0x190 [ 1506.665297][ T31] watchdog+0xcb1/0x1030 [ 1506.665323][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1506.665345][ T31] ? __pfx_watchdog+0x10/0x10 [ 1506.665366][ T31] ? __kthread_parkme+0x18c/0x230 [ 1506.665389][ T31] ? kthread+0x13a/0x450 [ 1506.665401][ T31] ? __pfx_watchdog+0x10/0x10 [ 1506.665421][ T31] kthread+0x370/0x450 [ 1506.665434][ T31] ? __pfx_kthread+0x10/0x10 [ 1506.665449][ T31] ret_from_fork+0x72b/0xd50 [ 1506.665466][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1506.665484][ T31] ? __switch_to+0x800/0x1100 [ 1506.665504][ T31] ? __switch_to_asm+0x39/0x70 [ 1506.665523][ T31] ? __pfx_kthread+0x10/0x10 [ 1506.665538][ T31] ret_from_fork_asm+0x1a/0x30 [ 1506.665566][ T31] [ 1507.079645][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1507.086515][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1507.097180][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1507.102351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1507.112388][ T31] Call Trace: [ 1507.115650][ T31] [ 1507.118562][ T31] dump_stack_lvl+0x100/0x190 [ 1507.123229][ T31] vpanic+0x552/0x970 [ 1507.127192][ T31] ? __pfx_vpanic+0x10/0x10 [ 1507.131675][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1507.137814][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1507.143956][ T31] panic+0xd1/0xe0 [ 1507.147659][ T31] ? __pfx_panic+0x10/0x10 [ 1507.152059][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1507.158200][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1507.164348][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1507.170485][ T31] ? watchdog.cold+0x1ec/0x234 [ 1507.175231][ T31] ? watchdog+0xcc1/0x1030 [ 1507.179635][ T31] watchdog.cold+0x1fd/0x234 [ 1507.184212][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1507.190006][ T31] ? __pfx_watchdog+0x10/0x10 [ 1507.194678][ T31] ? __kthread_parkme+0x18c/0x230 [ 1507.199697][ T31] ? kthread+0x13a/0x450 [ 1507.203958][ T31] ? __pfx_watchdog+0x10/0x10 [ 1507.208642][ T31] kthread+0x370/0x450 [ 1507.212712][ T31] ? __pfx_kthread+0x10/0x10 [ 1507.217284][ T31] ret_from_fork+0x72b/0xd50 [ 1507.221861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.226982][ T31] ? __switch_to+0x800/0x1100 [ 1507.231655][ T31] ? __switch_to_asm+0x39/0x70 [ 1507.236435][ T31] ? __pfx_kthread+0x10/0x10 [ 1507.241008][ T31] ret_from_fork_asm+0x1a/0x30 [ 1507.245776][ T31] [ 1507.248929][ T31] Kernel Offset: disabled [ 1507.253246][ T31] Rebooting in 86400 seconds..