last executing test programs: 4m47.625382825s ago: executing program 32 (id=164): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x0) getcwd$auto(&(0x7f0000000000)='\x00', 0xc0000000000000) unshare$auto(0x40000080) timerfd_create$auto(0x7, 0xf) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="a7fe8a000800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1d4}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 3m13.454230006s ago: executing program 2 (id=584): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) io_uring_setup$auto(0x20, 0x0) r0 = socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttyS0\x00', 0xa102, 0x0) socketpair$auto(0x10000005, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0xfffffffc) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3m11.706503966s ago: executing program 2 (id=591): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = setfsuid$auto(0xee01) setresuid$auto(0x0, r1, 0x0) setfsuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40891}, 0x4) madvise$auto(0x1, 0xf, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x6801, 0x0) mmap$auto(0x2, 0x202, 0xe1, 0xeb1, 0x401, 0x4000000000000003) prctl$auto(0x200003b, 0x200000200800000, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x400000b74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000024c0)=""/4112, 0x1010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.2/usb13/power/wakeup_max_time_ms\x00', 0xc8206, 0x0) mmap$auto(0x0, 0x5, 0x10001, 0x40eb1, 0x401, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) 3m9.738088416s ago: executing program 2 (id=595): r0 = open(&(0x7f0000000540)='./file0\x00', 0x641c0, 0xae) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) getsockopt$auto(r5, 0x0, 0x4, 0x0, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r6 = socket(0xa, 0x2, 0x88) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) 3m9.11220367s ago: executing program 2 (id=597): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @rand_addr=0x64010102}, 0xc) shutdown$auto(0x200000003, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) connect$auto(0x3, &(0x7f0000000080)=@can={0x1d, r1}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000) setrlimit$auto(0xb, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0) read$auto_proc_sessionid_operations_base(r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = socket(0xa, 0x2, 0x73) sendto$auto(r3, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) syz_genetlink_get_family_id$auto_l2tp(0x0, r3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r4, 0x4c82, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, r5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/hid/drivers/hid-retrode/bind\x00', 0x32000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) r6 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r6, 0x10f, 0x83, 0x0, 0x0) 3m5.858281083s ago: executing program 2 (id=603): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x10048080) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m5.621692282s ago: executing program 2 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40400c0) 2m50.513809032s ago: executing program 33 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40400c0) 2m40.501767601s ago: executing program 4 (id=733): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x8, 0x1d9) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) 2m40.349355414s ago: executing program 4 (id=735): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x3b65, 0x0) io_uring_setup$auto(0x4e61, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c8001, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x5ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f251561d4992f727f0000000000000078e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) (async) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897071b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x20028c, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) (async) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) sendfile$auto(r1, r1, 0x0, 0x7) (async) socket(0x8, 0x802, 0xe) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon28\x00', 0x20000, 0x0) 2m39.936635938s ago: executing program 4 (id=739): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0xc) 2m39.794585384s ago: executing program 4 (id=741): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x2, 0x3, 0xa) getsockopt$auto(r2, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa5tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100000a3d9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x5) (async) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x7ffc) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) prctl$auto(0x1000000003b, 0x200000000000, 0x4, 0x5, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000042}, 0x24048084) (async) madvise$auto(0x0, 0x200007, 0x19) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000540)=@bpf_attr_1={0xffffffffffffffff, 0x1, @value, 0x7fffffff}, 0xbebd4e73) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) (async) pread64$auto(r5, 0x0, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_open$auto(&(0x7f0000000600)='\n2g\xb7\xfdF\xf0\xf5:\x8fV\x980\xb0T$`5R8\x8f\xb3\xcb??.\x85\nc\xbdp\xdc\xe6\xbb\n\x89\xbc\x97\xb4Z|\x02\x18\x80\x14\xd11\x98\x1a\x1d\x96\xf7\xfd\xfdWX0\xd2\xd5\xadH\x92\xd6h@u\xfe\xe0\x85\xcau\xc6pE#c0\x9c\x97#\xca\x19\x97\t\x9b7\xc0\x00F\x1e\xd5\x10\xb1\xb8]WCn\xacIi\x01\xdf\xba\xd3\xd5\xe1%\x82p\xb5$\xaa\x86k\xfb\xb2\xf1\x0f\x86\x16Qq\xd7\x1b\xdc\x93m\x18\xa1#\xe7G\v\xd5\xa5\x92\xab\xdcn\x89\xb05\x7fx\a\xcb\'/\x90J\xc1^\x96Q\x98\xf7\x06\xac\x9f\x1f\x1dzT\x12\xd8\xfa\xf7n\xab0\x9aY}D\xfa\n\xf7\x95\xd0?P\xd7\xe0\x18\b\xf7O=Bz\\tN', 0x4, 0x9, 0x0) 2m36.543886678s ago: executing program 4 (id=748): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)="ff03") r1 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)={0x0, 0x81, 0x5b, 0x4, 0x0, 0x4000006, 0x401, 0x5, @number_of_packets=0x86c9, 0x9, 0x476, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') listmount$auto(&(0x7f0000000100)={0x20, @inferred=r1, 0x8000000000, 0xfffffffffffffff7}, 0x0, 0x0, 0x1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) setfsuid$auto(0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) lremovexattr$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f00000001c0)='\'\x00') r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080), 0x0) 2m36.121049621s ago: executing program 3 (id=752): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) r0 = fsopen$auto(0x0, 0x1) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000b40)='7\x00\\\xef\xf9\xc2G &\x9bF\xa0\x04|', 0x80000000) sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, 0x0, 0x40000) bpf$auto(0xa, 0x0, 0x7fff) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) writev$auto(r2, &(0x7f00000002c0)={0x0, 0x5}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx2\x00', 0x202041, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0xb, 0xc, 0x1000, 0x0) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r3, 0x0, 0xc3) 2m36.069163688s ago: executing program 4 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000100)=""/126, 0x7e) 2m35.504411698s ago: executing program 3 (id=755): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000002c0), 0xcb}, 0x6, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) mlockall$auto(0xffffffff) 2m34.354565351s ago: executing program 3 (id=762): sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fddbdf250d0000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000180)='\x00', 0x3, 0x8) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x100000001, 0x2, 0x9) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) io_cancel$auto(0x80, &(0x7f0000000080)={0x157, 0xfe0, 0x0, 0x62, 0x80, r3, 0x8d11, 0x9, 0xfffffffffffffff2, 0x0, 0x7fffffff, r3}, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x106) setuid$auto(0xe) sendmsg$auto_NBD_CMD_CONNECT(r4, 0x0, 0x20000000) setsockopt$auto(r4, 0x6, 0xd, 0x0, 0x6) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 2m33.989642228s ago: executing program 3 (id=765): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x2f2) (async) fdatasync$auto(r0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) (async) msync$auto(0x110c230000, 0x200001, 0x6) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto_BLKGETZONESZ(r3, 0x80041284, &(0x7f0000000080)=0x800) init_module$auto(0x0, 0xffff9, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) ioctl$auto_SOUND_PCM_READ_FILTER(r3, 0x80045007, &(0x7f00000003c0)="6900204fb63fe1462ee350e6e62e4e02f038b90ccbfdd3382717512741e5590d0141d092b80f488eb8f0ec6642318418b4a0136364bd1a3155ce2d818f4f9e685b4dc9d2f62c992de7eb87f4e9638309db5bd8644398f1bb97a6cae5eeab7bc18dadcca3ffd0a4d89583702392ee6da8b1a3d217e22b239556cdbb7fccc7e38499145c34488f40c106ad6aa06014801b44812ace2939b8bccadc613c5bd1f9c8309726a3b0d519718a023f0b6f6db27c99014870e3c2aca6297e628bbe7ec5ebb22fddb386269bb720eedd0c7b98e29a367b896cbe5c029db0ac1ca4200cbc83456792d0843e5e34ddf3ed47da76f939dc7f34832f8d04187a02e68f33657f5d49669f86c0cfdfca1c50aa9179570790e17627e91c3b149025748c316867372cc4d4e2ca4ef625c592980bcab224a357407c5d1e68f539f8c44b099b905317d973cc438408df9e817a164fb2e4ce9ac212212cc685ac1a2132fe278b453d8cde0994243b1c442ef93285b4c0ccb06b097a8dde714227a98d8ada2b0fda2d2598") close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x7, &(0x7f0000000180)="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") (async) pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m31.907628879s ago: executing program 3 (id=769): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0xffffffff}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xa2cada09c050b3bb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, 0x0, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) sendmsg$auto_NL80211_CMD_GET_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41811}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES16=r5, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000000) write$auto(r4, &(0x7f0000000280)='\xab\x1d\xd9\x98EXP', 0x18000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x7fffffe, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x8, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0x10d}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, 0x0, 0x100000a3d7) 2m28.154453464s ago: executing program 3 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='\x00', 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKRAGET(r4, 0x1263, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b3d2abd7000fcdbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="0a000000000000008000000000000000ffffffff"], 0x30}}, 0x80) 2m20.513463146s ago: executing program 34 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000100)=""/126, 0x7e) 2m12.842693553s ago: executing program 35 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='\x00', 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKRAGET(r4, 0x1263, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b3d2abd7000fcdbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="0a000000000000008000000000000000ffffffff"], 0x30}}, 0x80) 1m37.955236558s ago: executing program 5 (id=969): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = getpid() r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sg1\x00', 0x200, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000540)={"0eae16f5b531a30151b9755ab6a0d1760d18d18f65936bd72c91f29baf7658a5", 0x8000, 0x800, 0x6, 0xa9, 0xffffffffffff05d6, r0}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0xc401, 0x0) pread64$auto(r2, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x8) ioctl$auto_KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x21c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NCSI_ATTR_DATA={0x1fe, 0x5, "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"}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}]}, 0x21c}}, 0x2) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0xfffffffffffffffe) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xffd8) 1m37.717388333s ago: executing program 5 (id=971): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) read$auto(r1, &(0x7f0000000100)='\t\x00\x00\x00', 0x8) r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x2) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000280)="925370c31a5f77e174abb2f06a05bb19f93c34f5a52b7d910b10149ee27402429dfd86ba0cb516784463798136b4b48d51aa7cc81e3cbaed59a7b68813a4dd62a88aa5107a52e1d08d67c561220a0758ea3e8921fec103635eceaef9d1b76da3d001282fc38fabb6842c402aa5cfd944e171464e63aa7ee5c1717d98de4efbb9b0088f24b1b9ab52b539a5cef5b46d8156cbe14762d5628d17715a5129eb5bc74d7fb0fb8a4d2034bebbb2d31a9166fdac2d378218a9496447a1dfe6506906de84c4409837", 0xc5) r3 = open(0x0, 0x22240, 0x154) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) ioctl$auto_BLKTRACESETUP2(r3, 0xc0481273, &(0x7f0000000040)={"2548a956e7f8e16e4dec820c261e85c6cf67bc3c74c6f644f535e2f8a1e45bbc", 0x7fff, 0xadcb, 0x8, 0x9, 0xc8}) bpf$auto(0x33, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x2, 0x2, 0x8, 0x4, r1, 0x8, "2a36c83ce63f00a18b5f2600", r0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x205}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 1m37.482448078s ago: executing program 5 (id=974): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169001, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) (async) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff3d, &(0x7f0000000140)={0x0}}, 0x84) (async, rerun: 64) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x1, 0x9, 0x3, 0x200, 0x6, 0xe]}, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x10a, 0x0, 0x9, 0x3fb}, 0x4}, 0x200, 0x0) (async, rerun: 64) ioctl$auto(r1, 0xc0285627, r2) (async, rerun: 64) ioctl$auto(r0, 0xfffffbff, r0) 1m36.184123127s ago: executing program 5 (id=976): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(r1, 0x0, 0xfffffdf1) fsetxattr$auto(r1, &(0x7f0000000000)=':\xbf+,\x8a}\x00', 0x0, 0x7bf, 0x1) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000004400), r0) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8850}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x4000000000674, 0x4000a, 0xdc, 0x9b72, 0x7, 0x28000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40, 0x0) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) socket(0x1e, 0xa, 0x1) 1m35.140556883s ago: executing program 5 (id=981): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-256kB/stats/anon_fault_fallback_charge\x00', 0x60c00, 0x0) read$auto(r0, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(r1, 0xffffffffffffffff, 0x1000001) mmap$auto(0x0, 0x2020006, 0x5, 0xeb1, r1, 0x8000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker\x00', 0x341, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffdfc, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4005) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) getuid() sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000002200)=ANY=[], 0x1d90}, 0x1, 0x0, 0x0, 0x80}, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x238d, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x2000000000000008, 0x192a}, 0xfff}, 0x8, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) mmap$auto(0x0, 0x202000b, 0x3, 0x2000f8, 0xfffffffffffffffa, 0x8000) r4 = socket(0x28, 0x1, 0x0) getsockopt$auto(r4, 0x28, 0x2, 0x0, 0x0) 1m34.212670789s ago: executing program 5 (id=983): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x42, 0x800000001, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xf, 0x0) io_uring_register$auto(0x2, 0x13, 0x0, 0x2) mmap$auto(0x1000000000000001, 0x4, 0x74ee, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) write$auto(0x3, 0x0, 0x5c5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) getpid() openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) 1m32.493521306s ago: executing program 6 (id=989): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x800000, 0x202000d, 0x4, 0x15, r0, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) (async) connect$auto(0x3, &(0x7f0000000040)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r2 = socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) bind$auto(r2, 0x0, 0xfffffffb) (async) getsockopt$auto_SO_RCVMARK(r3, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) 1m31.431860691s ago: executing program 6 (id=990): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r2, 0x4008bc0d, &(0x7f0000000080)={0x8}) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x0, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m30.293144904s ago: executing program 6 (id=993): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fanotify_init$auto(0x5, 0x0) r1 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) read$auto(0x3, 0x0, 0x87f) close_range$auto(0x2, r1, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r2, 0x2, 0x9193) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) lstat$auto(0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1m30.098836801s ago: executing program 6 (id=995): openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x16b8c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fe"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 1m29.905086249s ago: executing program 6 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) (async) mmap$auto(0x0, 0x8, 0x802, 0xc9e, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x2, 0x3, 0xa) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf22010000002500090000000001000039d0c4058eac0405576c2cd59ffc84b3098afa677190f34d1790"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r4 = socket(0x10, 0x2, 0x0) (async) madvise$auto(0x4, 0x4, 0x81) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004812}, 0x4000800) (async, rerun: 64) socket(0x2, 0x3, 0x100) (rerun: 64) socket(0x10, 0x2, 0x0) r5 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x565802, 0x0) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x7, r5, 0x3, 0x287) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x4004) getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x6, 0x15, &(0x7f0000000180)=']/\'-&\x00', &(0x7f00000001c0)=0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x8) 1m29.278265764s ago: executing program 6 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) setsockopt$auto_SO_REUSEADDR(r0, 0x1, 0x2, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/write_expire\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) socket(0x11, 0x3, 0x2) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x6c5679fc7dece1a9, 0x70bd26, 0x25dedbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd5/queue/iosched/write_expire\x00', 0x40004, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000e00)=""/4096, 0x1000) madvise$auto(0x0, 0x1010001, 0x100000003) 1m19.145060185s ago: executing program 36 (id=983): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x42, 0x800000001, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xf, 0x0) io_uring_register$auto(0x2, 0x13, 0x0, 0x2) mmap$auto(0x1000000000000001, 0x4, 0x74ee, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) write$auto(0x3, 0x0, 0x5c5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) getpid() openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) 1m13.655535072s ago: executing program 37 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) setsockopt$auto_SO_REUSEADDR(r0, 0x1, 0x2, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/write_expire\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) socket(0x11, 0x3, 0x2) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x6c5679fc7dece1a9, 0x70bd26, 0x25dedbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd5/queue/iosched/write_expire\x00', 0x40004, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000e00)=""/4096, 0x1000) madvise$auto(0x0, 0x1010001, 0x100000003) 37.460439461s ago: executing program 7 (id=1195): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000700)=""/4096, 0x1000) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0xfffffffffffff4e0) (async) ioctl$auto(0x3, 0x40044900, 0xfffffffffffff4e0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x2) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0xffff, 0x1e, &(0x7f0000000040)='\xc4.)^\x00', &(0x7f0000000080)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) (async) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000080)={0x28, r5, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0x14, 0x138, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAC={0xb, 0x6, "b8e4b6f321dc9e"}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000f6", @ANYRES16=r5, @ANYBLOB="00032cbd7000fcdbdf25270000003200ac00a5f153232527d1c0b75b549c0789497a3635138570b532a378b2340b202ac1713bf8d3e89f1e821015b02ba545710000050074000200000005002001fb00000004004100"], 0x5c}, 0x1, 0x0, 0x0, 0x4044041}, 0x900) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) 34.392494364s ago: executing program 7 (id=1200): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x11, 0x401, 0x2) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x58) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf25030000000600020025000000060001000104000006000100ffff0000220002002f7379732f6b65726e656c2f74726163696e672f7365745f6576656e74000000fe4ce565a378b78126fdaa17497c3aba8efa4c2b25a4d2903be14998b9ded2f1c94fcae580e6abfe614ffcf0e972cd80d3de22"], 0x50}}, 0x40400d0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x26, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x2, &(0x7f00000001c0)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x2, 0x8000, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x9, 0x100, 0x4000083, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000002}}) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x5393, r2) 33.374458419s ago: executing program 7 (id=1203): timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f00000002c0)={@sival_ptr=0x0, @inferred, 0xe9, @_sigev_thread={0x0, &(0x7f0000000240)="1bb11e619ea52fa171abe96b01811f84a9ecf9181717293016a828df3ad84f8b52"}}, 0x0) r0 = memfd_secret$auto(0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) syz_clone3(&(0x7f0000000400)={0x102001000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x8}, &(0x7f0000000300)=""/223, 0xdf, &(0x7f0000000180)=""/4, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r0}}, 0x58) 32.10957417s ago: executing program 7 (id=1208): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) shutdown$auto(r0, 0x9) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0xdb}) 30.916794649s ago: executing program 7 (id=1213): mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) syslog$auto(0x4, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) mmap$auto(0x9972, 0x7d, 0x4000000000df, 0x10, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fb\x00', 0x100, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) pread64$auto(r1, 0x0, 0x40000000006, 0x3) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0xa0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 30.600010326s ago: executing program 7 (id=1214): r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) semctl$auto(0x1, 0x2, 0x2, 0xf00) write$auto(r1, 0x0, 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) mmap$auto(0x2000000, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) 27.98931557s ago: executing program 0 (id=1226): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setgroups$auto(0xe32, 0x0) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x43c100, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) close_range$auto(r0, r1, 0x7) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d0}, 0x800) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x22282, 0x0) 27.74699004s ago: executing program 0 (id=1227): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20443, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa0102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/remove\x00', 0x2801, 0x0) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 27.580452817s ago: executing program 0 (id=1229): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x41000000000005) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) arch_prctl$auto(0x5003, 0x800000000800) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdeb) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x73, 0x7, &(0x7f0000000180)='SEG\xa5\x00\x04\x9a\xfd\x80W\n\x9f\x9c\xe3\xc7qo\x16\xea\xda\x153\xb2\x1d1\x86\xa6C\\.\xeeJ6\x13D\x86\xd9\xb7yYGw\x8c\x1c\x85~\xdd\x00`\xecq\x9b\xbc~&\xc1F\x92\x13\xd7\xd1\xda\xfa5\xa5\x8d\x88\x0f\xc9\n[\xd4A\x8a\x19\xa2\x12\xd0\x9f\xeb\xa9\xe3$\xa1\xb1e\x89\x82\xa4\t\xab\xaf\xe5\xd0R\x83\x9e<(W\r\x1d~V\x99\xce\xf6\x9c\xe5\xc0\x83\xe0\x9et\xb1\b\r\x83\xe1\x83\t\xaa-[j\x99\x9e\"\x97\x95WfV\xdf\xe9\xb2\xc5\xbf\xfb\xd6\'\b8\xf8iZ,7J\xb6\x1c\xfb\xd7\xb6\x98\x7fv\xac\xe8\xeb\x81,\xa7\xc9@\x0f\xa9V\xce\xc5\x8b\xb03j\xc5]\xb1\'\x9c\xed\x8a$!^\x8b\x9d\x8e\x90\xa6\x03\xd5\x03\xfa*\xf5\n\xe2\xdfe\xe5\x14$\x17\xde\xa7:5\xd2\\\xb0\xcc^a\x11\xe4\xf7\xcd7\x92\xe6X\x7fV8\xdd\xd5\xb3\xdf\x93\xfcv\xe3\xfd\xc0#*K\xe6{\x8f\xd3\xa7\v\xf8|\xae55\xed\xe4\x87\xfb\xcaD\n\x83\x96Qc\r\x19D\xe7\xff\x1c\x17\x1ai\x9f\\L\\\x10U\x00\xd0:\xc3\t8\xc8_\x1b\x14\xe3m\xb9E\x98\x00\\\x1bZa', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 26.563989878s ago: executing program 0 (id=1232): pipe2$auto(0x0, 0x0) r0 = open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP_OLD(r0, 0x5421, &(0x7f0000000100)="3e9c7eaee5fafe68678b7f5e1648142b11c29c62ff58898ad47401e20a80535bbdf95a24c3c887c5311dc635af40547b5b0f67de14c757d510f892b993") socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=0xfffffffe, 0x3}) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) acct$auto(&(0x7f00000001c0)='/dev/vhci\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 22.957997739s ago: executing program 0 (id=1243): r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r2 = semctl$auto(0x1, 0x2, 0x2, 0xf00) write$auto(r1, 0x0, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x24, 0x0, 0x8) ptrace$auto_PTRACE_KILL(0x8, r2, 0x9, 0x5) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) r3 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r3}, 0x92) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb90e9a6a7cb7d163}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x590, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x564, 0x7f, "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"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x7}}]}, 0x590}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000001100)={0x1188, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_OBSS_PD={0x1030, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6, 0x5, "71a9"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x1004, 0x5, "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"}]}, @NL80211_ATTR_AUTH_DATA={0x4e, 0x9c, "3558294ca47f010ce6eff451155678185aaaa299401fface1b63f92e8b3d86c1d40ee3d95ae705f23b3ed5f272f3aa783ed3fa2a57d85358e169c523e159c6395ef3a964f900c4867e6e"}, @NL80211_ATTR_FILS_ERP_REALM={0x2b, 0xfa, "5522b91395bf4dd4c1c417c6856f86781ac94b49d5a89e5ef54575ac88ea3694f08e1406f5ec64"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xc6, 0xba, "888bda924f40daa47183c852331581eb810c692cd1a8427554dd75655a76741c9b2aa9ee988a8a61c302b3e4b6a79c952073673e0e0d5ae442047f3df38a4ebab88b0102810eddf0164627a2be60122c6b60ae0658c357457b398e3dffcadba7bc88da2627b6f68cf6452a0d98e56a5a690df22d3e936f209e30ead167028b679c93122eea643b5e1d0160ac671015e75f71e6a706e9d666389e40b781bbf7293f85c52faff17738860271efd6b55102aa75f6817f60a0b83932170b1b6a74563f75"}]}, 0x1188}, 0x1, 0x0, 0x0, 0x8000}, 0x40000810) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0xb4, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x9e, 0xcd, "7e7b0a6d6aa210576313b08cfdb9564f98efb77d87cbaf00d2db076ad9f6cfc208515ad4e23339d79fe0cfcc0ebc3b9e918934906fe9ae0c85f050aa25861cc9fd1650c5ed4cbaeb6ce75c4d982aba1fad16d55b208b6616dd2d423d2559084ccd049cf0ce102ef3306d809b604e66f7cd720b042252231ee50118ee35cff18f20f7badef37d232a2898ba3e537f8c90f4a15400d20d261e48df"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0) sendmsg$auto_OVS_METER_CMD_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000028bd7000fddbdf2503000000537b5d110c00050004000000000000000c00050001000000180000800800080040000000a74a7d201dca29d2d633fa995aaa87bf0d0851339be1375f6334a0e2d7bd2252e04e5417cbef33763c3c7e0c72f4e159ed4c01e05789fef5b418d856793dd2269dc3c88c17ae"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x90) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) 22.165984653s ago: executing program 0 (id=1247): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) read$auto(0x3, 0x0, 0x1f40) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xd, 0xb1, 0x8001) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) socket(0x3, 0x3, 0x6) brk$auto(0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x20, 0x8000000}, 0xed7138c}, 0x6, 0x0) 21.891924221s ago: executing program 9 (id=1248): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) read$auto(0x3, 0x0, 0x87f) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r1, 0x2, 0x9193) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) lstat$auto(0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 20.930414062s ago: executing program 9 (id=1250): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) read$auto(r1, 0x0, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket(0x22, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x3d, 0x7, 0x64, 0x7}, 0x6b) sendfile$auto(r0, r3, 0x0, 0x1000200) mmap$auto(0x0, 0x5, 0x4000, 0xeb1, r3, 0x8001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, &(0x7f0000000040)) socket(0x2, 0x801, 0x106) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x1) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x460802, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:00.0/msi_bus\x00', 0x149b01, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) 20.173803177s ago: executing program 9 (id=1253): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0100f90200d1d093080c4d90900008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x7, 0x10000000000df, 0xeb2, 0x401, 0x80000000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) io_uring_setup$auto(0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000200)=""/36, 0xfd48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0x8140, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 19.998168783s ago: executing program 9 (id=1255): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x2, 0x4, 0x4cbd59) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xc) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r2, &(0x7f0000000040)=',,\x00', 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) socketpair$auto(0x3, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r3, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) 19.777271289s ago: executing program 9 (id=1257): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) read$auto_userio_fops_userio(r1, &(0x7f0000000100)=""/128, 0x80) r2 = socket(0x11, 0x80003, 0x300) close$auto(r1) name_to_handle_at$auto(r1, &(0x7f0000000240)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5Q\x1f\xff3O\xe67Y\xd0\xfe$\x1f\x82\x8e\x9d\xb2>\xf7\xa8#\xa7+\xaf\x18\x97\x7f\xe3N\x9a\xe1\x02o\xeb\x92\xfd\xd5\x9bU\xe0\xb5\xd2\x95\x92CY\xf9\x99Gi\xdb\xe0m\x0f\xddk\x83\x87\\\x03<\xc0kl\xf6s@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) mmap$auto(0x80000000, 0x7, 0xdf, 0x1009b70, r2, 0x8000) unshare$auto(0x40000080) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/dynamic_events\x00', 0x119041, 0x0) readv$auto(r4, &(0x7f0000000300)={&(0x7f0000000200)="9cb9c20d1370972301460a64ae38d4b0e95553260d07662d19776e3ad56727d5d5f1dcf5de2c67d7ce0ed1179ee91fe89b2a6e21fa642ac55cff9830519da1fa497de55e80f0508cf40aada63d68ecdf2b144cc76fdb35776ee583f20dc334d73eb649ed08272612cc4d355c39e7c87dc5bc5b408d44452242f1291e95e8ece06ebc77325f3064afc3441076a3de8f069af4a97057763b5e3aa57e0b5209b137b6c5a306eadc7d63e57a11407b9db7353793053c637b2c0348ae98bc621e689ab2be05e415b786f47406", 0x84c3}, 0x7) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/projid_map\x00', 0x14100, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1c, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, r5) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x8082, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48802, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x4, 0x2) socket(0x18, 0x5, 0x2) 6.547631872s ago: executing program 39 (id=1247): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) read$auto(0x3, 0x0, 0x1f40) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xd, 0xb1, 0x8001) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) socket(0x3, 0x3, 0x6) brk$auto(0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x20, 0x8000000}, 0xed7138c}, 0x6, 0x0) 5.474913203s ago: executing program 1 (id=1302): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x5, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6d87, 0x0, 0x7ffffffe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x7, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61722ccb678e0e2cba7194bc385b26d84c96723400de3b5aacff44f65a10b6c36a9a55945d88270da0f18327ed7c66498ace94f97e799732311e069e26edbb6db1b0ddede50878458b27f5e2fb6581"}, 0x202, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) socket(0x2, 0x1, 0x106) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x40440, 0x0) read$auto(r1, 0x0, 0x9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) r3 = socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8890) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x0, 0x13, 0x70bd2c, 0x25dfdbdd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x12e4, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x80000000}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x12c5, 0x124, 0x0, 0x1, [@generic="548921587921146f0df6f1555befdd2e26971854eefa639a106c58390575316b06752e8049fb425dfbffdda11ee8cfaa042decdf5589a844b8dc44b5e96e3a29d9ff20e78c556497edd73123ee01d5eb7b3368c5f286117f88ecc518310c765e3a878d00d77cf86b0fa6cf3a7e6450683ecfa29e97d294c8cb59677d0ede6bf12ac218277664c46ccf9ef99cccbf6e03297db66df97f936b982c13df4b000e6950812e333a46dc92f58c7a7fa2c54f8a76dc22f051eb204eed508f044ca2c8bfce1d6f8d3aee70f6a80dd71e5031311fbab24c29c7971f5993ccee8b1f3278b10497b91455aca89fd65d5a8df4e9261cde5a6e5be3d8a81fb3e8888a861efd04b9c1cafa0629c1002376c8b78180c2ddad057d10a21cd73889b1e9287470b20d0a6034153acc49306faa687d4f2351347296c17f404bca4cdaa427e46030ad67cd186cb3265fa66b36c1d58022affe13c57f31d30a29e0c9da4b4b192b4feb33d55482e88ade33f8044adef528440435ef7bb55c496db3e201fb8630e42678f531e1909a93c21d5930b889eec5b9651589c4cd3dda8d51146b07584d2a9da6160dcc1eff5c1fda0dc7db6cb87b03d11d463bed6b8064989bb82b2936e72ed03cb1d5f444d83fb8d7404968662f783dc2389c260afe22e1c69dce922a8416a36b23d20798e632522e1b400c8e69cce53778401329aaf82ede972c8589f136bfc9a7a5fdcf6306ad3fc1b9c64869ea3de6075aeb6b98ca09c659e130c1578ca7098608eff47e703154b3899cbbad5652b7a6a58a4d4a0ed7395d79fd2100b4812919f801ab433f521e8f7ae9f86510b54c486f9414f4bd4741975d09030c59ce529ce6d7abf51f98edc0cca0a609087e11cbeea970e2ee7844645d83e46a59b00bab1dfbff588bcaaee1de9da418b4d07d221ec0e5233c06d535746d735dffe33f15aaac5a923e243eec9c2a464eff882149769211856d9f63fa8df49ec5f1620ca4d43bc5e879d0a8418765a79b38970e0c53748b166d078430a7c676459b69678551c39c6ec38fb164966a5fe9f219cde8da3f0018799deb5a2e20578f783635b8a6734e6f868a236a12ab274f41c135a6c9964eba84549a8f51bd13ea32a90c0376e7265a08c1b1d4310080f388ac61bcd232b78c9dc9c421a214bbee2607574f60b9dffaf3adae97b706f10a26d060838753e584eb5f05071804701763156f0e126a9b3db5be6ab860158a84ce367c571af67ac8cd57229ea9f51516bb1688720003e43d2b1ee8efcddbd308bc8e22a16d9d3c4a22d8a55209c3fed4c51c9d958fd2e645caa83d960af590235b13a8be477eb6837208ff8a37b6569539335e76cc5e1defb966a3aed9821ce3ca2751875a3084329b5bd1a3c7b84acd142dc8ef9ded074e33c6373cba968c30abb0f32c528e9e2abfd8fab8bde395fc9009279907d99c1ff38765c7c7e79b5b60957d71a611f4b20822424e934993561f7e720a9a0d6e8e735b95e4f7b7ed8b27f5e1a82a81e6483bce5e80675b849797f4cf34c36b18e9decce4052d307d88d35e7f97628a64d728d145db1c41f827c9f078058057b6ec312a20becd606e5a55491dc9f97d0265477c174ce8216c172bd8bc85470e75eaf9220bab3a65a36b6973bd2dfc4e4ef215657b61eceedb888ae5a81aa318e07b9c4168203c01290f8a12640d2aa3c6a48c0c409aa00e01e9f1adb08f96f273d51c60c9cc2bdebf5f134bff4d1f3d410b68fdcb0132bdec7693d5d36e82598910fd493db0416cd0fe9e9150e7b08211445509fcacaa2ef38c13eac69dd8ac20dd4ffdc496e303329585b1539e2c195e0abf5681f2bb66ac8dbd6c3951ac6bfa6d82b063cab43be4cced2d8bc57e2624dc96f78c3cab6efd88f58f7a326cc6efa9d8ec33f4ebc74577b164dda973c3849287ca27122585c0f5bf0917260bb1faeb624b3c578644903ae9fe96429bcf113b41ccba727ce04ba103614d93b020d70b26f851494c6915f5c38c948fb7ff9a13b4be43adc0f654c973c0c31de7db4841a0c4fc3267def80159ea69306e899dcbdaa2488124ac198c25fa207677c5e17c62f7c5a0af2b92d01f6e05ca8611ba412c3eff73c240f57b759cbd0050047a6c2951ec98dc05c5a805b677400cbfa4abe9a29c46744041961a3b27dfb996c7dcec929f06a23a514e9fbca90d1c8f3093e54f88fc4d39996cc8e4271ffc4909187062055b74d74a77b50ff49482319d95c954542b82ff09f8f9b61d28b3867458a3ce3347d3379ea839e9bbccc10bf1ae81d2a5f0d880c4d580d9fee58310e37719ec91eef9c1e1218b3c7abd380063020da59acfa11a9aafb85b0931500a5e8596d6b1b2296a6c7396e50a7714966813da8579b9a4d101acea93c057facfe979df99c371de3e7f2827f35826a84bb37113e59f18736006c2f2d1f0ea872575cff6fb6115e193066ed642c31af37a2b28f97a43aec21c42bea8dcf34dd8fbfcb46337ea3ad965ac5eef32c9ba4e9ef690d1a4b2d986b78e4f8eadd11b59ec3a40ed51c2d9489d50cca87f4851837f3a54e82c2d4015a42343fc4f4b40008f644cf3ae1cb3da0c98adb8c831475c3d5472153b643718614edd4d887e76ed0b429adf0605969753fea78a4a9dcdaac4cbc9619f7bde75c6c3b293ff879479e1e841ac456989f40b164a87d3772afee21aa2ce9bde4c55a64e9e8ec48e2729326ee6b3706f4f0a85e688dd4321885774e7f47c23135c2027f261021018773e043f41000d796480ea48b310c73d341b7e62704306abe8f79e333e323f1964d7a23615bd4f3d265d049aefc188148cba9960b69bb16ddef62d340ad023d6743acb8552214ac39017d712064b3c6baa4c730eb072a7e5aa302d2f1f1fb350b19597df9655ced71ab77eb9e73af8dd3fa4f6b815e335d3e786612a75c6c9f5c01764fc9d4baecddd6ba87443b10219d251bbd1918af222def4d0880e4976c8824cd7aa7dc302d4413dde0a5393c5c98a3591b72b3d7c4c79d6d9ea19e2b12a576472a0b75b01a61d18c715626e3c0da323a975cd913542b6c38e77de2eaff3747307fa8a05d3f653249f1e04ad82581159c7c8373a089bf24f137ee03ffb6bd40fcbcd8ac3b06be694bfcf2c4bbdddd98230b3c113a6fe52e544bfc88c0eadc044fef67b5cd4f4a5a9d8bfbf7badfc52643ba544ba581fde40f7b3534acab96496181ef78d4d63974862a0cbefda9aeb0ba3df5fd79a0468611983fd990c94667a35ecee493519c3e9b056571277d9f8fd4908f37cf4e74a7abd41abb92ae3646519c5af10454bb47b8dd000b889e3e93a438df5188e5c8ff9ae661d20a44ff2ce4d6f34c9752dfb44a02e77411330172043687c2275db5af8cb2d990065e0227770d2a47d0056951727a593982b02aed69fc689e48941bbc13c0a12b2ba7d0d3287f5687caee81dc35c3c30a760f74fb2c7790fc6690b0fb4727d6c8c2cf8461d9b61a83d409e33464dbb082addc91699da942e2a3e8fe0ad5771622cd25157bb6a7260077d2ff25dfb8f479c0439aba25fa0c4173b214a4cf8774d840ad42685d22158b42aa82a64268091976b5311d87e0d9b1ba0a984be3bc4a2dc0852d9ef4be4e06d51ff8453aacc94c4d740afe4dca52ff4f51e10621dee88962bdbb19b345ec642b91b444e15ad0234cdb79dfdc5d061607e2342e1af97a0238efe1eb5bf95ae3fdc1f73660cb4b15a8b4f9b65ddfee1dcae205d2873bf4d2a91c5c6ae00d9bd4af99093d9b2b26891dda485183086b5da50e7dcf7429c6b5c8deb1a13d23d1137b166ad633680bb14cc8ccec80419805b9f8ddded4b6a86a66fe343275c453c129aaa48edbfc5103155b62ed8d4c69f258aba750c30669eba55342d893992f030d05ca7a7c2bae09f39757400303803954934f281d5dabdf68f78acb39ceaa5980e8e45e96bfc25cfdd1b2ded4d095c60501df73de206bf8c034062dca608d04c86873e448e671060bae1d409a20cf7866ba4e4c9137259a3729785addb580104e99bc8e821dc6a35937e40ec4078191e62975c3c0268f7ccee314db61bbd5daec4156ca5827b877bbe7a09c1941f6d484345808de9094ebdeef1c9d151cb4816f572090d7ecad1c4048ac20fb7f456b231440b511a5e6b9275420a9edddf96fb25056269c74254f54076265da0c855a09341605bca53a05f64be5b1c3739e2f6889ad17d1bc3ab99d78603868fd967b2eef5a3141b58c57512782e9faa79439f7b1fd19cb1c4fec9bd040bcd4fc37779718b1de4b1d56d9a1d47a8fcf699b5b27e67f74ebd05811eeddf2a742dacb10fa31d43b766d78951c82338c94ff6479cff836344f9eb319d5519d93d71d4320fdb673495b6f093e2b1119c3f7b021375b65d02df585a0f5ddc1d39e44ea06f3d2533e8c05f6f60740ab903120d992c43c68cfb82bc94ff6320ff0accc4b7d8fe5848d4a76a24578fcd986954a5748cbf47c8982b597dce25fe9ed6a67681bf3d3405d426fc0760fda0b526f66e7d360fcd769320fe1c933949133fcf6f3e40151e67e612016866e3f35e2be5f34e0731c007a76c0f7bae2bafff23381b18159116e6c3443d69ee3d5e9d3504604c23614381ce56c783eaa31a97905e2560539387571713381d208bb5d717de0a61fb29e01fef54656de93927ec0fac1577f4543f5b5443b943acf101310687b96abe4bbaec0a027d7709df08f7fb0d8fee1bd256748f94aa97a687d183a313d06204036b830ff7509690cd572612cd777f985da9a9dfd7ba16519fd589d1d6cff4387dcb6b1d53bd853e3d8f38a6511c6afa7d61bdcade897c2002a383dbb0d495035e85968c620f7a841171a2a10c609dfaf7642c92ab9eb22140bc844cb1fe7886a8d9fceef602663cf37ce0a1666f879b98a729b29589f5e9816a97ca5b8dcded042a8a0c688e88e4255dfd20c00561974b77419491765e399c1d78d07504632f0a0420f4420e0f2df2c721adecf8b6fe55a54ed2e9b533165fe524366e3dbc5b7998eac1de568d136102db35b7a660028f6a407ab9a705cd4ef7820847e5f86e7dee10d8700664dd837805b79560211cac415e01255a43ed1c573697a586d38d96f228104158a860638bdc51f3d647dc768f8967c0ccbd31ad14ff2309662c3116c4a0f89cdd3b353e7e00fdfe828004dc9b0e23842b46d60760c801f5476307fa00c401c3cabb19761c7cc04d8407a4dfc6b92c4353a35c36230ee11d0f7412b155660cea06ad10fd5ef6699a516eb5acdbc1bd4e6562db47ac7ff3af009ccb6224a2ac6e298959098074648e1365cc454dff32768de518b1bdc751c5349220df140f6cee0f4483383bf31f47f6c3a16410d847f1496f0dcea8ed181b6a2fc5cccb386ed005486c607225f4a6ad7ed17ae17ffdc247bd7106c02dc12806ae91c29711ac8a3556317c4d1abb2360fb8a8464b15416d9f5a13c21ad0a17e18482602e10b4c8a845e608b4e794bc06da6715ee093c495f7934163ba3bb5b54d270bc957eddcc2eb6f6589924ac39805b80707118e3b1e08a2d376f8487b76841ccbec9a511a0fb3526defe5cd591e362365d6e9059ab5a7042ebfabf8f90af890b0f62d5b07cd9e370b35d35db589ca8d1bc5a343dc601574ce6862fcd388f8aec8117f9157ad3a4a06b7f53d0101afb192c1fef8136eb4a8cfc8c5c24382316c451dcda6142f111f789535fd4b2632f89840ba6bb0aa1308540bc87a51dbf7c6c7a60ffcf4957866289af4a5487a306c86cf67dcef8c6efc9d6f73d", @generic="9a82fc05eee88b4b2be2ce04e0edc6899dfa09032ba222e86ef34ef51e90bf878f068ea558f4632507e7695dce9a03cee0da27ae00f969fbbea4cc2dea56d2796154ffffafe792d772db36f1705b61bb5761dafc103885d2fb04eedba26b9232eed86f814a88ea16bd0da53d2719e8d885ee0d", @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x60ff}, @typed={0x8, 0xea, 0x0, 0x0, @u32=0x6e}, @nested={0x18a, 0x28, 0x0, 0x1, [@nested={0x4, 0x117}, @generic="6c6c243cf01b468258acfbb0696fc4893127c33c0a85360986e81243326a5b0e06e8db5904f5c65ae22d773c387e", @typed={0x100, 0x1f, 0x0, 0x0, @binary="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"}, @generic="686e46132290babb12a7876c3cd37f99709ab6e1f7d5ddc561e0e2e785827d2e45ce03dba319aba43f4328328df44bd9e1ce653bc262ba603ac8dae84266f91579e08111ccda75b4d0a28326f20151d88178d997"]}, @generic="d4d6c68d5d00d90100050512a5d0670f5c8a6f5dc4e390a5eee0ed81749039ba57de2c9d9852b147c23ac2d59c731434ba4c35ddcd5617c094263a5a1dc7882440749dc6a7640674c42911c24011432add9d311a10a88ca3b9e0f6a1d656e33a1e6b0464a9423a3c131e5963a7ef53cbd9b680", @generic="1a29934f9253ad93bef53a514c17401fc493d495bb635727cff98ff20fa508a5962876d28c76cf473badf1bbb991cf0bba9333c95f8c8f35febb04105bbd67"]}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r5, 0x0) readahead$auto(r5, 0x2, 0x10001) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/irq_exits\x00', 0xaa042, 0x0) 5.372482586s ago: executing program 8 (id=1303): semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x7, &(0x7f0000000140)={0x7, 0x0, 0x70}, 0x1fc, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x121a01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) unshare$auto(0x40000080) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r2 = prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x7) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000000)={0x1, 0xfffa, 0x1, 0xfffffffffffffff9, 0x3}) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x5, 0x1, 0xd) remap_file_pages$auto(0x6a2c, 0xffd, 0x0, 0x40, 0x664) write$auto(r4, 0x0, 0x10007c) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffd) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r5, 0x0, 0x1f40) 4.771485194s ago: executing program 8 (id=1304): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x2, 0x4, 0x4cbd59) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xc) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r3, &(0x7f0000000040)=',,\x00', 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) socketpair$auto(0x3, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r4, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r5, 0x5220, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(r0, 0x40044d0e, 0x8) 4.387632613s ago: executing program 40 (id=1259): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x7, 0x0) (async) mmap$auto(0x0, 0x104, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (rerun: 32) fcntl$auto(0x8000000000000001, 0x24, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) getrusage$auto(0x6, &(0x7f00000003c0)={{0x6, 0xe2}, {0x81, 0xff}, 0x6, 0x0, 0x9, 0x46, 0xc2, 0xfffffffffffff155, 0xa, 0x7, 0xa1c7, 0x974, 0x5, 0x101, 0x5, 0x8}) (async, rerun: 32) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300f51c230ca8d57a148353e98649c41bf6760b7a44722d45d95d1e6ce26828263b6cd180728dad0000bb8cf47a75d02b9deb7397d42716d660f3ea89bb42d7cb2ac26cae3b4d600247614007f59bc5d7c0796f9a8f6a60f7a0327fc2d82c75f49d8167439693ea98bba91ccd0f7906f84a3af16d2e1960f436e12cecfe584f075060de40ee777ee79d19b7"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.375965089s ago: executing program 1 (id=1306): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) 4.364304979s ago: executing program 8 (id=1307): timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f00000002c0)={@sival_ptr=0x0, @inferred, 0xe9, @_sigev_thread={0x0, &(0x7f0000000240)="1bb11e619ea52fa171abe96b01811f84a9ecf9181717293016a828df3ad84f8b52"}}, 0x0) memfd_secret$auto(0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) 3.921674906s ago: executing program 8 (id=1308): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x1, 0x9) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x1, 0x9) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x1, 0xfffffff7}, 0x8c}, 0xb, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0xffff0000, 0x0, &(0x7f0000000080)="f4d02e620c2b2d9732eae09f0cf3bec2b54090f3192944b18e3aaffe1d254e65806fbaf7bdbbd211bebecc728cb04d1c982b6170235296121b4f0d781794e49e5f0dd0abae8d4775176e4917a429f319ca51cc34aa31d23ffa063c78a2604bc2d4c7206f1ee8e60ba41ae62f5c325e14a7d4657e633ff2f6e4ee20c410583edec38a9dbb5b6075763c267c742fe4fe3b3d988edb8a68ed573d67e05ec371993de8d4e6fd42668fb19993b4a5ff602bb2da3467bce57365aef31523fdc0d5d64634ec86a7f7e14a2a73f1130d587af27880679a60b52051d03b8f5f37d50eb8150e597af56787787a22b7c9488f9d7f30406fa69b96ace01eed97fd990a11b1fefad8a5a2c9613ebc9f79c14e71f7354aab789d31c7b877a8a5bd863035699a29f96272c86b2d12ffa8883011807fed67b03a6c5545d9375f9ea16501187449b0dde6b575777b17bfae688c57fd2072e39d0ec327b948ebe76aae5ce3919b6245a07043214027f03152a47654a321619f91ca7169a15d05e5894dfe34f2dfd58225c5ca721faf3ff4f29465232db705af94a32232a7039943288ccff1f7bf7bb7e0940f2c3dd6fe26e4d7359aaa80c17bffab9d4f3f", 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r2, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r2, 0x4, 0x6, 0x101, 0x1, r2}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) capget$auto(0x0, 0xfffffffffffffffe) (async) capget$auto(0x0, 0xfffffffffffffffe) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) (async) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) 1.416895335s ago: executing program 1 (id=1309): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x80803, 0x6) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) (async) io_uring_enter$auto(r2, 0x9, 0x820e, 0x9, 0x0, 0x18) (async) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x80, r3, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x69, 0x4, 'N\x10SKSPUATS\x90l\xad#6\xcak\x00g\xea\xa10\xcc\x17S\x8cf\x1d\b\xa6i\xe6\x15\x15\xaff\xd7\xfb|\x18\xb3\xa5\x9bA\xb7D[\'\xda\xd1\xa1h\xa4\x12\x84\x97#\xba\x98i\x06\x9a\xac_\xd8\x91\xeaM\xb3K9\n\xc4R\xf2x\x9dwF$\t\xd6\x82\xa7\xd5\xf2\x16\xf0\\#\x14\xcd&\xa6\xdc\xedr\xa8Bdy'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) (async, rerun: 32) r4 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x143200, 0x0) (rerun: 32) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r5, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x240000, 0x0) (rerun: 32) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r6, 0x100000000) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x80000000, 0x4, 0x6, 0x80000001) (async) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) (async) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000b06f2166142d388881f8062b9991b90a93c776cd8267767be561426cbad7bf12a42188328926406", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40010) (async) r8 = fcntl$auto_F_WRLCK(r7, 0x6, 0x1) read$auto_snapshot_fops_user(r8, &(0x7f0000000040)=""/137, 0x89) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.196311955s ago: executing program 8 (id=1310): r0 = socket$auto(0x5, 0x80, 0x4) prctl$auto_SECCOMP_MODE_STRICT(0x0, 0x1, 0xffffffffffffffff, 0x81, 0xc99) mmap$auto(0x3, 0x40009, 0xe5, 0xfffffffffffffffd, r0, 0x27fff) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ptrace$auto(0x1ff, r1, 0x10, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) process_vm_writev$auto(0x0, &(0x7f00000011c0)={0x0, 0x8}, 0x7, 0x0, 0x7, 0xb5) read$auto(r2, 0x0, 0x8001) r3 = getsid$auto(0xffffffffffffffff) ptrace$auto(0xa6d0, r3, 0x1000, 0x4) socket$auto(0x5, 0x80, 0x4) (async) prctl$auto_SECCOMP_MODE_STRICT(0x0, 0x1, 0xffffffffffffffff, 0x81, 0xc99) (async) mmap$auto(0x3, 0x40009, 0xe5, 0xfffffffffffffffd, r0, 0x27fff) (async) getpid() (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) (async) ptrace$auto(0x1ff, r1, 0x10, 0x2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) process_vm_writev$auto(0x0, &(0x7f00000011c0)={0x0, 0x8}, 0x7, 0x0, 0x7, 0xb5) (async) read$auto(r2, 0x0, 0x8001) (async) getsid$auto(0xffffffffffffffff) (async) ptrace$auto(0xa6d0, r3, 0x1000, 0x4) (async) 852.086833ms ago: executing program 1 (id=1311): r0 = socket(0x2, 0x80002, 0x73) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x8300, 0x0) read$auto(r1, &(0x7f0000000240)='nl80211\x00', 0x7) getsockname$auto(r0, &(0x7f0000000000)=@isdn={0x22, 0x9, 0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xd) close_range$auto(r0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x8, 0x0, [{0x7f, 0x1, 0x9}]}) landlock_restrict_self$auto(r2, 0x0) open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) 600.17423ms ago: executing program 1 (id=1312): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x29aec29d}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) (rerun: 64) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 0s ago: executing program 1 (id=1313): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) gettid() kernel console output (not intermixed with test programs): ) entered blocking state [ 270.361906][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.408006][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.415281][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.569367][ T9267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.584399][ T9267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.956985][ T9356] netlink: 342 bytes leftover after parsing attributes in process `syz.0.702'. [ 271.271813][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.576940][ T5831] Bluetooth: hci0: command tx timeout [ 272.159282][ T9267] veth0_vlan: entered promiscuous mode [ 272.254401][ T9267] veth1_vlan: entered promiscuous mode [ 272.440722][ T9267] veth0_macvtap: entered promiscuous mode [ 272.490804][ T9267] veth1_macvtap: entered promiscuous mode [ 272.555812][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.592743][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.642632][ T6744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.668871][ T6744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.702752][ T6744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.724301][ T6744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.837194][ T5831] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 272.844811][ T5831] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 272.923007][ T6744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.951677][ T6744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.023098][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 273.035373][ T7246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.045037][ T9385] netlink: 25 bytes leftover after parsing attributes in process `syz.4.706'. [ 273.047327][ T7246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.293603][ T9394] netlink: 342 bytes leftover after parsing attributes in process `syz.3.710'. [ 273.435430][ T9401] ima: policy update failed [ 273.477224][ T29] audit: type=1802 audit(4294967454.433:12): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.711" res=0 errno=0 [ 273.656343][ T5827] Bluetooth: hci0: command tx timeout [ 274.167032][ T9418] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 274.820746][ T9428] ima: policy update failed [ 274.826981][ T29] audit: type=1802 audit(4294967455.793:13): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.716" res=0 errno=0 [ 274.915799][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 274.937882][ T9431] netlink: 25 bytes leftover after parsing attributes in process `syz.0.717'. [ 275.109801][ T9437] netlink: 342 bytes leftover after parsing attributes in process `syz.0.719'. [ 275.736768][ T5827] Bluetooth: hci0: command tx timeout [ 278.562619][ T9531] FAULT_INJECTION: forcing a failure. [ 278.562619][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 278.650345][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz.5.743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.650405][ T9531] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.650419][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.650439][ T9531] Call Trace: [ 278.650450][ T9531] [ 278.650463][ T9531] dump_stack_lvl+0x100/0x190 [ 278.650521][ T9531] should_fail_ex.cold+0x5/0xa [ 278.650560][ T9531] ? tomoyo_realpath_from_path+0xb6/0x690 [ 278.650597][ T9531] should_failslab+0xc2/0x120 [ 278.650630][ T9531] __kmalloc_noprof+0xe0/0x850 [ 278.650688][ T9531] tomoyo_realpath_from_path+0xb6/0x690 [ 278.650734][ T9531] tomoyo_check_open_permission+0x2af/0x3c0 [ 278.650791][ T9531] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 278.650841][ T9531] ? acct_on+0x189/0x9e0 [ 278.650888][ T9531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.650959][ T9531] ? do_raw_spin_lock+0x128/0x260 [ 278.651010][ T9531] ? path_get+0x61/0x80 [ 278.651048][ T9531] tomoyo_file_open+0x6b/0x90 [ 278.651090][ T9531] security_file_open+0xb5/0x1e0 [ 278.651124][ T9531] do_dentry_open+0x5aa/0x1660 [ 278.651181][ T9531] ? lockdep_init_map_type+0x5c/0x250 [ 278.651230][ T9531] vfs_open+0x82/0x3f0 [ 278.651272][ T9531] dentry_open+0x71/0xd0 [ 278.651310][ T9531] acct_on+0x189/0x9e0 [ 278.651369][ T9531] ? __pfx_acct_on+0x10/0x10 [ 278.651411][ T9531] ? bpf_lsm_capable+0x9/0x10 [ 278.651435][ T9531] ? security_capable+0x80/0x260 [ 278.651472][ T9531] __x64_sys_acct+0x81/0x1e0 [ 278.651511][ T9531] ? lockdep_hardirqs_on+0x78/0x100 [ 278.651540][ T9531] do_syscall_64+0x106/0xf80 [ 278.651569][ T9531] ? clear_bhb_loop+0x40/0x90 [ 278.651603][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.651633][ T9531] RIP: 0033:0x7fb94e19c629 [ 278.651656][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.651683][ T9531] RSP: 002b:00007fb94c3d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 278.651710][ T9531] RAX: ffffffffffffffda RBX: 00007fb94e416090 RCX: 00007fb94e19c629 [ 278.651727][ T9531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 278.651744][ T9531] RBP: 00007fb94e232b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.651760][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.651776][ T9531] R13: 00007fb94e416128 R14: 00007fb94e416090 R15: 00007fffbd9fcac8 [ 278.651812][ T9531] [ 278.693875][ T9531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.090616][ T9557] netlink: 25 bytes leftover after parsing attributes in process `syz.4.748'. [ 281.192923][ T29] audit: type=1800 audit(4294967462.153:14): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.748" name="dbroot" dev="configfs" ino=28048 res=0 errno=0 [ 281.503166][ T9571] FAULT_INJECTION: forcing a failure. [ 281.503166][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 281.547642][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.3.752 Tainted: G U L syzkaller #0 PREEMPT(full) [ 281.547701][ T9571] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 281.547714][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.547734][ T9571] Call Trace: [ 281.547745][ T9571] [ 281.547757][ T9571] dump_stack_lvl+0x100/0x190 [ 281.547829][ T9571] should_fail_ex.cold+0x5/0xa [ 281.547878][ T9571] should_failslab+0xc2/0x120 [ 281.547912][ T9571] __kmalloc_cache_noprof+0x7a/0x6f0 [ 281.547952][ T9571] ? v9fs_get_tree+0x9c/0xb50 [ 281.548004][ T9571] v9fs_get_tree+0x9c/0xb50 [ 281.548043][ T9571] ? rcu_is_watching+0x12/0xc0 [ 281.548093][ T9571] ? __pfx_v9fs_get_tree+0x10/0x10 [ 281.548140][ T9571] ? bpf_lsm_capable+0x9/0x10 [ 281.548170][ T9571] ? security_capable+0x80/0x260 [ 281.548216][ T9571] vfs_get_tree+0x92/0x320 [ 281.548259][ T9571] vfs_cmd_create+0xd7/0x2a0 [ 281.548302][ T9571] __do_sys_fsconfig+0x55a/0xcb0 [ 281.548346][ T9571] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 281.548408][ T9571] do_syscall_64+0x106/0xf80 [ 281.548444][ T9571] ? clear_bhb_loop+0x40/0x90 [ 281.548485][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.548520][ T9571] RIP: 0033:0x7f820779c629 [ 281.548547][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.548585][ T9571] RSP: 002b:00007f82086aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 281.548619][ T9571] RAX: ffffffffffffffda RBX: 00007f8207a15fa0 RCX: 00007f820779c629 [ 281.548642][ T9571] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 281.548662][ T9571] RBP: 00007f8207832b39 R08: 0000000000000000 R09: 0000000000000000 [ 281.548681][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.548700][ T9571] R13: 00007f8207a16038 R14: 00007f8207a15fa0 R15: 00007ffd315ccb38 [ 281.548744][ T9571] [ 281.837635][ T9566] zswap: compressor -Ž not available [ 282.226816][ T9586] netlink: 342 bytes leftover after parsing attributes in process `syz.3.755'. [ 283.305735][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.763'. [ 285.776929][ T9643] netlink: 342 bytes leftover after parsing attributes in process `syz.3.769'. [ 285.790446][ T9643] netlink: 342 bytes leftover after parsing attributes in process `syz.3.769'. [ 285.901170][ T5827] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 287.738456][ T9680] futex_wake_op: syz.5.772 tries to shift op by -2048; fix this program [ 287.762120][ T9680] futex_wake_op: syz.5.772 tries to shift op by -2048; fix this program [ 287.857096][ T9680] 0x000000000001-0x000000020000 : "" [ 287.891394][ T9680] ftl_cs: FTL header corrupt! [ 289.820326][ T9719] qrtr: Invalid version 0 [ 290.083312][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 290.135998][ T9723] could not allocate digest TFM handle [ 292.170475][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 292.937937][ T9760] netlink: 306 bytes leftover after parsing attributes in process `syz.5.788'. [ 293.427690][ T9764] usbcore.quirks: string doesn't fit in 127 chars. [ 293.536529][ T9765] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 294.924514][ T9780] random: crng reseeded on system resumption [ 295.697961][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 297.266432][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.275959][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.284959][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.293326][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.308489][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.426749][ T9811] zswap: compressor ïäãê‚Ñü=ww)™°Y%že”à>9¿´$¦8²¥7?Ç’Ñ TXr7JÕölSÙM\¶ÐyFÙ˜õ†Íâ}¶óä*Œg†¤·ÆÒ ½XÊ‹lб=Ä/µQKƒâ·Ô_§B)¾è±BŠ¦ª«oÒ"6µ¼X_;-*^Ý‹§ &¿3­ª²h1Äiç¡ÅÌ\Ve¦|‚èÊ^÷C”(Ý not available [ 298.570588][ T9808] chnl_net:caif_netlink_parms(): no params data found [ 298.923774][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.932187][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.948342][ T9808] bridge_slave_0: entered allmulticast mode [ 298.958797][ T9808] bridge_slave_0: entered promiscuous mode [ 299.023699][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.031050][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.039690][ T9808] bridge_slave_1: entered allmulticast mode [ 299.048044][ T9808] bridge_slave_1: entered promiscuous mode [ 299.116685][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.138225][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.253093][ T9840] binder: 9839:9840 ioctl c0306201 0 returned -14 [ 299.340181][ T5831] Bluetooth: hci5: command tx timeout [ 299.404951][ T9842] block2mtd: Using custom MTD label '' for dev [ 299.422485][ T9842] block2mtd: error: cannot open device [ 299.445417][ T9842] netlink: 342 bytes leftover after parsing attributes in process `syz.0.808'. [ 299.456985][ T9808] team0: Port device team_slave_0 added [ 299.529516][ T9808] team0: Port device team_slave_1 added [ 299.536285][ T9842] netlink: 146 bytes leftover after parsing attributes in process `syz.0.808'. [ 299.657171][ T9846] FAULT_INJECTION: forcing a failure. [ 299.657171][ T9846] name failslab, interval 1, probability 0, space 0, times 0 [ 299.684955][ T9846] CPU: 1 UID: 0 PID: 9846 Comm: syz.0.809 Tainted: G U L syzkaller #0 PREEMPT(full) [ 299.684996][ T9846] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 299.685006][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.685020][ T9846] Call Trace: [ 299.685028][ T9846] [ 299.685037][ T9846] dump_stack_lvl+0x100/0x190 [ 299.685078][ T9846] should_fail_ex.cold+0x5/0xa [ 299.685105][ T9846] should_failslab+0xc2/0x120 [ 299.685129][ T9846] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 299.685163][ T9846] ? alloc_empty_file+0x55/0x1c0 [ 299.685191][ T9846] ? __pfx_stack_trace_save+0x10/0x10 [ 299.685218][ T9846] alloc_empty_file+0x55/0x1c0 [ 299.685247][ T9846] path_openat+0xe8/0x31a0 [ 299.685268][ T9846] ? kasan_save_stack+0x3f/0x50 [ 299.685302][ T9846] ? kasan_save_stack+0x30/0x50 [ 299.685335][ T9846] ? kasan_save_track+0x14/0x30 [ 299.685369][ T9846] ? __kasan_slab_alloc+0x89/0x90 [ 299.685405][ T9846] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 299.685438][ T9846] ? do_getname+0x35/0x390 [ 299.685463][ T9846] ? do_sys_openat2+0xc5/0x1e0 [ 299.685492][ T9846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.685527][ T9846] ? __pfx_path_openat+0x10/0x10 [ 299.685560][ T9846] do_file_open+0x20e/0x430 [ 299.685585][ T9846] ? __pfx_do_file_open+0x10/0x10 [ 299.685628][ T9846] ? alloc_fd+0x476/0x790 [ 299.685670][ T9846] ? do_getname+0x191/0x390 [ 299.685700][ T9846] do_sys_openat2+0x10d/0x1e0 [ 299.685730][ T9846] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.685772][ T9846] __x64_sys_openat+0x12d/0x210 [ 299.685802][ T9846] ? __pfx___x64_sys_openat+0x10/0x10 [ 299.685843][ T9846] do_syscall_64+0x106/0xf80 [ 299.685868][ T9846] ? clear_bhb_loop+0x40/0x90 [ 299.685897][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.685922][ T9846] RIP: 0033:0x7f58fad9c629 [ 299.685942][ T9846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.685965][ T9846] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.685988][ T9846] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 299.686004][ T9846] RDX: 000000000014be02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 299.686019][ T9846] RBP: 00007f58fae32b39 R08: 0000000000000000 R09: 0000000000000000 [ 299.686034][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.686049][ T9846] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 299.686079][ T9846] [ 300.055593][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.076526][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.132502][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.155484][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.196320][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.257371][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.682413][ T9808] hsr_slave_0: entered promiscuous mode [ 300.695000][ T9808] hsr_slave_1: entered promiscuous mode [ 300.707335][ T9808] debugfs: 'hsr0' already exists in 'hsr' [ 300.713134][ T9808] Cannot create hsr debugfs directory [ 301.083353][ T9808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.119466][ T9808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 301.150756][ T9808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 301.192698][ T9808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.418750][ T5831] Bluetooth: hci5: command tx timeout [ 301.887196][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.997095][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.159571][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.166832][ T9683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.210434][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.217688][ T9541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.430281][ T9808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.823891][ T9889] FAULT_INJECTION: forcing a failure. [ 302.823891][ T9889] name fail_futex, interval 1, probability 0, space 0, times 0 [ 302.866362][ T9889] CPU: 1 UID: 0 PID: 9889 Comm: syz.0.818 Tainted: G U L syzkaller #0 PREEMPT(full) [ 302.866422][ T9889] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 302.866435][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.866459][ T9889] Call Trace: [ 302.866470][ T9889] [ 302.866484][ T9889] dump_stack_lvl+0x100/0x190 [ 302.866549][ T9889] should_fail_ex.cold+0x5/0xa [ 302.866589][ T9889] get_futex_key+0x1d2/0x1620 [ 302.866636][ T9889] ? __pfx_get_futex_key+0x10/0x10 [ 302.866689][ T9889] futex_wake+0xea/0x530 [ 302.866743][ T9889] ? __pfx_futex_wake+0x10/0x10 [ 302.866798][ T9889] ? putname+0xb1/0x110 [ 302.866829][ T9889] ? kmem_cache_free+0x124/0x6a0 [ 302.866882][ T9889] do_futex+0x32b/0x350 [ 302.866927][ T9889] ? __pfx_do_futex+0x10/0x10 [ 302.866967][ T9889] ? __pfx_do_sys_openat2+0x10/0x10 [ 302.867012][ T9889] ? __fget_files+0x21f/0x3d0 [ 302.867069][ T9889] __x64_sys_futex+0x34f/0x4d0 [ 302.867114][ T9889] ? __x64_sys_openat+0x12d/0x210 [ 302.867156][ T9889] ? __pfx___x64_sys_futex+0x10/0x10 [ 302.867216][ T9889] do_syscall_64+0x106/0xf80 [ 302.867252][ T9889] ? clear_bhb_loop+0x40/0x90 [ 302.867292][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.867329][ T9889] RIP: 0033:0x7f58fad9c629 [ 302.867357][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.867390][ T9889] RSP: 002b:00007f58fbcad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.867429][ T9889] RAX: ffffffffffffffda RBX: 00007f58fb015fa8 RCX: 00007f58fad9c629 [ 302.867452][ T9889] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58fb015fac [ 302.867473][ T9889] RBP: 00007f58fb015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 302.867493][ T9889] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 302.867514][ T9889] R13: 00007f58fb016038 R14: 00007ffeb83b3230 R15: 00007ffeb83b3318 [ 302.867564][ T9889] [ 303.248764][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.502389][ T5831] Bluetooth: hci5: command tx timeout [ 304.177846][ T9808] veth0_vlan: entered promiscuous mode [ 304.403833][ T9808] veth1_vlan: entered promiscuous mode [ 304.498470][ T9808] veth0_macvtap: entered promiscuous mode [ 304.534756][ T9808] veth1_macvtap: entered promiscuous mode [ 304.656115][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.771283][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.839560][ T6750] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.885244][ T6750] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.936513][ T6750] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.945321][ T6750] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.964246][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.988384][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.997312][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.005448][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.014637][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.199829][ T9541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.232327][ T9541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.383656][ T9681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.406558][ T9681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.583665][ T5827] Bluetooth: hci5: command tx timeout [ 305.864936][ T9914] chnl_net:caif_netlink_parms(): no params data found [ 306.639637][ T9954] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 306.725422][ T9955] FAULT_INJECTION: forcing a failure. [ 306.725422][ T9955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.748037][ T9955] CPU: 1 UID: 0 PID: 9955 Comm: syz.6.829 Tainted: G U L syzkaller #0 PREEMPT(full) [ 306.748092][ T9955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 306.748104][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.748122][ T9955] Call Trace: [ 306.748132][ T9955] [ 306.748143][ T9955] dump_stack_lvl+0x100/0x190 [ 306.748194][ T9955] should_fail_ex.cold+0x5/0xa [ 306.748231][ T9955] _copy_from_user+0x2e/0xd0 [ 306.748294][ T9955] get_timespec64+0x8b/0x1b0 [ 306.748328][ T9955] ? __pfx_get_timespec64+0x10/0x10 [ 306.748361][ T9955] ? ktime_get+0x200/0x300 [ 306.748401][ T9955] __x64_sys_futex+0x21a/0x4d0 [ 306.748448][ T9955] ? __pfx___x64_sys_futex+0x10/0x10 [ 306.748506][ T9955] do_syscall_64+0x106/0xf80 [ 306.748539][ T9955] ? clear_bhb_loop+0x40/0x90 [ 306.748579][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.748610][ T9955] RIP: 0033:0x7f7245d9c629 [ 306.748635][ T9955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.748667][ T9955] RSP: 002b:00007ffd75536bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.748696][ T9955] RAX: ffffffffffffffda RBX: 000000000004adf7 RCX: 00007f7245d9c629 [ 306.748717][ T9955] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7246015fac [ 306.748735][ T9955] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 306.748752][ T9955] R10: 00007ffd75536cc0 R11: 0000000000000246 R12: 00007ffd75536ce0 [ 306.748771][ T9955] R13: 00007f7246015fac R14: 000000000004ae29 R15: 00007ffd75536cc0 [ 306.748813][ T9955] [ 307.119668][ T5827] Bluetooth: hci6: command tx timeout [ 307.260981][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.308493][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.342699][ T9914] bridge_slave_0: entered allmulticast mode [ 307.389965][ T9914] bridge_slave_0: entered promiscuous mode [ 307.449094][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.467262][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.492280][ T9914] bridge_slave_1: entered allmulticast mode [ 307.521856][ T9914] bridge_slave_1: entered promiscuous mode [ 307.673780][ T9914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.704070][ T9914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.889013][ T9914] team0: Port device team_slave_0 added [ 307.920293][ T9914] team0: Port device team_slave_1 added [ 308.052837][ T9980] binder: BINDER_SET_CONTEXT_MGR already set [ 308.065478][ T9980] binder: 9974:9980 ioctl 4018620d 9 returned -16 [ 308.078314][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.085328][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.213241][ T9914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.410007][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.445038][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.646510][ T9914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.176508][ T5827] Bluetooth: hci6: command tx timeout [ 309.195419][ T9914] hsr_slave_0: entered promiscuous mode [ 309.218479][ T9914] hsr_slave_1: entered promiscuous mode [ 309.224981][ T9914] debugfs: 'hsr0' already exists in 'hsr' [ 309.242171][ T9914] Cannot create hsr debugfs directory [ 310.494324][ T9914] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 310.564884][ T9914] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 310.579985][ T9989] FAULT_INJECTION: forcing a failure. [ 310.579985][ T9989] name failslab, interval 1, probability 0, space 0, times 0 [ 310.594673][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.0.835 Tainted: G U L syzkaller #0 PREEMPT(full) [ 310.594723][ T9989] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 310.594735][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.594752][ T9989] Call Trace: [ 310.594760][ T9989] [ 310.594770][ T9989] dump_stack_lvl+0x100/0x190 [ 310.594822][ T9989] should_fail_ex.cold+0x5/0xa [ 310.594854][ T9989] should_failslab+0xc2/0x120 [ 310.594885][ T9989] __kmalloc_cache_noprof+0x7a/0x6f0 [ 310.594925][ T9989] ? subflow_create_ctx+0x9b/0x2e0 [ 310.594987][ T9989] subflow_create_ctx+0x9b/0x2e0 [ 310.595028][ T9989] subflow_ulp_init+0xc3/0x4f0 [ 310.595068][ T9989] tcp_set_ulp+0x32e/0x7f0 [ 310.595110][ T9989] mptcp_subflow_create_socket+0x385/0xa30 [ 310.595161][ T9989] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 310.595221][ T9989] __mptcp_nmpc_sk+0x17f/0x870 [ 310.595271][ T9989] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 310.595325][ T9989] ? __local_bh_enable_ip+0x9e/0x120 [ 310.595364][ T9989] mptcp_listen+0x135/0x4c0 [ 310.595397][ T9989] ? __pfx_mptcp_listen+0x10/0x10 [ 310.595429][ T9989] ? apparmor_socket_listen+0xf2/0x1a0 [ 310.595476][ T9989] __sys_listen_socket+0x108/0x150 [ 310.595529][ T9989] __sys_listen+0xa7/0x130 [ 310.595579][ T9989] __x64_sys_listen+0x53/0x80 [ 310.595629][ T9989] do_syscall_64+0x106/0xf80 [ 310.595663][ T9989] ? clear_bhb_loop+0x40/0x90 [ 310.595704][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.595737][ T9989] RIP: 0033:0x7f58fad9c629 [ 310.595764][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.595794][ T9989] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 310.595825][ T9989] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 310.595846][ T9989] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 310.595864][ T9989] RBP: 00007f58fae32b39 R08: 0000000000000000 R09: 0000000000000000 [ 310.595883][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.595902][ T9989] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 310.595951][ T9989] [ 310.973445][ T9914] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 311.076115][ T9914] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 311.256515][ T5827] Bluetooth: hci6: command tx timeout [ 311.421351][ T9914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.494830][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.549437][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.556649][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.636953][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.644197][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.305786][T10019] ovs_: entered promiscuous mode [ 312.402900][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.573293][T10027] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 312.636672][T10027] vhci_hcd vhci_hcd.2: invalid port number 16 [ 312.643126][T10027] vhci_hcd vhci_hcd.2: invalid port number 16 [ 312.926862][T10035] __vm_enough_memory: pid: 10035, comm: syz.0.839, bytes: 4398046511104 not enough memory for the allocation [ 313.219326][ T9914] veth0_vlan: entered promiscuous mode [ 313.278507][ T9914] veth1_vlan: entered promiscuous mode [ 313.337749][ T5827] Bluetooth: hci6: command tx timeout [ 313.384222][ T9914] veth0_macvtap: entered promiscuous mode [ 313.415651][ T9914] veth1_macvtap: entered promiscuous mode [ 313.494915][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.530670][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.565362][ T9683] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.594925][ T9683] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.621815][ T9683] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.647911][ T9683] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.943015][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.952825][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.066381][ T9683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.074289][ T9683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.664044][T10063] netlink: 342 bytes leftover after parsing attributes in process `syz.7.846'. [ 316.536981][T10080] binder: 10077:10080 ioctl c0306201 0 returned -14 [ 317.227496][T10097] netlink: 'syz.0.854': attribute type 11 has an invalid length. [ 317.276670][T10097] netlink: 'syz.0.854': attribute type 11 has an invalid length. [ 317.428687][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.435077][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.558824][T10120] binder: 10119:10120 ioctl c0306201 0 returned -14 [ 320.146160][T10148] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 320.161588][T10149] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 320.761728][T10164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.768342][T10164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 321.047517][T10170] FAULT_INJECTION: forcing a failure. [ 321.047517][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.127613][T10170] CPU: 1 UID: 0 PID: 10170 Comm: syz.0.873 Tainted: G U L syzkaller #0 PREEMPT(full) [ 321.127670][T10170] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 321.127684][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.127704][T10170] Call Trace: [ 321.127714][T10170] [ 321.127726][T10170] dump_stack_lvl+0x100/0x190 [ 321.127787][T10170] should_fail_ex.cold+0x5/0xa [ 321.127826][T10170] _copy_from_user+0x2e/0xd0 [ 321.127880][T10170] restore_sigcontext+0xcd/0x6a0 [ 321.127922][T10170] ? __pfx_restore_sigcontext+0x10/0x10 [ 321.127992][T10170] ? __pfx_restore_altstack+0x10/0x10 [ 321.128039][T10170] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.128073][T10170] ? lockdep_hardirqs_on+0x78/0x100 [ 321.128117][T10170] __do_sys_rt_sigreturn+0x229/0x2c0 [ 321.128159][T10170] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 321.128208][T10170] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 321.128253][T10170] ? syscall_user_dispatch+0x76/0x130 [ 321.128307][T10170] do_syscall_64+0x106/0xf80 [ 321.128341][T10170] ? clear_bhb_loop+0x40/0x90 [ 321.128383][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.128416][T10170] RIP: 0033:0x7f58fad3da19 [ 321.128444][T10170] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 321.128477][T10170] RSP: 002b:00007f58fbcaca80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 321.128510][T10170] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad3da19 [ 321.128532][T10170] RDX: 00007f58fbcaca80 RSI: 00007f58fbcacbb0 RDI: 0000000000000011 [ 321.128553][T10170] RBP: 00007f58fae32b39 R08: 0000000000000000 R09: 0000000000000000 [ 321.128574][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.128595][T10170] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 321.128638][T10170] [ 322.264435][T10200] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 322.294874][T10200] netlink: 322 bytes leftover after parsing attributes in process `syz.0.881'. [ 323.435434][T10229] FAULT_INJECTION: forcing a failure. [ 323.435434][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 323.517699][T10229] CPU: 1 UID: 0 PID: 10229 Comm: syz.0.884 Tainted: G U L syzkaller #0 PREEMPT(full) [ 323.517756][T10229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 323.517768][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.517787][T10229] Call Trace: [ 323.517797][T10229] [ 323.517808][T10229] dump_stack_lvl+0x100/0x190 [ 323.517862][T10229] should_fail_ex.cold+0x5/0xa [ 323.517916][T10229] should_failslab+0xc2/0x120 [ 323.517947][T10229] __kmalloc_cache_noprof+0x7a/0x6f0 [ 323.517986][T10229] ? kstrdup_quotable_cmdline+0x52/0x210 [ 323.518021][T10229] ? get_cmdline+0x86/0x360 [ 323.518056][T10229] kstrdup_quotable_cmdline+0x52/0x210 [ 323.518093][T10229] __report_access+0x77/0x230 [ 323.518124][T10229] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.518265][T10229] task_work_run+0x150/0x240 [ 323.518313][T10229] ? __pfx_task_work_run+0x10/0x10 [ 323.518357][T10229] ? xfd_validate_state+0x129/0x190 [ 323.518407][T10229] exit_to_user_mode_loop+0x100/0x4a0 [ 323.518448][T10229] do_syscall_64+0x668/0xf80 [ 323.518479][T10229] ? clear_bhb_loop+0x40/0x90 [ 323.518514][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.518544][T10229] RIP: 0033:0x7f58fad9c629 [ 323.518569][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.518598][T10229] RSP: 002b:00007f58fbc6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 323.518627][T10229] RAX: ffffffffffffffff RBX: 00007f58fb016180 RCX: 00007f58fad9c629 [ 323.518648][T10229] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001 [ 323.518667][T10229] RBP: 00007f58fae32b39 R08: 0000000000000004 R09: 0000000000000000 [ 323.518686][T10229] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 323.518706][T10229] R13: 00007f58fb016218 R14: 00007f58fb016180 R15: 00007ffeb83b3318 [ 323.518746][T10229] [ 323.518780][T10229] ptrace attach of "./syz-executor exec"[5824] was attempted by "(null)"[10229] [ 324.618456][T10248] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 324.859091][ T5827] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 325.106696][T10259] nbd: must specify at least one socket [ 325.253053][T10259] nbd: must specify at least one socket [ 326.087915][T10289] netlink: 280 bytes leftover after parsing attributes in process `syz.7.901'. [ 326.492101][T10298] writes to the poll attribute are ignored. [ 326.534567][T10298] please use driver specific parameters instead. [ 327.672528][T10330] random: crng reseeded on system resumption [ 328.149908][T10333] zswap: compressor not available [ 333.031964][T10429] binder: 10428:10429 ioctl c0306201 0 returned -14 [ 333.633614][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.938'. [ 333.661453][T10441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.767064][T10441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.161600][T10454] FAULT_INJECTION: forcing a failure. [ 334.161600][T10454] name failslab, interval 1, probability 0, space 0, times 0 [ 334.196839][T10454] CPU: 1 UID: 0 PID: 10454 Comm: syz.5.941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 334.196897][T10454] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 334.196910][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.196931][T10454] Call Trace: [ 334.196942][T10454] [ 334.196955][T10454] dump_stack_lvl+0x100/0x190 [ 334.197014][T10454] should_fail_ex.cold+0x5/0xa [ 334.197053][T10454] should_failslab+0xc2/0x120 [ 334.197086][T10454] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 334.197133][T10454] ? security_file_alloc+0x34/0x2c0 [ 334.197199][T10454] ? trace_kmem_cache_alloc+0xf3/0x120 [ 334.197237][T10454] security_file_alloc+0x34/0x2c0 [ 334.197292][T10454] init_file+0x95/0x480 [ 334.197323][T10454] alloc_empty_file+0x73/0x1c0 [ 334.197357][T10454] dentry_open+0x46/0xd0 [ 334.197390][T10454] ima_calc_file_hash+0x2ad/0x480 [ 334.197433][T10454] ima_collect_measurement+0x887/0xa40 [ 334.197489][T10454] ? __pfx_ima_collect_measurement+0x10/0x10 [ 334.197534][T10454] ? lock_acquire+0x1cf/0x380 [ 334.197587][T10454] ? process_measurement+0x5ab/0x2350 [ 334.197623][T10454] ? is_bad_inode+0xd/0x40 [ 334.197662][T10454] ? xattr_resolve_name+0x27d/0x3f0 [ 334.197711][T10454] ? vfs_getxattr_alloc+0xec/0x350 [ 334.197763][T10454] ? ima_get_hash_algo+0x22d/0x400 [ 334.197797][T10454] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 334.197837][T10454] ? process_measurement+0xdfe/0x2350 [ 334.197871][T10454] process_measurement+0xdfe/0x2350 [ 334.197919][T10454] ? __pfx_process_measurement+0x10/0x10 [ 334.197998][T10454] ? mutex_init_lockep+0x110/0x150 [ 334.198037][T10454] ? seq_open+0x116/0x170 [ 334.198071][T10454] ? inode_to_bdi+0x9e/0x160 [ 334.198119][T10454] ima_file_check+0xcc/0x120 [ 334.198162][T10454] ? __pfx_ima_file_check+0x10/0x10 [ 334.198210][T10454] security_file_post_open+0xc4/0x210 [ 334.198256][T10454] path_openat+0x1418/0x31a0 [ 334.198296][T10454] ? __pfx_path_openat+0x10/0x10 [ 334.198334][T10454] do_file_open+0x20e/0x430 [ 334.198363][T10454] ? __pfx_do_file_open+0x10/0x10 [ 334.198413][T10454] ? alloc_fd+0x476/0x790 [ 334.198461][T10454] ? do_getname+0x191/0x390 [ 334.198496][T10454] do_sys_openat2+0x10d/0x1e0 [ 334.198531][T10454] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.198578][T10454] __x64_sys_openat+0x12d/0x210 [ 334.198614][T10454] ? __pfx___x64_sys_openat+0x10/0x10 [ 334.198663][T10454] do_syscall_64+0x106/0xf80 [ 334.198693][T10454] ? clear_bhb_loop+0x40/0x90 [ 334.198728][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.198757][T10454] RIP: 0033:0x7fb94e19c629 [ 334.198782][T10454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.198810][T10454] RSP: 002b:00007fb94c3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.198837][T10454] RAX: ffffffffffffffda RBX: 00007fb94e415fa0 RCX: 00007fb94e19c629 [ 334.198856][T10454] RDX: 0000000000020803 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 334.198875][T10454] RBP: 00007fb94e232b39 R08: 0000000000000000 R09: 0000000000000000 [ 334.198892][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.198911][T10454] R13: 00007fb94e416038 R14: 00007fb94e415fa0 R15: 00007fffbd9fcac8 [ 334.198947][T10454] [ 334.199713][ T29] audit: type=1800 audit(4294967515.163:15): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.941" name="set_event_notrace_pid" dev="tracefs" ino=38 res=0 errno=0 [ 335.017597][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 335.402021][T10467] team0: Port device team_slave_0 removed [ 336.257655][T10478] binder: 10477:10478 ioctl c0306201 0 returned -14 [ 337.332338][T10509] netlink: 164 bytes leftover after parsing attributes in process `syz.5.953'. [ 337.672831][T10515] binder: 10512:10515 ioctl c0306201 0 returned -14 [ 338.446181][T10522] zswap: compressor not available [ 339.555692][T10559] binder: 10558:10559 ioctl c0306201 0 returned -14 [ 339.850367][T10570] nvme_fabrics: unknown parameter or missing value '’SpÃ_wát«²ðj»ù<4õ¥+}‘ žâtBý†º µxDcy6´´Qª|È<ºíY§¶ˆ¤Ýb¨Š¥zRáÐgÅa"' in ctrl creation request [ 341.388247][ T29] audit: type=1800 audit(4294967522.353:16): pid=10597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.976" name="members" dev="configfs" ino=34374 res=0 errno=0 [ 343.939807][ T5827] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 343.967567][ T5827] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 343.975704][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 343.986343][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u9:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 343.986398][ T5827] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 343.986412][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.986447][ T5827] Workqueue: hci5 hci_rx_work [ 343.986505][ T5827] Call Trace: [ 343.986516][ T5827] [ 343.986528][ T5827] dump_stack_lvl+0x100/0x190 [ 343.986583][ T5827] sysfs_warn_dup.cold+0x1c/0x28 [ 343.986632][ T5827] sysfs_create_dir_ns+0x24b/0x2b0 [ 343.986673][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 343.986712][ T5827] ? find_held_lock+0x2b/0x80 [ 343.986742][ T5827] ? kobject_add_internal+0x25f/0x930 [ 343.986785][ T5827] ? kobject_add_internal+0x25f/0x930 [ 343.986834][ T5827] ? do_raw_spin_unlock+0x145/0x1e0 [ 343.986888][ T5827] kobject_add_internal+0x2c8/0x930 [ 343.986945][ T5827] kobject_add+0x16a/0x1e0 [ 343.986989][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 343.987030][ T5827] ? class_to_subsys+0x10f/0x150 [ 343.987089][ T5827] ? kobject_put+0xb9/0x640 [ 343.987128][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 343.987201][ T5827] device_add+0x294/0x1950 [ 343.987253][ T5827] ? __pfx_dev_set_name+0x10/0x10 [ 343.987288][ T5827] ? __pfx_device_add+0x10/0x10 [ 343.987340][ T5827] ? mgmt_send_event_skb+0x2fb/0x460 [ 343.987403][ T5827] hci_conn_add_sysfs+0x1a3/0x260 [ 343.987442][ T5827] le_conn_complete_evt+0x11cb/0x1f40 [ 343.987507][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 343.987558][ T5827] ? __pfx_bt_warn+0x10/0x10 [ 343.987606][ T5827] hci_le_conn_complete_evt+0x23c/0x3a0 [ 343.987662][ T5827] ? skb_pull_data+0x15f/0x1e0 [ 343.987716][ T5827] hci_le_meta_evt+0x34a/0x5f0 [ 343.987751][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 343.987811][ T5827] hci_event_packet+0x682/0x11c0 [ 343.987865][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 343.987901][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 343.987959][ T5827] ? kcov_remote_start+0x374/0x660 [ 343.988014][ T5827] ? lockdep_hardirqs_on+0x78/0x100 [ 343.988062][ T5827] hci_rx_work+0x451/0xfc0 [ 343.988122][ T5827] process_one_work+0x9d7/0x1920 [ 343.988197][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 343.988258][ T5827] ? __pfx_hci_rx_work+0x10/0x10 [ 343.988316][ T5827] worker_thread+0x5da/0xe40 [ 343.988380][ T5827] ? kthread+0x13a/0x450 [ 343.988420][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 343.988465][ T5827] kthread+0x370/0x450 [ 343.988507][ T5827] ? __pfx_kthread+0x10/0x10 [ 343.988553][ T5827] ret_from_fork+0x754/0xd80 [ 343.988605][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 343.988656][ T5827] ? __switch_to+0x7b4/0x1120 [ 343.988693][ T5827] ? __pfx_kthread+0x10/0x10 [ 343.988739][ T5827] ret_from_fork_asm+0x1a/0x30 [ 343.988796][ T5827] [ 344.259775][ T5827] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 344.273946][ T5827] Bluetooth: hci5: failed to register connection device [ 344.585497][T10638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 345.988453][ T5827] Bluetooth: hci5: command 0x2016 tx timeout [ 346.997167][T10647] kexec: Could not allocate control_code_buffer [ 347.562868][T10678] GUP no longer grows the stack in syz.7.992 (10678): 14000-18000 (4000) [ 347.659187][T10678] CPU: 1 UID: 0 PID: 10678 Comm: syz.7.992 Tainted: G U L syzkaller #0 PREEMPT(full) [ 347.659242][T10678] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 347.659255][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.659275][T10678] Call Trace: [ 347.659285][T10678] [ 347.659297][T10678] dump_stack_lvl+0x100/0x190 [ 347.659353][T10678] gup_vma_lookup.cold+0x83/0x96 [ 347.659402][T10678] __get_user_pages+0x241/0x34d0 [ 347.659450][T10678] ? find_held_lock+0x2b/0x80 [ 347.659480][T10678] ? mtree_load+0x311/0xa40 [ 347.659518][T10678] ? __pfx___get_user_pages+0x10/0x10 [ 347.659564][T10678] get_user_pages_remote+0x3d2/0xb10 [ 347.659606][T10678] ? __pfx_get_user_pages_remote+0x10/0x10 [ 347.659647][T10678] ? noop_dirty_folio+0x98/0x160 [ 347.659688][T10678] __access_remote_vm+0x3ba/0xa70 [ 347.659749][T10678] ? __pfx___access_remote_vm+0x10/0x10 [ 347.659814][T10678] mem_rw+0x20a/0x640 [ 347.659852][T10678] vfs_write+0x2aa/0x1070 [ 347.659905][T10678] ? __pfx_mem_write+0x10/0x10 [ 347.659958][T10678] ? __pfx_vfs_write+0x10/0x10 [ 347.660007][T10678] ? __fget_files+0x215/0x3d0 [ 347.660068][T10678] ? __fget_files+0x21f/0x3d0 [ 347.660132][T10678] ksys_write+0x12a/0x250 [ 347.660184][T10678] ? __pfx_ksys_write+0x10/0x10 [ 347.660248][T10678] do_syscall_64+0x106/0xf80 [ 347.660286][T10678] ? clear_bhb_loop+0x40/0x90 [ 347.660328][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.660364][T10678] RIP: 0033:0x7eff5779c629 [ 347.660394][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.660427][T10678] RSP: 002b:00007eff58721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.660461][T10678] RAX: ffffffffffffffda RBX: 00007eff57a15fa0 RCX: 00007eff5779c629 [ 347.660483][T10678] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.660503][T10678] RBP: 00007eff57832b39 R08: 0000000000000000 R09: 0000000000000000 [ 347.660523][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.660542][T10678] R13: 00007eff57a16038 R14: 00007eff57a15fa0 R15: 00007ffcb2380458 [ 347.660586][T10678] [ 347.985332][T10688] netlink: 36 bytes leftover after parsing attributes in process `syz.6.996'. [ 348.079940][ T5827] Bluetooth: hci5: command 0x2016 tx timeout [ 350.140541][ T5827] Bluetooth: hci5: command 0x2016 tx timeout [ 350.760973][T10724] binder: 10723:10724 ioctl c0306201 0 returned -14 [ 351.093125][T10727] FAULT_INJECTION: forcing a failure. [ 351.093125][T10727] name failslab, interval 1, probability 0, space 0, times 0 [ 351.161418][T10727] CPU: 1 UID: 0 PID: 10727 Comm: syz.0.1008 Tainted: G U L syzkaller #0 PREEMPT(full) [ 351.161471][T10727] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 351.161483][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.161501][T10727] Call Trace: [ 351.161511][T10727] [ 351.161523][T10727] dump_stack_lvl+0x100/0x190 [ 351.161576][T10727] should_fail_ex.cold+0x5/0xa [ 351.161614][T10727] ? tomoyo_realpath_from_path+0xb6/0x690 [ 351.161658][T10727] should_failslab+0xc2/0x120 [ 351.161689][T10727] __kmalloc_noprof+0xe0/0x850 [ 351.161744][T10727] tomoyo_realpath_from_path+0xb6/0x690 [ 351.161789][T10727] tomoyo_path_number_perm+0x23c/0x580 [ 351.161838][T10727] ? tomoyo_path_number_perm+0x22e/0x580 [ 351.161888][T10727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.161982][T10727] ? find_held_lock+0x2b/0x80 [ 351.162013][T10727] ? __fget_files+0x215/0x3d0 [ 351.162060][T10727] ? hook_file_ioctl_common+0x146/0x410 [ 351.162120][T10727] ? __fget_files+0x21f/0x3d0 [ 351.162177][T10727] security_file_ioctl+0xd3/0x230 [ 351.162228][T10727] __x64_sys_ioctl+0xb7/0x210 [ 351.162276][T10727] do_syscall_64+0x106/0xf80 [ 351.162310][T10727] ? clear_bhb_loop+0x40/0x90 [ 351.162351][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.162383][T10727] RIP: 0033:0x7f58fad9c629 [ 351.162408][T10727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.162445][T10727] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.162475][T10727] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 351.162497][T10727] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 351.162516][T10727] RBP: 00007f58fbcad090 R08: 0000000000000000 R09: 0000000000000000 [ 351.162535][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.162552][T10727] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 351.162595][T10727] [ 351.162680][T10727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.383482][T10727] binder: 10726:10727 ioctl c0306201 0 returned -14 [ 352.221696][ T5831] Bluetooth: hci5: command 0x2016 tx timeout [ 352.965973][T10750] binder: 10749:10750 ioctl c0306201 0 returned -14 [ 353.117696][T10754] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 353.278004][T10758] FAULT_INJECTION: forcing a failure. [ 353.278004][T10758] name failslab, interval 1, probability 0, space 0, times 0 [ 353.309757][T10758] CPU: 0 UID: 0 PID: 10758 Comm: syz.0.1019 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.309811][T10758] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.309824][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.309842][T10758] Call Trace: [ 353.309852][T10758] [ 353.309865][T10758] dump_stack_lvl+0x100/0x190 [ 353.309919][T10758] should_fail_ex.cold+0x5/0xa [ 353.309957][T10758] ? tomoyo_encode2+0xfb/0x3c0 [ 353.309987][T10758] should_failslab+0xc2/0x120 [ 353.310018][T10758] __kmalloc_noprof+0xe0/0x850 [ 353.310062][T10758] ? d_absolute_path+0x136/0x1b0 [ 353.310109][T10758] tomoyo_encode2+0xfb/0x3c0 [ 353.310148][T10758] tomoyo_encode+0x29/0x50 [ 353.310178][T10758] tomoyo_realpath_from_path+0x18c/0x690 [ 353.310221][T10758] tomoyo_path_number_perm+0x23c/0x580 [ 353.310268][T10758] ? tomoyo_path_number_perm+0x22e/0x580 [ 353.310320][T10758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.310411][T10758] ? find_held_lock+0x2b/0x80 [ 353.310440][T10758] ? __fget_files+0x215/0x3d0 [ 353.310493][T10758] ? hook_file_ioctl_common+0x146/0x410 [ 353.310551][T10758] ? __fget_files+0x21f/0x3d0 [ 353.310606][T10758] security_file_ioctl+0xd3/0x230 [ 353.310658][T10758] __x64_sys_ioctl+0xb7/0x210 [ 353.310704][T10758] do_syscall_64+0x106/0xf80 [ 353.310741][T10758] ? clear_bhb_loop+0x40/0x90 [ 353.310781][T10758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.310814][T10758] RIP: 0033:0x7f58fad9c629 [ 353.310839][T10758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.310869][T10758] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.310901][T10758] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 353.310922][T10758] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 353.310941][T10758] RBP: 00007f58fbcad090 R08: 0000000000000000 R09: 0000000000000000 [ 353.310960][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.310978][T10758] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 353.311021][T10758] [ 353.311113][T10758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.539761][T10758] binder: 10757:10758 ioctl c0306201 0 returned -14 [ 353.952489][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 353.964360][T10772] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1023'. [ 354.494913][T10766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.502295][T10766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.508566][T10766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.515046][T10766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.521169][T10766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.527333][T10766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.536815][T10766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.552181][T10766] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 354.563088][T10766] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 354.571534][T10766] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 354.580395][T10766] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 354.587297][T10766] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 354.594769][T10766] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 354.756675][T10780] binder: 10779:10780 ioctl c0306201 0 returned -14 [ 355.276920][T10802] FAULT_INJECTION: forcing a failure. [ 355.276920][T10802] name failslab, interval 1, probability 0, space 0, times 0 [ 355.325413][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.0.1031 Tainted: G U L syzkaller #0 PREEMPT(full) [ 355.325467][T10802] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 355.325479][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.325499][T10802] Call Trace: [ 355.325509][T10802] [ 355.325521][T10802] dump_stack_lvl+0x100/0x190 [ 355.325573][T10802] should_fail_ex.cold+0x5/0xa [ 355.325611][T10802] should_failslab+0xc2/0x120 [ 355.325642][T10802] __kmalloc_cache_noprof+0x7a/0x6f0 [ 355.325679][T10802] ? binder_get_thread+0x201/0x850 [ 355.325724][T10802] binder_get_thread+0x201/0x850 [ 355.325769][T10802] binder_ioctl+0x26f/0x7610 [ 355.325812][T10802] ? tomoyo_path_number_perm+0x28f/0x580 [ 355.325860][T10802] ? tomoyo_path_number_perm+0x28f/0x580 [ 355.325917][T10802] ? tomoyo_path_number_perm+0x188/0x580 [ 355.325967][T10802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.326022][T10802] ? __pfx_binder_ioctl+0x10/0x10 [ 355.326070][T10802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.326126][T10802] ? do_vfs_ioctl+0x226/0x13e0 [ 355.326169][T10802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 355.326224][T10802] ? find_held_lock+0x2b/0x80 [ 355.326252][T10802] ? __fget_files+0x215/0x3d0 [ 355.326298][T10802] ? hook_file_ioctl_common+0x146/0x410 [ 355.326367][T10802] ? __fget_files+0x21f/0x3d0 [ 355.326422][T10802] ? __pfx_binder_ioctl+0x10/0x10 [ 355.326465][T10802] __x64_sys_ioctl+0x18e/0x210 [ 355.326512][T10802] do_syscall_64+0x106/0xf80 [ 355.326547][T10802] ? clear_bhb_loop+0x40/0x90 [ 355.326586][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.326620][T10802] RIP: 0033:0x7f58fad9c629 [ 355.326645][T10802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.326676][T10802] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.326707][T10802] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 355.326728][T10802] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 355.326747][T10802] RBP: 00007f58fbcad090 R08: 0000000000000000 R09: 0000000000000000 [ 355.326766][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.326784][T10802] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 355.326826][T10802] [ 355.326839][T10802] binder: 10801:10802 ioctl c0306201 0 returned -12 [ 355.924035][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 356.543698][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.550786][ T5831] Bluetooth: hci4: command 0x2016 tx timeout [ 356.558113][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.564856][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.634454][ T5831] Bluetooth: hci6: command 0x0c1a tx timeout [ 356.640658][ T5831] Bluetooth: hci5: command 0x2016 tx timeout [ 357.527502][T10826] Invalid ELF header magic: != ELF [ 358.624798][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.704864][ T5827] Bluetooth: hci5: command 0x2016 tx timeout [ 358.713146][ T5831] Bluetooth: hci6: command 0x0c1a tx timeout [ 358.747444][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.759316][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.767848][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.776945][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.792472][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.343680][T10836] chnl_net:caif_netlink_parms(): no params data found [ 360.715798][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.758604][T10836] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.767008][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.774597][T10836] bridge_slave_0: entered allmulticast mode [ 360.783487][T10836] bridge_slave_0: entered promiscuous mode [ 360.789467][ T5831] Bluetooth: hci5: command 0x2016 tx timeout [ 360.789478][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 360.808603][T10836] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.816119][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.823465][T10836] bridge_slave_1: entered allmulticast mode [ 360.872050][ T5827] Bluetooth: hci7: command tx timeout [ 360.878666][T10836] bridge_slave_1: entered promiscuous mode [ 361.029547][T10836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.261677][T10836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.474535][T10836] team0: Port device team_slave_0 added [ 361.483825][T10836] team0: Port device team_slave_1 added [ 361.556285][T10836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.563398][T10836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.910137][T10836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.925258][T10836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.935199][T10836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.046478][T10836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.123438][T10836] hsr_slave_0: entered promiscuous mode [ 362.147799][T10836] hsr_slave_1: entered promiscuous mode [ 362.154438][T10836] debugfs: 'hsr0' already exists in 'hsr' [ 362.256137][T10836] Cannot create hsr debugfs directory [ 362.478794][T10857] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1041'. [ 362.947703][ T5827] Bluetooth: hci7: command tx timeout [ 363.172603][T10866] FAULT_INJECTION: forcing a failure. [ 363.172603][T10866] name failslab, interval 1, probability 0, space 0, times 0 [ 363.186042][T10866] CPU: 1 UID: 0 PID: 10866 Comm: syz.7.1044 Tainted: G U L syzkaller #0 PREEMPT(full) [ 363.186094][T10866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 363.186106][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.186124][T10866] Call Trace: [ 363.186136][T10866] [ 363.186147][T10866] dump_stack_lvl+0x100/0x190 [ 363.186199][T10866] should_fail_ex.cold+0x5/0xa [ 363.186235][T10866] should_failslab+0xc2/0x120 [ 363.186267][T10866] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 363.186327][T10866] ? __alloc_skb+0x140/0x710 [ 363.186367][T10866] __alloc_skb+0x140/0x710 [ 363.186397][T10866] ? __alloc_skb+0x5b7/0x710 [ 363.186428][T10866] ? __pfx___alloc_skb+0x10/0x10 [ 363.186469][T10866] alloc_skb_with_frags+0xe0/0x810 [ 363.186510][T10866] sock_alloc_send_pskb+0x801/0x980 [ 363.186554][T10866] ? is_bpf_text_address+0x8a/0x1a0 [ 363.186599][T10866] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 363.186639][T10866] ? is_bpf_text_address+0x94/0x1a0 [ 363.186679][T10866] ? kernel_text_address+0x8d/0x100 [ 363.186721][T10866] ? __kernel_text_address+0xd/0x30 [ 363.186760][T10866] ? unwind_get_return_address+0x59/0xa0 [ 363.186815][T10866] __ip6_append_data+0x2c4c/0x4de0 [ 363.186864][T10866] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.186898][T10866] ? find_held_lock+0x2b/0x80 [ 363.186927][T10866] ? __pfx___ip6_append_data+0x10/0x10 [ 363.186962][T10866] ? __pfx_ip6_mtu+0x10/0x10 [ 363.186988][T10866] ? ip6_setup_cork+0x5be/0x14c0 [ 363.187025][T10866] ip6_make_skb+0x2a3/0x3b0 [ 363.187067][T10866] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.187100][T10866] ? __pfx_ip6_make_skb+0x10/0x10 [ 363.187145][T10866] ? sk_dst_check+0x1de/0x550 [ 363.187178][T10866] ? udpv6_sendmsg+0x2499/0x2f60 [ 363.187202][T10866] udpv6_sendmsg+0x2499/0x2f60 [ 363.187228][T10866] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 363.187258][T10866] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.187297][T10866] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 363.187332][T10866] ? iovec_from_user+0x8d/0x140 [ 363.187377][T10866] ? stack_trace_save+0x8e/0xc0 [ 363.187413][T10866] ? __pfx___might_resched+0x10/0x10 [ 363.187453][T10866] ? kasan_save_track+0x14/0x30 [ 363.187518][T10866] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 363.187545][T10866] ? inet6_sendmsg+0x105/0x140 [ 363.187569][T10866] inet6_sendmsg+0x105/0x140 [ 363.187598][T10866] sock_write_iter+0x437/0x610 [ 363.187639][T10866] ? __pfx_sock_write_iter+0x10/0x10 [ 363.187697][T10866] do_iter_readv_writev+0x6ee/0x920 [ 363.187765][T10866] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 363.187821][T10866] ? bpf_lsm_file_permission+0x9/0x10 [ 363.187865][T10866] ? security_file_permission+0x76/0x210 [ 363.187912][T10866] ? rw_verify_area+0xce/0x6d0 [ 363.187953][T10866] vfs_writev+0x360/0xe10 [ 363.188007][T10866] ? __pfx_vfs_writev+0x10/0x10 [ 363.188055][T10866] ? find_held_lock+0x2b/0x80 [ 363.188107][T10866] ? __fget_files+0x21f/0x3d0 [ 363.188163][T10866] ? do_writev+0x28a/0x340 [ 363.188204][T10866] do_writev+0x28a/0x340 [ 363.188250][T10866] ? __pfx_do_writev+0x10/0x10 [ 363.188305][T10866] do_syscall_64+0x106/0xf80 [ 363.188338][T10866] ? clear_bhb_loop+0x40/0x90 [ 363.188377][T10866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.188410][T10866] RIP: 0033:0x7eff5779c629 [ 363.188437][T10866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.188467][T10866] RSP: 002b:00007eff58721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 363.188498][T10866] RAX: ffffffffffffffda RBX: 00007eff57a15fa0 RCX: 00007eff5779c629 [ 363.188520][T10866] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 363.188538][T10866] RBP: 00007eff58721090 R08: 0000000000000000 R09: 0000000000000000 [ 363.188557][T10866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.188577][T10866] R13: 00007eff57a16038 R14: 00007eff57a15fa0 R15: 00007ffcb2380458 [ 363.188619][T10866] [ 363.603400][T10836] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.657736][T10836] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 363.776925][T10836] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 363.940968][T10836] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 364.271074][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 364.283799][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 364.293222][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 364.309254][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 364.317112][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 364.487301][T10836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.533778][T10836] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.736467][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.743732][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.774595][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.781879][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.023535][T10887] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1050'. [ 365.033070][ T5831] Bluetooth: hci7: command tx timeout [ 365.527691][T10879] chnl_net:caif_netlink_parms(): no params data found [ 365.783697][T10836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.889108][T10879] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.896493][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.903927][T10879] bridge_slave_0: entered allmulticast mode [ 365.956089][T10879] bridge_slave_0: entered promiscuous mode [ 365.988096][T10879] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.010058][T10879] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.017411][T10879] bridge_slave_1: entered allmulticast mode [ 366.041355][T10879] bridge_slave_1: entered promiscuous mode [ 366.230260][T10879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.262053][T10879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.388652][ T5831] Bluetooth: hci8: command tx timeout [ 366.406033][T10879] team0: Port device team_slave_0 added [ 366.451965][T10879] team0: Port device team_slave_1 added [ 366.575404][T10879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.590634][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.684366][T10879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.717642][T10879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.725089][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.795609][T10879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.849837][T10919] zswap: compressor  not available [ 366.987643][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1059'. [ 367.102497][T10879] hsr_slave_0: entered promiscuous mode [ 367.109990][ T5831] Bluetooth: hci7: command tx timeout [ 367.116413][T10879] hsr_slave_1: entered promiscuous mode [ 367.127010][T10879] debugfs: 'hsr0' already exists in 'hsr' [ 367.138848][T10879] Cannot create hsr debugfs directory [ 367.208965][T10836] veth0_vlan: entered promiscuous mode [ 367.224731][T10836] veth1_vlan: entered promiscuous mode [ 367.577275][T10836] veth0_macvtap: entered promiscuous mode [ 367.613399][T10836] veth1_macvtap: entered promiscuous mode [ 367.704294][T10836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.718852][T10836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.751636][ T6750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.789387][ T6750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.798202][ T6750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.845399][ T6750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.905780][T10879] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 367.939829][T10879] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 368.035876][T10879] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 368.088102][T10879] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 368.213105][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.225347][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.358715][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.386969][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.469611][ T5831] Bluetooth: hci8: command tx timeout [ 368.579374][T10951] zswap: compressor not available [ 368.669415][T10879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.768435][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.829307][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.836554][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.945366][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.952635][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.075736][T10958] mkiss: ax0: crc mode is auto. [ 370.207504][T10879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.564920][ T5831] Bluetooth: hci8: command tx timeout [ 371.106710][T10879] veth0_vlan: entered promiscuous mode [ 371.214564][T10879] veth1_vlan: entered promiscuous mode [ 371.370816][T10879] veth0_macvtap: entered promiscuous mode [ 371.386814][T10879] veth1_macvtap: entered promiscuous mode [ 371.415748][T10879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.448077][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.480089][ T7247] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.503423][ T7247] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.520551][ T7247] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.546399][ T7247] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.737641][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.770835][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.918232][ T7247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.941239][ T7247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.468903][T11019] zswap: compressor  not available [ 372.492444][T11025] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 372.632555][ T5831] Bluetooth: hci8: command tx timeout [ 373.033153][T11042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 374.194677][T11054] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 374.529546][T11064] FAULT_INJECTION: forcing a failure. [ 374.529546][T11064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 374.591190][T11064] CPU: 1 UID: 0 PID: 11064 Comm: syz.7.1084 Tainted: G U L syzkaller #0 PREEMPT(full) [ 374.591247][T11064] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 374.591262][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.591282][T11064] Call Trace: [ 374.591294][T11064] [ 374.591307][T11064] dump_stack_lvl+0x100/0x190 [ 374.591361][T11064] should_fail_ex.cold+0x5/0xa [ 374.591399][T11064] get_futex_key+0x1d2/0x1620 [ 374.591444][T11064] ? __pfx_get_futex_key+0x10/0x10 [ 374.591482][T11064] ? rcu_is_watching+0x12/0xc0 [ 374.591543][T11064] futex_wait_setup+0x81/0x500 [ 374.591603][T11064] __futex_wait+0x19f/0x300 [ 374.591657][T11064] ? __pfx___futex_wait+0x10/0x10 [ 374.591704][T11064] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.591738][T11064] ? lockdep_hardirqs_on+0x78/0x100 [ 374.591779][T11064] ? __pfx_futex_wake_mark+0x10/0x10 [ 374.591836][T11064] ? find_held_lock+0x2b/0x80 [ 374.591865][T11064] ? futex_wake+0x456/0x530 [ 374.591922][T11064] futex_wait+0xed/0x380 [ 374.591982][T11064] ? __pfx_futex_wait+0x10/0x10 [ 374.592053][T11064] do_futex+0x1ef/0x350 [ 374.592146][T11064] ? __pfx_do_futex+0x10/0x10 [ 374.592194][T11064] ? sock_ioctl+0x2dc/0x6b0 [ 374.592252][T11064] __x64_sys_futex+0x34f/0x4d0 [ 374.592301][T11064] ? __fget_files+0x21f/0x3d0 [ 374.592352][T11064] ? __pfx___x64_sys_futex+0x10/0x10 [ 374.592411][T11064] do_syscall_64+0x106/0xf80 [ 374.592446][T11064] ? clear_bhb_loop+0x40/0x90 [ 374.592489][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.592523][T11064] RIP: 0033:0x7eff5779c629 [ 374.592549][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.592581][T11064] RSP: 002b:00007eff587210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 374.592612][T11064] RAX: ffffffffffffffda RBX: 00007eff57a15fa8 RCX: 00007eff5779c629 [ 374.592635][T11064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff57a15fa8 [ 374.592655][T11064] RBP: 00007eff57a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 374.592676][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.592695][T11064] R13: 00007eff57a16038 R14: 00007ffcb2380370 R15: 00007ffcb2380458 [ 374.592737][T11064] [ 375.722869][T11094] binder: 11093:11094 ioctl 400454c9 2000000000c0 returned -22 [ 375.770898][T11094] binder: 11093:11094 ioctl 4008af60 200000000000 returned -22 [ 376.299919][T11091] zswap: compressor not available [ 376.944554][T11118] zswap: compressor not available [ 376.951529][T11123] overlayfs: "check_copy_up" module option is obsolete [ 377.292394][T11130] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1098'. [ 378.200905][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1102'. [ 378.262437][T11147] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1102'. [ 378.531846][T11154] FAULT_INJECTION: forcing a failure. [ 378.531846][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 378.581962][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.9.1105 Tainted: G U L syzkaller #0 PREEMPT(full) [ 378.582024][T11154] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 378.582037][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.582056][T11154] Call Trace: [ 378.582067][T11154] [ 378.582085][T11154] dump_stack_lvl+0x100/0x190 [ 378.582143][T11154] should_fail_ex.cold+0x5/0xa [ 378.582184][T11154] should_failslab+0xc2/0x120 [ 378.582217][T11154] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 378.582268][T11154] ? proc_alloc_inode+0x25/0x200 [ 378.582319][T11154] ? __pfx_proc_alloc_inode+0x10/0x10 [ 378.582367][T11154] proc_alloc_inode+0x25/0x200 [ 378.582411][T11154] alloc_inode+0x68/0x250 [ 378.582454][T11154] new_inode+0x22/0x1c0 [ 378.582500][T11154] proc_get_inode+0x1d/0x780 [ 378.582551][T11154] proc_lookup_de+0x236/0x360 [ 378.582608][T11154] proc_lookup+0xcf/0x110 [ 378.582659][T11154] proc_root_lookup+0x3b/0x70 [ 378.582708][T11154] lookup_open.isra.0+0x631/0x11b0 [ 378.582764][T11154] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 378.582837][T11154] ? lookup_fast+0x2da/0x600 [ 378.582897][T11154] path_openat+0xa98/0x31a0 [ 378.582945][T11154] ? __pfx_path_openat+0x10/0x10 [ 378.582991][T11154] do_file_open+0x20e/0x430 [ 378.583025][T11154] ? __pfx_do_file_open+0x10/0x10 [ 378.583087][T11154] ? alloc_fd+0x476/0x790 [ 378.583142][T11154] ? do_getname+0x191/0x390 [ 378.583185][T11154] do_sys_openat2+0x10d/0x1e0 [ 378.583227][T11154] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.583282][T11154] __x64_sys_openat+0x12d/0x210 [ 378.583325][T11154] ? __pfx___x64_sys_openat+0x10/0x10 [ 378.583384][T11154] do_syscall_64+0x106/0xf80 [ 378.583421][T11154] ? clear_bhb_loop+0x40/0x90 [ 378.583463][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.583498][T11154] RIP: 0033:0x7f046c79c629 [ 378.583526][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.583561][T11154] RSP: 002b:00007f046d595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 378.583592][T11154] RAX: ffffffffffffffda RBX: 00007f046ca15fa0 RCX: 00007f046c79c629 [ 378.583613][T11154] RDX: 0000000000101000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 378.583634][T11154] RBP: 00007f046c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 378.583652][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.583670][T11154] R13: 00007f046ca16038 R14: 00007f046ca15fa0 R15: 00007ffc8b53d258 [ 378.583711][T11154] [ 378.901363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.912258][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.232771][T11161] ima: policy update failed [ 379.284584][ T29] audit: type=1802 audit(4294976383.225:17): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1107" res=0 errno=0 [ 379.537951][T11179] netlink: 326 bytes leftover after parsing attributes in process `syz.8.1110'. [ 379.751128][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 379.761335][T11184] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1114'. [ 379.992983][T11193] scsi_dev_info_list_add_str: bad dev info string 'ñ' '' '' [ 380.501643][T11204] FAULT_INJECTION: forcing a failure. [ 380.501643][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 380.501697][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.0.1119 Tainted: G U L syzkaller #0 PREEMPT(full) [ 380.501748][T11204] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 380.501760][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.501785][T11204] Call Trace: [ 380.501795][T11204] [ 380.501808][T11204] dump_stack_lvl+0x100/0x190 [ 380.501863][T11204] should_fail_ex.cold+0x5/0xa [ 380.501902][T11204] should_failslab+0xc2/0x120 [ 380.501934][T11204] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 380.501981][T11204] ? do_fcntl_add_lease+0x361/0x550 [ 380.502033][T11204] ? lockdep_init_map_type+0x5c/0x250 [ 380.502086][T11204] do_fcntl_add_lease+0x361/0x550 [ 380.502139][T11204] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 380.502190][T11204] ? __pfx_futex_wait+0x10/0x10 [ 380.502255][T11204] fcntl_setlease+0xfc/0x180 [ 380.502287][T11204] ? __pfx_fcntl_setlease+0x10/0x10 [ 380.502332][T11204] do_fcntl+0x1149/0x1670 [ 380.502372][T11204] ? __pfx_do_fcntl+0x10/0x10 [ 380.502409][T11204] ? __fget_files+0x215/0x3d0 [ 380.502483][T11204] ? tomoyo_file_fcntl+0x6c/0xc0 [ 380.502530][T11204] __x64_sys_fcntl+0x163/0x200 [ 380.502576][T11204] do_syscall_64+0x106/0xf80 [ 380.502613][T11204] ? clear_bhb_loop+0x40/0x90 [ 380.502655][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.502690][T11204] RIP: 0033:0x7f58fad9c629 [ 380.502818][T11204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.502854][T11204] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 380.502886][T11204] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 380.502909][T11204] RDX: 9ec0000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 380.502929][T11204] RBP: 00007f58fae32b39 R08: 0000000000000000 R09: 0000000000000000 [ 380.502948][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.502967][T11204] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 380.503010][T11204] [ 381.244898][T11216] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 381.519351][ T5831] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 381.977331][T11236] FAULT_INJECTION: forcing a failure. [ 381.977331][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 382.014573][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.0.1128 Tainted: G U L syzkaller #0 PREEMPT(full) [ 382.014626][T11236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 382.014638][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.014656][T11236] Call Trace: [ 382.014666][T11236] [ 382.014678][T11236] dump_stack_lvl+0x100/0x190 [ 382.014730][T11236] should_fail_ex.cold+0x5/0xa [ 382.014768][T11236] should_failslab+0xc2/0x120 [ 382.014799][T11236] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 382.014846][T11236] ? vm_area_alloc+0x1f/0x160 [ 382.014883][T11236] ? vma_merge_new_range+0x38b/0xa30 [ 382.014924][T11236] ? __sanitizer_cov_trace_const_cmp4+0x10/0x20 [ 382.014984][T11236] vm_area_alloc+0x1f/0x160 [ 382.015023][T11236] __mmap_region+0x10cc/0x29e0 [ 382.015074][T11236] ? __pfx___mmap_region+0x10/0x10 [ 382.015113][T11236] ? process_measurement+0x1f4/0x2350 [ 382.015226][T11236] ? is_bpf_text_address+0x94/0x1a0 [ 382.015273][T11236] ? process_measurement+0x1f4/0x2350 [ 382.015369][T11236] ? rcu_is_watching+0x12/0xc0 [ 382.015425][T11236] ? cap_capable+0x107/0x460 [ 382.015475][T11236] mmap_region+0x30a/0x3e0 [ 382.015527][T11236] do_mmap+0xc63/0x12f0 [ 382.015568][T11236] ? __pfx_do_mmap+0x10/0x10 [ 382.015600][T11236] ? __pfx_down_write_killable+0x10/0x10 [ 382.015651][T11236] vm_mmap_pgoff+0x29e/0x470 [ 382.015693][T11236] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 382.015724][T11236] ? __fget_files+0x215/0x3d0 [ 382.015781][T11236] ? __fget_files+0x21f/0x3d0 [ 382.015838][T11236] ksys_mmap_pgoff+0x3c8/0x650 [ 382.015874][T11236] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 382.015903][T11236] ? fput+0x79/0x100 [ 382.015937][T11236] ? ksys_write+0x1ac/0x250 [ 382.015986][T11236] ? __pfx_ksys_write+0x10/0x10 [ 382.016038][T11236] __x64_sys_mmap+0x125/0x190 [ 382.016091][T11236] do_syscall_64+0x106/0xf80 [ 382.016125][T11236] ? clear_bhb_loop+0x40/0x90 [ 382.016164][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.016197][T11236] RIP: 0033:0x7f58fad9c629 [ 382.016228][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.016258][T11236] RSP: 002b:00007f58fbc8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 382.016288][T11236] RAX: ffffffffffffffda RBX: 00007f58fb016090 RCX: 00007f58fad9c629 [ 382.016309][T11236] RDX: 0000001000000016 RSI: 0000000000000008 RDI: 0000000000000000 [ 382.016327][T11236] RBP: 00007f58fbc8c090 R08: 0000000000000003 R09: 0000400180000000 [ 382.016346][T11236] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 382.016365][T11236] R13: 00007f58fb016128 R14: 00007f58fb016090 R15: 00007ffeb83b3318 [ 382.016414][T11236] [ 382.611950][T11246] FAULT_INJECTION: forcing a failure. [ 382.611950][T11246] name failslab, interval 1, probability 0, space 0, times 0 [ 382.625235][T11246] CPU: 1 UID: 0 PID: 11246 Comm: syz.0.1131 Tainted: G U L syzkaller #0 PREEMPT(full) [ 382.625286][T11246] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 382.625298][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.625317][T11246] Call Trace: [ 382.625327][T11246] [ 382.625339][T11246] dump_stack_lvl+0x100/0x190 [ 382.625399][T11246] should_fail_ex.cold+0x5/0xa [ 382.625437][T11246] should_failslab+0xc2/0x120 [ 382.625468][T11246] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 382.625516][T11246] ? __alloc_skb+0x140/0x710 [ 382.625556][T11246] __alloc_skb+0x140/0x710 [ 382.625584][T11246] ? __alloc_skb+0x5b7/0x710 [ 382.625615][T11246] ? __pfx___alloc_skb+0x10/0x10 [ 382.625658][T11246] skb_segment+0x997/0x4130 [ 382.625737][T11246] __udp_gso_segment+0x15de/0x2a40 [ 382.625779][T11246] ? __pfx_sock_wfree+0x10/0x10 [ 382.625809][T11246] ? kvm_async_pf_task_wait_schedule+0x585/0x590 [ 382.625866][T11246] udp6_ufo_fragment+0xa56/0xce0 [ 382.625906][T11246] ? __pfx_udp6_ufo_fragment+0x10/0x10 [ 382.625953][T11246] ipv6_gso_segment+0x7a0/0x1610 [ 382.626001][T11246] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 382.626045][T11246] skb_mac_gso_segment+0x2a5/0x640 [ 382.626084][T11246] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 382.626118][T11246] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 382.626157][T11246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.626212][T11246] ? __pfx_passthru_features_check+0x10/0x10 [ 382.626269][T11246] __skb_gso_segment+0x3c9/0x770 [ 382.626337][T11246] validate_xmit_skb+0x942/0x1590 [ 382.626406][T11246] validate_xmit_skb_list+0xc1/0x130 [ 382.626458][T11246] sch_direct_xmit+0x480/0xc60 [ 382.626494][T11246] ? lock_acquire+0x1cf/0x380 [ 382.626538][T11246] ? __pfx_sch_direct_xmit+0x10/0x10 [ 382.626571][T11246] ? do_raw_spin_lock+0x210/0x260 [ 382.626630][T11246] __dev_queue_xmit+0x250e/0x4750 [ 382.626687][T11246] ? ip6mr_fib_lookup+0x133/0x1a0 [ 382.626735][T11246] ? __pfx___dev_queue_xmit+0x10/0x10 [ 382.626787][T11246] ? __lock_acquire+0x4a5/0x2630 [ 382.626833][T11246] ? __lock_acquire+0x4a5/0x2630 [ 382.626895][T11246] ? find_held_lock+0x2b/0x80 [ 382.626923][T11246] ? __ip6_finish_output+0x357/0x1080 [ 382.626979][T11246] ip6_finish_output2+0xfd4/0x1ce0 [ 382.627037][T11246] __ip6_finish_output+0x357/0x1080 [ 382.627088][T11246] ip6_output+0x2aa/0xa60 [ 382.627135][T11246] ? __pfx_ip6_output+0x10/0x10 [ 382.627182][T11246] ? __pfx_ip6_finish_output+0x10/0x10 [ 382.627227][T11246] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 382.627275][T11246] ? ip6table_mangle_hook+0xcb/0x770 [ 382.627330][T11246] ip6_mr_output+0x233/0x1180 [ 382.627399][T11246] ? __pfx_ip6_mr_output+0x10/0x10 [ 382.627458][T11246] ? __ip6_local_out+0x38c/0xaf0 [ 382.627498][T11246] ? __pfx_dst_output+0x10/0x10 [ 382.627538][T11246] ? ip6_local_out+0x2a5/0x4a0 [ 382.627566][T11246] ip6_local_out+0x2a5/0x4a0 [ 382.627598][T11246] ip6_send_skb+0x112/0x430 [ 382.627708][T11246] udp_v6_send_skb+0x677/0x18a0 [ 382.627753][T11246] udpv6_sendmsg+0x24e5/0x2f60 [ 382.627781][T11246] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.627817][T11246] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 382.627867][T11246] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 382.627906][T11246] ? iovec_from_user+0x8d/0x140 [ 382.627954][T11246] ? stack_trace_save+0x8e/0xc0 [ 382.628000][T11246] ? __pfx___might_resched+0x10/0x10 [ 382.628045][T11246] ? kasan_save_track+0x14/0x30 [ 382.628123][T11246] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 382.628157][T11246] ? inet6_sendmsg+0x105/0x140 [ 382.628188][T11246] inet6_sendmsg+0x105/0x140 [ 382.628223][T11246] sock_write_iter+0x437/0x610 [ 382.628269][T11246] ? __pfx_sock_write_iter+0x10/0x10 [ 382.628343][T11246] do_iter_readv_writev+0x6ee/0x920 [ 382.628413][T11246] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 382.628468][T11246] ? bpf_lsm_file_permission+0x9/0x10 [ 382.628516][T11246] ? security_file_permission+0x76/0x210 [ 382.628569][T11246] ? rw_verify_area+0xce/0x6d0 [ 382.628615][T11246] vfs_writev+0x360/0xe10 [ 382.628671][T11246] ? __pfx_vfs_writev+0x10/0x10 [ 382.628719][T11246] ? find_held_lock+0x2b/0x80 [ 382.628775][T11246] ? __fget_files+0x21f/0x3d0 [ 382.628832][T11246] ? do_writev+0x28a/0x340 [ 382.628874][T11246] do_writev+0x28a/0x340 [ 382.628920][T11246] ? __pfx_do_writev+0x10/0x10 [ 382.628977][T11246] do_syscall_64+0x106/0xf80 [ 382.629011][T11246] ? clear_bhb_loop+0x40/0x90 [ 382.629051][T11246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.629083][T11246] RIP: 0033:0x7f58fad9c629 [ 382.629109][T11246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.629141][T11246] RSP: 002b:00007f58fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 382.629171][T11246] RAX: ffffffffffffffda RBX: 00007f58fb015fa0 RCX: 00007f58fad9c629 [ 382.629192][T11246] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 382.629212][T11246] RBP: 00007f58fbcad090 R08: 0000000000000000 R09: 0000000000000000 [ 382.629231][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.629250][T11246] R13: 00007f58fb016038 R14: 00007f58fb015fa0 R15: 00007ffeb83b3318 [ 382.629294][T11246] [ 383.155844][T11247] netlink: 226 bytes leftover after parsing attributes in process `syz.7.1130'. [ 383.227828][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1130'. [ 383.239630][T11247] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 383.882340][T11274] bridge_slave_1: left allmulticast mode [ 383.888303][T11274] bridge_slave_1: left promiscuous mode [ 383.894876][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.910008][T11275] futex_wake_op: syz.9.1136 tries to shift op by -2048; fix this program [ 383.924252][T11275] futex_wake_op: syz.9.1136 tries to shift op by -2048; fix this program [ 383.951582][T11275] 0x000000000001-0x000000020000 : "" [ 384.013792][T11275] ftl_cs: FTL header corrupt! [ 386.150370][T11302] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 386.163419][T11302] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 386.172833][T11302] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 386.217975][T11302] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 386.239043][T11302] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 386.298985][T11302] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 386.307443][T11302] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 386.338873][T11302] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 386.358677][T11302] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 386.380932][T11302] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 386.411318][T11302] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 386.441235][T11302] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 386.478130][T11302] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 387.472041][T11329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.493712][T11329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.514337][T11329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.538781][T11329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.549386][T11355] FAULT_INJECTION: forcing a failure. [ 387.549386][T11355] name failslab, interval 1, probability 0, space 0, times 0 [ 387.569811][T11329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.596835][T11329] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 387.630967][T11329] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 387.663337][T11329] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 387.673956][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz.7.1157 Tainted: G U L syzkaller #0 PREEMPT(full) [ 387.674008][T11355] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 387.674020][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.674038][T11355] Call Trace: [ 387.674048][T11355] [ 387.674059][T11355] dump_stack_lvl+0x100/0x190 [ 387.674111][T11355] should_fail_ex.cold+0x5/0xa [ 387.674150][T11355] should_failslab+0xc2/0x120 [ 387.674182][T11355] __kmalloc_cache_noprof+0x7a/0x6f0 [ 387.674228][T11355] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 387.674291][T11355] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 387.674360][T11355] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 387.674426][T11355] ? _mutex_trylock_nest_lock+0x170/0x310 [ 387.674461][T11355] ? snd_pcm_oss_mmap+0x557/0x6c0 [ 387.674505][T11355] ? __pfx__mutex_trylock_nest_lock+0x10/0x10 [ 387.674541][T11355] ? __pfx___vma_start_write+0x10/0x10 [ 387.674591][T11355] snd_pcm_oss_mmap+0x575/0x6c0 [ 387.674643][T11355] __mmap_region+0x1443/0x29e0 [ 387.674695][T11355] ? __pfx___mmap_region+0x10/0x10 [ 387.674736][T11355] ? process_measurement+0x1f4/0x2350 [ 387.674851][T11355] ? is_bpf_text_address+0x94/0x1a0 [ 387.674899][T11355] ? process_measurement+0x1f4/0x2350 [ 387.675004][T11355] ? rcu_is_watching+0x12/0xc0 [ 387.675054][T11355] ? cap_capable+0x107/0x460 [ 387.675104][T11355] mmap_region+0x30a/0x3e0 [ 387.675158][T11355] do_mmap+0xc63/0x12f0 [ 387.675205][T11355] ? __pfx_do_mmap+0x10/0x10 [ 387.675238][T11355] ? __pfx_down_write_killable+0x10/0x10 [ 387.675290][T11355] vm_mmap_pgoff+0x29e/0x470 [ 387.675331][T11355] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 387.675362][T11355] ? __fget_files+0x215/0x3d0 [ 387.675419][T11355] ? __fget_files+0x21f/0x3d0 [ 387.675477][T11355] ksys_mmap_pgoff+0x3c8/0x650 [ 387.675514][T11355] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 387.675544][T11355] ? fput+0x79/0x100 [ 387.675577][T11355] ? ksys_write+0x1ac/0x250 [ 387.675625][T11355] ? __pfx_ksys_write+0x10/0x10 [ 387.675679][T11355] __x64_sys_mmap+0x125/0x190 [ 387.675732][T11355] do_syscall_64+0x106/0xf80 [ 387.675767][T11355] ? clear_bhb_loop+0x40/0x90 [ 387.675808][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.675841][T11355] RIP: 0033:0x7eff5779c629 [ 387.675867][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.675897][T11355] RSP: 002b:00007eff58700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 387.675928][T11355] RAX: ffffffffffffffda RBX: 00007eff57a16090 RCX: 00007eff5779c629 [ 387.675949][T11355] RDX: 0000001000000016 RSI: 0000000000000008 RDI: 0000000000000000 [ 387.675969][T11355] RBP: 00007eff58700090 R08: 0000000000000003 R09: 0000400180000000 [ 387.675989][T11355] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 387.676007][T11355] R13: 00007eff57a16128 R14: 00007eff57a16090 R15: 00007ffcb2380458 [ 387.676050][T11355] [ 387.976443][T11329] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 388.880248][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.174374][T11369] zswap: compressor not available [ 389.522987][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 389.529224][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 389.600554][ T5827] Bluetooth: hci4: command 0x2016 tx timeout [ 389.606673][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 389.618321][T11378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.654403][T11378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.682465][ T5831] Bluetooth: hci7: command 0x0c1a tx timeout [ 389.690698][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 389.696770][ T5827] Bluetooth: hci5: command 0x2016 tx timeout [ 389.703679][T11378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.732501][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1162'. [ 389.771744][T11378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 389.785647][T11378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 389.815338][T11378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 389.851920][T11378] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 389.884936][T11378] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 389.901283][T11378] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 389.997977][T11389] caif0: entered allmulticast mode [ 391.410000][T11413] Invalid ELF header magic: != ELF [ 391.410172][T11414] Invalid ELF header magic: != ELF [ 391.441374][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.662883][T11423] Invalid ELF header magic: != ELF [ 391.682128][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.761630][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.841659][ T5827] Bluetooth: hci5: command 0x2016 tx timeout [ 391.847746][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.854051][ T5831] Bluetooth: hci4: command 0x2016 tx timeout [ 391.921398][ T5830] Bluetooth: hci7: command 0x0c1a tx timeout [ 391.928131][ T5830] Bluetooth: hci6: command 0x0c1a tx timeout [ 391.935377][ T5827] Bluetooth: hci8: command 0x0c1a tx timeout [ 393.310644][T11447] FAULT_INJECTION: forcing a failure. [ 393.310644][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 393.383982][T11447] CPU: 0 UID: 0 PID: 11447 Comm: syz.7.1177 Tainted: G U L syzkaller #0 PREEMPT(full) [ 393.384023][T11447] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 393.384032][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.384045][T11447] Call Trace: [ 393.384053][T11447] [ 393.384061][T11447] dump_stack_lvl+0x100/0x190 [ 393.384100][T11447] should_fail_ex.cold+0x5/0xa [ 393.384126][T11447] ? constrain_params_by_rules+0x175/0xcc0 [ 393.384148][T11447] should_failslab+0xc2/0x120 [ 393.384171][T11447] __kmalloc_noprof+0xe0/0x850 [ 393.384203][T11447] ? unwind_get_return_address+0x59/0xa0 [ 393.384233][T11447] constrain_params_by_rules+0x175/0xcc0 [ 393.384262][T11447] ? stack_trace_save+0x8e/0xc0 [ 393.384287][T11447] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 393.384316][T11447] ? __kasan_kmalloc+0xaa/0xb0 [ 393.384348][T11447] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 393.384384][T11447] ? snd_pcm_oss_mmap+0x575/0x6c0 [ 393.384415][T11447] ? __mmap_region+0x1443/0x29e0 [ 393.384453][T11447] ? rcu_is_watching+0x12/0xc0 [ 393.384487][T11447] ? snd_interval_refine+0x2d0/0x580 [ 393.384518][T11447] snd_pcm_hw_refine+0x7e7/0xad0 [ 393.384553][T11447] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 393.384586][T11447] ? __asan_memset+0x23/0x50 [ 393.384615][T11447] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 393.384653][T11447] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 393.384702][T11447] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 393.384747][T11447] ? _mutex_trylock_nest_lock+0x170/0x310 [ 393.384773][T11447] ? snd_pcm_oss_mmap+0x557/0x6c0 [ 393.384820][T11447] snd_pcm_oss_mmap+0x575/0x6c0 [ 393.384857][T11447] __mmap_region+0x1443/0x29e0 [ 393.384897][T11447] ? __pfx___mmap_region+0x10/0x10 [ 393.384925][T11447] ? process_measurement+0x1f4/0x2350 [ 393.385004][T11447] ? is_bpf_text_address+0x94/0x1a0 [ 393.385037][T11447] ? process_measurement+0x1f4/0x2350 [ 393.385105][T11447] ? rcu_is_watching+0x12/0xc0 [ 393.385139][T11447] ? cap_capable+0x107/0x460 [ 393.385174][T11447] mmap_region+0x30a/0x3e0 [ 393.385212][T11447] do_mmap+0xc63/0x12f0 [ 393.385240][T11447] ? __pfx_do_mmap+0x10/0x10 [ 393.385262][T11447] ? __pfx_down_write_killable+0x10/0x10 [ 393.385298][T11447] vm_mmap_pgoff+0x29e/0x470 [ 393.385327][T11447] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 393.385349][T11447] ? __fget_files+0x215/0x3d0 [ 393.385389][T11447] ? __fget_files+0x21f/0x3d0 [ 393.385429][T11447] ksys_mmap_pgoff+0x3c8/0x650 [ 393.385454][T11447] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 393.385474][T11447] ? fput+0x79/0x100 [ 393.385513][T11447] ? ksys_write+0x1ac/0x250 [ 393.385553][T11447] ? __pfx_ksys_write+0x10/0x10 [ 393.385592][T11447] __x64_sys_mmap+0x125/0x190 [ 393.385632][T11447] do_syscall_64+0x106/0xf80 [ 393.385656][T11447] ? clear_bhb_loop+0x40/0x90 [ 393.385685][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.385709][T11447] RIP: 0033:0x7eff5779c629 [ 393.385727][T11447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.385749][T11447] RSP: 002b:00007eff58700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 393.385770][T11447] RAX: ffffffffffffffda RBX: 00007eff57a16090 RCX: 00007eff5779c629 [ 393.385785][T11447] RDX: 0000001000000016 RSI: 0000000000000008 RDI: 0000000000000000 [ 393.385799][T11447] RBP: 00007eff58700090 R08: 0000000000000003 R09: 0000400180000000 [ 393.385820][T11447] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 393.385833][T11447] R13: 00007eff57a16128 R14: 00007eff57a16090 R15: 00007ffcb2380458 [ 393.385863][T11447] [ 394.162609][ T5827] Bluetooth: hci8: command 0x0c1a tx timeout [ 394.168924][ T5827] Bluetooth: hci7: command 0x0c1a tx timeout [ 395.246551][T11461] binder: 11460:11461 ioctl c0306201 0 returned -14 [ 396.249505][ T5830] Bluetooth: hci8: command 0x0c1a tx timeout [ 398.043189][T11501] netlink: 'syz.0.1188': attribute type 2 has an invalid length. [ 398.068476][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 400.891577][T11543] FAULT_INJECTION: forcing a failure. [ 400.891577][T11543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.974695][T11543] CPU: 1 UID: 0 PID: 11543 Comm: syz.7.1195 Tainted: G U L syzkaller #0 PREEMPT(full) [ 400.974747][T11543] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 400.974759][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.974777][T11543] Call Trace: [ 400.974786][T11543] [ 400.974797][T11543] dump_stack_lvl+0x100/0x190 [ 400.974848][T11543] should_fail_ex.cold+0x5/0xa [ 400.974878][T11543] ? prepare_alloc_pages+0x16d/0x5f0 [ 400.974916][T11543] should_fail_alloc_page+0xeb/0x140 [ 400.974947][T11543] prepare_alloc_pages+0x1f0/0x5f0 [ 400.974978][T11543] ? __pfx_stack_trace_save+0x10/0x10 [ 400.975025][T11543] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 400.975079][T11543] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.975131][T11543] ? __lock_acquire+0x4a5/0x2630 [ 400.975182][T11543] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.975235][T11543] ? __lock_acquire+0x4a5/0x2630 [ 400.975287][T11543] ? __lock_acquire+0x4a5/0x2630 [ 400.975332][T11543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.975387][T11543] ? policy_nodemask+0xed/0x4f0 [ 400.975421][T11543] alloc_pages_mpol+0x1fb/0x550 [ 400.975455][T11543] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 400.975483][T11543] ? blk_cgroup_congested+0x136/0x270 [ 400.975534][T11543] alloc_pages_noprof+0x131/0x390 [ 400.975569][T11543] pte_alloc_one+0x1e/0x3e0 [ 400.975606][T11543] do_huge_pmd_anonymous_page+0x2bc/0x1a60 [ 400.975664][T11543] __handle_mm_fault+0x1e9e/0x2b60 [ 400.975718][T11543] ? mt_find+0x45e/0x8e0 [ 400.975756][T11543] ? __pfx___handle_mm_fault+0x10/0x10 [ 400.975794][T11543] ? __pfx_mt_find+0x10/0x10 [ 400.975862][T11543] handle_mm_fault+0x36d/0xa20 [ 400.975912][T11543] __get_user_pages+0xf9c/0x34d0 [ 400.975962][T11543] ? __pfx___get_user_pages+0x10/0x10 [ 400.976015][T11543] populate_vma_page_range+0x267/0x3f0 [ 400.976054][T11543] ? __pfx_populate_vma_page_range+0x10/0x10 [ 400.976090][T11543] ? __pfx_find_vma_intersection+0x10/0x10 [ 400.976147][T11543] ? do_mmap+0x93f/0x12f0 [ 400.976185][T11543] __mm_populate+0x107/0x3a0 [ 400.976222][T11543] ? __pfx___mm_populate+0x10/0x10 [ 400.976261][T11543] ? up_write+0x290/0x4f0 [ 400.976311][T11543] vm_mmap_pgoff+0x37f/0x470 [ 400.976348][T11543] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 400.976385][T11543] ? do_futex+0x192/0x350 [ 400.976427][T11543] ? __pfx_do_futex+0x10/0x10 [ 400.976465][T11543] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.976512][T11543] ksys_mmap_pgoff+0xe1/0x650 [ 400.976545][T11543] ? __x64_sys_futex+0x34f/0x4d0 [ 400.976585][T11543] ? __x64_sys_futex+0x358/0x4d0 [ 400.976628][T11543] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 400.976660][T11543] ? xfd_validate_state+0x129/0x190 [ 400.976713][T11543] __x64_sys_mmap+0x125/0x190 [ 400.976765][T11543] do_syscall_64+0x106/0xf80 [ 400.976801][T11543] ? clear_bhb_loop+0x40/0x90 [ 400.976840][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.976873][T11543] RIP: 0033:0x7eff5779c629 [ 400.976899][T11543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.976931][T11543] RSP: 002b:00007eff58700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 400.976962][T11543] RAX: ffffffffffffffda RBX: 00007eff57a16090 RCX: 00007eff5779c629 [ 400.976990][T11543] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 400.977009][T11543] RBP: 00007eff57832b39 R08: 0000000000000002 R09: 0000000000008000 [ 400.977028][T11543] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 400.977046][T11543] R13: 00007eff57a16128 R14: 00007eff57a16090 R15: 00007ffcb2380458 [ 400.977089][T11543] [ 402.046775][T11542] netlink: 'syz.7.1195': attribute type 11 has an invalid length. [ 402.145685][T11552] rnbd_client L213: map_device: Parameters missing [ 402.913311][T11559] Invalid ELF header magic: != ELF [ 404.036654][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1202'. [ 404.069110][T11574] netlink: 354 bytes leftover after parsing attributes in process `syz.9.1202'. [ 404.097946][T11574] FAULT_INJECTION: forcing a failure. [ 404.097946][T11574] name fail_futex, interval 1, probability 0, space 0, times 0 [ 404.140762][T11574] CPU: 0 UID: 8 PID: 11574 Comm: syz.9.1202 Tainted: G U L syzkaller #0 PREEMPT(full) [ 404.140822][T11574] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 404.140835][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.140855][T11574] Call Trace: [ 404.140866][T11574] [ 404.140880][T11574] dump_stack_lvl+0x100/0x190 [ 404.140938][T11574] should_fail_ex.cold+0x5/0xa [ 404.140979][T11574] get_futex_key+0x1d2/0x1620 [ 404.141035][T11574] ? __pfx_get_futex_key+0x10/0x10 [ 404.141073][T11574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.141125][T11574] futex_wake+0xea/0x530 [ 404.141179][T11574] ? __pfx_futex_wake+0x10/0x10 [ 404.141248][T11574] do_futex+0x32b/0x350 [ 404.141293][T11574] ? __pfx_do_futex+0x10/0x10 [ 404.141334][T11574] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 404.141378][T11574] ? lockdep_hardirqs_on+0x78/0x100 [ 404.141425][T11574] __x64_sys_futex+0x34f/0x4d0 [ 404.141475][T11574] ? __pfx___x64_sys_futex+0x10/0x10 [ 404.141536][T11574] do_syscall_64+0x106/0xf80 [ 404.141572][T11574] ? clear_bhb_loop+0x40/0x90 [ 404.141614][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.141648][T11574] RIP: 0033:0x7f046c79c629 [ 404.141677][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.141711][T11574] RSP: 002b:00007f046d5950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 404.141743][T11574] RAX: ffffffffffffffda RBX: 00007f046ca15fa8 RCX: 00007f046c79c629 [ 404.141765][T11574] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f046ca15fac [ 404.141786][T11574] RBP: 00007f046ca15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 404.141806][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.141826][T11574] R13: 00007f046ca16038 R14: 00007ffc8b53d170 R15: 00007ffc8b53d258 [ 404.141868][T11574] [ 404.955591][T11582] zram: Added device: zram0 [ 405.498215][T11584] mmap: syz.9.1206 (11584): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 405.641208][T11592] FAULT_INJECTION: forcing a failure. [ 405.641208][T11592] name fail_futex, interval 1, probability 0, space 0, times 0 [ 405.688346][T11592] CPU: 0 UID: 0 PID: 11592 Comm: syz.8.1209 Tainted: G U L syzkaller #0 PREEMPT(full) [ 405.688405][T11592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 405.688419][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.688438][T11592] Call Trace: [ 405.688448][T11592] [ 405.688461][T11592] dump_stack_lvl+0x100/0x190 [ 405.688516][T11592] should_fail_ex.cold+0x5/0xa [ 405.688554][T11592] get_futex_key+0x1d2/0x1620 [ 405.688599][T11592] ? __pfx_get_futex_key+0x10/0x10 [ 405.688643][T11592] ? __lock_acquire+0x4a5/0x2630 [ 405.688691][T11592] futex_wait_setup+0x81/0x500 [ 405.688752][T11592] __futex_wait+0x19f/0x300 [ 405.688805][T11592] ? __pfx___futex_wait+0x10/0x10 [ 405.688853][T11592] ? do_raw_spin_unlock+0x145/0x1e0 [ 405.688917][T11592] ? __pfx_futex_wake_mark+0x10/0x10 [ 405.688973][T11592] ? futex_hash+0x2c5/0x380 [ 405.689017][T11592] futex_wait+0xed/0x380 [ 405.689067][T11592] ? __pfx_futex_wait+0x10/0x10 [ 405.689116][T11592] ? rcu_is_watching+0x12/0xc0 [ 405.689159][T11592] ? _raw_spin_unlock_irq+0x23/0x50 [ 405.689186][T11592] ? lockdep_hardirqs_on+0x78/0x100 [ 405.689222][T11592] do_futex+0x1ef/0x350 [ 405.689259][T11592] ? __pfx_do_futex+0x10/0x10 [ 405.689294][T11592] ? __x64_sys_setitimer+0x266/0x350 [ 405.689337][T11592] __x64_sys_futex+0x34f/0x4d0 [ 405.689379][T11592] ? __pfx___x64_sys_futex+0x10/0x10 [ 405.689431][T11592] do_syscall_64+0x106/0xf80 [ 405.689460][T11592] ? clear_bhb_loop+0x40/0x90 [ 405.689494][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.689523][T11592] RIP: 0033:0x7fd38239c629 [ 405.689548][T11592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.689576][T11592] RSP: 002b:00007fd3832ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 405.689603][T11592] RAX: ffffffffffffffda RBX: 00007fd382615fa8 RCX: 00007fd38239c629 [ 405.689622][T11592] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd382615fa8 [ 405.689640][T11592] RBP: 00007fd382615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 405.689657][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.689673][T11592] R13: 00007fd382616038 R14: 00007ffe3791dd40 R15: 00007ffe3791de28 [ 405.689709][T11592] [ 406.046983][T11598] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1210'. [ 406.588883][T11607] random: crng reseeded on system resumption [ 406.721618][T11615] hub 1-0:1.0: USB hub found [ 406.755650][T11615] hub 1-0:1.0: 1 port detected [ 408.458573][T11645] FAULT_INJECTION: forcing a failure. [ 408.458573][T11645] name failslab, interval 1, probability 0, space 0, times 0 [ 408.475297][T11645] CPU: 1 UID: 0 PID: 11645 Comm: syz.9.1222 Tainted: G U L syzkaller #0 PREEMPT(full) [ 408.475353][T11645] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 408.475366][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.475395][T11645] Call Trace: [ 408.475406][T11645] [ 408.475417][T11645] dump_stack_lvl+0x100/0x190 [ 408.475472][T11645] should_fail_ex.cold+0x5/0xa [ 408.475509][T11645] should_failslab+0xc2/0x120 [ 408.475542][T11645] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 408.475590][T11645] ? __proc_create+0x2cb/0x8c0 [ 408.475648][T11645] __proc_create+0x2cb/0x8c0 [ 408.475698][T11645] ? __pfx___proc_create+0x10/0x10 [ 408.475755][T11645] ? _raw_write_unlock+0x28/0x50 [ 408.475788][T11645] ? proc_register+0x559/0x8a0 [ 408.475844][T11645] proc_create_reg+0x75/0x170 [ 408.475901][T11645] proc_create_net_data+0x8e/0x1c0 [ 408.475959][T11645] ? __pfx_proc_create_net_data+0x10/0x10 [ 408.476005][T11645] ? net_generic+0xea/0x2a0 [ 408.476061][T11645] ? __pfx_vlan_init_net+0x10/0x10 [ 408.476100][T11645] vlan_proc_init+0xe6/0x160 [ 408.476154][T11645] ops_init+0x1e2/0x5f0 [ 408.476198][T11645] setup_net+0x118/0x3a0 [ 408.476238][T11645] ? __pfx_setup_net+0x10/0x10 [ 408.476276][T11645] ? lockdep_init_map_type+0x5c/0x250 [ 408.476323][T11645] ? mutex_init_lockep+0x110/0x150 [ 408.476401][T11645] copy_net_ns+0x46f/0x7c0 [ 408.476450][T11645] create_new_namespaces+0x3ea/0xac0 [ 408.476496][T11645] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 408.476538][T11645] ksys_unshare+0x455/0xab0 [ 408.476584][T11645] ? __pfx_ksys_unshare+0x10/0x10 [ 408.476644][T11645] __x64_sys_unshare+0x31/0x40 [ 408.476686][T11645] do_syscall_64+0x106/0xf80 [ 408.476722][T11645] ? clear_bhb_loop+0x40/0x90 [ 408.476764][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.476799][T11645] RIP: 0033:0x7f046c79c629 [ 408.476829][T11645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.476861][T11645] RSP: 002b:00007f046d595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.476895][T11645] RAX: ffffffffffffffda RBX: 00007f046ca15fa0 RCX: 00007f046c79c629 [ 408.476918][T11645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 408.476938][T11645] RBP: 00007f046c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 408.476958][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.476978][T11645] R13: 00007f046ca16038 R14: 00007f046ca15fa0 R15: 00007ffc8b53d258 [ 408.477022][T11645] [ 408.479398][T11645] 8021q: can't create entry in proc filesystem! [ 409.404088][T11652] binder: 11649:11652 ioctl c0306201 0 returned -14 [ 410.129971][T11663] futex_wake_op: syz.0.1229 tries to shift op by -2048; fix this program [ 410.140833][T11663] futex_wake_op: syz.0.1229 tries to shift op by -2048; fix this program [ 410.205582][T11663] 0x000000000001-0x000000020000 : "" [ 410.276832][T11663] ftl_cs: FTL header corrupt! [ 413.497741][T11714] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 413.701865][T11721] __vm_enough_memory: pid: 11721, comm: syz.8.1240, bytes: 4398046511104 not enough memory for the allocation [ 414.182444][ T5830] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 414.720050][T11733] block2mtd: Using custom MTD label '' for dev [ 414.730770][T11733] block2mtd: error: cannot open device [ 414.741926][T11733] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1244'. [ 414.762234][T11735] binder: 11734:11735 ioctl 4018620d 9 returned -22 [ 414.770772][T11733] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1244'. [ 414.807240][T11733] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1244'. [ 414.817470][T11733] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1244'. [ 414.850206][T11733] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1244'. [ 414.859765][T11737] netlink: 98 bytes leftover after parsing attributes in process `syz.9.1244'. [ 414.996063][T11733] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 417.397903][ T29] audit: type=1800 audit(4294976421.326:18): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1253" name="dbroot" dev="configfs" ino=42635 res=0 errno=0 [ 417.513431][T11764] binder: 11763:11764 ioctl c0306201 0 returned -14 [ 417.532172][T11766] block2mtd: Using custom MTD label '' for dev [ 417.551063][T11766] block2mtd: error: cannot open device [ 417.563019][T11766] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1255'. [ 417.575314][T11766] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1255'. [ 417.597957][T11766] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1255'. [ 417.623652][T11766] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1255'. [ 419.102795][T11795] binder: 11792:11795 ioctl c0306201 0 returned -14 [ 419.521099][T11797] block2mtd: Using custom MTD label '' for dev [ 419.528662][T11797] block2mtd: error: cannot open device [ 422.216886][ T5827] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 422.232901][ T5827] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 422.242236][ T5827] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 422.251256][ T5827] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 422.261119][ T5827] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 422.578811][T11834] chnl_net:caif_netlink_parms(): no params data found [ 422.820765][T11834] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.831701][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.840590][T11834] bridge_slave_0: entered allmulticast mode [ 422.864902][T11834] bridge_slave_0: entered promiscuous mode [ 422.890672][T11834] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.900188][T11834] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.915270][T11834] bridge_slave_1: entered allmulticast mode [ 422.923188][T11834] bridge_slave_1: entered promiscuous mode [ 422.989039][T11834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.002741][T11834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.053500][T11834] team0: Port device team_slave_0 added [ 423.071571][T11834] team0: Port device team_slave_1 added [ 423.130393][T11834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.145350][T11834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.171528][T11834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.185764][T11834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.193564][T11834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.223315][T11834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.315525][T11834] hsr_slave_0: entered promiscuous mode [ 423.322622][T11834] hsr_slave_1: entered promiscuous mode [ 423.336251][T11834] debugfs: 'hsr0' already exists in 'hsr' [ 423.346819][T11834] Cannot create hsr debugfs directory [ 424.348359][ T5830] Bluetooth: hci9: command tx timeout [ 424.474600][T11834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.529187][T11834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.569416][T11834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.590088][T11889] __nla_validate_parse: 7 callbacks suppressed [ 424.590114][T11889] netlink: 330 bytes leftover after parsing attributes in process `syz.8.1284'. [ 424.618816][T11834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.959018][T11834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.039100][T11834] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.113407][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.120575][ T9681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.181818][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.189082][ T9681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.017700][T11834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.075811][T11919] syz.8.1285 (11919): /proc/11918/oom_adj is deprecated, please use /proc/11918/oom_score_adj instead. [ 426.161828][T11834] veth0_vlan: entered promiscuous mode [ 426.204950][T11834] veth1_vlan: entered promiscuous mode [ 426.280554][T11834] veth0_macvtap: entered promiscuous mode [ 426.304580][T11834] veth1_macvtap: entered promiscuous mode [ 426.388057][T11834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.419093][ T5830] Bluetooth: hci9: command tx timeout [ 426.426452][T11923] zswap: compressor not available [ 426.438208][T11834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.476386][ T9541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.485690][ T9541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.504248][ T9541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.523561][ T9541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.645189][T11928] zswap: compressor not available [ 426.673817][ T9681] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:31: bg 2: bad block bitmap checksum [ 426.729270][ T9681] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1371 with max blocks 9 with error 74 [ 426.759281][ T9681] EXT4-fs (sda1): This should not happen!! Data will be lost [ 426.759281][ T9681] [ 426.776967][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.803302][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.905861][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.944847][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.153114][T11948] binder: 11946:11948 ioctl c0306201 0 returned -14 [ 428.275394][ T5830] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 428.499872][ T5827] Bluetooth: hci9: command tx timeout [ 429.995958][T12010] zswap: compressor û not available [ 430.482802][T12035] __vm_enough_memory: pid: 12035, comm: syz.1.1299, bytes: 4398046511104 not enough memory for the allocation [ 430.584207][ T5827] Bluetooth: hci9: command tx timeout [ 431.697743][ T5830] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 431.714071][ T5830] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 431.727320][ T5830] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 431.737533][ T5830] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 431.751419][ T5830] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 432.806714][T12089] block2mtd: Using custom MTD label '' for dev [ 432.823498][T12089] block2mtd: error: cannot open device [ 432.830570][T12089] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1304'. [ 432.859974][T12089] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1304'. [ 432.879047][T12060] chnl_net:caif_netlink_parms(): no params data found [ 432.918082][T12089] netlink: 154 bytes leftover after parsing attributes in process `syz.8.1304'. [ 433.313234][T12060] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.321956][T12060] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.329954][T12060] bridge_slave_0: entered allmulticast mode [ 433.338587][T12060] bridge_slave_0: entered promiscuous mode [ 433.349092][T12060] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.361156][T12060] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.370735][T12060] bridge_slave_1: entered allmulticast mode [ 433.379015][T12060] bridge_slave_1: entered promiscuous mode [ 433.597070][T12104] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 433.625039][T12104] CIFS mount error: No usable UNC path provided in device string! [ 433.625039][T12104] [ 433.655950][T12060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.708414][T12104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.787548][T12060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.864825][ T5830] Bluetooth: hci10: command tx timeout [ 433.945759][ T5827] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 433.957905][ T5827] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 433.972095][ T5827] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 433.983780][ T5827] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 434.001104][ T5827] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 434.227237][T12109] zswap: compressor not available [ 434.258038][T12060] team0: Port device team_slave_0 added [ 434.293606][T12060] team0: Port device team_slave_1 added [ 435.028634][T12060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.042830][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.075279][T12060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.283720][T12060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.290741][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.320404][T12060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.730081][T12060] hsr_slave_0: entered promiscuous mode [ 435.743004][T12060] hsr_slave_1: entered promiscuous mode [ 435.750413][T12060] debugfs: 'hsr0' already exists in 'hsr' [ 435.758297][T12060] Cannot create hsr debugfs directory [ 435.943364][ T5830] Bluetooth: hci10: command tx timeout [ 436.103718][ T5830] Bluetooth: hci11: command tx timeout [ 436.175754][T12114] chnl_net:caif_netlink_parms(): no params data found [ 436.337583][T12154] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 436.611296][T12060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.720582][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.752100][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.787235][T12114] bridge_slave_0: entered allmulticast mode [ 436.821220][T12114] bridge_slave_0: entered promiscuous mode [ 437.040565][T12060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.086796][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.104032][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.124276][T12114] bridge_slave_1: entered allmulticast mode [ 437.132459][T12114] bridge_slave_1: entered promiscuous mode [ 437.188257][T12177] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 437.215398][T12177] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 437.246142][T12177] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 437.345225][T12060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.422793][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.458872][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.693389][T12060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.780497][T12114] team0: Port device team_slave_0 added [ 437.794863][ T30] INFO: task syz-executor:6927 blocked for more than 143 seconds. [ 437.802760][ T30] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 437.834525][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.842528][T12114] team0: Port device team_slave_1 added [ 437.889733][ T30] task:syz-executor state:D stack:23800 pid:6927 tgid:6927 ppid:1 task_flags:0x400140 flags:0x00080002 [ 437.934275][ T30] Call Trace: [ 437.937963][ T30] [ 437.942656][ T30] __schedule+0xfee/0x60e0 [ 437.974298][ T30] ? __lock_acquire+0x4a5/0x2630 [ 437.979462][ T30] ? __pfx___schedule+0x10/0x10 [ 438.014359][ T30] ? find_held_lock+0x2b/0x80 [ 438.019150][ T30] ? schedule+0x2bf/0x390 [ 438.023567][ T30] schedule+0xdd/0x390 [ 438.033793][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.034391][ T5830] Bluetooth: hci10: command tx timeout [ 438.054929][ T30] schedule_preempt_disabled+0x13/0x30 [ 438.060486][ T30] __mutex_lock+0xc9a/0x1b90 [ 438.065658][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 438.071201][ T30] ? __lock_acquire+0x4a5/0x2630 [ 438.077032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 438.082185][ T30] ? net_generic+0xea/0x2a0 [ 438.087469][ T30] ? net_generic+0xea/0x2a0 [ 438.092061][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 438.099390][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 438.100617][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.105021][ T30] nfsd_umount+0x3b/0x60 [ 438.105077][ T30] deactivate_locked_super+0xc1/0x1b0 [ 438.105126][ T30] deactivate_super+0xe7/0x110 [ 438.105176][ T30] cleanup_mnt+0x21f/0x450 [ 438.105229][ T30] task_work_run+0x150/0x240 [ 438.187515][ T5830] Bluetooth: hci11: command tx timeout [ 438.223763][ T30] ? __pfx_task_work_run+0x10/0x10 [ 438.234443][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 438.240561][ T30] do_syscall_64+0x668/0xf80 [ 438.252001][ T30] ? clear_bhb_loop+0x40/0x90 [ 438.257306][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.263461][ T30] RIP: 0033:0x7faaae99d897 [ 438.268886][ T30] RSP: 002b:00007ffdeccfd178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 438.277735][ T30] RAX: 0000000000000000 RBX: 00007faaaea31ef0 RCX: 00007faaae99d897 [ 438.286135][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdeccfd230 [ 438.294173][ T30] RBP: 00007ffdeccfd230 R08: 00007ffdeccfe230 R09: 00000000ffffffff [ 438.303771][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdeccfe2c0 [ 438.312374][ T30] R13: 00007faaaea31ef0 R14: 0000000000044a56 R15: 00007ffdeccfe300 [ 438.330751][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.394564][ T30] [ 438.414586][ T30] INFO: task syz.3.777:9713 blocked for more than 143 seconds. [ 438.422223][ T30] Tainted: G U L syzkaller #0 [ 438.454576][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.463595][ T30] task:syz.3.777 state:D stack:27464 pid:9713 tgid:9712 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 438.476226][ T30] Call Trace: [ 438.479573][ T30] [ 438.482552][ T30] __schedule+0xfee/0x60e0 [ 438.513501][ T30] ? __lock_acquire+0x4a5/0x2630 [ 438.519357][ T30] ? __pfx___schedule+0x10/0x10 [ 438.524312][ T30] ? find_held_lock+0x2b/0x80 [ 438.555043][ T30] ? schedule+0x2bf/0x390 [ 438.559498][ T30] schedule+0xdd/0x390 [ 438.563631][ T30] schedule_preempt_disabled+0x13/0x30 [ 438.584583][ T30] __mutex_lock+0xc9a/0x1b90 [ 438.589283][ T30] ? __kmalloc_noprof+0x301/0x850 [ 438.594387][ T30] ? genl_rcv_msg+0x560/0x800 [ 438.626900][ T30] ? nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 438.632948][ T30] ? netlink_unicast+0x5aa/0x870 [ 438.642688][ T30] ? netlink_sendmsg+0x8b0/0xda0 [ 438.666661][ T30] ? __sys_sendmsg+0x170/0x220 [ 438.671621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 438.704614][ T30] ? __asan_memset+0x23/0x50 [ 438.709413][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 438.735200][ T30] ? nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 438.741165][ T30] nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 438.754629][ T30] ? rcu_is_watching+0x12/0xc0 [ 438.761218][ T30] ? trace_kmalloc+0x101/0x130 [ 438.775520][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 438.781801][ T30] ? __nla_parse+0x40/0x60 [ 438.786344][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 438.793360][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 438.800685][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 438.806400][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 438.812692][ T30] ? genl_get_cmd+0x3ef/0x720 [ 438.818346][ T30] ? bpf_lsm_capable+0x9/0x10 [ 438.823233][ T30] ? security_capable+0x80/0x260 [ 438.828313][ T30] genl_rcv_msg+0x560/0x800 [ 438.833040][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.844994][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 438.851884][ T30] netlink_rcv_skb+0x159/0x420 [ 438.872648][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.884735][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.890146][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 438.896973][ T30] genl_rcv+0x28/0x40 [ 438.901046][ T30] netlink_unicast+0x5aa/0x870 [ 438.907078][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 438.912446][ T30] ? __pfx___might_resched+0x10/0x10 [ 438.934816][ T30] ? __lock_acquire+0x4a5/0x2630 [ 438.939871][ T30] netlink_sendmsg+0x8b0/0xda0 [ 438.955032][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.960478][ T30] ? __import_iovec+0x1d2/0x640 [ 438.974763][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 438.980522][ T30] ____sys_sendmsg+0xa54/0xc30 [ 438.994087][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.999542][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 439.005130][ T30] ___sys_sendmsg+0x190/0x1e0 [ 439.009936][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.015308][ T30] __sys_sendmsg+0x170/0x220 [ 439.021030][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.026298][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 439.031483][ T30] do_syscall_64+0x106/0xf80 [ 439.036178][ T30] ? clear_bhb_loop+0x40/0x90 [ 439.041059][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.047107][ T30] RIP: 0033:0x7f820779c629 [ 439.051714][ T30] RSP: 002b:00007f82086aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.060941][ T30] RAX: ffffffffffffffda RBX: 00007f8207a15fa0 RCX: 00007f820779c629 [ 439.076057][ T30] RDX: 0000000020008050 RSI: 00002000000050c0 RDI: 0000000000000003 [ 439.084135][ T30] RBP: 00007f8207832b39 R08: 0000000000000000 R09: 0000000000000000 [ 439.092332][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.107011][ T30] R13: 00007f8207a16038 R14: 00007f8207a15fa0 R15: 00007ffd315ccb38 [ 439.115268][ T30] [ 439.118698][ T30] [ 439.118698][ T30] Showing all locks held in the system: [ 439.128306][ T30] 2 locks held by ksoftirqd/0/15: [ 439.133406][ T30] 1 lock held by khungtaskd/30: [ 439.142116][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 439.153447][ T30] 1 lock held by klogd/5183: [ 439.161084][ T30] 2 locks held by syz-executor/5824: [ 439.166624][ T30] #0: ffff8880237860e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 439.180842][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 439.233401][ T30] 2 locks held by syz-executor/6927: [ 439.239036][ T30] #0: ffff888035d6e0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 439.251948][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 439.268771][ T30] 1 lock held by dhcpcd/7235: [ 439.276827][ T30] #0: ffff88802ba2e988 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 439.288145][ T30] 2 locks held by getty/7779: [ 439.292880][ T30] #0: ffff8880384790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 439.302872][ T30] #1: ffffc90005d532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 439.314296][ T30] 2 locks held by syz.2.604/8912: [ 439.319504][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.329873][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 439.346310][ T30] 4 locks held by kworker/u8:30/9541: [ 439.351750][ T30] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 439.368053][ T30] #1: ffffc900034e7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 439.380854][ T30] #2: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 439.393593][ T30] #3: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 439.404153][ T30] 2 locks held by syz.3.777/9713: [ 439.409609][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.418176][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 439.428963][ T30] 2 locks held by syz-executor/9914: [ 439.436430][ T30] #0: ffff88802cf6c0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 439.451413][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 439.462884][ T30] 2 locks held by syz.5.983/10630: [ 439.473630][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.488336][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 439.498843][ T30] 2 locks held by syz.6.999/10695: [ 439.504186][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.513035][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 439.523272][ T30] 2 locks held by syz.9.1259/11780: [ 439.529347][ T30] #0: ffff88802f5760e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 439.542031][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 439.552647][ T30] 7 locks held by syz-executor/12060: [ 439.560394][ T30] #0: ffff888035d74420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 439.573030][ T30] #1: ffff8880555cd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 439.584911][ T30] #2: ffff8880258d2878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 439.595575][ T30] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 439.606174][ T30] #4: ffff888034cad0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 439.617336][ T30] #5: ffff8880345d8250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 439.627735][ T30] #6: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_nexthop_notifier+0x18/0x70 [ 439.638978][ T30] 1 lock held by syz-executor/12114: [ 439.644326][ T30] #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 439.654734][ T30] 2 locks held by cmp/12209: [ 439.725369][ T30] [ 439.727771][ T30] ============================================= [ 439.727771][ T30] [ 439.789112][ T30] NMI backtrace for cpu 1 [ 439.789142][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 439.789190][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 439.789201][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.789220][ T30] Call Trace: [ 439.789230][ T30] [ 439.789241][ T30] dump_stack_lvl+0x100/0x190 [ 439.789294][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 439.789354][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 439.789401][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 439.789454][ T30] sys_info+0x141/0x190 [ 439.789495][ T30] watchdog+0xd25/0x1050 [ 439.789536][ T30] ? __pfx_watchdog+0x10/0x10 [ 439.789567][ T30] ? __kthread_parkme+0x18c/0x230 [ 439.789606][ T30] ? kthread+0x13a/0x450 [ 439.789645][ T30] ? __pfx_watchdog+0x10/0x10 [ 439.789672][ T30] kthread+0x370/0x450 [ 439.789712][ T30] ? __pfx_kthread+0x10/0x10 [ 439.789754][ T30] ret_from_fork+0x754/0xd80 [ 439.789802][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 439.789851][ T30] ? __switch_to+0x7b4/0x1120 [ 439.789885][ T30] ? __pfx_kthread+0x10/0x10 [ 439.789928][ T30] ret_from_fork_asm+0x1a/0x30 [ 439.789982][ T30] [ 439.789992][ T30] Sending NMI from CPU 1 to CPUs 0: [ 439.920979][ C0] NMI backtrace for cpu 0 [ 439.921002][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 439.921048][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 439.921057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.921075][ C0] Workqueue: events free_obj_work [ 439.921110][ C0] RIP: 0010:__lock_acquire+0x784/0x2630 [ 439.921144][ C0] Code: 24 18 4c 8b 4c 24 20 74 10 44 8b 15 36 a0 f5 0e 45 85 d2 0f 84 d8 08 00 00 90 31 f6 e9 90 fb ff ff 48 89 04 24 e9 9a f9 ff ff <44> 8b b5 fc 0a 00 00 45 85 f6 0f 85 35 fb ff ff 41 bf 05 00 00 00 [ 439.921170][ C0] RSP: 0018:ffffc900000f75b0 EFLAGS: 00000046 [ 439.921188][ C0] RAX: 0000000000000000 RBX: ffff88801e2fc7e8 RCX: 0000000000000002 [ 439.921205][ C0] RDX: 0000000000000001 RSI: ffff88801e2fc770 RDI: 0000000000000000 [ 439.921221][ C0] RBP: ffff88801e2fbc80 R08: 0000000000000000 R09: 0000000000000000 [ 439.921237][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 439.921252][ C0] R13: 0000000000000007 R14: 0000000000020000 R15: 0000000000000000 [ 439.921268][ C0] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 439.921293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.921311][ C0] CR2: 00007fd315efca10 CR3: 0000000081b1e000 CR4: 00000000003526f0 [ 439.921327][ C0] Call Trace: [ 439.921334][ C0] [ 439.921350][ C0] lock_acquire+0x1cf/0x380 [ 439.921380][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 439.921407][ C0] ? unwind_next_frame+0x3c8/0x1ea0 [ 439.921433][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.921459][ C0] unwind_next_frame+0xd1/0x1ea0 [ 439.921483][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 439.921507][ C0] ? stack_trace_save+0x8e/0xc0 [ 439.921529][ C0] ? __unwind_start+0x3d1/0x7f0 [ 439.921554][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.921579][ C0] arch_stack_walk+0x94/0xf0 [ 439.921606][ C0] ? stack_trace_save+0x8e/0xc0 [ 439.921630][ C0] ? free_object_list.isra.0+0xf8/0x2a0 [ 439.921662][ C0] stack_trace_save+0x8e/0xc0 [ 439.921685][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 439.921713][ C0] kasan_save_stack+0x30/0x50 [ 439.921775][ C0] kasan_save_track+0x14/0x30 [ 439.921811][ C0] kasan_save_free_info+0x3b/0x70 [ 439.921841][ C0] __kasan_slab_free+0x5f/0x80 [ 439.921880][ C0] kmem_cache_free+0x124/0x6a0 [ 439.921915][ C0] free_object_list.isra.0+0xf8/0x2a0 [ 439.921946][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 439.921974][ C0] free_obj_work+0x19d/0x3d0 [ 439.922006][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 439.922074][ C0] ? rcu_is_watching+0x12/0xc0 [ 439.922114][ C0] process_one_work+0x9d7/0x1920 [ 439.922156][ C0] ? __pfx_process_one_work+0x10/0x10 [ 439.922197][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 439.922229][ C0] worker_thread+0x5da/0xe40 [ 439.922270][ C0] ? kthread+0x13a/0x450 [ 439.922302][ C0] ? __pfx_worker_thread+0x10/0x10 [ 439.922337][ C0] kthread+0x370/0x450 [ 439.922368][ C0] ? __pfx_kthread+0x10/0x10 [ 439.922400][ C0] ret_from_fork+0x754/0xd80 [ 439.922438][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 439.922475][ C0] ? __switch_to+0x7b4/0x1120 [ 439.922502][ C0] ? __pfx_kthread+0x10/0x10 [ 439.922535][ C0] ret_from_fork_asm+0x1a/0x30 [ 439.922570][ C0] [ 440.195614][ T5830] Bluetooth: hci10: command tx timeout [ 440.268822][ T5830] Bluetooth: hci11: command tx timeout [ 440.492131][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.498974][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.675631][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 440.682584][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 440.693327][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 440.698557][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.708661][ T30] Call Trace: [ 440.711981][ T30] [ 440.715029][ T30] dump_stack_lvl+0x100/0x190 [ 440.719757][ T30] vpanic+0x552/0x970 [ 440.723774][ T30] ? __pfx_vpanic+0x10/0x10 [ 440.728317][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 440.734513][ T30] panic+0xd1/0xe0 [ 440.738274][ T30] ? __pfx_panic+0x10/0x10 [ 440.742761][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 440.748994][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 440.755231][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 440.761469][ T30] ? watchdog.cold+0x198/0x1ca [ 440.766309][ T30] ? watchdog+0xd35/0x1050 [ 440.770781][ T30] watchdog.cold+0x1a9/0x1ca [ 440.775442][ T30] ? __pfx_watchdog+0x10/0x10 [ 440.780180][ T30] ? __kthread_parkme+0x18c/0x230 [ 440.785287][ T30] ? kthread+0x13a/0x450 [ 440.789679][ T30] ? __pfx_watchdog+0x10/0x10 [ 440.794408][ T30] kthread+0x370/0x450 [ 440.798545][ T30] ? __pfx_kthread+0x10/0x10 [ 440.803204][ T30] ret_from_fork+0x754/0xd80 [ 440.807884][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 440.813065][ T30] ? __switch_to+0x7b4/0x1120 [ 440.817894][ T30] ? __pfx_kthread+0x10/0x10 [ 440.822554][ T30] ret_from_fork_asm+0x1a/0x30 [ 440.827435][ T30] [ 440.831103][ T30] Kernel Offset: disabled [ 440.835499][ T30] Rebooting in 86400 seconds..