last executing test programs: 8m4.052834455s ago: executing program 0 (id=794): write$auto(0x3, 0x0, 0xfdef) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x200000000, 0x15, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200)}, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/conex/uevent\x00', 0x464002, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4) ioctl$auto(0xffffffffffffffff, 0x4b3a, r0) 8m3.703448963s ago: executing program 0 (id=796): mlock$auto(0xfff, 0xde7f) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 64) socket(0x11, 0x80003, 0x300) r2 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r2, 0xd}, 0x92) (async, rerun: 64) open(0x0, 0x261c2, 0x84) (async) socket(0xa, 0x3, 0x6) (async) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) (async) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_3={0x5, 0x8, 0x7, 0x9, 0x4, 0xfffffffa, 0x4, 0x6ac3, 0xfffffe00, "9d9120ff2072203fff0c8044039e5810", 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x10, 0x8, 0x80, 0x7, 0x2, 0xb, @attach_prog_fd, 0x6, 0x7ef6936a, 0x4, 0xff, 0x10}, 0xc) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/inflight\x00', 0x2240, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/12, 0xc) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) sendfile$auto(r4, 0x3, 0x0, 0x5) (async, rerun: 64) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async, rerun: 64) r5 = gettid() (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) kill$auto(r5, 0x11) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) 8m1.70333227s ago: executing program 0 (id=806): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000011c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"/614, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="08ec6ca8d28a3df3e1db505764f22db473969bd565fb88a6e0f7164262fc7fcc0522b447ef94138c7078a76dcdc1f1be9e56167b5911503254c3972b22529f4d335c3ff315daa5f4d1c0d783b4c34e705a5c9eff1a0c13a961613ae189bab7c42d68870d8c4ad68a76a3bb5fccd318244b0e264f21417f632d6b176f004edf5c1ae2dfcebb240bf60730ec155d3df55031f3c06ce691d268b1df6bd698ca31f5aafd9e5f0000638000005200", @ANYRES32=0x0, @ANYBLOB="00000d802c03989efe8e9dedd5f295ac224e71c9edde20fb882dc8b33bc39cc74ae51a16fb56e5b183989ff2123cae760e37128fad4e327f9e931cb4979786ca5e853737f3f6d05e5766f62589e0e26300fea8ca12d820f2b21b259e03974a773680ac66cf5dcc562336be5edeaa9c81aac167eb7026a430f3da0000fd00ac1414aa0000e7000000f4007f0000010000988000000f808e2e6703d89f71b35db3f3f3bdcf8bd3fa2ef0dd797c87891a2df8703ca04ce4ce60a7988be23ec31f73198a8c2bbc21cc60298062a9f369b4a8c1e0db4c0cab29dacbee49c7287813eb66ec2a880fa66e48b50a249069dd660bb2f1cad5923ee7acb842fd3d5aa21373dd30c159953a7f7cdb71f47fb14ce0cdc5cc37deaf5e50a00317f210c097c7c73d8200bc9e4ce90559abe3a97a850e1bd5c449363b2d29737ec67eee6b9c61e79c8c6704be5c72f5d47ec2fd219bdc42dafd3cf7f9c649037dc03b69e6c3640c147157b9386b5b00a3e18e009e8e5d5d0b9ff89f83f6c701ed8676381b792580cb04e67d1d0d4bca2450de3669a561e62bbbe2f5074416de9b24ece663cf46544f07e2f2fe2efbf21001900f32e7d2a930c8cceec8612d3fd5f97489966f57ac5f8e2fc2e279149df6884cdba198187593ab4204e5e02f7d0c8d00b7e82ffc8d8b0e5645e25d4a1508d42dcd45bbe6ad1b9c2082ce5e2e97ff725db16665a6988c241896078b97bd707c90ccbc6218efcf1e36d4f13af2fc3c2d2f46261f3c970add22d00e48b63de245e3baf7591fffd683e07b3e60908547d95de735c9cb1648705c2a10b90e2bd47aac638deb252530971b894706b6f23d31e3ee7a92663c15ba6eb2781ed5f4b962a3d757cc8710973b685852ef47fa597d6fedb5c302c4827f6559c700955189113b6bd89cf0a3ea14688500004f809fa4c5c0a002105d0c07ff392fcb1172741b451a50ab34769a05b57dc1f3fb6a51d720ff427778184a1cb2b5b3e595faabaf1e98760a3dab4df3b047e7100c184d028995cb9cda54a32b2ed21bba755a1d82cffd73bbc8218a1446baa7498d54f11ea80be88c26073c13a99534c64e311807575927ffb148fda74ded88c3427032c82a3ea6e2b4dd17793bf14ff9078554a44a4922331c2a0dcef26066a1d409fa144958a56b437612aef0251c76835945aeb6cc242ceb5b95d4419d0c67019600002d8000001780422341d1e0bc7be4e2dd610b1dbfa3b3aa1ade37818b016ed1f629e731ddf0000000a80080000000000000000000008000003700", @ANYRES32=0x0, @ANYRES8=r0], 0x20}}, 0x20040010) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000000a9abd99b3c211fd3c55e5342ccc2cd247e4979d78ebc4b5c353824d8b3df6f4d0593f8d3efd72e6e3a408ddb42b7a9f45a2c00aff4a737f063cba9f747ae9471f5182f06e2fcec0f9ba25dd47ad7893548f9686f83af8b3647424146ca870900000000000000ea47ad5f2e9a163cb4400cf878a313aee769ce7a9e60ba94c12c4b19b1879c7e4dba777c"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0xfffffffffffffffd, 0x40006, 0x800009, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000001) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$auto_PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x3) ioctl$auto_PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000640)=0x81) getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x87b1, 0x5, &(0x7f0000000340)='&&*(:\x00', &(0x7f0000000380)=0xfffffffd) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80000, 0x106) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x3, 0x2) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) fchmod$auto(r6, 0x8) setreuid$auto(0x0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) write$auto(r7, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$auto_IMDELTIMER(r6, 0x80044941, &(0x7f0000000000)=0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 7m53.765715484s ago: executing program 0 (id=824): mmap$auto(0xfffffffffffffffc, 0x5, 0x800000004dd, 0xe3e, 0xffffffffffffffff, 0x7ffd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = waitid$auto(0xf739, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0xe, 0xdf, 0x200, @_timer={0xffffffffffffffff, 0x97fe, @sival_int=0x7, 0x80000001}}}, 0xa8, 0x0) waitid$auto_P_PGID(0x2, r0, 0x0, 0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r3, 0x0, 0x401, 0x5, 0x3}}}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') unshare$auto(0x40000080) getpid() r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r4) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x128, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8001}, @NFC_ATTR_VENDOR_DATA={0xeb, 0x1f, "10d13f8694b45338b37eb37a6be63b3241b32357da3910617c64e17b0af696a44405959d79adf208b01fc87d6a3f2c643deff46ccc501f3cd06fd7c2788642647d433a2fe91ea771ccf43a3b9e6df4047f9d345177b54cada1635f4e5a508e948b61dea47867c18e3e1094a300b979bb77f0808ca21c763cf581d97ac29972920e10ab18a64e6f16c12f6e3ebeada1909fc1f8191dae6a48e67ea51ca7a8717fc349064e3b7c618b54b3396ebf7a87db72d3cc52c0aea138f1272a80915958c6121d51da7a320340f4482fc397064ce1fe15082bcdf23edc006be8c79fac7115563d9e8ca56b96"}, @NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8000}]}, 0x128}}, 0x4004010) 7m49.313585596s ago: executing program 0 (id=833): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, 0x0, 0x7) 7m47.25966749s ago: executing program 0 (id=842): mmap$auto(0x4, 0x20006, 0xdf, 0xe31, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0\x00', 0x52f7c0, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x4dac02, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x6) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x100, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) (async) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x942, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x11, 0x80003, 0x300) 7m32.145397925s ago: executing program 32 (id=842): mmap$auto(0x4, 0x20006, 0xdf, 0xe31, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0\x00', 0x52f7c0, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x4dac02, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x6) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x100, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) (async) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x942, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x11, 0x80003, 0x300) 4m21.678048172s ago: executing program 4 (id=1610): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) (async, rerun: 64) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000001040)=@test={r0, 0x8, 0x856, 0x4000, 0xa000000, 0x7fff, 0xaf9, 0x10000, 0x0, 0x7, 0x5, 0x200, 0x3, 0x3, 0x6}, 0x1) (rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x509141, 0x0) (async) mmap$auto(0x0, 0x9, 0x7, 0x800000000801e, 0x3, 0x8000) mprotect$auto(0x1f7ffffffffe, 0xc06122, 0x7) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) (async) ioprio_set$auto(0x2, 0x800000000, 0x8) mmap$auto(0x100000001, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = pidfd_open$auto(0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) (async) move_mount$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x104) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)={0x9, 0x0, [{0x8, 0x5}]}) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) read$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0xfffffff0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fb\x00', 0x141042, 0x0) (async, rerun: 32) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x6, 0xffffffffffffffff, 0x10004, 0x9, 0x1, 0x6}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r3) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x84) socket(0x2b, 0x6, 0x10000) 4m20.04982534s ago: executing program 4 (id=1615): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\x88\x17\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4K\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xda\xe4\xca\xd36\xe8\xcb?(\xfbI\xe2\xae\xb9\xf4\xb7b,\x95Y\x8f\xcc\xca\x85\xdad\xae\x90u\xe5\x89\xc8>\b\x97\xe8\x94\xc7\xdd\xfa\xbf7\x17Q\xf5\x10\xe7(\x84\xb7;\xe5\x00\xf3\x820\xdd31\xbd\xd0}\x1c\\J\x86P\x06~\xc7k\xc2\xf4\xd8\x05i\xe4o;\xb7\x83\xd5\x94\xa3\x12\xf5\xf4\x1bkB*\xa1+\xe2\xa9b\x02\x93\xb4\x19\x83\xef\x98A\x19\x1de\x91q\x1dp\x88\xff%\xf4z\ac\xf4\x04\x7f;&\xb8\x8c\x84\x14{`\"$x\xd7\x1e\x99\n\x85W\xcd).O\xb3\x83\x83\x83)\xcd-@\x83\x9f\xfa\x90\x94\xe2\xe1\xe3m\xc5\x15\x8d\xb2\xc5h\x87\xf0\x06\x00'/317, 0x100000a3dc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x400000000007) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x8000000004, 0x9, 0x100000000003da4, 0xaff, r2, 0x3) init_module$auto(0x0, 0xffff8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x1, 0x84) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/ipc\x00') symlink$auto(0x0, 0x0) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)=';') 4m18.76640801s ago: executing program 4 (id=1619): bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x88, 0x40008, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/midi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x1, 0xff, "50b82e6c92b172b4cfaaca8e"}) 4m18.659999481s ago: executing program 4 (id=1620): r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r0, &(0x7f0000000200)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) r2 = getpid() getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x8, 0xb, &(0x7f0000000100)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4) r4 = socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48}) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) listen$auto(0x3, 0x81) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim6/ports/2/bpf_xdpdrv_accept\x00', 0x48000, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4a, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) kexec_load$auto(0x1ff, 0x1000000, &(0x7f0000000000)={@buf=&(0x7f00000003c0), 0x2ffff, 0x10001, 0x1}, 0x1000000ff) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x45, &(0x7f0000000000), 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) fsopen$auto(0x0, 0x1) 4m18.302066602s ago: executing program 4 (id=1621): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000004}, 0x3, 0x3, 0x3, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xffff800000000000, 0xffff, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x180000000000, 0x2091d2, 0x8, 0x0, 0x391, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1ff, 0x7) mmap$auto(0x0, 0x1, 0x6, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x6, 0xff, 0xeb1, 0xfffffffffffffffa, 0x2000000007fff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x7fff, 0x7d, 0x10, 0xfffffff7ffffffff) mmap$auto(0xffffffffffffffff, 0x202000a, 0x7, 0x17, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x2eb1, r0, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x101}) io_uring_setup$auto(0x0, 0x0) 4m14.582709027s ago: executing program 4 (id=1636): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) 3m59.479029582s ago: executing program 33 (id=1636): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) 2m35.800667647s ago: executing program 5 (id=2032): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timer_settime$auto(0x8, 0x7, &(0x7f0000000000)={{0x247, 0xfffffffffffff38c}, {0xfffffffffffffd9b, 0x4}}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mq_unlink$auto(0x0) 2m34.993464869s ago: executing program 5 (id=2033): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) (async) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000800249decb3", @ANYRES16=r2, @ANYBLOB="200026bd7000ffdbdf255f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') (async) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') r4 = socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) (async) write$auto(r5, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(r4, 0x0, 0x1007f, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r2, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) (async) r6 = socket(0x2, 0x1, 0x0) getsockopt$auto(r6, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x14) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r3) sendmsg$auto_IPVS_CMD_DEL_DEST(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xd8, r7, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc2, 0x2, 0x0, 0x1, [@typed={0x71, 0xdd, 0x0, 0x0, @binary="c7e0b7f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df38581d8ca299abec437cff9709f82157200"/109}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async) sendmsg$auto_IPVS_CMD_DEL_DEST(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xd8, r7, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc2, 0x2, 0x0, 0x1, [@typed={0x71, 0xdd, 0x0, 0x0, @binary="c7e0b7f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df38581d8ca299abec437cff9709f82157200"/109}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m33.454398118s ago: executing program 5 (id=2035): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff05, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x80f0}, 0x6b) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x1000000008000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r2, 0xc0585604, r2) r3 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) read$auto(0x3, 0x0, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 2m32.78009598s ago: executing program 3 (id=2037): r0 = socket(0x15, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4106, 0x100a) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, r3) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/SecurityFlags\x00', 0x101000, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080)=""/4096, 0x1000) 2m32.423897994s ago: executing program 5 (id=2039): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8003, &(0x7f00000001c0), 0x9000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x6, 0xffffffffffffffff) mmap$auto(0x56, 0x1000, 0x10, 0xebf, r0, 0x8) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000000)={0x60, 0x40, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x40000000002c, 0x2c, 0x3, 0x2}) 2m32.349853793s ago: executing program 3 (id=2040): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x2000, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0xc1e842bd552cbd95, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfffffff7, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x4, 0x2, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0x40000000bff, 0x4, 0x2c, 0x3, 0xff}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r4, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) open(0x0, 0x101a03, 0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000180)=""/33, 0x21) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14bc02, 0x0) 2m30.055432287s ago: executing program 3 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_GROUPS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x2}]}, @ETHTOOL_A_STATS_HEADER={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r2, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 2m29.73396723s ago: executing program 3 (id=2046): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x32, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x9, &(0x7f0000000600)={@siginfo_0_0={0x9, 0xc, 0x8, @_sigsys={&(0x7f0000000080)="773ac00055c16a1900e98c3f06353acd1e9f828cb0694ee69b56bbda6f942f1809494bd84cdabfd55ce979c7351e796368d7729eeab5cc1ea00d5e6522a77b9cc64dca6c2517fee9e1f4a6ef0aede2046f694ee12327ab20e0c8101e0148e07fe4dfac8fb6335ddf1777e0a6ee3db2", 0xbb, 0xfffffffc}}}, 0x3) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x208800, 0x0) socket(0x25, 0x4, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x32, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x5) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x9, &(0x7f0000000600)={@siginfo_0_0={0x9, 0xc, 0x8, @_sigsys={&(0x7f0000000080)="773ac00055c16a1900e98c3f06353acd1e9f828cb0694ee69b56bbda6f942f1809494bd84cdabfd55ce979c7351e796368d7729eeab5cc1ea00d5e6522a77b9cc64dca6c2517fee9e1f4a6ef0aede2046f694ee12327ab20e0c8101e0148e07fe4dfac8fb6335ddf1777e0a6ee3db2", 0xbb, 0xfffffffc}}}, 0x3) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) (async) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)) (async) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x208800, 0x0) (async) socket(0x25, 0x4, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) 2m28.769644062s ago: executing program 3 (id=2047): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi0\x00', 0x400, 0x0) write$auto_v4l2_fops_v4l2_dev(r1, &(0x7f00000001c0)="48b204decf4446acde68b7b5f46057b9187be7ac13de57bda364ce8e43e227185c051d4722b579d826537a5e128d53aa9df80dd0e465fc96708e49ccc1a79e", 0x3f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) ioctl$auto(r2, 0xc01070ce, r2) pwrite64$auto(r0, &(0x7f0000000380)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\xab\r>\x94\x1a\xd3\xd3\xae\x1a\xb5\x99\x12\xc4\xd3b\x1d\xf8\xbebZ\xfc\x9eH\xc7\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x00\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x05\xed\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1c\b\x00\x00\x00\x00\x00\x00\x00\xa2@X\xb9O\xfd\xd7\xd6K\xf46bi\xc5/\b\xed\x97\xfb\xdc;\xb2U\xd6\xae\xfe\xee4A\xcaO\xb0\xa9g\xd1\xed\xee\x11&I\x191\xee\xbd\x1aOV1\xe9\xa9\xd6\n\xaa\xe7\xfezh8O\xcb\r\x02\xa8[m\x99\xcf\xd1%\xdd\x03W\xc6\xb0\x9c\x05\x04\xaa\xc7w\xad\xc3*oI\a\xd8b_\xe5Z\xc3\x02O\xed\xbfH\x9a\x02z\xa8\xa4m\x14Y\xffPd/xx\x17^\x92Y\x85\xf5\x8c\x9d\x80\xf4\xeaU<\x8c\xce\x8au\xf2\xc3\xfd^\xb9\xaef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xe2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) (async) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) (async) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, 0x0, 0x20008844) sendto$auto(r2, &(0x7f0000000180)="33ed694ec423024651b45bb63445e9e27b6c01aa23e1cdc6a2522319136aa8708b6c6fe7aa3f4f41c958322f3ae3704438fd4b2132086585a00cb2fb3779a052ba4d6342bc62e3c2ccd8358d274bcb7f08971c0e6cf49386b9aab89950c0b75776459d3f7f3c30285925309c05e64511eafb759eeb53f34b206f656fe19e7988c3cc5fd8723f323f0cc63ce970a8ce6d0dd87050d3aa0aa580119662075717eab57238ca42083110dd85fcae2c3beb90f584271e513570fe74c550949209d5ead68504d34abb7c52e83ca9a99b76581f769c092ca17b5d9b", 0x0, 0x1, &(0x7f0000000040)=@l2={0x1f, 0x0, @any, 0x9, 0x1}, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x103041, 0x0) prlimit64$auto(0xffffffffffffffff, 0x101, 0x0, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r4, 0x0, 0x0) mmap$auto(0x8000000000000001, 0x202000a, 0x3, 0x1fb, 0xfffffffffffffffa, 0xc000000000000) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r5, 0x0, 0x2) (async) ioctl$auto_FS_IOC_FSGETXATTR(r5, 0x801c581f, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) 2m27.498100921s ago: executing program 3 (id=2051): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) 2m26.176865552s ago: executing program 5 (id=2053): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) 2m12.136629583s ago: executing program 34 (id=2051): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) 2m11.091602367s ago: executing program 35 (id=2053): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) 1m17.327789943s ago: executing program 6 (id=2206): socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x0, 0x1, 0x0, 0x1, 0x8) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket(0x22, 0x3, 0x0) (rerun: 64) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (rerun: 64) r1 = socket(0x10, 0x2, 0x6) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @random="66a2e8c4eb7f"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x2617c6405e839940}, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) (async, rerun: 64) readv$auto(0x3, 0x0, 0x1) (rerun: 64) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f0000000280)={0xfff7, 0x5, 0x50a1a68b, 0x7, 0xf7, 0xffffffffffffffff}) prctl$auto(0x3, 0x7, r2, 0x2, 0x0) (async) madvise$auto(0x1000001, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) init_module$auto(0x0, 0x5cf, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async, rerun: 32) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (rerun: 32) write$auto(r3, &(0x7f0000000000)='//\xe2\x00', 0x80000000) 1m16.102453668s ago: executing program 6 (id=2209): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r1) r3 = socket(0x10, 0x2, 0x6) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/panic_print\x00', 0x42000, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioprio_set$auto(0x3, 0x0, 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r6, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x4b}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 1m14.662356101s ago: executing program 6 (id=2214): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) ioperm$auto(0x90d5, 0xc, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000e000)={0x18, r3, 0x738, 0x70bd22, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x24008040) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) 1m13.37827043s ago: executing program 6 (id=2218): madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0xb1, 0x7fffffffffffffff, 0xd8a) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) read$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f0000001340)=""/48, 0x30) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_hda_intel/parameters/align_buffer_size\x00', 0xc0481, 0x0) write$auto(r2, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x628082, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) r4 = clone3$auto(&(0x7f0000001080)={0x1, 0x155e000000, 0x4, 0x87, 0x1, 0xda27, 0x7, 0x2, 0x8, 0x3, 0x800}, 0x9) prctl$auto(0x62, 0x3ffffffffffffd, r4, 0x5, 0x8002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x6d, 0x2, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) copy_file_range$auto(0xffffffffffffffff, 0x0, r6, 0x0, 0xffffffffffffffff, 0x8) 1m12.276756524s ago: executing program 6 (id=2221): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400284, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x44800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x10540, 0x0) unshare$auto(0xc84f) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r2, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m8.664265707s ago: executing program 6 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card0\x00', 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioperm$auto(0x7, 0x5ad2, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf2504000000140001800800020000000000080001000200000066eafde45f1989190e380b8c7c17430f0401fd54b05ff6c67f2a68e8b121dc285a93fa976a1369dd73468d31e29f2c47360b86c31b39deeb567d493159ce8694bf0a9793b8c127bdc51f5e7cc3bac90f858d1e1192d73ddcae36e83cdd243203ee995349ca03b785b7db209e7a75fe5592c611737170061397f687b4d67b005f0f9161ca"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) r4 = bpf$auto(0x0, 0x0, 0x6f4) rt_sigsuspend$auto(0x0, 0x4) mmap$auto(0x0, 0x1000000000400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000280)={0x8, 0x2, 0x3, 0x6fad, 0x8, 0x1, 0x80000001, 0x8000c00, 0x2a, 0x9, 0x3, 0xffffffffffffffff}) r6 = socket(0x9, 0x2, 0x0) mmap$auto(0x0, 0xc, 0xdf, 0x9b72, 0x7, 0xfffffffffffff001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) readv$auto(r6, 0x0, 0x8) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 51.934268759s ago: executing program 36 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card0\x00', 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioperm$auto(0x7, 0x5ad2, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf2504000000140001800800020000000000080001000200000066eafde45f1989190e380b8c7c17430f0401fd54b05ff6c67f2a68e8b121dc285a93fa976a1369dd73468d31e29f2c47360b86c31b39deeb567d493159ce8694bf0a9793b8c127bdc51f5e7cc3bac90f858d1e1192d73ddcae36e83cdd243203ee995349ca03b785b7db209e7a75fe5592c611737170061397f687b4d67b005f0f9161ca"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) r4 = bpf$auto(0x0, 0x0, 0x6f4) rt_sigsuspend$auto(0x0, 0x4) mmap$auto(0x0, 0x1000000000400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000280)={0x8, 0x2, 0x3, 0x6fad, 0x8, 0x1, 0x80000001, 0x8000c00, 0x2a, 0x9, 0x3, 0xffffffffffffffff}) r6 = socket(0x9, 0x2, 0x0) mmap$auto(0x0, 0xc, 0xdf, 0x9b72, 0x7, 0xfffffffffffff001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) readv$auto(r6, 0x0, 0x8) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 49.308158225s ago: executing program 2 (id=2272): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x6b) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x2, 0xb}, 0x800008}, 0x1ff, 0x1ffffff8) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) write$auto(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x1) bind$auto(0x3, 0x0, 0x6e) 47.421775869s ago: executing program 2 (id=2276): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3, 0x8001, 0x0, 0x5, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/system/memory/auto_online_blocks\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000e80)=""/193, 0xc1) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x4800, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r5, &(0x7f0000000000)='/proc-NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x@\x97E\x92f\xe3h\x05\x0f9\x9e\v\t\x18\x8b\xec\xd7\xe8r0, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r1, 0x113, 0x1, 0x0, 0x81) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r3, 0x2f}, 0x22) 14.313292396s ago: executing program 1 (id=2357): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x3) r0 = epoll_create$auto(0x8) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f00000000c0)=0x1) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000140)={0xda31, 0x57, 0x6, 0xa4d, 0x4, 0xffffffffffffffff}) r3 = clone$auto(0x1ff, 0xd, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x3, 0x7) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000013c0)={0x11dc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffb}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x118d, 0x19, 0x0, 0x1, [@nested={0x110d, 0x5c, 0x0, 0x1, [@generic="24bbe99573823d9ed12874a33c34843fc4d7fa06ccb19612e4a1a77b0dc90476d85a529493662e08cda0a5086ecd0d7c1023759d", @nested={0x4, 0x141}, @generic="7543d5dc213db78ea397694dd677f56888f33a3c2a30d9f467301dabc7125a173cedb10d3e21497a6636869f1e6b49ad98357838ee0852148cfdb9d55488516e17e37f6e69997793c9a3681930159126664825a4542cd1395239c9b8894e11beb30d4974f133fd9b41e28e2441c9eeab5091755a52a66edc82b5c23857c84cf0cf3b5b8b06bee2ac52706ce53b30e1d9d39a22302923ac4b066d92a2d2232b85a1705e996c75444f565113e9c91aea3efa9b8d64daaa1edfd85364e86879f61a597a21167310c41a55", @nested={0x4, 0x27}, @nested={0x4, 0x143}, @generic="8f5cec9df8fd40d6d5b7b14f7902f9552baca67adbff383dd879bde0b095e15e1c448bd32ea14fdf6ef4aadb2cc4b4bfcebdf05a3eea3e6acbaa1580923f322662f04e7b1ba17df5557edb95b26e73ddef4a8b6be7a104a22472f84345f0d5cbde3a74715d812be0e3c3b675c8e56e9d2135e70128b51453dd3f3211db0078735ad28397756109803a96fcaffe8ad7c8581a75d4cf29d65725939688376b9c66537c061a6ed0297e664849797779279ebaddd45b2088cf6ce4853b97ace844a9943e0f6d57ed0f43dbe239115e39a79a22ecf8bf21419475da502a2169b670061dc710a32dd745f7ee8be71dfabb1faccdd5e43c6c25a2831ef4218ca82fc25e4dce5f763042b364222de3ff8534af2db7b1d5d495fba8ec23c7f853c0900da0b55f3eaba75ff8886e13defb8657d4f8e93493834162c60ac804682d18ca96dc3371f925de7daf1564d276c616a524d4ceddfe187f9179d747e91242c4bb3b1482f7b9587963b22718c2c78eb5bbc8d9cbe1018878ba509aa958078c51ea22262cc5cc504eff2c09bb65336c4d05305167c203a0433d7363987783aebc3cab2042bf50fc73ed952004bec80fc12673ef7adf79bff0c2597bed7e2bc8e7e0139f3183813d74519d61924bcd613b011415e2e677d825e03b20028ef08286506ca53663ce86e3630a82212be19f7cbc5cdfe2a07cd2dc84a091e7bdc742a9007a015820455021a855835cf28f44bdd1536fa9533bf1190365dfeac49d4198f1a9f37c0d03e8be5e15932b1d6386b79b3b2c7f8db3a29410d9efa3c78d0012f96898133f4d9a0e1e6dd5165d2fe367e5a9eeb0cea372b888811b9d627285023250b330bb7af615bf684f8ff9398b44bd1067c028719458b2a18ba1d5a27724961ae41d56b42f29c799be8f5433335106a9f0e31c1f0b3b8d69f8b3d0e5c5ac802c9342b63d1f42c132c8e2740c361c2f1a9a6bcd2b389e7890b992fc010eff96f15129ef51d7401ba23c3ea3f3f4ae557e35d51885a9f288a47aa0c45ca962b4746fe8657eed3a2e6176b7fe3dee0d5d18c5bfac379db0baba3016b8b4190b1922b05ce9baeaa3050306da30363ebcd19e34df2d7b66d8f0143a08988a3b2c017ae7adb8c092de284640c124d5fc7b408ccbe074cd252953d4f0e3553fcd3c28a259f38f30e07ad907c77a8ae587bb31a5366ef77cbac0b1a18bca37ead7132a43f6bc0f44d3b46ceda4488061f8bab15f086506900ff2beac8b16884df91c525dc6c7fed419f4503a0f9e80d128cef88e0419b1daf592f0d161c2f7814bfde7e3dc62dd41fe88eaa2cdca2a96fb6bd054fa7041cebcb1bc9879b2f4b6d0f258449c922426a49c50a0a87c598bb6cac770bd332b77c99190b64b94452f45ded17caafaa269d3a81f915fdfd431aaaf9306dc31ec06c22aae92f9ed3badf92bb87d5b8410a8ab8b45dbbfeedec775407f089d90d5a8aaacfc80f08405f91e1ed071d0b8606af0b77652a786d6fac63d40175dcd2591e6731a4949cfb1a75b4ce7e6c32faffbb18934d6f51cc5f5bb89990885f96f620c651b6bef8441cc8e883633fe56b4479d621635fd7e597ba7a96699ec4af8005ed61a4bd868e5c2fae963a5dc1568ee4e6e0851d7a97a0e0595577fdd537aa16829cd3fddd72b80e3213791a244664ce913ffc5e8bff2dae930a7d694ab054ffa870a05402f3db0992dbc8485b5eb38e47c190b2873eb80fb8e03c004c403b97e563ddc417e1ed0af4ce4ac8d14e75ba1902a4f459fc879804b88c25fc619ada56012174530c49add2adb2649936f0b48835c77756dfa71c9294553e829b04947231bff6dbbf0edc60c31d1318ce1ade9c64e38bf9378faa7749d0546e83d0a5c795bf0f26be37f5c7ab2b000c24c12cb14d59000480ca0b4b965ada66f664dab6b4365ecadd0df00d4ac49646eb35a06126822451fbb808960266a132bd21a208e77503d950895a7a9244e47a50b8bdf871d5b0dfc3ee13d3b762e8651e28e18a142f9352ce8474b2d37b0726d845b1c423194ba68bdb33c15c76dff99c0210c9bb58b901fa9c9ed13749e92a3f0d9046675af4dc091356a4b8dc4e98b45fb2aa228a522b0c0e59c4eebc98703991daecf914d7ac250479fa8dbe8c53feedded91628c123d211377682f65243d0818368f03e0e170c6c005ae7fd6968a612cbd051cd6296a24ca64216ee2e50d4f54e697c4c47bc747a6b88d7cef045d04aa3f7a7c9acd05c3bdd979f047ffe85111b37b0bbbd0c69d8d2fef818fe2ecc90e3d79a7ce7e3bf506cb6d36c031b61812d8f0460253cb74461f80dd49d93a165e06029259a64b18da9f59d1f6237395c2d297e01ed7148fced3e8c0811c6c36f2fefad0672abea39a2e2521395d354c93174d773815fb22a4d1e436bca9e2d091c037ad2019fc344c3b7249c5c3b3e15d8422d0b209e99b517354ad60e98ba44eaf1eb14d1733828b1fcdf169d95279936933f4ff4e9cbec67af4cdc91d02a502467b0e6f25a6423469d7397d2c2c8bd8f0ed574a4b04180a441e3ec3102a8c029f409543101f2160eec132048c82c345a8d610444a14ea205867e273a6e9c7cdab237305429a97f7f39c3a0a03ebb8a53a6ac9c139957e4409613b500e1995f672c69350eb95607ab80b16ca2251f8129199f01c3c78adbe3011c01fe9e1005f36f4f0b4be44b83a5251510fd6bae8ff24553b51ed1e45c04e3c5e17df617ef13b2d87d38aba94ec488599c044687e0207d48ad1af375e575393d2c7a8c482f8ff5bb263e5e5da22797d2e9a2b5d3cd6a32959f340d57cbdac62dd5cf195ce01ebfc730e48117f43fa97a2f406f51683d6cd7abe495614c0c795fc77bbbce09235ac2c292c37e40af4b2a53f37a15dc144780fc9d7e2597e4930443917ed4d9773a679e76af5ce051eb8bdd1670003916814f0e304a1548bab7b851c8fd17dede8d17c33f40bfa866e443169764006759c3c71eec893e1379fce85ff49f1c9a6379cf6dcff5aa9f5ac38c6608d1631cb8675a674c1b255662937e1ad55847eb517ae701a86614311e09ef3a62d3936e6f7fab86b7b05ea70c8cf40556cdb65277aa0ef0856b0db1e393f835e003172316d46e858992748c3dbc9147bad0d76bb7baea3090da53e2ac48a53047ec1d65ae9465e062e592bf9a356c708d541bc43d93682003e59af1b177d5901d08758a099cc1a4a22d8df522cba18be603ce7157da734a57dedf042e6e8cf5aac0850f8e0ace441244edcb5ef2a6f4f2207321ef9f29929c50c2e95f193f608edf84ad2b9435882d10646415acb19a65c0b4fb3b01a620716872d74599de55f6e0965e621dcd0cbd0b3d1747b3b0e4e6b1b424df1abac96940ac74a0ed94cb22cd4caba938ee742e01765ed14ebfcd78a1a19d10c1bb9b694e21243275c3b6e2f18ca268c28f2bb2f70819c79c3119a90f507e10a6b00fb0513fcdd0d03d9434124809f924362299ed5f4e580759092789528e4f70097d4edfaa200cef29436cda61f08556ccbdf81ba646f3c85aa3de57f200d4ed9fa1c4ae7947e4bf4659ec3bd41e0991487701f8319fe58759539624e7894ce219fa505b6c428d8c57b5d26df3eeee90878e4dcdc4444d5b9b0771f2f0050539210ca27ff7155331dc59aad5eddd64852e5d9fe42cadbf8cff0e89ebcfa36ce2c52a094504941d8fcbf1f9c738e25802ad9ab5d2b47f4095614a01c4f9b9b934d05fd02b4bec527207b45efc9dd87c601748379ee89117b5313639f7a6c3d600c765138ae1d83a6d2bd63d88eab81e5fcfebd58e96ebebfad78ca3fac06b2f7085be7c629f7f0e0aa2c88da976ba41e7c59c88ee74a9cac930223350acbb83c891f618447cba11d47d51da9a961ae5a9e7559864361cb38b09fe9bb4b5c37b6c6865141c5cc440e2f2cd7771c6518070745762235585d4d8b49d27928e4bb81891dde20fba2533ddbd4956ad480e6dbb77939cc4d79a0f2ec41296a9d9bba9d8c1186891b0709ce29bd2e39f689ea96b1993f2453f914acfa259adb69a2b70ccb532432ae5de15952d0c06ff65c9302e977747874a376fcf1bb205c83880cccb5cf57994e6d2eddd9b1c1a86c477b48788f2a4bdf6aadef966f9d4c22e8d6795f2a3a8fa8847ba4725b005bea4c2581b88f48577ff0774ebf791a6e27415c9c47041545855dc75ba50ce7d3a592278ec8d32b9b979e732ceff898a41de55c50ca13eed255325975f9462ff8ffc45e4723cb0079e935e08c191e5f38c27a6eca1454093b98878827731ece028572e85fa981b6c2c361450820cabccc7efd708307024a891f12666027cf8af7fac876ffe4b2bbb415e022c8cd6e4c2b92b978e6728b67346e4d489287230ecf8aa6f027686c9341ed8a438e7867a3ad5903d8c391cee426b8d144081298e9571d4a3bcb943b72a74cacb657ee8b320fe88b2bb4a28e7c2b3d9d7b3b774ee1ff9b7272154599ac33dd9243e78d50d0f0a9bd9b0e5842b72abc359dcab4301cfc2af930295f39297c59837c4a945afabd56201b52d3592499a1c0c8740edf158dfd4cc28776f362408d7a671e704528376f41267594c5d6e0595cc593a834e86281a4ab5dc54e8cdc5c66adac895ce5a9643d246bbd7504af966cdbb24a7df6ede444606ac9d2adf2a9574635a03e5e7a08376af1ba9047dfbab342f034a8a55337221cecddcf9132d4bbbff9634b0494c2b204ff1f4636037fb6fe6a9deb17f68c4014165ccb11aa953a86f83171de592bc15cb7aeb9ae580d329873ba50debf13710ae00907f0197f151fd052e411113cd9ccc4e8735c6e4aa0ea912b84f5068fce66e22ddb5bc9a4dd90687ca0b97f9a560ffe27cb22c73ae7616da4bb8ac67a93534da898660a23d1e197f04f0c869ee105fb7c836bd7da3adcce1a55c9f119e92304ca48d2993c17bcb92f2e3b991609197856cd8cb0aebb5740cf31ee957feb899e05bf11b54a064c5b0345810b4a581e0b88ffde3560d70b20088ab8d0f58abfdcfb06cd839f0dbb9a2b64eb1e2f40e0a86fde17334f71b2ec428712040d30c532c5e62cdf7d2ddf31e9cd4dc2389472e7ffcba2e6642d31b8409243045921f928cb20bf20385f431788fd23d971fb0b286b6607aa321e61fa16ff7363cb14210539647c71ba533ab83d771d5cbd84f511e25491102ce676479fdcdc0bd9b3d8b077a427714e6d68b70078af87c007b5d96d9510c917ed6f178c8b7043258b7d776bba0c0f527e76d9d44769e3c95357e51b8cbf1fdc68d9f430d9a629d0daad9937ef2bb8849092cb594c64b17c449dc59246730f36b8523408112ed70b881e5e1103006a43f2a3e4919f2298521afae2e0bce9ceebe7d1018b2042ac047b817e44b17c37b9dd219f7a02470ef010dc9336209f6e446781c97a41f1e86bf2c7569cd11fa4adb78f22326abe824533a65af89cc6853c43c18765d22fcf67e4f137358ca8fe4d12d9ba15253ba7427d8db79ed0cf568c13128d947feb071dd165d5fb1858b10179530238747a7c9b3506db9680443624fc446e61e3cb557fd971d2e1738665ccebe0d992a4719ebedeb3f8f7ada7a6284cd706a3176e3cc8d41d12a57f3fa5049ee5a1886be49b0582422b3119131941eaf1312ab2077d55d43360ed0ca53e34fb382bd942eae3029c9e950c935d75586e22bd4f4f53f380e227cba1ed1018edc721cfd5c190c92d1b87462934cb3a52a45f47a01b669c2ca667a27a47c60d9fcd7fc25097a6e18e0a77fe02b089567296ac3bf543f361"]}, @typed={0x8, 0xb1, 0x0, 0x0, @pid=r1}, @generic="6dced2ab190a52118c889ec5cde7dd792786ef793713c108d55832e244cdf53132025a88bd6b536e6347ae3ef2809d1b48fe7ad5b3124ba822b4659589", @typed={0xc, 0x42, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x12f}, @typed={0x8, 0xf6, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=r3}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0xfffffff7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6c}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x80}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xfe9e}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x45841}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r5, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x5, 0x0, 0x8004) prctl$auto(0x2f, 0x2, 0x8, 0x0, 0x0) mmap$auto(0x800000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) io_uring_setup$auto(0xdd4, 0x0) read$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.421288871s ago: executing program 1 (id=2359): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40601, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x8, 0xe9f, &(0x7f0000000300)={{0x2, 0xee00, 0xee01, 0x3, 0x7fff, 0x8, 0x2}, &(0x7f0000000140)=0x10, &(0x7f00000001c0)=0x9, 0x2800, 0x7, 0x660dd62c, 0x4c, 0xe61, 0x7f, 0x3, 0x9, @inferred=0xffffffffffffffff, @raw}) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}]}, 0x1c}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004bc0)={0x24f4, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x249a, 0x2, 0x0, 0x1, [@nested={0x131f, 0x146, 0x0, 0x1, [@nested={0x8, 0x109, 0x0, 0x1, [@nested={0x4, 0xd8}]}, @generic="378c3e23de1d9b89cd35e3cd2639ce4ba74080d85a7644f4d989b8136441e81cfb8becada3ef5c88ed2e65233b71df21239b7cf944c8e39ff44dd84c061ddcb06962eed8b50ed4e935bf25ba09247f96131eb1effcbd920c2031746cac0344af4a3f15cca9720e3879034cbf94e27708a351e389909cd14198290567fb75c505ad55fb6a4e141332ccc716c61cbbb3702964dc3e71c5b54bb67aa371dbb8678ad5375b42a4710726e3920d5b43648747f8b13d12f2fd862eb1", @generic="0cf5c9c1fd27acf7ef0b7498632f43867c9d8123dce6c41f9e1471810414507376f31d0e580acaccd094e9e018490f199e33fafb36b024ec61e8c9546c60bafe12c1f55a4aaf406b2943f079c9999783db3f0cd1788e5dff8a", @generic="933b8272879fc7f0a913731c8ba86e94ddef7e789812ac8ca176eaef7cc8d2c28396e50ff1a692c53bd96160847d2f1a89161ce89443b968d6e4d577e1d2b107fd0e6d7be702498d3c2ae1f0eccb23a1eb553be3d4a8989f3bdffbea30d79d50a25ca1544f9d6b6c4c", @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x189, 0x13d, 0x0, 0x1, [@generic="70b2705ce980ed10f0e7e537beff6fa953c379824b19741732e7539673944943e679250cd1f1fe19b67f3220bd241f2b7ae19598938729610b53d5db1f08fbce8521d9aea56fd6f9662f5358745e1011e27f08f0c127fb0efa3765bf9780c65b43100ee894aff81aa8e909be6111304b13e822c1bddcb2fcf1dafe6da4014c2c71d173d4588e1204ade5255e9bac10b7adacdcffb5ff89a38efaa3228ef6248388e9e2afcaa2ca", @typed={0x4, 0xa2}, @typed={0x4, 0x9}, @generic="e0dc93b4b64ef0cebc033c6730bffd2aa3689f24bcc5942b288c9fd98d608b7e087fdcc62fbf8f08c8001eb2bc8ba7daa542430f762821c7bf3af8bf", @typed={0x8, 0x137, 0x0, 0x0, @uid=r3}, @generic="2754215c187baa051a81797d70e99517d2b3a798d61d8a2dd4a8754bca791f0e2bc9a745828aa8bc565a4ad512ce3a5a73614f0b63586e747f52159346a3e5efbabf5364337ca7f70441d98fe4d6c59deca91b00b2d049660a16170868ac4fe3216417718358f5fa686929859be2d714bef78ed686c8dfff069c371bcb7103d5757bbd3cecb47e87871b494d7a5190e1f65a"]}, @typed={0x1004, 0x81, 0x0, 0x0, @binary="c517dc55d6ebc2dd4a579c946289d3bbab131c601447ffdbe70610a282dc084b0a585bb43bb8c3cc6057ad5027f70193de6af65496711b43e012f98174a563d815c949b28063a88bb9af2779c85345176d53b6d73bf7e53080d4096397ffd67afc64a179deae622f205c2b7043c8b5923c95fb800ac6998659fb6691d22212134f859ce4de9c2f39f9d57f2edcdea32435858fac60d0262c7d6d3b3c5c9bb6843e5bf69b97d25bc52e9b0b2ea42039ace7cae9b0eb7e668139e13b89eea9a59031270eeb53e7e475d7e8ca5528fac0414db040cb96017365bd87720febafdb051995f73f18499d6909baab9423ff868d01cb231f8cbf258f2131da2bace2d2e6582102276b7999a1a31067b99c81cace9c9bc9f859f0938e993151ed1b7a76a26cf9cf54dc758949f94ab7a7decbbc778c96764c84649a9cb87367b3d9184e7eb93cb18f38089e46d07ce067d097ea0af412e76be1f376e7622d8f04fa241e3ed6e34490cc6f10cebb794bc84ae9a7e5cc690238e51179ac46cbac0330ae64ccfccb79559f1d329d90296965115d44176f86b101fa781fe2a21a1f84dc812111f1db79e16967fcb2c5d599a62ab4c4f93289e31be98172586a20685bdb685475337a1a2e322bf7824757391d4f297dadf36c4ad56d4684784ec24658005f627b047099970cde8455ca47776148e28e8465c623e401f5b7bbe38fb4b949bf25eaca3b9c53fc0935f013ef9fb0fb53987a8a4d0e449d20bcbb5a826c16c019fab4a81c17a52321ef61d0acf703789748d79485b8bd3a0782f13da57167a41ba14dbfab8aba1c54bee34b32d1252489f6717b0143b798a32b3cab7adb374f05b6b021d168bd57a4d1c03fffc1f18ecedfca51f24358d8cb4af8d5cb1bcea55235b13d271e3ef0a8ddda03f41cd4fb31414336f2200fc7ba6013b089aadd0b74355ae1b9383165a203d891ca93e8d822998e65a8b3b4d94f977c87ce3830a6012fc05ed302c1ca4bb192b59591ab2491fa900a2ffb25f4cbb1517daee90b40613ccc338f5129729c807d4dcdf02236a3839701941cf967320b02c30583d3fcff67cce05c62bbb75cbae656efbd58d9826c0db4b3eb88d1638b6ed14f798e59a1e4c9a19839612b819594a425d89511805a4865e8e7aea79787ade843bce3b3549d616d8cc5d006d7708cabe93a94662ba9a218e3ca177941e3e014265e7e08f6704e927d28af303145cf4d123477b819d3534beacac1aeea336af290ecdd6c04714cc320471fce611543428c73fa9a61c9c247b474a3a28b44964d6ba7f5ed49b0fa80e88259186601319091f17b74f57e2a6cc8241a25db8a650620ce8e0df6606f71a9397f24e91d53f5d397821a4de6fb29610be8d243f7f85e6299c159895df75c83859b432769417ae614fa698478ac52e5914ca1927f22986d52cca458b575737a75866164e5d0d85dacad88c0f89956c3784b3d29b42406bf4a99c12ef79f88cfe21db3c9e5d2c60a6cc8b7d64ed736ec6ea7a8b0fae356ea7dd8f473fc5fb9ff80f48c2cec51f460a404c641d802289171c6c6be92531b5fa383548c1573ddb536c720af32f7cfb4d659d1a170fa9ca0c2c5cfededa051b929f490b3ce7c6f6390ede39e4c0317ea946575b4db06d27cde8227515253e9b4f417153bae896dd16f90f7606e90c91f90cb7fe3ba2bfcc49f1afd44a3acac6bc841802ba6a0fbd4857cbef69cc964c7115c5cecc0b162b502114b6ee1f21f11a13cd550ff2423489ffc90b01efbec7a3794f39bcc94ea7d934c55a43a19cb25c31f6f9ede59658b16f6efa56b10ec2b562aee3de61a1d272f4ed5f8e06d9f118e52afb780576c59844297efbc6aba986a6f2abcbf02ce84f4d6e9641a6381af16ad29f4a282678715e043282d48b1470db47c770bfdf3d6f8e827972eb0567833a0032d0eb85e8a4d282280a5e942d9b87c06c19ac927c93d072aab1d034648422ffab56a1292d602ee47658292c5294e3a75ebfc3465571137846a4b3546d3cd47ba12164992984ce55997ddfd3c23495b42beddc76c37e8e8d2db4083b6279d99c1ef324da92573d04c4213f0bfe1e2805a547ff18bc5963466f1618f5a51a47e60cd3984d2aad5d17261b2237f920b3c9d9e1246d997eb4288d5476b66936f24dea4964d7c6cd6abb356d6caaabca03815edc84b2289a53cd2790b7130bbb963214fac58c456a75338f24cd6403694a9a095b2aab8784157868fe71acd545ac4f888b31b85531f38fd52a6954995aa7f31a2a0f567f8d4b772c24ac6b60313b10c31ec7f78685c5a4c0c68070d0326bb61fcc6657bd6d68a52d7a5aba88d7279abfe6022980ae6f1d0107ee40db210f906498da1fe007daa9e4249d97c430242ae714ab533e54c9d6371bc3f95ead7948992143fda045e12a4ecebf95ddfa79de85832bb7ca2ff099704d210378c806e3a32e9cfee6ceb43be39e264a9e8d5733429d1ee541bb279d2b3f47879eeb719323cd30b01b12cfc22c4b49bd874aa20774c287f184827e3a3f666108af75fef0799d092111c87d4f05603823673fe2164bb8dc41fa80664326e43703942181650e2010f0dc767f3c219e56be7e27369f9a0bad5f25875d107a48ad39504e94e5fc51c9e9918a075dc386b72ba0db5191d10fc05807eeec35dddd337f10c2e02eef34c09a6a8b731522d7907199c55d573e25333be00196d790f42604413fc9d356a002fa78de1d056eb730093235f3aeea9cbf42914e1c1d2cc8afa208af77eb9b96f3d8c2cce7335922112b8c98bdac1974a73c9282c819349d62ed2155cad5f82215a84baaa2ab5b507185879bc7b24a5447ca5f05b32a840cba78ef8234b5e305d3646655337e41de83b4b4736712c498666a34d96869400c2f1bf21cfeddf551395b70130f9bfe4791c38289020df3ae679b784ecd3160446c26318f45876e3ac1989b6dc6c5594fe9ec2dec079e38967d3bae298d955753d65fef21e11080be6936dde9bfea74f0ff0670528c7f2f612990a70c453ccb203162e5b46ca06e65b1e8f26bac13c684f04f2ab704f519b4b11604efbef249f03ba3ead45f66b258c0cacff579ffc612a0fb59ed8f526e9868583c6c5de22fc80bd953ea291dc8f9f33ecfdcc53841d9241fe343b04b0a539e8a6e8861a809d9a2f16de84edd788fdc64aa0b27f5939f57fbb458f07abbfa5ba646bab7b3a339914cb6973c3c4b146437d239af975f11a48ea903ad1bda9e6901c9303b6a8a05d7d2523dbbf044188616a02603b737ff920d166bfb74511109037b70ac8fd91f4b1a9b997ca53c809d5e6a3c8aa0df968f0aa398c288247d201343c30ae1f4a0c778c79f7f3b6b7956885e6debb9e091115d9a813965d318affdc94c13ef40d5f9ae7c6f42f61c28823b59144b5aacf3539892d7caa8594aa7bc6958aed3080d988460ac2c13252ab58d8c842be090a0beb9cb2173e9625fb7f6522d15f438734bf139eed38ba42871f9e243ba2178d6e3bcb4b57c0a2d9941fb1dbc02a315754844e2c372af7fdafe0905e19d948faa5b3cc6cb3f8cf2abcbbc7630d2c8e9c9a3992b8e3c571acef4c48453b0266ad342d382ba3616c90a670585ee46dc600ec3bd3e20ff48b2ce772bdea063849cab31546b1fe9d574fb452899684f48449adcc352d141e3a676b944ae2e1bf7d05aa4d2a6634bb6f9845afc541d570ebd9a1f7e8ce84eb58df7e1967877314cc088658bec3eb243d3c1d39b61c6d73bb60fbd036a996f2eb71c642000d8e80236e2998c278e7d36a483c40a8a1655ab9f19198527d86f38e32ad3432a302e0812e1e9b660784a64a9926653b71a29734466f0adebbc320497db9685d002078ae53779cc43c66df2ecddc928f637807541ba49d9611155ea7fef824466c9cfd92815c4730be7c89c6420e102e8c4e3e784bb4e46011621e1d5c3768bb1e030a8db8ac4fd86bae09aef73173120d245dfee66bca6bdbbc80f10bc4936d25b2698a5841ea6f0fe6c09ac4148e5a430587d6e3fac9f3cb9ed5255415fff23c16de2e79c96911c534c0dedf22cf00f65d1bf3161a76b69d29f96db6dbc2d2603b4b6105218c8823a041943f709aac6a3e1cb52a85ac7b9982ef65c59d873c1657e0f2b580cc37f561db03fb01fef90ad58c12171fd35159433a9c731d22e3704c725322e13cd2dea5083a6033e2706252222b8ea5ab155efb3a5de001ac4c1a2c40a1455b49b3f2512151d47c95fd1f3f15850eee5f62b86bc7a1b6f19124d31822d789542dca13bc9bf35279bfbad059cc7d6c09a352f27faedc729be7d8704a5748843751967850f94419db9d8b8d7d4791c277bfedc5a3694b3617d0974eb03beb6d213615c39c5f59862b766e2e4fe4c1dfdd8f16a639ddbe4aa4a4ed741d4d817b96c635a7c36e00e110dc63ff68a57ac8b35c22f58aa66ccd2b6a153bf8c3c9274452a15aff968a13273421b7ce014b4e40f46e98172b6e7cb12e85b3a387e7683fcc5d7936da3f1a17271ec00bdb2aa081b6f94b149b436f904ce0daca5391bd644a398515b2d3e223e364b9e0374bf519ca0a57cafee8b97a9a6ae4771e2ab1e7636e008238767a1ab8c8b98de8a19c1692f249e43c9217177ca38ca06284afa6b1d84a8cd60fdef79933892ed1136922a7aa50064acda186ac62bdb1dbfa9b0770aad698ca4702d8d6587a087f9eb78e150c5a989a76fd82399eab052c9a095e3cfb53a5d13628c8a6330f5604578f0ab8482a22435d51aa71e20b2ce2651d260d4e93300020cd5ad3303bb296993660f7d898c6e1ca374accfb6609f65d26188cc7d1fe399e9e403d783999f7aa34f1af2e5edaf0a14ea69459d320595a8d38b0035559b2f0830a0b718a3a796ae1323397fc4f5c2f54190a63349f3955f309937c2e0bf27a653f91423df6bd69ac331be8637f8269aea4f644a004423d6d81a2edaa985f3d58532605a8012c48b05d62fdf1f0e7fd140256ce1f9a7f9d22684d885325e838931511877818b37aa483f70b1b85284a2d00da0a80fb82f3f5a5f486505941ab0083f60eb4dfdc69a0471ccea510f5ab49ae24f085baa9c4fa0041075d7bea6ff3938059ddc08b3a8969c1f4671b468828b9ec7a4b322d8dacbcd5cb04c51595d71165423cd8a94e6fc07800ce410c73bbb432447b93fb1ad087f76f29910afba5d4d55979ad9bb8d5e606516a3a4970b56ed88c28758464cc6b0773cabd3476cdc514c3a8b7e138381d4f573d3317fc9527f8808fd8bcf501a868db5b6a4f3e40317c09cbd91a02094f2c8807d578bfa5cf54cc3b01bfe5aeffd475e8f9099590e3c6ad12a250917e62ef3a05d607dbef86d9daa830e895887cbadc34cc2f01153b2017dafbc51f1fd962999cee6857c9dff6eb51cbaa70dfeebd7d20ce580b6d106593ebb847770dbfb04b504f41fa259beedb86d30a8d5003b51d51de8770c50277de7d6e5c45db8cf38aec9a0e018670360cfa40443be13a410b813e2a257fc1ed76a81d4596b0536726d24f93b71c837322f317d34555df6a4f9999890f4b910dad4cfa31b2a9e6945108c308087ddf72815fa548a41712e25af73c7172385ca2e8e22ccc146f84b331950d1a86213ea820ef8a1dfe5f466be2873e53e456685833332571f355f88100a13c3486880c2de213c237401b9517fd8640731600e3478d6532abf4d75d2d3350d89b583b253c99ce6bfdddc92e654594b7c68ae6faf86414219bcac8bc13b72b91fb841b1f9e55b61451b829b25591a58f69cd965a22"}]}, @generic="8d9a4e4ca096dcb31cbaeab301a60e39db9c721cd09679fd0c7eae281547b0d4d2a11797f7af25adbbe8bed8455c91aa8857255acc6d712a113a3ca4dab87f14fb943b12912802cf81738c72ae105f8f44d3be70829367f5bf2bb3eaeef2cdf232fb9cfe385041ebe0d10dd8074a753dc5992b25d6ed1a10ba78d14550b7f7aaa3f1978680e4f899d88cbed7463a2493b10e9989add4c72e40417b4c68aa92ac37da5b5e65a690af7a0d2721e78138", @nested={0x102c, 0xe2, 0x0, 0x1, [@typed={0x14, 0x21, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @typed={0x12, 0x14b, 0x0, 0x0, @str='/proc/modules\x00'}]}, @generic="24c52e56fe4410b7399069bb1be53770cba40b51802d42aefce6db264b6e9da6a7b593840ad87ba8d8db3de4c8b30f5077e738873110d4daeb237115953a2747f4db770adc74be2235aa315281f4e59f7c9812ebffa9ccd75b3cab94e3ee5032d86756cbcc3ca9eaf6f8b0dd8c11768d5c28668d141553305d3aa3", @nested={0x20, 0xc0, 0x0, 0x1, [@typed={0x4, 0x109}, @nested={0xc, 0xe3, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @fd=r4}]}, @nested={0xc, 0x14a, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}]}]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x1}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x8}]}, 0x24f4}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) r8 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) 12.859781243s ago: executing program 7 (id=2362): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x620803, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd14\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/serial8250/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close_range$auto(0x2, r2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvme_core/parameters/iopolicy\x00', 0x2400, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec7\x00', 0x10b101, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xd0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r4, 0x80045505, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 10.826218263s ago: executing program 8 (id=2366): socket(0x10, 0x2, 0x9) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto(r0, 0x80dc5521, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x5, 0xd3e, 0x1, 0x1000009687, 0x100000000000003, 0x95f4da0a, 0x6, 0x7, 0x62, 0x1, 0x5, 0x6d3f, 0xb, 0x6, 0x2]}, 0x0) socket(0xa, 0x801, 0x84) socket(0x2f, 0x800, 0x8001) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda1\x00', 0x48100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) memfd_create$auto(&(0x7f0000000040)=')*t{\xdf\'.)\x00', 0xe) socket(0xa, 0x5, 0x84) socket(0x2, 0x2, 0x0) socketpair$auto(0xffffffff, 0x2, 0x63, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 10.005221966s ago: executing program 7 (id=2367): r0 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket(0x15, 0x5, 0x0) listen$auto(r1, 0x9) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7e) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_init$auto(0x2, 0x8a) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x80006, 0x9) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0xfffffffd, 0x44b, 0x7, 0x5, 0x1007181, 0xff, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x800000000fbf, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x0, 0x864, 0x6, 0x22000, 0x40200, 0xfffffffe, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x1000000000000000, 0x0, 0x0, 0x7fdf, 0x47, 0x0, 0x100, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000, 0x0, 0x6, 0x6, 0x0, 0x0, 0x6, 0x10001, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x2000000000000]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd02, &(0x7f00000001c0)) wait4$auto(r6, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000340)={{0xd, 0xee01, 0xffffffffffffffff, 0xf, 0x1ff, 0x3, 0x2}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x5, 0x7, 0x5, 0x91d, 0x3, 0x1000, 0x39a, @raw=0x7, @raw=0x2}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x24040080) 9.569266853s ago: executing program 8 (id=2369): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x6, 0x4, 0x7, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2, "44f14018"}, 0x8000, 0x0, 0x1000) mremap$auto(0x8, 0x2, 0x7fffffffffffffff, 0x3, 0x3c5f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x4800, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0xa0003, 0x0) ioctl$auto(r1, 0x3b8e, r0) writev$auto(0x3, 0x0, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(r2, &(0x7f0000000100)='nl80211\x00', 0x1, 0x7ff) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf03, 0x5, 0x6, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 9.034443652s ago: executing program 9 (id=2370): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x12\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x16, 0x80}) (async) r1 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000001400), 0x8000, 0x0) (async) mq_open$auto(&(0x7f0000000240)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5, 0x3, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) preadv$auto(r1, &(0x7f0000001d80)={0x0, 0x289}, 0x5, 0xfff, 0x3) 8.84862012s ago: executing program 8 (id=2371): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmmsg$auto(r1, 0x0, 0x9a6, 0xe000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0x3, &(0x7f00000000c0)=@xdp={0x2c, 0x4, 0x0, 0xc}, 0x54) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r2, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0xe983, 0xdf, 0x400000000000eb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x8080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, r3, 0x10001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x8, 0x10000e0, 0x19, r0, 0xe883) socket$nl_generic(0x10, 0x3, 0x10) 8.709119579s ago: executing program 9 (id=2372): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000004}, 0x3, 0x3, 0x3, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x4, 0xffff800000000000, 0xffff, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x180000000000, 0x2091d2, 0x8, 0x0, 0x391, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1ff, 0x7) mmap$auto(0x0, 0x1, 0x6, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x6, 0xff, 0xeb1, 0xfffffffffffffffa, 0x2000000007fff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x7fff, 0x7d, 0x10, 0xfffffff7ffffffff) mmap$auto(0xffffffffffffffff, 0x202000a, 0x7, 0x17, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x2eb1, r0, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x101}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x50a81, 0x0) io_uring_setup$auto(0x0, 0x0) 6.654963856s ago: executing program 7 (id=2373): unshare$auto(0x40000080) mmap$auto(0x7, 0x2000c, 0xd7, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) 5.000881147s ago: executing program 7 (id=2374): r0 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x105080, 0x0) setsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x9, 0x41, &(0x7f0000000040)='$)$^#}.\'+}\x00', 0xffffffff) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x4) (async) msgctl$auto_IPC_INFO(0x1, 0x3, &(0x7f0000000180)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xaf, 0xf9, 0xfffffff8, 0x97f}, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x3, 0x4, 0xd70a, 0xffff, 0x2, 0x5, 0x4, 0xaa0, 0x9, @raw=0x6, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x1040, 0x0, 0x200, 0x70bd2b, 0x7167, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [@typed={0x18, 0x14d, 0x0, 0x0, @binary="376b5081f20648c0e3c02555ad78e314dd8b0ffb"}, @typed={0x8, 0x98, 0x0, 0x0, @uid=r2}]}, @NL80211_ATTR_VHT_CAPABILITY={0x1004, 0x9d, "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"}]}, 0x1040}, 0x1, 0x0, 0x0, 0x40010}, 0x4054) (async) setsockopt$auto(r0, 0x3ff, 0xf, &(0x7f00000012c0)='.\x00', 0x69) (async) r4 = prctl$auto(0x737, 0x8, r3, 0xba, 0x400) msync$auto(0x4, 0x7fff, 0x1) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001340), r4) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x84a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async) move_pages$auto(r3, 0x3, &(0x7f00000014c0)=&(0x7f0000001440)="d3f11832990cf4966ba392c26c38f67bd15dc3c063fd29733c054cb5ce2a0b0df702669c3ca497a39e6ab070b11a33a1b6e9bb73a713ea24590ed0cd3c35625e8a7401c0924918bb834a359523f58cfd0610d033a62a0cedcb1d469ebe8b56052e21e17b8cbebe8fb497c34082421dff3b49619ce66a28390abbdf", &(0x7f0000001500)=0x9ed99540, &(0x7f0000001540)=0x101, 0x7f) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000015c0), r1) sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xe0, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_UNSPEC={0xcc, 0x0, "458c18b910be17e2f45d752f7aa56db8948bade9337f5a71f6573031fcbc4c4a2027ee970756057f28c52261c966ee6d6a4c062c47b93a275f8e5d35ba73bba539464ca6b36d910c72a3c29c4847c56a8fae5e6adb1fc394bc4ea8687abc3d10cc373be7c54b61a11bb4396a33568caa17f9bd1b45644387b6d3bdb5eb8b4899b5ee2d7ba3d41d73162e619ad5fc84bf4dd95287bff009e93df794c67dd7ba9bf4e4569766aeab21563baf25dc8a2a71b69e8b5a2d279a7afd51d4a29f1145ec7543ab24f4d09c38"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendto$auto(r1, &(0x7f0000001780)="fb34d387d6252431ee348bd20c3bf2a0965bafc39a7a86ad697f7836e5db06668a83156883780900cbb8d0de5a0f3c1d2a1cd4954a7f9ee482b3b00ac3d7c1df52482a6041fe20d3c5bc81a4d3212e45275e1f050346f16336c3ad0434063369be7e77c265b006e1d3ad17e8c250b5", 0xb, 0x2, &(0x7f0000001800)=@llc={0x1a, 0x303, 0xc9, 0xfb, 0x5, 0x5, @remote}, 0x7) (async) r7 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001840)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x2c0000, 0x0) r8 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001900)={0x2, &(0x7f00000018c0)={0xfff, 0x0, 0x81, @inferred=r7}}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001980)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000001a80)={&(0x7f0000001940), 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xb}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x90}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @fd=r9}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x43}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x11) r11 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/snd/midiC2D0\x00', 0x11d200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r11, 0x80045700, &(0x7f0000001b00)=0x45c) (async) socket(0xe3038fd9e4bfc520, 0x80000, 0x7) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000100}, 0x4000000) ioctl$auto_EXT4_IOC_RESIZE_FS(r7, 0x40086610, &(0x7f0000001c40)=0x101) (async) r12 = prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, r3, 0xb, 0x2) epoll_ctl$auto(r12, 0x2e60, r8, &(0x7f0000001c80)={0x9, 0x9}) (async) fcntl$auto_F_SETPIPE_SZ(r7, 0x407, 0xa) (async) fcntl$auto_F_SETFD(r9, 0x2, 0x9) (async) ioctl$auto_X86_IOC_WRMSR_REGS(r12, 0xc02063a1, &(0x7f0000001cc0)=[0x9, 0x5, 0x3ff, 0x8, 0x6, 0x1, 0x5, 0x3]) (async) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r7, 0x6, &(0x7f0000001d00)="1c78636e5dfbaba187b9a4bf72c008551c587ea6a653e7a33c27f3de55793f7e14974c3eb2ab596f75a64e675996b9408d8669ea30d06dab692bd58fbb10a0532467216e2f00535d80d75d78da351e4b98c3602a64f482a8ffd0e32a0afee3fc479f6507d6d0cb4cce0d743f4915ec70e9405a3758270e36e25bdd6684ab5cbb1b9d6373fdb5b4e56985737a3ac88f8a3fd85b7a1861bba48c79d993242475a8") (async) name_to_handle_at$auto(r4, &(0x7f0000001dc0)='/$#.\x00', &(0x7f0000001e00)={0xa2, 0x9, "d0acea165793f562425174ea2011ff638eb28581faa062405774de964ea41115ead0bd48e81f99de59aa0bf9643822aff6cb64cb76945e794981fa82fc1b8d02372c23313bf8417cdb9e4f8b6174bba85b73e4f48fbd32ec862de273176d314078df69e39eff67b38992e35b40719277c74490767a21c9dc2fdf3761221e5b124ffe075d530618d59aae3fc0232c924de8cc0fa05aeeebcf72e7be4d5f0ae3350114"}, &(0x7f0000001ec0)="5ed5d11d8a639f95833d94cdef558a9db1850e265c834f270e391b1fdf9bb1f183b108868638d5df6a23b62e5531d0cf2d3b803a6dc91c4a2c78f951912b10b3446969954c91d07c6e7f47ef2c4aea469d6c4996c52492cd5f36fa535d1d17289d3ec62eb7e9d7c7180e35537316f1b9b851c658c8ab568412893811370cf2327e39f4c858049519760b1fe3adfa8db59918cdc04d666254d821dfe188d01848ebf8d1951a12b75223d5a2f3e81599ed0364fda8a65497bc97d34aa607", 0xa) 4.868868247s ago: executing program 8 (id=2375): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() bpf$auto(0x5, 0x0, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0x25, 0x1, 0x5) recvfrom$auto(r3, 0x0, 0x0, 0x40, 0x0, 0x0) prctl$auto(0x59616d61, 0xdafffffffffffffd, 0x1, 0x4, 0xfffffffffffffffc) r4 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r4, 0x6, 0x25, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) ioctl$auto_FIBMAP(r0, 0x1, 0x1) 4.702483427s ago: executing program 7 (id=2376): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000004}, 0x3, 0x3, 0x3, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x180000000000, 0x2091d2, 0x8, 0x0, 0x391, 0x2) mmap$auto(0x0, 0x1, 0x6, 0x40eb2, 0x401, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x2eb1, r0, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x101}) io_uring_setup$auto(0x0, 0x0) 3.646032368s ago: executing program 8 (id=2377): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000004}, 0x3, 0x3, 0x3, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xffff800000000000, 0xffff, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x180000000000, 0x2091d2, 0x8, 0x0, 0x391, 0x2) mmap$auto(0x0, 0x1, 0x6, 0x40eb2, 0x401, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x2eb1, r0, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x101}) io_uring_setup$auto(0x0, 0x0) 2.702142496s ago: executing program 9 (id=2378): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x501004, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0xfffffff7, 0x10000, [0x1, 0x0]}) connect$auto(0x3, 0x0, 0x58) 2.494407397s ago: executing program 9 (id=2379): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) (async) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r3) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r3) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 2.282423279s ago: executing program 9 (id=2380): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 32) r0 = socket(0x15, 0x5, 0x0) (rerun: 32) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 32) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffffbff, &(0x7f00000002c0)="6eb9c6a33aaa236ee4cf6df690b0df4664737de700b4f0c6053b65b20e1746820cf6eb2186f43bec8617aa7b058a00977de7f5e86a1e3d95a79b3246") (rerun: 32) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) (async, rerun: 64) ioctl$auto(0x3, 0x8b35, 0x91) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = socket(0xa, 0x3, 0x3b) (async) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f0000000380)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\x03\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xcf\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>\x00\xff\xbb<\xccPV\xe5\xf2y\xcc\x15R\x9f\x90[\x89!\xc5\xd7I\xff\x91\xd1\x85$\xb1s-\xa6\x86$\x91\xd6:\xe27:;\x94\xd9\xe1\x86\xa6R\xff,\xb0\xf2\xc3\x11\x9d\xd9u\xfc\x85.\xce@LpA\xeb\xc5\xf0\xed\xe7\x03\xfb{?~R7,\xbbU$\x82h\xfc\xe3B \x86o\x1f\xe1^\xac\xa2Y.\xb3Je\xba;y\xba\xb4\xf4i\xfb+\x97`=\x9f6\xae0\xbdt\xaa}\xfa\x9b\x85{\x02\xad=\xc4x\xbd\x05\x80\xe4S\xca\xbb_\x9a\xda|\xee\xff77\x8e\xd4\xb8\xf450\x02\xd3\xdf_\x12I\x9a\x95\xeb\xfc\xb5\xc3\x11\xd2LY\xe1\xb08\x85\x7f\xff\xc6-\x1d\xd7Z\xcak\n\x10\xbf\xb7t\x1c\nK+\xbb\x04\x01\f0\x8f\x9f\x89\xaa\xd9\xfb\x88\xebH/k\x93Q\xc4\xda?\x0e\xcd\xd2 \x9d@\xb5\x97\x95O\xf8\x8cYx\xcd\xc9I\xbf5o\xe7(W\xba\xc1\xd3\xf3\xa9\xe0f\x03\xb9ijN\xf6U\xdb\xbb3\xc7%f,\xf6\x9c\x1c\xb4\xddMd\x91\x97\xe0\xe1\xe5\xf8\xa7\x8d0\xfe\x80I\xb2\xe2\x1e\x9a\xf5\xd9M\xdf\x02\x80\x1e\xe3\x1e\xb1\xf0\x1c\x11\xa2H\xdb\x8f\xff\'\x99\xf4C\x1e;\x81_\x1d\xf9\xcf7_\xca\t\xfe\xd55\x88d\xf8\b\xcc\xd35\xa8#\x18\xa2t\x92(\xd3\x1akF6\xf6\x1f/Z2\x80\xea]\x85\xebT:K=X\x19\xd3\x94\xdbI\xe9\x1f\xc0q,\x8b\xdd\x9fX\xfbp|\x92t\x8e7\x96R\xec\x80<\x0e3\xd5\xf9\x1fl\x9d\x0e\xc1\xf8c\x8ef\xbaD\x18b', 0x100000001) (async) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="10002cbd7000fedbdf253a000000d80738800c0000800800100109000000e00000804800848008004b00", @ANYRES32, @ANYRESHEX=r3, @ANYRES32, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="b0a08c3626e8d383c00452e95e8563c827d1fb9033d78b394e492cb32a9353693d9cd15d7c254061a1a6e5ba2e", @ANYRESOCT=r0, @ANYRES64=r0], 0x8d8}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (async) clone$auto(0x8ffe, 0xbc2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0200400}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000003f9768915fa1fb56a58898011ae46fb4811763c5d575fb8c91a723ff59e51b8e301396f05be54bb2da19453f24bda93ea219b9809e8543ceb279920103fb748ba40f418b5b23c5fb38df20694e44cc0691b3e5663816c9b68dbf35402c698821c9a06757903c2ec43977725e0c6b", @ANYRES16=r4, @ANYBLOB="05012bbd7000ffdbdf2570000000080023019f0000000600360000000000140004006d6163766c616e310000000000000000050018010f0000000500ee00800000000400ec00"], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000021) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0xc, 0x93, 0xfffbffff) 663.01028ms ago: executing program 9 (id=2381): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x3) r0 = socket(0x11, 0x80003, 0x300) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0x2) migrate_pages$auto(0x0, 0x2b59, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80240, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x9487, 0x445f, 0x15f4da0a, 0x1, 0x81, 0xf8bd, 0x100, 0x4, 0x392, 0xfffffffffffffffd, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) prctl$auto(0x2f, 0x2, 0x8, 0x0, 0x0) mmap$auto(0x800000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 607.645262ms ago: executing program 7 (id=2382): sync_file_range$auto(0xffffffffffffffff, 0x5, 0xa31e, 0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r0, 0xc0b45545, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) 0s ago: executing program 8 (id=2383): r0 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)={0x9b2, 0xe, 0x2, @raw=0xffff68d3}}) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x180, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x5}, @L2TP_ATTR_STATS={0x12b, 0x1e, 0x0, 0x1, [@generic="18bcc8a30a7a48f39240f4c2e084633ed4fda9c523082691bc52b451382033f0d2d9b6d7a4c0ee77374670872e4faf7f0dd1a8a889f057b673f813c35be73d6210f98a5b423ca58d3da7ed0ca83a94cb418ec597f97e4b3388df657d144694eec4b7fdcd023b7ee1b2bc97ac78ac26fae8565da3d26945828815df14112c0ec10017aee78a679926ad1108a87479bca84c7a91faedb4cc278824d21560c4475bcb1042c2df458708d7ff976a5b99f950263a5cf99f80e6", @nested={0x65, 0x13c, 0x0, 0x1, [@typed={0x8, 0x157, 0x0, 0x0, @u32=0x101}, @nested={0x4, 0x142}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @nested={0x4, 0x52}, @nested={0x4, 0xa}, @generic="757afa9939a52901e11549cc619a38766595ed26496c3790abc4366f0f6a90e4db314963d85d4f0d85921d9803b38b713065574718", @nested={0x4, 0xbf}]}, @typed={0x8, 0x147, 0x0, 0x0, @ipv4=@loopback}]}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x180}, 0x1, 0x0, 0x0, 0x8040}, 0x800) ioctl$auto_EXT4_IOC_GETVERSION(0xffffffffffffffff, 0x80086603, &(0x7f00000002c0)=0x4) r1 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000300), 0x20800, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000340)='!', 0x5af0) ioctl$auto_PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000380)=0x1000) fcntl$auto_F_SETOWN_EX(r1, 0xf, 0x91f) pidfd_send_signal$auto(r1, 0x0, &(0x7f00000004c0)={@siginfo_0_0={0xabc, 0x8, 0x5555, @_sigsys={&(0x7f00000003c0)="cd68b66f79671202dd4b2d0714fc46ecf390383b44d59f61b662ee1a65b5a73ac4d4a5d775e84a0b58bd0757ddd525495bc5b92541f447178236e26ba3c59b4edc6ae12774680a733b572af1b609fd320d58e45cc613c1aab13caaaf21e9d6f2481ab6b142193998681d670eb86c37370b7899482a5e3c3da36570e815a92ac3df6f2a1ef9a3f76568eb9bf34ec3c888363fe9d9040ba2fecd857c7f1aee9b41eaacd8b2910965f8bf789320ee9a0f2e4fe0b2efc3d8d04a94af04d8e0cd0609f324", 0x8001, 0x7}}}, 0x7) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000540), r0) sendfile$auto(r0, r0, &(0x7f0000000580)=0x1000, 0xfffffffffffffffc) r2 = socket(0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cec17\x00', 0x103000, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000740)="4b852834a0efb8db7084a98b863c401c51e5ae0fc225f775e2cd6751fe5e758c5e18e590b3e6c940d29f7c46b78433d8f2c624c40a4e6f7a5c1d93021237869ef4751e0918e8507ed2c872177fcfdfd8b8e0f254625c72bb7389326d0ee1cdf1d1d34978b50090310e624d0143bfff3fa8256ea388c83222a85528cfb965dfd81e3b2e1764f0d05f2cdb21e42a2e5b1ed1c34b4f00ccdb7d9f22940574727910600c72ed28e97e218d1464165864e4dfd2d06f017288d5b37e8f1c391926a3926bf545ce03af1e6d95ac719baba74c514f0dc7e8d34fe26afa9bdf00980d810623", 0x74) r4 = waitid$auto(0xe70c, r0, &(0x7f0000000840)={@siginfo_0_0={0x0, 0x200, 0x8001, @_kill={0x0, 0xee00}}}, 0x7, &(0x7f00000008c0)={{0x8000000000000000, 0xa}, {0x100, 0x79}, 0x7ff, 0x8, 0x6, 0x4, 0x101, 0xcd2e, 0x7, 0x8, 0x80000001, 0xffffffffffffffff, 0x4, 0x5, 0x8000, 0x2}) r6 = prctl$auto_PR_SCHED_CORE_GET(0x40, 0x0, r4, 0xd, 0x6) setxattrat$auto(r6, &(0x7f0000000980)='./file0\x00', 0x7, &(0x7f00000009c0)='/dev/cec17\x00', &(0x7f0000000a00)={0xfffffffffffffff8, 0x4, 0x6}, 0x2) recvmmsg$auto(r1, &(0x7f0000000d00)={{&(0x7f0000000a40)="3c4c9ce569dba09013d7db3402d10382e9c0c8a371dd90ba5cd9f7542ebe30f05b54cd4e31210d0b8e88b26eb6c5a2b432a86695bad6cdd89d0c4c5f47595dbba67cb95b8dae0e6e25415879009c53f2df2d685334fe9f61287df26e0d8e5abe679ef582b68075dc930e8b03dae82b4a3bac05244e96ad427eb8c5f7ba7417aefef97ff9f51061fd212a098d581bc97554e1e0c750da2df23d45c45d67c4d358d0ff61ec42a9147ce3883570", 0x4, &(0x7f0000000bc0)={&(0x7f0000000b00)="29e5ed399999f10d21f8e43afda35509c11ea5241e3b27e77a43f29b3fa20005a87148bb584ad77be05e12158bf1d8156b9b8c8bfa5f100956a06c4d407eab2ad4c9a891e12a2087ae18b8ff468ae7f4da3df24b782176d72c3c6c39e76a6301d53a3bcd6c35bb05625ef0d5453510c8704d5a2fdcf0de6bc6a8cf91fdcd42f538b0439b1ff39f0ad29aa47485a1aad91d8f8a4c68b9456586ebecc9b0eb4bbd0aab1ca41a96", 0xf}, 0xf, &(0x7f0000000c00)="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", 0x6}, 0x8}, 0x5, 0x9, &(0x7f0000000d40)={0x4, 0x110}) ioctl$auto_CEC_S_MODE(r6, 0x40046109, &(0x7f0000000d80)=0x10001) ioctl$auto_KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000dc0)={0xd, [0xffff, 0x2, 0x40, 0xee]}) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000e40), r2) sendmsg$auto_TIPC_NL_KEY_FLUSH(r6, &(0x7f0000002680)={&(0x7f0000000e00), 0xc, &(0x7f0000002640)={&(0x7f0000000e80)={0x1784, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @u32=0x4}]}, @TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @ipv4=@multicast2}]}, @TIPC_NLA_MEDIA={0x2ab, 0x5, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x137, 0x0, 0x0, @pid=r5}, @generic="49dbea8fd03b28024c9fe68df29d0c2ba3", @nested={0x160, 0xd8, 0x0, 0x1, [@generic="eed578a96536fb2d3dc6f9140c7391bbd67462adb6515f2355183c7dbe14af543b96f0d32d31af535ad2c6a45b77df482692358766380ae61fd1ca9b1fd2565d40c822ebbc784ed64e4beb2a95c50ba7cb65eca91dc3e8036749e29897ab8ba54e92744ec9d735cfd9bc5a3bad457a44362df91e692b87c5b543e56630168d8ae63e91a89e89f66f803e1a80180c26e09de94c8782f5df98cb82b9a3f4522f97cf5889c3afcaf2", @nested={0x4, 0xd3}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x20}, @nested={0x4, 0xa7}, @nested={0x4, 0x38}, @nested={0x4, 0x93}, @generic="4810c17e851e73b9484a36062e31387c79079d8881e5570d53befe1a66b8e80512ab703bed46b5540d51ac2c4394fc35841b0246666a1c00ef5f8f1c106ab6aa370fe9337d16937e960e2c8909d815280de7da0488b7fae1e9f086f0087df89de1875724fb1d234ff3e04d24da9c2b5f9d797031afe73ab451b336dffa03cd06f34a966220f9762740", @nested={0x4, 0xbf}]}, @nested={0x82, 0x81, 0x0, 0x1, [@nested={0x4, 0x90}, @generic="4b0cfc53f815032b0e5890ce38271c39a72e8c3da57750340188a6a9b025e247519bd286ed525a2f55a825c411da9f9df055dfdbe950b81b892128e1b1e21a4df91a07e93ff38c38190b2702d8bd2db6af34ae622de339236438b68cf8a0f5b56a4fa09709ebcbf48e0f15b0e516a6f12ceb3e2e92f5", @nested={0x4, 0x14d}]}, @nested={0x5f, 0x41, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd=r0}, @generic="7d9b1f261504b9926a95b96b64358d5b389875c580265dd4dcb594eaf532", @typed={0xa, 0x9e, 0x0, 0x0, @str=']##{^\x00'}, @nested={0x4, 0x9c}, @generic="ceb07f3e913b953e56e1ec012ba120a5402bda9fa3d5c38e5bc58b871ef31a54cc0e36dedf"]}, @generic="a87879d82fc59d12e3767454730781dba449536bb42e6f6669c7ae82b26011d390ecd8f4321b349119ba1e096205bb873904a20c16077a7c64d4f1ee6d36810f4b15fbc8d519"]}, @TIPC_NLA_PUBL={0x11fc, 0x3, 0x0, 0x1, [@nested={0x11cf, 0x133, 0x0, 0x1, [@generic="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", @typed={0x8, 0x141, 0x0, 0x0, @pid=r4}, @generic="5d75edbc55e14caf4a75e99c258fdf893ff89ced9e6e57339aa3db3a34b68436742e96ea4c3cb912d05be1180c3ca496537b32edc065e9e8a74daaf6994046665d9b415a40f95ccd6fb877066f887880c750c01da76bc758e1bc1967b96957b8dcefbad4e0c8ddd155d380ceb87e041051be0378d2192595d471bae45ecd8b13e62c6fa71fe1670ad0a1b34259256e89533590fd7857d32e32119929fcf8c3f4c3077a3741c91547d7137c2a1031f360", @nested={0x4, 0xcb}, @typed={0x8, 0x13c, 0x0, 0x0, @u32=0x7}, @generic="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", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x4d}]}, @nested={0xc, 0x106, 0x0, 0x1, [@nested={0x4, 0x10a}, @nested={0x4, 0xe3}]}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @TIPC_NLA_NET={0x1a6, 0x7, 0x0, 0x1, [@generic="d9eb09647efb3d7a8ef1d9407e828ea9098837209918ea48a008dc54f4505d0a514298", @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="c146fc92de0f1eeaf6f553cb135715cccac74ceadecd91fad4cc725b5a61166835d887b18f1ab56b3cab7fe474ff55df8f548dd23eb078a5f671875720cb757f566fd825e11471975bc0a7ba24b6288f6e88114575b2925a5212d1deb48f18cd18121b0941c0db0d1b3a4ae9133e0f5436b1e0723323dabfba964a0a36959ae6baf8", @generic="a15632ad7a0d9ee00c24968dfe05d5c6f12629c82183a1459b4d9d47528d1fb60dd61d7b1eefba539dd182e65c63ebab3f852fe3b6adc0f35f6bffc5aad98f3d5f3fd88409ac265be493a519012b8a636928bfb104ca7828516c6b7f03015350440be7f5b8e838235da43ceb4becf1315fa115421efcfb864755723f07df3eb99dc4a917250b545ac51b33a1429c2442bd337c367ebab2cb216f8391d0a7b8a2111292b50cccf63a5eb44b455b0fa2c1558bc3bceb6175d378d1895f3115a625338b12644d4426d456dd7006ffb0c3b4ec8127f28ae66062994d55397c2caa20eb4fea9e1682e6b863b21ff9e9892a8209663311cd"]}, @TIPC_NLA_MON={0x106, 0x9, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x110, 0x0, 0x0, @u64=0xff}, @typed={0x8, 0x93, 0x0, 0x0, @fd=r3}, @typed={0x7, 0x151, 0x0, 0x0, @str='*/\x00'}, @generic="e6364d7e452379710f9225135d20c0018266b191ec40f41d445e99559f20b9c93e863bd81224fcb050e7e5238efef87a5e742de60a41d53dcb32deed9447aec925f84016a39461d0133fc53c60c2384826eba569245091b67c0871da6676104b22b27773f949a3a562ed061f7ab141d932acaba0546dff16b2a99ca26560e45ad86ad470c527a7880af8f9651359c29c71180a9891d41c33d89fb702918ed2d3d7781c4656f9b87766171d86660b77b2e524b61171dd48cecbe8f7819b18443775a3df91b2358a2ee97411213137a72238aa5f32287da0fbd97508de8db4"]}]}, 0x1784}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000026c0), 0x202800, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r8, 0x4010744d, &(0x7f0000002740)={&(0x7f0000002700)='*+-\x00', 0x9, 0x3}) ioctl$auto_FIONBIO(r2, 0x5421, 0x8) r9 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/zswap/reject_reclaim_fail\x00', 0x100, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r9, 0x7, 0x7, 0x5) msgctl$auto_IPC_STAT(0x200, 0x2, &(0x7f0000002940)={{0x10de, 0x0, 0x0, 0x5cf, 0x7f, 0x30, 0x7efb}, &(0x7f00000028c0)=0x80, &(0x7f0000002900)=0x4, 0xfffffffffffffeff, 0x8fde, 0x76, 0x2, 0x2, 0x9, 0x4, 0x280, @raw=0x7ef, @raw=0x1}) kernel console output (not intermixed with test programs): ][T14785] ? __pfx___lookup_slow+0x10/0x10 [ 539.665749][T14785] ? irq_entries_start+0xd0/0xcb0 [ 539.665767][T14785] ? irq_entries_start+0xd0/0xcb0 [ 539.665786][T14785] ? __pfx_mon_text_release+0x10/0x10 [ 539.665799][T14785] lookup_slow+0x50/0x70 [ 539.665816][T14785] lookup_noperm_positive_unlocked+0xd5/0x110 [ 539.665832][T14785] debugfs_lookup+0xc7/0x150 [ 539.665875][T14785] debugfs_lookup_and_remove+0x1c/0xa0 [ 539.665890][T14785] kmem_cache_destroy+0xd1/0x180 [ 539.665909][T14785] mon_text_release+0x267/0x3b0 [ 539.665922][T14785] ? __pfx_locks_remove_file+0x10/0x10 [ 539.665940][T14785] ? __pfx_mon_text_release+0x10/0x10 [ 539.665953][T14785] full_proxy_release+0xc0/0x140 [ 539.665968][T14785] ? __pfx_full_proxy_release+0x10/0x10 [ 539.665984][T14785] __fput+0x3ff/0xb40 [ 539.666000][T14785] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.666041][T14785] task_work_run+0x150/0x240 [ 539.666061][T14785] ? __pfx_task_work_run+0x10/0x10 [ 539.666085][T14785] get_signal+0x1bd/0x21e0 [ 539.666103][T14785] ? task_work_add+0x201/0x3b0 [ 539.666122][T14785] ? __pfx_task_work_add+0x10/0x10 [ 539.666140][T14785] ? __pfx_get_signal+0x10/0x10 [ 539.666155][T14785] ? __mutex_unlock_slowpath+0x15c/0x790 [ 539.666178][T14785] arch_do_signal_or_restart+0x91/0x770 [ 539.666194][T14785] ? __pfx___fput_deferred+0x10/0x10 [ 539.666211][T14785] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 539.666233][T14785] ? ksys_read+0x1ac/0x250 [ 539.666257][T14785] exit_to_user_mode_loop+0x86/0x4a0 [ 539.666277][T14785] do_syscall_64+0x668/0xf80 [ 539.666294][T14785] ? clear_bhb_loop+0x40/0x90 [ 539.666311][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.666325][T14785] RIP: 0033:0x7ff0b219c799 [ 539.666338][T14785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.666352][T14785] RSP: 002b:00007ff0b03f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.666366][T14785] RAX: fffffffffffffffc RBX: 00007ff0b2416090 RCX: 00007ff0b219c799 [ 539.666375][T14785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 539.666383][T14785] RBP: 00007ff0b03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.666391][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.666399][T14785] R13: 00007ff0b2416128 R14: 00007ff0b2416090 R15: 00007ffca975f398 [ 539.666418][T14785] [ 540.514911][T14804] zram: Cannot change disksize for initialized device [ 541.363642][T14826] sctp: [Deprecated]: syz.2.1748 (pid 14826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.363642][T14826] Use struct sctp_sack_info instead [ 542.110175][T14846] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 542.445822][T14819] random: crng reseeded on system resumption [ 542.800273][T14865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 543.225255][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1759'. [ 545.838627][T14955] zswap: compressor û not available [ 547.128528][T14983] Unable to find swap-space signature [ 547.330560][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1772'. [ 548.707061][T15022] program syz.5.1778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.113748][T15025] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1777'. [ 550.563535][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 553.173875][T15117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1801'. [ 553.702507][T15150] FAULT_INJECTION: forcing a failure. [ 553.702507][T15150] name failslab, interval 1, probability 0, space 0, times 0 [ 553.805281][T15150] CPU: 0 UID: 0 PID: 15150 Comm: syz.3.1808 Tainted: G U L syzkaller #0 PREEMPT(full) [ 553.805320][T15150] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 553.805326][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.805334][T15150] Call Trace: [ 553.805339][T15150] [ 553.805345][T15150] dump_stack_lvl+0x100/0x190 [ 553.805371][T15150] should_fail_ex.cold+0x5/0xa [ 553.805388][T15150] should_failslab+0xc2/0x120 [ 553.805402][T15150] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 553.805423][T15150] ? security_inode_alloc+0x3b/0x2c0 [ 553.805437][T15150] ? lockdep_init_map_type+0x5c/0x250 [ 553.805458][T15150] security_inode_alloc+0x3b/0x2c0 [ 553.805472][T15150] inode_init_always_gfp+0xced/0x1040 [ 553.805489][T15150] alloc_inode+0x8e/0x250 [ 553.805506][T15150] sock_alloc+0x44/0x280 [ 553.805617][T15150] ? security_socket_create+0x7f/0x250 [ 553.805640][T15150] __sock_create+0xc2/0x860 [ 553.805657][T15150] __sys_socket+0x14d/0x260 [ 553.805672][T15150] ? __pfx___sys_socket+0x10/0x10 [ 553.805693][T15150] __x64_sys_socket+0x72/0xb0 [ 553.805706][T15150] ? lockdep_hardirqs_on+0x78/0x100 [ 553.805727][T15150] do_syscall_64+0x106/0xf80 [ 553.805744][T15150] ? clear_bhb_loop+0x40/0x90 [ 553.805761][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.805775][T15150] RIP: 0033:0x7ff0b219c799 [ 553.805787][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.805801][T15150] RSP: 002b:00007ff0b03d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 553.805815][T15150] RAX: ffffffffffffffda RBX: 00007ff0b2416180 RCX: 00007ff0b219c799 [ 553.805825][T15150] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 553.805833][T15150] RBP: 00007ff0b2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 553.805841][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.805849][T15150] R13: 00007ff0b2416218 R14: 00007ff0b2416180 R15: 00007ffca975f398 [ 553.805867][T15150] [ 553.805893][T15150] socket: no more sockets [ 555.085535][T15184] FAULT_INJECTION: forcing a failure. [ 555.085535][T15184] name failslab, interval 1, probability 0, space 0, times 0 [ 555.154710][T15184] CPU: 0 UID: 0 PID: 15184 Comm: syz.3.1815 Tainted: G U L syzkaller #0 PREEMPT(full) [ 555.154737][T15184] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 555.154744][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.154753][T15184] Call Trace: [ 555.154758][T15184] [ 555.154764][T15184] dump_stack_lvl+0x100/0x190 [ 555.154791][T15184] should_fail_ex.cold+0x5/0xa [ 555.154809][T15184] should_failslab+0xc2/0x120 [ 555.154825][T15184] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 555.154846][T15184] ? __mpol_dup+0x74/0x370 [ 555.154866][T15184] __mpol_dup+0x74/0x370 [ 555.154883][T15184] ? __pfx___mpol_dup+0x10/0x10 [ 555.154904][T15184] mbind_range+0x2ad/0x550 [ 555.154923][T15184] do_mbind+0x7de/0xfd0 [ 555.154945][T15184] ? __pfx_do_mbind+0x10/0x10 [ 555.154962][T15184] ? __lock_acquire+0x4a5/0x2630 [ 555.154989][T15184] ? __pfx_get_nodes+0x10/0x10 [ 555.155010][T15184] ? find_held_lock+0x2b/0x80 [ 555.155028][T15184] kernel_mbind+0x1b7/0x200 [ 555.155047][T15184] ? __pfx_kernel_mbind+0x10/0x10 [ 555.155070][T15184] do_syscall_64+0x106/0xf80 [ 555.155090][T15184] ? clear_bhb_loop+0x40/0x90 [ 555.155108][T15184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.155123][T15184] RIP: 0033:0x7ff0b219c799 [ 555.155136][T15184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.155150][T15184] RSP: 002b:00007ff0b03f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 555.155165][T15184] RAX: ffffffffffffffda RBX: 00007ff0b2416090 RCX: 00007ff0b219c799 [ 555.155182][T15184] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 555.155191][T15184] RBP: 00007ff0b2232c99 R08: 0000002000000006 R09: 0000000000000002 [ 555.155201][T15184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.155210][T15184] R13: 00007ff0b2416128 R14: 00007ff0b2416090 R15: 00007ffca975f398 [ 555.155230][T15184] [ 556.084078][ T5824] Process accounting resumed [ 556.144373][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 558.641499][ T5146] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 558.976378][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1839'. [ 560.331758][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 560.426415][T15306] bond0: (slave bond_slave_0): Releasing backup interface [ 560.481480][T15314] FAULT_INJECTION: forcing a failure. [ 560.481480][T15314] name fail_futex, interval 1, probability 0, space 0, times 0 [ 560.544804][T15314] CPU: 0 UID: 0 PID: 15314 Comm: syz.5.1846 Tainted: G U L syzkaller #0 PREEMPT(full) [ 560.544831][T15314] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 560.544837][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.544847][T15314] Call Trace: [ 560.544852][T15314] [ 560.544857][T15314] dump_stack_lvl+0x100/0x190 [ 560.544886][T15314] should_fail_ex.cold+0x5/0xa [ 560.544904][T15314] get_futex_key+0x1d2/0x1620 [ 560.544925][T15314] ? __pfx_get_futex_key+0x10/0x10 [ 560.544945][T15314] ? __cgroup_account_cputime+0xd5/0x130 [ 560.544984][T15314] futex_wait_setup+0x83/0x510 [ 560.545011][T15314] __futex_wait+0x19f/0x300 [ 560.545035][T15314] ? __pfx___futex_wait+0x10/0x10 [ 560.545055][T15314] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.545074][T15314] ? lockdep_hardirqs_on+0x78/0x100 [ 560.545095][T15314] ? __pfx_futex_wake_mark+0x10/0x10 [ 560.545120][T15314] ? find_held_lock+0x2b/0x80 [ 560.545133][T15314] ? futex_wake+0x456/0x530 [ 560.545157][T15314] futex_wait+0xed/0x380 [ 560.545178][T15314] ? __pfx_futex_wait+0x10/0x10 [ 560.545203][T15314] ? __inet6_bind+0x310/0x1b40 [ 560.545274][T15314] do_futex+0x1ef/0x350 [ 560.545293][T15314] ? __pfx_do_futex+0x10/0x10 [ 560.545311][T15314] ? __sys_bind+0x1c7/0x260 [ 560.545332][T15314] __x64_sys_futex+0x34f/0x4d0 [ 560.545353][T15314] ? __pfx___x64_sys_futex+0x10/0x10 [ 560.545371][T15314] ? __task_pid_nr_ns+0x1ca/0x510 [ 560.545388][T15314] ? __task_pid_nr_ns+0x1ca/0x510 [ 560.545412][T15314] do_syscall_64+0x106/0xf80 [ 560.545431][T15314] ? clear_bhb_loop+0x40/0x90 [ 560.545449][T15314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.545463][T15314] RIP: 0033:0x7fce50b9c799 [ 560.545476][T15314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.545491][T15314] RSP: 002b:00007fce51b3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 560.545505][T15314] RAX: ffffffffffffffda RBX: 00007fce50e15fa8 RCX: 00007fce50b9c799 [ 560.545515][T15314] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce50e15fa8 [ 560.545524][T15314] RBP: 00007fce50e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 560.545533][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.545541][T15314] R13: 00007fce50e16038 R14: 00007ffcb559c730 R15: 00007ffcb559c818 [ 560.545560][T15314] [ 561.867671][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'. [ 562.552950][T15356] [ 562.668783][ T5146] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 562.678600][ T5146] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 562.710297][T15359] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 562.892213][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.898634][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.877908][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 565.442328][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'. [ 570.186413][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.186453][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.193955][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.201516][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.210767][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.218873][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.227625][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.235971][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.243445][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 570.251028][ T5146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 572.188130][T15553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1898'. [ 572.248442][T15559] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1900'. [ 572.292893][T15553] bond0: (slave bond_slave_0): Releasing backup interface [ 572.546405][T15568] netlink: 142 bytes leftover after parsing attributes in process `syz.2.1903'. [ 573.048662][T15577] [ 573.965791][T15590] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1911'. [ 574.082391][T15592] netlink: 78 bytes leftover after parsing attributes in process `syz.1.1911'. [ 574.476419][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 574.674538][T15599] zram0: detected capacity change from 16 to 0 [ 574.859466][T15599] vivid-007: ================= START STATUS ================= [ 574.898016][T15599] vivid-007: Generate PTS: true [ 574.920098][T15599] vivid-007: Generate SCR: true [ 574.924963][T15599] tpg source WxH: 320x240 (Y'CbCr) [ 574.969367][T15599] tpg field: 1 [ 574.972753][T15599] tpg crop: (0,0)/320x240 [ 575.006699][T15599] tpg compose: (0,0)/320x240 [ 575.011294][T15599] tpg colorspace: 8 [ 575.015091][T15599] tpg transfer function: 0/0 [ 575.057174][T15599] tpg Y'CbCr encoding: 0/0 [ 575.061591][T15599] tpg quantization: 0/0 [ 575.065720][T15599] tpg RGB range: 0/2 [ 575.126896][T15599] vivid-007: ================== END STATUS ================== [ 575.810080][T15615] FAULT_INJECTION: forcing a failure. [ 575.810080][T15615] name failslab, interval 1, probability 0, space 0, times 0 [ 575.877081][T15611] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078004a88 pfn:0x78000 [ 575.896954][T15615] CPU: 0 UID: 8 PID: 15615 Comm: syz.2.1916 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.896981][T15615] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.896987][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.896996][T15615] Call Trace: [ 575.897002][T15615] [ 575.897008][T15615] dump_stack_lvl+0x100/0x190 [ 575.897035][T15615] should_fail_ex.cold+0x5/0xa [ 575.897054][T15615] should_failslab+0xc2/0x120 [ 575.897070][T15615] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 575.897094][T15615] ? key_alloc+0x423/0x1310 [ 575.897180][T15615] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 575.897205][T15615] kmemdup_noprof+0x29/0x60 [ 575.897230][T15615] key_alloc+0x423/0x1310 [ 575.897254][T15615] ? __pfx_key_alloc+0x10/0x10 [ 575.897270][T15615] ? __pfx_key_default_cmp+0x10/0x10 [ 575.897289][T15615] ? __pfx_keyring_search_iterator+0x10/0x10 [ 575.897312][T15615] keyring_alloc+0x44/0xc0 [ 575.897332][T15615] look_up_user_keyrings+0x465/0x790 [ 575.897351][T15615] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 575.897365][T15615] ? futex_wait+0x125/0x380 [ 575.897387][T15615] ? __pfx_futex_wait+0x10/0x10 [ 575.897412][T15615] lookup_user_key+0xbb1/0x1300 [ 575.897429][T15615] ? __pfx_lookup_user_key+0x10/0x10 [ 575.897450][T15615] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 575.897468][T15615] ? __x64_sys_futex+0x34f/0x4d0 [ 575.897485][T15615] ? __x64_sys_futex+0x358/0x4d0 [ 575.897507][T15615] keyctl_session_to_parent+0x28/0xae0 [ 575.897525][T15615] __do_sys_keyctl+0x2b1/0x5a0 [ 575.897540][T15615] do_syscall_64+0x106/0xf80 [ 575.897559][T15615] ? clear_bhb_loop+0x40/0x90 [ 575.897577][T15615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.897592][T15615] RIP: 0033:0x7f011ad9c799 [ 575.897605][T15615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.897620][T15615] RSP: 002b:00007f011bc0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 575.897634][T15615] RAX: ffffffffffffffda RBX: 00007f011b015fa0 RCX: 00007f011ad9c799 [ 575.897644][T15615] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 575.897655][T15615] RBP: 00007f011ae32c99 R08: 0000000000000001 R09: 0000000000000000 [ 575.897664][T15615] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 575.897673][T15615] R13: 00007f011b016038 R14: 00007f011b015fa0 R15: 00007ffffb589e88 [ 575.897693][T15615] [ 576.183766][T15618] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 576.428262][T15611] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 576.436776][T15611] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 576.486336][T15611] page_type: f5(slab) [ 576.498356][T15611] raw: 00fff00000000240 ffff88801ce8e8c0 ffffea0001e00210 ffffea0001e2fe10 [ 576.536188][T15611] raw: ffff888078004a88 0000000800190008 00000000f5000000 0000000000000000 [ 576.597147][T15611] head: 00fff00000000240 ffff88801ce8e8c0 ffffea0001e00210 ffffea0001e2fe10 [ 576.651425][T15611] head: ffff888078004a88 0000000800190008 00000000f5000000 0000000000000000 [ 576.702113][T15611] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 576.750117][T15611] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 576.796419][T15611] page dumped because: unmovable page [ 576.827153][T15611] page_owner tracks the page as allocated [ 576.841477][T15611] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevadm), ts 30019718155, free_ts 23600802408 [ 576.949617][T15611] post_alloc_hook+0x153/0x170 [ 576.977515][T15611] get_page_from_freelist+0x111d/0x3140 [ 576.996548][T15611] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 577.037543][T15611] new_slab+0xa6/0x6b0 [ 577.041662][T15611] refill_objects+0x26b/0x400 [ 577.046344][T15611] __pcs_replace_empty_main+0x1ab/0x660 [ 577.087588][T15611] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 577.093406][T15611] alloc_inode+0x183/0x250 [ 577.137571][T15611] iget_locked+0x1d9/0x6d0 [ 577.141997][T15611] kernfs_get_inode+0x46/0x470 [ 577.146767][T15611] kernfs_iop_lookup+0x1a7/0x2d0 [ 577.194321][T15611] __lookup_slow+0x251/0x460 [ 577.214530][T15611] lookup_slow+0x50/0x70 [ 577.237631][T15611] link_path_walk+0x1377/0x1cc0 [ 577.242491][T15611] path_lookupat+0x74/0xc40 [ 577.282716][T15611] filename_lookup+0x202/0x590 [ 577.287498][T15611] page last free pid 1 tgid 1 stack trace: [ 577.322548][T15611] __free_frozen_pages+0x7e1/0x10d0 [ 577.352651][T15611] free_contig_range+0xde/0x1d0 [ 577.357507][T15611] destroy_args+0xa8/0x7a0 [ 577.386202][T15622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'. [ 577.407673][T15611] debug_vm_pgtable+0x1b66/0x34c0 [ 577.412758][T15611] do_one_initcall+0x11d/0x760 [ 577.417520][T15611] kernel_init_freeable+0x6e5/0x7a0 [ 577.439931][T15611] kernel_init+0x1f/0x1e0 [ 577.444269][T15611] ret_from_fork+0x754/0xd80 [ 577.469828][T15611] ret_from_fork_asm+0x1a/0x30 [ 580.027979][T15677] FAULT_INJECTION: forcing a failure. [ 580.027979][T15677] name failslab, interval 1, probability 0, space 0, times 0 [ 580.093960][T15677] CPU: 0 UID: 0 PID: 15677 Comm: syz.1.1929 Tainted: G U L syzkaller #0 PREEMPT(full) [ 580.093988][T15677] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 580.093993][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.094002][T15677] Call Trace: [ 580.094008][T15677] [ 580.094014][T15677] dump_stack_lvl+0x100/0x190 [ 580.094041][T15677] should_fail_ex.cold+0x5/0xa [ 580.094060][T15677] should_failslab+0xc2/0x120 [ 580.094075][T15677] __kmalloc_cache_noprof+0x7a/0x6f0 [ 580.094096][T15677] ? vb2_vmalloc_alloc+0xf9/0x410 [ 580.094198][T15677] ? trace_kmalloc+0x101/0x130 [ 580.094213][T15677] ? __kasan_kmalloc+0xaa/0xb0 [ 580.094239][T15677] vb2_vmalloc_alloc+0xf9/0x410 [ 580.094255][T15677] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 580.094272][T15677] __vb2_queue_alloc+0x8d5/0x1160 [ 580.094320][T15677] vb2_core_reqbufs+0x899/0xf30 [ 580.094340][T15677] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 580.094366][T15677] __vb2_init_fileio+0x32d/0x1000 [ 580.094382][T15677] ? vb2_fop_read+0xe5/0x520 [ 580.094403][T15677] ? aa_file_perm+0x7f3/0x14d0 [ 580.094428][T15677] __vb2_perform_fileio+0x91e/0x1380 [ 580.094449][T15677] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 580.094464][T15677] ? __pfx___might_resched+0x10/0x10 [ 580.094496][T15677] vb2_fop_read+0x211/0x520 [ 580.094521][T15677] v4l2_read+0x229/0x2c0 [ 580.094586][T15677] ? __pfx_v4l2_read+0x10/0x10 [ 580.094608][T15677] vfs_read+0x1e4/0xb30 [ 580.094633][T15677] ? __pfx_vfs_read+0x10/0x10 [ 580.094653][T15677] ? find_held_lock+0x2b/0x80 [ 580.094666][T15677] ? __fget_files+0x215/0x3d0 [ 580.094679][T15677] ? __fget_files+0x215/0x3d0 [ 580.094696][T15677] ? __fget_files+0x21f/0x3d0 [ 580.094715][T15677] ksys_read+0x12a/0x250 [ 580.094736][T15677] ? __pfx_ksys_read+0x10/0x10 [ 580.094762][T15677] do_syscall_64+0x106/0xf80 [ 580.094788][T15677] ? clear_bhb_loop+0x40/0x90 [ 580.094806][T15677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.094821][T15677] RIP: 0033:0x7fc46859c799 [ 580.094835][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.094849][T15677] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.094865][T15677] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 580.094875][T15677] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 580.094883][T15677] RBP: 00007fc468632c99 R08: 0000000000000000 R09: 0000000000000000 [ 580.094892][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.094901][T15677] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 580.094920][T15677] [ 583.354856][T15726] netlink: 'syz.1.1943': attribute type 33 has an invalid length. [ 583.402268][T15726] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1943'. [ 584.389964][T15750] FAULT_INJECTION: forcing a failure. [ 584.389964][T15750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 584.555152][T15750] CPU: 0 UID: 0 PID: 15750 Comm: syz.1.1947 Tainted: G U L syzkaller #0 PREEMPT(full) [ 584.555180][T15750] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 584.555185][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.555194][T15750] Call Trace: [ 584.555199][T15750] [ 584.555205][T15750] dump_stack_lvl+0x100/0x190 [ 584.555231][T15750] should_fail_ex.cold+0x5/0xa [ 584.555245][T15750] ? prepare_alloc_pages+0x16d/0x5f0 [ 584.555263][T15750] should_fail_alloc_page+0xeb/0x140 [ 584.555279][T15750] prepare_alloc_pages+0x1f0/0x5f0 [ 584.555297][T15750] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 584.555320][T15750] ? lock_acquire+0x1cf/0x380 [ 584.555342][T15750] ? find_held_lock+0x2b/0x80 [ 584.555355][T15750] ? finish_task_switch.isra.0+0x200/0xb80 [ 584.555369][T15750] ? finish_task_switch.isra.0+0x200/0xb80 [ 584.555385][T15750] ? rcu_is_watching+0x12/0xc0 [ 584.555406][T15750] ? finish_task_switch.isra.0+0x205/0xb80 [ 584.555420][T15750] ? lockdep_hardirqs_on+0x78/0x100 [ 584.555440][T15750] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 584.555464][T15750] ? trace_sched_exit_tp+0x13a/0x180 [ 584.555481][T15750] ? __schedule+0x1000/0x6120 [ 584.555506][T15750] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 584.555529][T15750] ? policy_nodemask+0xed/0x4f0 [ 584.555545][T15750] alloc_pages_mpol+0x1fb/0x550 [ 584.555560][T15750] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 584.555579][T15750] folio_alloc_mpol_noprof+0x36/0x340 [ 584.555597][T15750] vma_alloc_folio_noprof+0xed/0x1d0 [ 584.555613][T15750] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 584.555635][T15750] do_anonymous_page+0xb3a/0x1fb0 [ 584.555660][T15750] __handle_mm_fault+0x1d42/0x2b60 [ 584.555681][T15750] ? reacquire_held_locks+0xce/0x1e0 [ 584.555698][T15750] ? __pfx___handle_mm_fault+0x10/0x10 [ 584.555719][T15750] ? lock_vma_under_rcu+0x17c/0x590 [ 584.555748][T15750] handle_mm_fault+0x36d/0xa20 [ 584.555769][T15750] do_user_addr_fault+0x5a3/0x12f0 [ 584.555822][T15750] exc_page_fault+0x6f/0xd0 [ 584.555840][T15750] asm_exc_page_fault+0x26/0x30 [ 584.555853][T15750] RIP: 0033:0x7fc46845df4b [ 584.555865][T15750] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 584.555879][T15750] RSP: 002b:00007fc4693e5fa0 EFLAGS: 00010206 [ 584.555891][T15750] RAX: 0000000000000000 RBX: 00007fc468816360 RCX: 0000000000000000 [ 584.555900][T15750] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000100 [ 584.555908][T15750] RBP: 00007fc468632c99 R08: 0000000000000000 R09: 0000000000000000 [ 584.555916][T15750] R10: 0000200000000100 R11: 0000000000000000 R12: 0000000000000000 [ 584.555925][T15750] R13: 00007fc4688163f8 R14: 00007fc468816360 R15: 00007ffdd5d00338 [ 584.555944][T15750] [ 586.341684][T15787] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 587.079325][ T29] audit: type=1804 audit(1843105740.356:19): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1958" name="/newroot/490/file0" dev="tmpfs" ino=2609 res=1 errno=0 [ 587.129103][T15806] FAULT_INJECTION: forcing a failure. [ 587.129103][T15806] name failslab, interval 1, probability 0, space 0, times 0 [ 587.168460][ T29] audit: type=1804 audit(1843105740.386:20): pid=15807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1958" name="/newroot/490/file0" dev="tmpfs" ino=2609 res=1 errno=0 [ 587.255199][T15806] CPU: 0 UID: 0 PID: 15806 Comm: syz.3.1959 Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.255226][T15806] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.255231][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.255240][T15806] Call Trace: [ 587.255245][T15806] [ 587.255251][T15806] dump_stack_lvl+0x100/0x190 [ 587.255276][T15806] should_fail_ex.cold+0x5/0xa [ 587.255293][T15806] should_failslab+0xc2/0x120 [ 587.255308][T15806] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 587.255328][T15806] ? do_getname+0x35/0x390 [ 587.255348][T15806] do_getname+0x35/0x390 [ 587.255366][T15806] do_sys_openat2+0xc5/0x1e0 [ 587.255384][T15806] ? __pfx_do_sys_openat2+0x10/0x10 [ 587.255402][T15806] ? find_held_lock+0x2b/0x80 [ 587.255420][T15806] __x64_sys_openat+0x12d/0x210 [ 587.255438][T15806] ? __pfx___x64_sys_openat+0x10/0x10 [ 587.255462][T15806] do_syscall_64+0x106/0xf80 [ 587.255481][T15806] ? clear_bhb_loop+0x40/0x90 [ 587.255498][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.255513][T15806] RIP: 0033:0x7ff0b219c799 [ 587.255525][T15806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.255538][T15806] RSP: 002b:00007ff0b2f73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 587.255552][T15806] RAX: ffffffffffffffda RBX: 00007ff0b2415fa0 RCX: 00007ff0b219c799 [ 587.255561][T15806] RDX: 0000000000000140 RSI: 00002000000018c0 RDI: ffffffffffffff9c [ 587.255570][T15806] RBP: 00007ff0b2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 587.255578][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.255586][T15806] R13: 00007ff0b2416038 R14: 00007ff0b2415fa0 R15: 00007ffca975f398 [ 587.255604][T15806] [ 587.616344][T15813] db_root: cannot open: /dev/audio1 [ 587.623045][T15813] db_root: not a directory: /dev/audio1 [ 587.628747][ T29] audit: type=1800 audit(1843105740.896:21): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1960" name="dbroot" dev="configfs" ino=69831 res=0 errno=0 [ 589.325887][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 591.372395][T15886] random: crng reseeded on system resumption [ 592.264643][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'. [ 594.241193][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'. [ 594.241410][T15959] ipvlan0: entered promiscuous mode [ 594.241458][T15959] ipvlan0: entered allmulticast mode [ 594.241469][T15959] veth0_vlan: entered allmulticast mode [ 594.725227][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1994'. [ 594.856546][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 597.775158][T16033] zswap: compressor not available [ 601.342786][T16077] __vm_enough_memory: pid: 16077, comm: syz.5.2012, bytes: 4398046511104 not enough memory for the allocation [ 601.539852][ T5146] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 601.957066][T16081] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 602.955668][ T29] audit: type=1800 audit(1843107802.225:22): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2016" name="lu_gp_id" dev="configfs" ino=76309 res=0 errno=0 [ 603.218014][T16101] FAULT_INJECTION: forcing a failure. [ 603.218014][T16101] name fail_futex, interval 1, probability 0, space 0, times 0 [ 603.351568][T16101] CPU: 0 UID: 0 PID: 16101 Comm: Tainted: G U L syzkaller #0 PREEMPT(full) [ 603.351594][T16101] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 603.351599][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.351608][T16101] Call Trace: [ 603.351613][T16101] [ 603.351618][T16101] dump_stack_lvl+0x100/0x190 [ 603.351645][T16101] should_fail_ex.cold+0x5/0xa [ 603.351662][T16101] get_futex_key+0x107c/0x1620 [ 603.351682][T16101] ? __pfx_get_futex_key+0x10/0x10 [ 603.351696][T16101] ? lock_acquire+0x1cf/0x380 [ 603.351719][T16101] futex_wake+0xea/0x530 [ 603.351740][T16101] ? __pfx_futex_wake+0x10/0x10 [ 603.351760][T16101] ? exit_mm_release+0x19/0x30 [ 603.351783][T16101] do_futex+0x32b/0x350 [ 603.351800][T16101] ? __pfx_do_futex+0x10/0x10 [ 603.351815][T16101] ? __might_fault+0xc5/0x140 [ 603.351839][T16101] mm_release+0x24a/0x2f0 [ 603.351853][T16101] do_exit+0x704/0x2b60 [ 603.351870][T16101] ? syslog_print+0x548/0x620 [ 603.351885][T16101] ? kfree+0x1f6/0x6b0 [ 603.351904][T16101] ? __pfx_do_exit+0x10/0x10 [ 603.351920][T16101] ? do_raw_spin_lock+0x128/0x260 [ 603.351939][T16101] ? find_held_lock+0x2b/0x80 [ 603.351951][T16101] ? get_signal+0x7e0/0x21e0 [ 603.351967][T16101] do_group_exit+0xd5/0x2a0 [ 603.351985][T16101] get_signal+0x1ec7/0x21e0 [ 603.352006][T16101] ? __pfx_get_signal+0x10/0x10 [ 603.352021][T16101] ? bpf_lsm_capable+0x9/0x10 [ 603.352034][T16101] ? security_capable+0x80/0x260 [ 603.352057][T16101] arch_do_signal_or_restart+0x91/0x770 [ 603.352075][T16101] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 603.352101][T16101] exit_to_user_mode_loop+0x86/0x4a0 [ 603.352121][T16101] do_syscall_64+0x668/0xf80 [ 603.352139][T16101] ? clear_bhb_loop+0x40/0x90 [ 603.352157][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.352171][T16101] RIP: 0033:0x7ff0b219c799 [ 603.352183][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.352196][T16101] RSP: 002b:00007ff0af76c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 603.352211][T16101] RAX: fffffffffffffe00 RBX: 00007ff0b2416450 RCX: 00007ff0b219c799 [ 603.352220][T16101] RDX: 00000000000008f7 RSI: 0000200000000340 RDI: 0000000000000002 [ 603.352228][T16101] RBP: 00007ff0b2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 603.352236][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.352244][T16101] R13: 00007ff0b24164e8 R14: 00007ff0b2416450 R15: 00007ffca975f398 [ 603.352262][T16101] [ 606.781492][T16186] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 607.647720][T16190] sd 0:0:1:0: PR command failed: 1026 [ 607.678874][T16190] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 607.731953][T16190] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 612.679841][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'. [ 613.388419][T16247] zswap: compressor not available [ 613.842990][T16277] netlink: 'syz.3.2044': attribute type 2 has an invalid length. [ 614.180420][T16287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2046'. [ 614.269583][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 614.300153][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2046'. [ 614.309299][T16243] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 615.324293][T16243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.408620][T16243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.435531][T16243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.532825][T16243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.590948][T16243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.654314][T16300] sd 0:0:1:0: PR command failed: 1026 [ 615.667373][T16243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 615.724496][T16300] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 615.736361][T16243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 615.868306][T16300] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 616.348842][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 616.765664][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2049'. [ 617.474341][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 617.547797][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.631043][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 618.148480][T16351] Invalid ELF header magic: != ELF [ 619.552495][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.709159][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 620.789668][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2058'. [ 621.782879][T16388] veth1_to_batadv: entered promiscuous mode [ 621.794916][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 621.882385][T16388] veth1_to_batadv: left promiscuous mode [ 624.348276][T16414] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2065'. [ 624.386698][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.394262][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.742267][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'. [ 627.223531][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2072'. [ 627.315927][T16457] [U] [ 627.318823][T16457] [U] [ 627.321497][T16457] [U] [ 627.324172][T16457] [U] [ 627.433839][T16457] [U] [ 627.436545][T16457] [U] [ 627.439218][T16457] [U] [ 627.441884][T16457] [U] [ 627.495968][T16457] [U] [ 627.498669][T16457] [U] [ 627.501342][T16457] [U] [ 627.504010][T16457] [U] [ 627.633530][T16457] [U] [ 627.636237][T16457] [U] [ 627.638905][T16457] [U] [ 627.641570][T16457] [U] [ 627.753969][T16457] [U] [ 627.756684][T16457] [U] [ 627.759357][T16457] [U] [ 627.762286][T16457] [U] [ 627.890761][T16457] [U] [ 627.893487][T16457] [U] [ 627.896208][T16457] [U] [ 627.898886][T16457] [U] [ 627.947469][T16457] [U] [ 627.950174][T16457] [U] [ 627.952845][T16457] [U] [ 627.955512][T16457] [U] [ 628.010582][T16457] [U] [ 628.013288][T16457] [U] [ 628.015960][T16457] [U] [ 628.018632][T16457] [U] [ 628.073674][T16457] [U] [ 629.297387][T16475] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2076'. [ 629.365847][T16475] netlink: 302 bytes leftover after parsing attributes in process `syz.2.2076'. [ 631.882495][T16509] misc userio: Invalid payload size [ 632.043458][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 632.058284][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 632.066659][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 632.074249][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 632.082050][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 632.790476][T16510] chnl_net:caif_netlink_parms(): no params data found [ 633.179885][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 633.189379][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 633.197436][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 633.206572][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 633.215861][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 633.299388][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.350519][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.386838][T16510] bridge_slave_0: entered allmulticast mode [ 633.440952][T16510] bridge_slave_0: entered promiscuous mode [ 633.488520][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.545832][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.552999][T16510] bridge_slave_1: entered allmulticast mode [ 633.597884][T16510] bridge_slave_1: entered promiscuous mode [ 633.749120][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.837597][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.074623][T16510] team0: Port device team_slave_0 added [ 634.116309][ T5836] Bluetooth: hci5: command tx timeout [ 634.160056][T16510] team0: Port device team_slave_1 added [ 634.242324][T16541] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 634.328009][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.334964][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.500935][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.566576][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.573516][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.792543][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.832955][T16551] FAULT_INJECTION: forcing a failure. [ 634.832955][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 634.921684][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.2.2088 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.921714][T16551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.921720][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.921729][T16551] Call Trace: [ 634.921734][T16551] [ 634.921740][T16551] dump_stack_lvl+0x100/0x190 [ 634.921770][T16551] should_fail_ex.cold+0x5/0xa [ 634.921788][T16551] ? __list_lru_init+0xd9/0x4b0 [ 634.921809][T16551] should_failslab+0xc2/0x120 [ 634.921825][T16551] __kmalloc_noprof+0xe0/0x850 [ 634.921846][T16551] ? lockdep_init_map_type+0x5c/0x250 [ 634.921869][T16551] __list_lru_init+0xd9/0x4b0 [ 634.921890][T16551] alloc_super+0x8d8/0xd20 [ 634.921914][T16551] ? __pfx_mqueue_fill_super+0x10/0x10 [ 634.922003][T16551] sget_fc+0x117/0xc70 [ 634.922025][T16551] ? __pfx_set_anon_super_fc+0x10/0x10 [ 634.922047][T16551] ? __pfx_mqueue_fill_super+0x10/0x10 [ 634.922066][T16551] get_tree_nodev+0x28/0x190 [ 634.922088][T16551] mqueue_get_tree+0xf1/0x130 [ 634.922108][T16551] vfs_get_tree+0x92/0x320 [ 634.922127][T16551] fc_mount_longterm+0x1a/0x270 [ 634.922149][T16551] mq_init_ns+0x482/0x820 [ 634.922165][T16551] copy_ipcs+0x3dd/0x7e0 [ 634.922180][T16551] create_new_namespaces+0x20a/0xac0 [ 634.922197][T16551] ? security_capable+0x80/0x260 [ 634.922222][T16551] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 634.922240][T16551] ksys_unshare+0x473/0xad0 [ 634.922260][T16551] ? __pfx_ksys_unshare+0x10/0x10 [ 634.922286][T16551] __x64_sys_unshare+0x31/0x40 [ 634.922303][T16551] do_syscall_64+0x106/0xf80 [ 634.922325][T16551] ? clear_bhb_loop+0x40/0x90 [ 634.922343][T16551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.922359][T16551] RIP: 0033:0x7f011ad9c799 [ 634.922373][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.922387][T16551] RSP: 002b:00007f011bc0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 634.922402][T16551] RAX: ffffffffffffffda RBX: 00007f011b015fa0 RCX: 00007f011ad9c799 [ 634.922411][T16551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 634.922420][T16551] RBP: 00007f011ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 634.922429][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.922437][T16551] R13: 00007f011b016038 R14: 00007f011b015fa0 R15: 00007ffffb589e88 [ 634.922457][T16551] [ 635.165531][T16551] FAULT_INJECTION: forcing a failure. [ 635.165531][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 635.179163][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.2.2088 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.179190][T16551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.179197][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.179206][T16551] Call Trace: [ 635.179212][T16551] [ 635.179217][T16551] dump_stack_lvl+0x100/0x190 [ 635.179245][T16551] should_fail_ex.cold+0x5/0xa [ 635.179263][T16551] should_failslab+0xc2/0x120 [ 635.179279][T16551] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 635.179300][T16551] ? shmem_alloc_inode+0x25/0x50 [ 635.179319][T16551] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 635.179336][T16551] shmem_alloc_inode+0x25/0x50 [ 635.179351][T16551] alloc_inode+0x68/0x250 [ 635.179369][T16551] new_inode+0x22/0x1c0 [ 635.179386][T16551] ? trace_kmem_cache_alloc+0xf3/0x120 [ 635.179410][T16551] shmem_get_inode+0x212/0x1040 [ 635.179432][T16551] ? __pfx_shmem_get_inode+0x10/0x10 [ 635.179450][T16551] ? rcu_is_watching+0x12/0xc0 [ 635.179472][T16551] ? percpu_counter_add_batch+0xb9/0x230 [ 635.179560][T16551] __shmem_file_setup+0x3ac/0x490 [ 635.179581][T16551] ? __pfx___shmem_file_setup+0x10/0x10 [ 635.179605][T16551] ? vm_area_alloc+0x1f/0x160 [ 635.179626][T16551] shmem_zero_setup+0x96/0x1b0 [ 635.179649][T16551] __mmap_region+0x2198/0x29e0 [ 635.179670][T16551] ? __fput_deferred+0x3e6/0x490 [ 635.179686][T16551] ? path_openat+0xfec/0x31a0 [ 635.179699][T16551] ? do_file_open+0x20e/0x430 [ 635.179713][T16551] ? __pfx___mmap_region+0x10/0x10 [ 635.179731][T16551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.179758][T16551] ? __lock_acquire+0x4a5/0x2630 [ 635.179776][T16551] ? update_cfs_rq_load_avg+0x51/0x550 [ 635.179800][T16551] ? find_held_lock+0x2b/0x80 [ 635.179812][T16551] ? finish_task_switch.isra.0+0x200/0xb80 [ 635.179828][T16551] ? finish_task_switch.isra.0+0x200/0xb80 [ 635.179851][T16551] ? trace_sched_exit_tp+0x13a/0x180 [ 635.179867][T16551] ? __schedule+0x1000/0x6120 [ 635.179908][T16551] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 635.179932][T16551] mmap_region+0x180/0x3e0 [ 635.179956][T16551] do_mmap+0xc63/0x12f0 [ 635.179975][T16551] ? __pfx_do_mmap+0x10/0x10 [ 635.179991][T16551] ? __pfx_down_write_killable+0x10/0x10 [ 635.180017][T16551] vm_mmap_pgoff+0x29e/0x470 [ 635.180036][T16551] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 635.180053][T16551] ? do_futex+0x192/0x350 [ 635.180072][T16551] ? __pfx_do_futex+0x10/0x10 [ 635.180093][T16551] ksys_mmap_pgoff+0xe1/0x650 [ 635.180108][T16551] ? __x64_sys_futex+0x34f/0x4d0 [ 635.180125][T16551] ? __x64_sys_futex+0x358/0x4d0 [ 635.180143][T16551] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 635.180159][T16551] ? xfd_validate_state+0x129/0x190 [ 635.180183][T16551] __x64_sys_mmap+0x125/0x190 [ 635.180205][T16551] do_syscall_64+0x106/0xf80 [ 635.180224][T16551] ? clear_bhb_loop+0x40/0x90 [ 635.180242][T16551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.180257][T16551] RIP: 0033:0x7f011ad9c799 [ 635.180270][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.180285][T16551] RSP: 002b:00007f011bc0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 635.180300][T16551] RAX: ffffffffffffffda RBX: 00007f011b015fa0 RCX: 00007f011ad9c799 [ 635.180310][T16551] RDX: 00000000000000df RSI: 000000000000e987 RDI: 0000000080000000 [ 635.180319][T16551] RBP: 00007f011ae32c99 R08: 0000000000000401 R09: 0000000000008000 [ 635.180328][T16551] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 635.180337][T16551] R13: 00007f011b016038 R14: 00007f011b015fa0 R15: 00007ffffb589e88 [ 635.180358][T16551] [ 636.007034][ T5836] Bluetooth: hci6: command tx timeout [ 636.069883][T16510] hsr_slave_0: entered promiscuous mode [ 636.076079][T16510] hsr_slave_1: entered promiscuous mode [ 636.098572][T16510] debugfs: 'hsr0' already exists in 'hsr' [ 636.104300][T16510] Cannot create hsr debugfs directory [ 636.201727][T16554] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 636.264850][ T5836] Bluetooth: hci5: command tx timeout [ 637.092876][T16538] chnl_net:caif_netlink_parms(): no params data found [ 637.209119][T16566] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2092'. [ 637.644626][T16538] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.695849][T16538] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.736391][T16538] bridge_slave_0: entered allmulticast mode [ 637.772809][T16538] bridge_slave_0: entered promiscuous mode [ 637.819216][T16538] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.861752][T16538] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.907515][T16538] bridge_slave_1: entered allmulticast mode [ 637.952135][T16538] bridge_slave_1: entered promiscuous mode [ 638.008151][ T29] audit: type=1800 audit(1843107837.258:23): pid=16567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2091" name="dbroot" dev="configfs" ino=104801 res=0 errno=0 [ 638.048038][ T5836] Bluetooth: hci6: command tx timeout [ 638.125387][T16538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.193553][T16538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.279315][ T5836] Bluetooth: hci5: command tx timeout [ 638.479617][T16538] team0: Port device team_slave_0 added [ 638.569664][T16538] team0: Port device team_slave_1 added [ 638.715205][T16510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 638.832247][T16510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 638.941903][T16538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.978693][T16538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.102847][T16538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.194032][T16538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.239764][T16538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.386223][T16538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.444111][T16510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.579474][T16510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.649852][T14932] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.740564][T16538] hsr_slave_0: entered promiscuous mode [ 639.747158][T16538] hsr_slave_1: entered promiscuous mode [ 639.809282][T16538] debugfs: 'hsr0' already exists in 'hsr' [ 639.815027][T16538] Cannot create hsr debugfs directory [ 640.124486][ T5836] Bluetooth: hci6: command tx timeout [ 640.359344][ T5836] Bluetooth: hci5: command tx timeout [ 640.387822][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.478814][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.534712][T16608] can: request_module (can-proto-0) failed. [ 640.584132][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.591351][T12509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.777283][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.784464][T12505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.135003][T16538] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 641.194104][T16538] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 641.314302][T16538] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 641.371710][T16538] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 641.873439][T16538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.988590][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.066046][T16538] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.204119][ T5836] Bluetooth: hci6: command tx timeout [ 642.255850][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.263047][T14913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.347464][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.354641][T14913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.337807][T16538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.417545][T16510] veth0_vlan: entered promiscuous mode [ 643.502251][T16510] veth1_vlan: entered promiscuous mode [ 643.675374][T16510] veth0_macvtap: entered promiscuous mode [ 643.762401][T16510] veth1_macvtap: entered promiscuous mode [ 643.829231][T16510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.934935][T16510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.015142][T14913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.051150][T14913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.119718][T14913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.190929][T14913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.503873][T16538] veth0_vlan: entered promiscuous mode [ 644.575220][T16538] veth1_vlan: entered promiscuous mode [ 644.882690][T12505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.890541][T12505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.084704][T16538] veth0_macvtap: entered promiscuous mode [ 645.149568][T16538] veth1_macvtap: entered promiscuous mode [ 645.194801][T12505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.236363][T12505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.275848][T16538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.348225][T16538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.452688][T14932] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.485292][T14932] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.680417][T14932] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.734937][T14932] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.002303][T14921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.072041][T14921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.246241][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2081'. [ 646.340593][T12505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.385405][T12505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.057763][T16691] Invalid ELF header magic: != ELF [ 650.474907][T16715] random: crng reseeded on system resumption [ 650.587267][T16715] hub 1-0:1.0: USB hub found [ 650.647391][T16715] hub 1-0:1.0: 1 port detected [ 651.830642][T16728] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2119'. [ 656.402798][T16786] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2132'. [ 657.318540][T16797] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 658.718433][T16821] zswap: compressor not available [ 660.291307][T16841] netlink: 186 bytes leftover after parsing attributes in process `syz.7.2143'. [ 660.451017][T16842] openvswitch: netlink: Multiple metadata blocks provided [ 661.333963][T16849] zswap: compressor not available [ 662.553301][T16878] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 664.534300][T16898] phram: not enough arguments [ 666.361553][T16918] hub 1-0:1.0: USB hub found [ 666.453966][T16918] hub 1-0:1.0: 1 port detected [ 667.217123][T16930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2159'. [ 668.382794][T16935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.490862][T16935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.604932][T16935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.666846][T16935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.779190][T16935] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 668.841105][T16935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.914471][T16935] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 669.056401][T16935] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 669.314430][T16935] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 669.520280][T16935] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 669.596638][T16935] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 669.940619][T16935] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 670.137393][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.534279][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.614629][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.760894][T16951] FAULT_INJECTION: forcing a failure. [ 670.760894][T16951] name failslab, interval 1, probability 0, space 0, times 0 [ 670.826484][T16956] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 670.855651][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.862646][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 670.887266][T16951] CPU: 0 UID: 0 PID: 16951 Comm: syz.1.2166 Tainted: G U L syzkaller #0 PREEMPT(full) [ 670.887293][T16951] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 670.887299][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.887307][T16951] Call Trace: [ 670.887312][T16951] [ 670.887318][T16951] dump_stack_lvl+0x100/0x190 [ 670.887344][T16951] should_fail_ex.cold+0x5/0xa [ 670.887362][T16951] should_failslab+0xc2/0x120 [ 670.887377][T16951] __kvmalloc_node_noprof+0xfa/0xa00 [ 670.887398][T16951] ? seq_read_iter+0x819/0x1270 [ 670.887423][T16951] seq_read_iter+0x819/0x1270 [ 670.887451][T16951] kernfs_fop_read_iter+0x46c/0x610 [ 670.887468][T16951] ? rw_verify_area+0xce/0x6d0 [ 670.887488][T16951] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 670.887504][T16951] vfs_read+0x825/0xb30 [ 670.887527][T16951] ? __pfx_vfs_read+0x10/0x10 [ 670.887559][T16951] ksys_read+0x12a/0x250 [ 670.887579][T16951] ? __pfx_ksys_read+0x10/0x10 [ 670.887604][T16951] do_syscall_64+0x106/0xf80 [ 670.887624][T16951] ? clear_bhb_loop+0x40/0x90 [ 670.887641][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.887655][T16951] RIP: 0033:0x7fc46859c799 [ 670.887667][T16951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.887681][T16951] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.887695][T16951] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 670.887704][T16951] RDX: 000000000000100a RSI: 0000200000001100 RDI: 0000000000000003 [ 670.887712][T16951] RBP: 00007fc46946b090 R08: 0000000000000000 R09: 0000000000000000 [ 670.887721][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.887729][T16951] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 670.887748][T16951] [ 671.141084][T16956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 671.315311][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 671.445589][T16964] FAULT_INJECTION: forcing a failure. [ 671.445589][T16964] name failslab, interval 1, probability 0, space 0, times 0 [ 671.555118][T16964] CPU: 0 UID: 0 PID: 16964 Comm: syz.1.2169 Tainted: G U L syzkaller #0 PREEMPT(full) [ 671.555145][T16964] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 671.555151][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 671.555159][T16964] Call Trace: [ 671.555164][T16964] [ 671.555170][T16964] dump_stack_lvl+0x100/0x190 [ 671.555196][T16964] should_fail_ex.cold+0x5/0xa [ 671.555213][T16964] should_failslab+0xc2/0x120 [ 671.555228][T16964] __kmalloc_cache_noprof+0x7a/0x6f0 [ 671.555246][T16964] ? tipc_sub_subscribe+0x15c/0x730 [ 671.555375][T16964] ? find_held_lock+0x2b/0x80 [ 671.555392][T16964] tipc_sub_subscribe+0x15c/0x730 [ 671.555413][T16964] tipc_conn_rcv_sub+0x21e/0x3d0 [ 671.555457][T16964] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 671.555476][T16964] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 671.555495][T16964] ? net_generic+0xea/0x2a0 [ 671.555516][T16964] tipc_group_create+0x4ab/0x660 [ 671.555537][T16964] tipc_setsockopt+0x611/0xe30 [ 671.555567][T16964] ? __pfx_tipc_setsockopt+0x10/0x10 [ 671.555595][T16964] ? __pfx_tipc_setsockopt+0x10/0x10 [ 671.555617][T16964] do_sock_setsockopt+0xf3/0x1d0 [ 671.555644][T16964] __sys_setsockopt+0x119/0x190 [ 671.555693][T16964] __x64_sys_setsockopt+0xbd/0x160 [ 671.555710][T16964] ? do_syscall_64+0x95/0xf80 [ 671.555729][T16964] ? lockdep_hardirqs_on+0x78/0x100 [ 671.555747][T16964] do_syscall_64+0x106/0xf80 [ 671.555765][T16964] ? clear_bhb_loop+0x40/0x90 [ 671.555782][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.555796][T16964] RIP: 0033:0x7fc46859c799 [ 671.555809][T16964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.555822][T16964] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 671.555836][T16964] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 671.555845][T16964] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 671.555854][T16964] RBP: 00007fc468632c99 R08: 0000000000000014 R09: 0000000000000000 [ 671.555862][T16964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.555870][T16964] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 671.555889][T16964] [ 671.555899][T16964] tipc: Subscription rejected, no memory [ 671.835080][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 672.695854][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 673.337019][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 673.358491][T16996] futex_wake_op: syz.2.2174 tries to shift op by -2048; fix this program [ 673.457099][T16997] misc userio: No port type given on /dev/userio [ 673.505926][T16996] futex_wake_op: syz.2.2174 tries to shift op by -2048; fix this program [ 673.896193][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 674.387578][T17012] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2176'. [ 674.397632][T17014] FAULT_INJECTION: forcing a failure. [ 674.397632][T17014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.541798][T17014] CPU: 0 UID: 0 PID: 17014 Comm: syz.2.2177 Tainted: G U L syzkaller #0 PREEMPT(full) [ 674.541825][T17014] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 674.541831][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.541839][T17014] Call Trace: [ 674.541844][T17014] [ 674.541849][T17014] dump_stack_lvl+0x100/0x190 [ 674.541875][T17014] should_fail_ex.cold+0x5/0xa [ 674.541892][T17014] _copy_to_iter+0x1f3/0x1720 [ 674.541914][T17014] ? __pfx__copy_to_iter+0x10/0x10 [ 674.541929][T17014] ? kernfs_seq_stop+0xcd/0x120 [ 674.541947][T17014] ? kernfs_put_active+0x93/0xe0 [ 674.541969][T17014] seq_read_iter+0xdab/0x1270 [ 674.541998][T17014] kernfs_fop_read_iter+0x46c/0x610 [ 674.542014][T17014] ? rw_verify_area+0xce/0x6d0 [ 674.542033][T17014] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 674.542049][T17014] vfs_read+0x825/0xb30 [ 674.542072][T17014] ? __pfx_vfs_read+0x10/0x10 [ 674.542104][T17014] ksys_read+0x12a/0x250 [ 674.542124][T17014] ? __pfx_ksys_read+0x10/0x10 [ 674.542149][T17014] do_syscall_64+0x106/0xf80 [ 674.542168][T17014] ? clear_bhb_loop+0x40/0x90 [ 674.542186][T17014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.542200][T17014] RIP: 0033:0x7f011ad9c799 [ 674.542212][T17014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.542226][T17014] RSP: 002b:00007f011bc0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.542241][T17014] RAX: ffffffffffffffda RBX: 00007f011b015fa0 RCX: 00007f011ad9c799 [ 674.542250][T17014] RDX: 000000000000100a RSI: 0000200000001100 RDI: 0000000000000003 [ 674.542259][T17014] RBP: 00007f011bc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 674.542267][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.542275][T17014] R13: 00007f011b016038 R14: 00007f011b015fa0 R15: 00007ffffb589e88 [ 674.542294][T17014] [ 675.179057][T17017] FAULT_INJECTION: forcing a failure. [ 675.179057][T17017] name failslab, interval 1, probability 0, space 0, times 0 [ 675.229116][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.6.2178 Tainted: G U L syzkaller #0 PREEMPT(full) [ 675.229145][T17017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 675.229151][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 675.229160][T17017] Call Trace: [ 675.229165][T17017] [ 675.229172][T17017] dump_stack_lvl+0x100/0x190 [ 675.229200][T17017] should_fail_ex.cold+0x5/0xa [ 675.229218][T17017] should_failslab+0xc2/0x120 [ 675.229234][T17017] __kmalloc_cache_noprof+0x7a/0x6f0 [ 675.229253][T17017] ? v4l2_fh_open+0x4c/0xa0 [ 675.229363][T17017] v4l2_fh_open+0x4c/0xa0 [ 675.229385][T17017] v4l2_open+0x1d2/0x490 [ 675.229409][T17017] ? __pfx_v4l2_open+0x10/0x10 [ 675.229430][T17017] chrdev_open+0x234/0x6a0 [ 675.229444][T17017] ? __pfx_apparmor_file_open+0x10/0x10 [ 675.229468][T17017] ? __pfx_chrdev_open+0x10/0x10 [ 675.229484][T17017] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 675.229503][T17017] do_dentry_open+0x6d8/0x1660 [ 675.229532][T17017] ? __pfx_chrdev_open+0x10/0x10 [ 675.229552][T17017] vfs_open+0x82/0x3f0 [ 675.229572][T17017] path_openat+0x208c/0x31a0 [ 675.229595][T17017] ? __pfx_path_openat+0x10/0x10 [ 675.229617][T17017] do_file_open+0x20e/0x430 [ 675.229634][T17017] ? __pfx_do_file_open+0x10/0x10 [ 675.229662][T17017] ? alloc_fd+0x476/0x790 [ 675.229678][T17017] ? do_getname+0x191/0x390 [ 675.229697][T17017] do_sys_openat2+0x10d/0x1e0 [ 675.229715][T17017] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.229735][T17017] ? __fget_files+0x21f/0x3d0 [ 675.229753][T17017] __x64_sys_openat+0x12d/0x210 [ 675.229772][T17017] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.229797][T17017] do_syscall_64+0x106/0xf80 [ 675.229817][T17017] ? clear_bhb_loop+0x40/0x90 [ 675.229835][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.229850][T17017] RIP: 0033:0x7f3143f9c799 [ 675.229864][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.229879][T17017] RSP: 002b:00007f3144ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.229894][T17017] RAX: ffffffffffffffda RBX: 00007f3144215fa0 RCX: 00007f3143f9c799 [ 675.229904][T17017] RDX: 000000000008aa40 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 675.229915][T17017] RBP: 00007f3144032c99 R08: 0000000000000000 R09: 0000000000000000 [ 675.229924][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.229933][T17017] R13: 00007f3144216038 R14: 00007f3144215fa0 R15: 00007ffd3bf4be48 [ 675.229952][T17017] [ 675.537240][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 675.987362][ T5146] Bluetooth: hci6: command 0x0c1a tx timeout [ 676.803294][T17034] FAULT_INJECTION: forcing a failure. [ 676.803294][T17034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.914020][T17034] CPU: 0 UID: 0 PID: 17034 Comm: syz.1.2183 Tainted: G U L syzkaller #0 PREEMPT(full) [ 676.914048][T17034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 676.914055][T17034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.914064][T17034] Call Trace: [ 676.914069][T17034] [ 676.914076][T17034] dump_stack_lvl+0x100/0x190 [ 676.914104][T17034] should_fail_ex.cold+0x5/0xa [ 676.914119][T17034] ? prepare_alloc_pages+0x16d/0x5f0 [ 676.914137][T17034] should_fail_alloc_page+0xeb/0x140 [ 676.914155][T17034] prepare_alloc_pages+0x1f0/0x5f0 [ 676.914175][T17034] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 676.914204][T17034] ? try_to_migrate_one+0x142e/0x37f0 [ 676.914230][T17034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 676.914260][T17034] ? reacquire_held_locks+0xce/0x1e0 [ 676.914279][T17034] ? folio_lock_anon_vma_read+0x348/0xe30 [ 676.914299][T17034] ? folio_lock_anon_vma_read+0x348/0xe30 [ 676.914320][T17034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 676.914345][T17034] ? policy_nodemask+0xed/0x4f0 [ 676.914361][T17034] alloc_pages_mpol+0x1fb/0x550 [ 676.914377][T17034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 676.914397][T17034] folio_alloc_mpol_noprof+0x36/0x340 [ 676.914416][T17034] alloc_migration_target_by_mpol+0x2c1/0x650 [ 676.914436][T17034] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 676.914455][T17034] ? __pfx___might_resched+0x10/0x10 [ 676.914476][T17034] ? folio_get_anon_vma+0x16b/0x980 [ 676.914497][T17034] migrate_pages_batch+0x4f2/0x4530 [ 676.914524][T17034] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 676.914550][T17034] ? walk_pgd_range+0x1115/0x1eb0 [ 676.914573][T17034] ? __pfx_migrate_pages_batch+0x10/0x10 [ 676.914605][T17034] migrate_pages_sync+0x12c/0x880 [ 676.914623][T17034] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 676.914647][T17034] ? __pfx_migrate_pages_sync+0x10/0x10 [ 676.914663][T17034] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 676.914689][T17034] migrate_pages+0x1aae/0x28a0 [ 676.914708][T17034] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 676.914732][T17034] ? __pfx_migrate_pages+0x10/0x10 [ 676.914749][T17034] ? mas_next_slot+0x1003/0x18b0 [ 676.914843][T17034] ? find_held_lock+0x2b/0x80 [ 676.914858][T17034] ? do_mbind+0x557/0xfd0 [ 676.914878][T17034] ? up_write+0x290/0x4f0 [ 676.914900][T17034] do_mbind+0x5a6/0xfd0 [ 676.914923][T17034] ? __pfx_do_mbind+0x10/0x10 [ 676.914941][T17034] ? vfs_write+0x15d/0x1070 [ 676.914963][T17034] ? __pfx_blkdev_write_iter+0x10/0x10 [ 676.915053][T17034] ? __pfx_get_nodes+0x10/0x10 [ 676.915081][T17034] kernel_mbind+0x1b7/0x200 [ 676.915101][T17034] ? __pfx_kernel_mbind+0x10/0x10 [ 676.915124][T17034] do_syscall_64+0x106/0xf80 [ 676.915144][T17034] ? clear_bhb_loop+0x40/0x90 [ 676.915162][T17034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.915177][T17034] RIP: 0033:0x7fc46859c799 [ 676.915191][T17034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.915204][T17034] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 676.915220][T17034] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 676.915229][T17034] RDX: 0000002100000000 RSI: 0000000100000008 RDI: 0000000000002000 [ 676.915239][T17034] RBP: 00007fc468632c99 R08: 0000000000000006 R09: 0000000000000002 [ 676.915247][T17034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.915256][T17034] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 676.915276][T17034] [ 679.875401][T17057] FAULT_INJECTION: forcing a failure. [ 679.875401][T17057] name failslab, interval 1, probability 0, space 0, times 0 [ 680.032827][T17057] CPU: 0 UID: 0 PID: 17057 Comm: syz.6.2185 Tainted: G U L syzkaller #0 PREEMPT(full) [ 680.032856][T17057] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 680.032863][T17057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.032871][T17057] Call Trace: [ 680.032877][T17057] [ 680.032883][T17057] dump_stack_lvl+0x100/0x190 [ 680.032911][T17057] should_fail_ex.cold+0x5/0xa [ 680.032931][T17057] should_failslab+0xc2/0x120 [ 680.032947][T17057] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 680.032967][T17057] ? ptlock_alloc+0x1f/0x70 [ 680.032991][T17057] ptlock_alloc+0x1f/0x70 [ 680.033009][T17057] pte_alloc_one+0x82/0x3d0 [ 680.033051][T17057] __pte_alloc+0x6d/0x3e0 [ 680.033066][T17057] ? __pfx___pte_alloc+0x10/0x10 [ 680.033081][T17057] ? _raw_spin_unlock+0x28/0x50 [ 680.033106][T17057] ? __pmd_alloc+0x3fb/0x950 [ 680.033125][T17057] move_page_tables+0x257e/0x4500 [ 680.033148][T17057] ? __pfx_copy_vma+0x10/0x10 [ 680.033177][T17057] ? __pfx_move_page_tables+0x10/0x10 [ 680.033212][T17057] copy_vma_and_data+0x25c/0x7c0 [ 680.033234][T17057] ? __pfx_copy_vma_and_data+0x10/0x10 [ 680.033263][T17057] ? __vma_start_write+0x17f/0x280 [ 680.033281][T17057] ? __pfx___vma_start_write+0x10/0x10 [ 680.033304][T17057] move_vma+0x51b/0x1890 [ 680.033327][T17057] ? __pfx_move_vma+0x10/0x10 [ 680.033348][T17057] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 680.033365][T17057] ? cap_mmap_addr+0x4b/0x120 [ 680.033386][T17057] ? bpf_lsm_mmap_addr+0x9/0x30 [ 680.033408][T17057] ? security_mmap_addr+0x71/0x1e0 [ 680.033427][T17057] ? __get_unmapped_area+0x255/0x3e0 [ 680.033445][T17057] ? vrm_set_new_addr+0x204/0x290 [ 680.033466][T17057] mremap_to+0x1b7/0x450 [ 680.033487][T17057] do_mremap+0xb76/0x2130 [ 680.033515][T17057] ? __pfx_do_mremap+0x10/0x10 [ 680.033539][T17057] ? ksys_write+0x190/0x250 [ 680.033557][T17057] __do_sys_mremap+0x126/0x170 [ 680.033578][T17057] ? __pfx___do_sys_mremap+0x10/0x10 [ 680.033603][T17057] ? __x64_sys_futex+0x34f/0x4d0 [ 680.033633][T17057] do_syscall_64+0x106/0xf80 [ 680.033652][T17057] ? clear_bhb_loop+0x40/0x90 [ 680.033670][T17057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.033685][T17057] RIP: 0033:0x7f3143f9c799 [ 680.033698][T17057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.033712][T17057] RSP: 002b:00007f3144eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 680.033727][T17057] RAX: ffffffffffffffda RBX: 00007f3144216180 RCX: 00007f3143f9c799 [ 680.033737][T17057] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 680.033745][T17057] RBP: 00007f3144032c99 R08: 0000000100000000 R09: 0000000000000000 [ 680.033754][T17057] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 680.033763][T17057] R13: 00007f3144216218 R14: 00007f3144216180 R15: 00007ffd3bf4be48 [ 680.033783][T17057] [ 680.862486][T17070] FAULT_INJECTION: forcing a failure. [ 680.862486][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 680.943139][T17070] CPU: 0 UID: 0 PID: 17070 Comm: syz.7.2190 Tainted: G U L syzkaller #0 PREEMPT(full) [ 680.943169][T17070] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 680.943175][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.943184][T17070] Call Trace: [ 680.943190][T17070] [ 680.943196][T17070] dump_stack_lvl+0x100/0x190 [ 680.943224][T17070] should_fail_ex.cold+0x5/0xa [ 680.943242][T17070] should_failslab+0xc2/0x120 [ 680.943258][T17070] __kmalloc_cache_noprof+0x7a/0x6f0 [ 680.943277][T17070] ? v4l2_fh_open+0x4c/0xa0 [ 680.943304][T17070] v4l2_fh_open+0x4c/0xa0 [ 680.943325][T17070] v4l2_open+0x1d2/0x490 [ 680.943347][T17070] ? __pfx_v4l2_open+0x10/0x10 [ 680.943368][T17070] chrdev_open+0x234/0x6a0 [ 680.943383][T17070] ? __pfx_apparmor_file_open+0x10/0x10 [ 680.943406][T17070] ? __pfx_chrdev_open+0x10/0x10 [ 680.943421][T17070] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 680.943440][T17070] do_dentry_open+0x6d8/0x1660 [ 680.943455][T17070] ? __pfx_chrdev_open+0x10/0x10 [ 680.943474][T17070] vfs_open+0x82/0x3f0 [ 680.943494][T17070] path_openat+0x208c/0x31a0 [ 680.943515][T17070] ? __pfx_path_openat+0x10/0x10 [ 680.943536][T17070] do_file_open+0x20e/0x430 [ 680.943552][T17070] ? __pfx_do_file_open+0x10/0x10 [ 680.943580][T17070] ? alloc_fd+0x476/0x790 [ 680.943596][T17070] ? do_getname+0x191/0x390 [ 680.943615][T17070] do_sys_openat2+0x10d/0x1e0 [ 680.943633][T17070] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.943653][T17070] ? __fget_files+0x21f/0x3d0 [ 680.943670][T17070] __x64_sys_openat+0x12d/0x210 [ 680.943689][T17070] ? __pfx___x64_sys_openat+0x10/0x10 [ 680.943715][T17070] do_syscall_64+0x106/0xf80 [ 680.943735][T17070] ? clear_bhb_loop+0x40/0x90 [ 680.943752][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.943767][T17070] RIP: 0033:0x7f516139c799 [ 680.943781][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.943795][T17070] RSP: 002b:00007f51621c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 680.943811][T17070] RAX: ffffffffffffffda RBX: 00007f5161615fa0 RCX: 00007f516139c799 [ 680.943821][T17070] RDX: 000000000008aa40 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 680.943831][T17070] RBP: 00007f5161432c99 R08: 0000000000000000 R09: 0000000000000000 [ 680.943840][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.943849][T17070] R13: 00007f5161616038 R14: 00007f5161615fa0 R15: 00007fffbfe6ada8 [ 680.943869][T17070] [ 683.115660][T17082] FAULT_INJECTION: forcing a failure. [ 683.115660][T17082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 683.255634][T17082] CPU: 0 UID: 0 PID: 17082 Comm: syz.1.2192 Tainted: G U L syzkaller #0 PREEMPT(full) [ 683.255661][T17082] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 683.255667][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.255675][T17082] Call Trace: [ 683.255680][T17082] [ 683.255686][T17082] dump_stack_lvl+0x100/0x190 [ 683.255712][T17082] should_fail_ex.cold+0x5/0xa [ 683.255727][T17082] ? prepare_alloc_pages+0x16d/0x5f0 [ 683.255745][T17082] should_fail_alloc_page+0xeb/0x140 [ 683.255761][T17082] prepare_alloc_pages+0x1f0/0x5f0 [ 683.255776][T17082] ? is_bpf_text_address+0x8a/0x1a0 [ 683.255826][T17082] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 683.255847][T17082] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 683.255863][T17082] ? is_bpf_text_address+0x94/0x1a0 [ 683.255882][T17082] ? kernel_text_address+0x8d/0x100 [ 683.255903][T17082] ? __kernel_text_address+0xd/0x30 [ 683.255927][T17082] ? unwind_get_return_address+0x59/0xa0 [ 683.255950][T17082] ? __lock_acquire+0x4a5/0x2630 [ 683.255968][T17082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 683.255989][T17082] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 683.256075][T17082] ? stack_trace_save+0x8e/0xc0 [ 683.256089][T17082] ? look_up_lock_class+0x55/0x120 [ 683.256112][T17082] ? find_held_lock+0x2b/0x80 [ 683.256124][T17082] ? ima_match_policy+0x8c4/0x2350 [ 683.256179][T17082] ? ima_match_policy+0x8c4/0x2350 [ 683.256196][T17082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 683.256219][T17082] ? policy_nodemask+0xed/0x4f0 [ 683.256236][T17082] alloc_pages_mpol+0x1fb/0x550 [ 683.256251][T17082] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 683.256271][T17082] folio_alloc_mpol_noprof+0x36/0x340 [ 683.256289][T17082] vma_alloc_folio_noprof+0xed/0x1d0 [ 683.256305][T17082] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 683.256328][T17082] do_anonymous_page+0xb3a/0x1fb0 [ 683.256353][T17082] __handle_mm_fault+0x1d42/0x2b60 [ 683.256374][T17082] ? mt_find+0x45e/0x8e0 [ 683.256394][T17082] ? __pfx___handle_mm_fault+0x10/0x10 [ 683.256411][T17082] ? __pfx_mt_find+0x10/0x10 [ 683.256441][T17082] ? find_vma+0xbf/0x140 [ 683.256453][T17082] ? __pfx_find_vma+0x10/0x10 [ 683.256469][T17082] handle_mm_fault+0x36d/0xa20 [ 683.256491][T17082] do_user_addr_fault+0x74c/0x12f0 [ 683.256518][T17082] exc_page_fault+0x6f/0xd0 [ 683.256536][T17082] asm_exc_page_fault+0x26/0x30 [ 683.256551][T17082] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 683.256567][T17082] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f [ 683.256581][T17082] RSP: 0018:ffffc90003c37ae8 EFLAGS: 00050202 [ 683.256593][T17082] RAX: 000000000000000a RBX: 0000200000001100 RCX: 0000000000000001 [ 683.256602][T17082] RDX: 0000000000000001 RSI: ffff888048d24000 RDI: 0000200000001100 [ 683.256610][T17082] RBP: ffffc90003c37d80 R08: 0000000000000000 R09: ffffed10091a4800 [ 683.256619][T17082] R10: ffff888048d24000 R11: 0000000000000000 R12: 0000200000001101 [ 683.256627][T17082] R13: 00007ffffffff000 R14: ffff888048d24000 R15: 0000000000000001 [ 683.256646][T17082] _copy_to_iter+0x391/0x1720 [ 683.256669][T17082] ? __pfx__copy_to_iter+0x10/0x10 [ 683.256683][T17082] ? kernfs_seq_stop+0xcd/0x120 [ 683.256701][T17082] ? kernfs_put_active+0x93/0xe0 [ 683.256723][T17082] seq_read_iter+0xdab/0x1270 [ 683.256752][T17082] kernfs_fop_read_iter+0x46c/0x610 [ 683.256767][T17082] ? rw_verify_area+0xce/0x6d0 [ 683.256786][T17082] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 683.256802][T17082] vfs_read+0x825/0xb30 [ 683.256825][T17082] ? __pfx_vfs_read+0x10/0x10 [ 683.256858][T17082] ksys_read+0x12a/0x250 [ 683.256878][T17082] ? __pfx_ksys_read+0x10/0x10 [ 683.256903][T17082] do_syscall_64+0x106/0xf80 [ 683.256926][T17082] ? clear_bhb_loop+0x40/0x90 [ 683.256943][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.256957][T17082] RIP: 0033:0x7fc46859c799 [ 683.256969][T17082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.256982][T17082] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.256995][T17082] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 683.257004][T17082] RDX: 000000000000100a RSI: 0000200000001100 RDI: 0000000000000003 [ 683.257012][T17082] RBP: 00007fc46946b090 R08: 0000000000000000 R09: 0000000000000000 [ 683.257021][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.257029][T17082] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 683.257048][T17082] [ 684.447352][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 685.138876][T17110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2199'. [ 685.827669][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.834127][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.036925][T17132] FAULT_INJECTION: forcing a failure. [ 686.036925][T17132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.151185][T17132] CPU: 0 UID: 0 PID: 17132 Comm: syz.6.2203 Tainted: G U L syzkaller #0 PREEMPT(full) [ 686.151212][T17132] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 686.151218][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.151226][T17132] Call Trace: [ 686.151231][T17132] [ 686.151237][T17132] dump_stack_lvl+0x100/0x190 [ 686.151263][T17132] should_fail_ex.cold+0x5/0xa [ 686.151280][T17132] _copy_to_user+0x32/0xd0 [ 686.151373][T17132] simple_read_from_buffer+0xcb/0x170 [ 686.151395][T17132] proc_fail_nth_read+0x1af/0x230 [ 686.151414][T17132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.151431][T17132] ? rw_verify_area+0xce/0x6d0 [ 686.151450][T17132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.151466][T17132] vfs_read+0x1e4/0xb30 [ 686.151496][T17132] ? __pfx_vfs_read+0x10/0x10 [ 686.151515][T17132] ? __fget_files+0x215/0x3d0 [ 686.151533][T17132] ? __fget_files+0x21f/0x3d0 [ 686.151551][T17132] ksys_read+0x12a/0x250 [ 686.151570][T17132] ? __pfx_ksys_read+0x10/0x10 [ 686.151596][T17132] do_syscall_64+0x106/0xf80 [ 686.151614][T17132] ? clear_bhb_loop+0x40/0x90 [ 686.151631][T17132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.151646][T17132] RIP: 0033:0x7f3143f5cfce [ 686.151658][T17132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 686.151671][T17132] RSP: 002b:00007f3144ef3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.151686][T17132] RAX: ffffffffffffffda RBX: 00007f3144ef46c0 RCX: 00007f3143f5cfce [ 686.151695][T17132] RDX: 000000000000000f RSI: 00007f3144ef40a0 RDI: 0000000000000004 [ 686.151703][T17132] RBP: 00007f3144ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 686.151711][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.151719][T17132] R13: 00007f3144216038 R14: 00007f3144215fa0 R15: 00007ffd3bf4be48 [ 686.151738][T17132] [ 686.834935][T17148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2205'. [ 686.879599][T17142] Invalid ELF header magic: != ELF [ 687.121770][T17148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.298070][T17148] bond0 (unregistering): Released all slaves [ 687.906468][T17172] FAULT_INJECTION: forcing a failure. [ 687.906468][T17172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 688.029047][T17172] CPU: 0 UID: 0 PID: 17172 Comm: syz.6.2209 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.029076][T17172] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.029081][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.029090][T17172] Call Trace: [ 688.029096][T17172] [ 688.029102][T17172] dump_stack_lvl+0x100/0x190 [ 688.029128][T17172] should_fail_ex.cold+0x5/0xa [ 688.029146][T17172] get_futex_key+0x1d2/0x1620 [ 688.029166][T17172] ? __pfx_get_futex_key+0x10/0x10 [ 688.029189][T17172] futex_wake+0xea/0x530 [ 688.029209][T17172] ? do_raw_spin_lock+0x128/0x260 [ 688.029231][T17172] ? find_held_lock+0x2b/0x80 [ 688.029246][T17172] ? __pfx_futex_wake+0x10/0x10 [ 688.029271][T17172] ? __lock_acquire+0x4a5/0x2630 [ 688.029291][T17172] do_futex+0x32b/0x350 [ 688.029309][T17172] ? __pfx_do_futex+0x10/0x10 [ 688.029332][T17172] __x64_sys_futex+0x34f/0x4d0 [ 688.029353][T17172] ? __pfx___x64_sys_futex+0x10/0x10 [ 688.029378][T17172] do_syscall_64+0x106/0xf80 [ 688.029398][T17172] ? clear_bhb_loop+0x40/0x90 [ 688.029416][T17172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.029431][T17172] RIP: 0033:0x7f3143f9c799 [ 688.029443][T17172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.029457][T17172] RSP: 002b:00007f3144ed30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 688.029472][T17172] RAX: ffffffffffffffda RBX: 00007f3144216098 RCX: 00007f3143f9c799 [ 688.029482][T17172] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f314421609c [ 688.029491][T17172] RBP: 00007f3144216090 R08: 0000000000000000 R09: 0000000000000000 [ 688.029500][T17172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.029508][T17172] R13: 00007f3144216128 R14: 00007ffd3bf4bd60 R15: 00007ffd3bf4be48 [ 688.029528][T17172] [ 688.708377][T17168] zswap: compressor not available [ 696.074535][T14288] NFSD: Failed to start, no listeners configured. [ 698.101263][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2237'. [ 699.045668][T17379] FAULT_INJECTION: forcing a failure. [ 699.045668][T17379] name failslab, interval 1, probability 0, space 0, times 0 [ 699.191292][T17379] CPU: 0 UID: 0 PID: 17379 Comm: syz.1.2239 Tainted: G U L syzkaller #0 PREEMPT(full) [ 699.191321][T17379] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 699.191328][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.191337][T17379] Call Trace: [ 699.191342][T17379] [ 699.191349][T17379] dump_stack_lvl+0x100/0x190 [ 699.191382][T17379] should_fail_ex.cold+0x5/0xa [ 699.191401][T17379] should_failslab+0xc2/0x120 [ 699.191417][T17379] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 699.191439][T17379] ? vm_area_alloc+0x1f/0x160 [ 699.191458][T17379] ? vma_merge_new_range+0x38b/0xa30 [ 699.191478][T17379] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 699.191505][T17379] vm_area_alloc+0x1f/0x160 [ 699.191523][T17379] __mmap_region+0x10cc/0x29e0 [ 699.191544][T17379] ? __lock_acquire+0x4a5/0x2630 [ 699.191563][T17379] ? __pfx___mmap_region+0x10/0x10 [ 699.191582][T17379] ? vma_modify+0xf76/0x2250 [ 699.191620][T17379] ? sched_clock+0x38/0x60 [ 699.191647][T17379] ? lockdep_hardirqs_on+0x78/0x100 [ 699.191667][T17379] ? finish_task_switch.isra.0+0x205/0xb80 [ 699.191684][T17379] ? rcu_is_watching+0x12/0xc0 [ 699.191728][T17379] ? rcu_is_watching+0x12/0xc0 [ 699.191748][T17379] ? cap_capable+0x107/0x460 [ 699.191773][T17379] mmap_region+0x180/0x3e0 [ 699.191796][T17379] do_mmap+0xc63/0x12f0 [ 699.191817][T17379] ? __pfx_do_mmap+0x10/0x10 [ 699.191833][T17379] ? __pfx_down_write_killable+0x10/0x10 [ 699.191859][T17379] vm_mmap_pgoff+0x29e/0x470 [ 699.191879][T17379] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 699.191896][T17379] ? do_futex+0x192/0x350 [ 699.191915][T17379] ? __pfx_do_futex+0x10/0x10 [ 699.191933][T17379] ? write_ldt+0x47e/0xd40 [ 699.191948][T17379] ksys_mmap_pgoff+0xe1/0x650 [ 699.191964][T17379] ? __x64_sys_futex+0x34f/0x4d0 [ 699.191981][T17379] ? __x64_sys_futex+0x358/0x4d0 [ 699.191999][T17379] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 699.192015][T17379] ? xfd_validate_state+0x129/0x190 [ 699.192038][T17379] __x64_sys_mmap+0x125/0x190 [ 699.192060][T17379] do_syscall_64+0x106/0xf80 [ 699.192079][T17379] ? clear_bhb_loop+0x40/0x90 [ 699.192097][T17379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.192113][T17379] RIP: 0033:0x7fc46859c799 [ 699.192126][T17379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.192140][T17379] RSP: 002b:00007fc469429028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 699.192154][T17379] RAX: ffffffffffffffda RBX: 00007fc468816180 RCX: 00007fc46859c799 [ 699.192164][T17379] RDX: 00000000000000df RSI: 000000000000002a RDI: 0000000000000000 [ 699.192173][T17379] RBP: 00007fc468632c99 R08: 0000000000001000 R09: 0000000000028000 [ 699.192182][T17379] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 699.192191][T17379] R13: 00007fc468816218 R14: 00007fc468816180 R15: 00007ffdd5d00338 [ 699.192211][T17379] [ 700.075070][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2240'. [ 707.862505][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 710.109249][T17522] FAULT_INJECTION: forcing a failure. [ 710.109249][T17522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 710.262385][T17522] CPU: 0 UID: 0 PID: 17522 Comm: syz.7.2263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 710.262414][T17522] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 710.262420][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.262429][T17522] Call Trace: [ 710.262434][T17522] [ 710.262440][T17522] dump_stack_lvl+0x100/0x190 [ 710.262469][T17522] should_fail_ex.cold+0x5/0xa [ 710.262484][T17522] ? prepare_alloc_pages+0x16d/0x5f0 [ 710.262504][T17522] should_fail_alloc_page+0xeb/0x140 [ 710.262522][T17522] prepare_alloc_pages+0x1f0/0x5f0 [ 710.262543][T17522] ? arch_stack_walk+0xa6/0xf0 [ 710.262560][T17522] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 710.262586][T17522] ? stack_trace_save+0x8e/0xc0 [ 710.262602][T17522] ? __pfx_stack_trace_save+0x10/0x10 [ 710.262617][T17522] ? stack_depot_save_flags+0x27/0x9d0 [ 710.262638][T17522] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 710.262659][T17522] ? kasan_save_stack+0x3f/0x50 [ 710.262680][T17522] ? kasan_save_stack+0x30/0x50 [ 710.262700][T17522] ? kasan_save_track+0x14/0x30 [ 710.262721][T17522] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 710.262742][T17522] ? walk_pgd_range+0x896/0x1eb0 [ 710.262763][T17522] ? __walk_page_range+0x163/0x820 [ 710.262783][T17522] ? walk_page_range_vma_unsafe+0x209/0x8f0 [ 710.262804][T17522] ? madvise_guard_install+0x43f/0x7c0 [ 710.262819][T17522] ? madvise_vma_behavior+0x11f1/0x3050 [ 710.262835][T17522] ? madvise_walk_vmas+0x71c/0xa90 [ 710.262850][T17522] ? madvise_do_behavior+0x1ea/0x510 [ 710.262865][T17522] ? do_madvise+0x195/0x240 [ 710.262880][T17522] ? __x64_sys_madvise+0xa9/0x110 [ 710.262903][T17522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.262928][T17522] ? policy_nodemask+0xed/0x4f0 [ 710.262945][T17522] alloc_pages_mpol+0x1fb/0x550 [ 710.262961][T17522] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 710.262981][T17522] alloc_pages_noprof+0x131/0x390 [ 710.262998][T17522] pte_alloc_one+0x1c/0x3d0 [ 710.263014][T17522] __pte_alloc+0x6d/0x3e0 [ 710.263029][T17522] ? __pfx___pte_alloc+0x10/0x10 [ 710.263043][T17522] ? _raw_spin_unlock+0x28/0x50 [ 710.263061][T17522] ? __pmd_alloc+0x3fb/0x950 [ 710.263079][T17522] walk_pgd_range+0xb83/0x1eb0 [ 710.263103][T17522] ? __pfx_guard_install_set_pte+0x10/0x10 [ 710.263118][T17522] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 710.263135][T17522] ? __pfx_guard_install_set_pte+0x10/0x10 [ 710.263153][T17522] ? __pfx_guard_install_set_pte+0x10/0x10 [ 710.263170][T17522] ? __pfx_guard_install_set_pte+0x10/0x10 [ 710.263187][T17522] ? __pfx_walk_pgd_range+0x10/0x10 [ 710.263213][T17522] __walk_page_range+0x163/0x820 [ 710.263235][T17522] ? process_measurement+0x4c8/0x2350 [ 710.263264][T17522] walk_page_range_vma_unsafe+0x209/0x8f0 [ 710.263296][T17522] ? css_rstat_updated+0x1ce/0x5a0 [ 710.263313][T17522] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 710.263336][T17522] ? __pfx_css_rstat_updated+0x10/0x10 [ 710.263352][T17522] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 710.263378][T17522] madvise_guard_install+0x43f/0x7c0 [ 710.263399][T17522] ? __pfx_madvise_guard_install+0x10/0x10 [ 710.263417][T17522] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 710.263432][T17522] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 710.263447][T17522] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 710.263464][T17522] ? __pfx_guard_install_set_pte+0x10/0x10 [ 710.263481][T17522] ? __lock_acquire+0x4a5/0x2630 [ 710.263502][T17522] madvise_vma_behavior+0x11f1/0x3050 [ 710.263522][T17522] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 710.263539][T17522] ? reacquire_held_locks+0xce/0x1e0 [ 710.263557][T17522] ? lock_vma_under_rcu+0x11d/0x590 [ 710.263580][T17522] ? lock_vma_under_rcu+0x17c/0x590 [ 710.263601][T17522] ? lock_vma_under_rcu+0x25/0x590 [ 710.263619][T17522] ? lock_vma_under_rcu+0x1f9/0x590 [ 710.263637][T17522] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 710.263661][T17522] ? __futex_wait+0x256/0x300 [ 710.263687][T17522] madvise_walk_vmas+0x71c/0xa90 [ 710.263706][T17522] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 710.263725][T17522] ? find_held_lock+0x2b/0x80 [ 710.263741][T17522] madvise_do_behavior+0x1ea/0x510 [ 710.263760][T17522] ? __pfx_madvise_do_behavior+0x10/0x10 [ 710.263775][T17522] ? futex_wait+0x125/0x380 [ 710.263801][T17522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.263828][T17522] do_madvise+0x195/0x240 [ 710.263844][T17522] ? __pfx_do_madvise+0x10/0x10 [ 710.263860][T17522] ? do_futex+0x192/0x350 [ 710.263881][T17522] ? find_held_lock+0x2b/0x80 [ 710.263907][T17522] __x64_sys_madvise+0xa9/0x110 [ 710.263924][T17522] ? lockdep_hardirqs_on+0x78/0x100 [ 710.263944][T17522] do_syscall_64+0x106/0xf80 [ 710.263963][T17522] ? clear_bhb_loop+0x40/0x90 [ 710.263982][T17522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.263997][T17522] RIP: 0033:0x7f516139c799 [ 710.264010][T17522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.264025][T17522] RSP: 002b:00007f51621a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 710.264040][T17522] RAX: ffffffffffffffda RBX: 00007f5161616090 RCX: 00007f516139c799 [ 710.264050][T17522] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 710.264060][T17522] RBP: 00007f5161432c99 R08: 0000000000000000 R09: 0000000000000000 [ 710.264069][T17522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.264078][T17522] R13: 00007f5161616128 R14: 00007f5161616090 R15: 00007fffbfe6ada8 [ 710.264098][T17522] [ 712.888981][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 712.970094][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 713.023446][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 713.127369][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 713.201385][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 714.187711][T17532] chnl_net:caif_netlink_parms(): no params data found [ 714.797081][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.860209][T17532] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.936773][T17532] bridge_slave_0: entered allmulticast mode [ 715.012503][T17532] bridge_slave_0: entered promiscuous mode [ 715.061784][T17549] zswap: compressor not available [ 715.230991][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.285266][T17532] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.339040][T17532] bridge_slave_1: entered allmulticast mode [ 715.345671][ T5836] Bluetooth: hci7: command tx timeout [ 715.397448][T17532] bridge_slave_1: entered promiscuous mode [ 715.877715][T17532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.956501][T17532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.165528][T17532] team0: Port device team_slave_0 added [ 716.207417][T17532] team0: Port device team_slave_1 added [ 716.555412][T17532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.598947][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.805067][T17532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.043811][T17532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.099975][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.282776][T17532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.396268][T17595] zswap: compressor û not available [ 717.421380][ T5836] Bluetooth: hci7: command tx timeout [ 717.665242][T17532] hsr_slave_0: entered promiscuous mode [ 717.690054][T17532] hsr_slave_1: entered promiscuous mode [ 717.718822][T17532] debugfs: 'hsr0' already exists in 'hsr' [ 717.739594][T17532] Cannot create hsr debugfs directory [ 718.786928][T17532] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 718.880177][T17532] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 719.166591][T17532] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 719.426288][T17532] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 719.501240][ T5836] Bluetooth: hci7: command tx timeout [ 719.949475][T17532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.060694][T17532] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.122639][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.129760][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.228878][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.236010][ T9619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.162856][T17532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.309960][T17635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 721.343816][T17635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 721.369590][T17635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 721.401787][T17635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 721.434032][T17635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 721.465083][T17635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 721.490330][T17635] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 721.534595][T17635] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 721.563901][T17635] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 721.605440][T17635] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 721.694097][T17635] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 721.953691][T17654] FAULT_INJECTION: forcing a failure. [ 721.953691][T17654] name failslab, interval 1, probability 0, space 0, times 0 [ 722.022863][T17532] veth0_vlan: entered promiscuous mode [ 722.032995][T17654] CPU: 0 UID: 0 PID: 17654 Comm: syz.1.2287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 722.033023][T17654] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 722.033029][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.033038][T17654] Call Trace: [ 722.033043][T17654] [ 722.033049][T17654] dump_stack_lvl+0x100/0x190 [ 722.033077][T17654] should_fail_ex.cold+0x5/0xa [ 722.033096][T17654] should_failslab+0xc2/0x120 [ 722.033113][T17654] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 722.033134][T17654] ? mas_alloc_nodes+0x280/0x390 [ 722.033156][T17654] mas_alloc_nodes+0x280/0x390 [ 722.033175][T17654] mas_preallocate+0x39c/0xf10 [ 722.033195][T17654] ? __memcg_slab_post_alloc_hook+0x480/0x990 [ 722.033215][T17654] ? __pfx_mas_preallocate+0x10/0x10 [ 722.033240][T17654] ? anon_vma_name+0x5a/0x250 [ 722.033260][T17654] __split_vma+0x33d/0xd90 [ 722.033282][T17654] ? __pfx___split_vma+0x10/0x10 [ 722.033300][T17654] ? finish_task_switch.isra.0+0x200/0xb80 [ 722.033321][T17654] ? lockdep_hardirqs_on+0x78/0x100 [ 722.033345][T17654] vma_modify+0x1121/0x2250 [ 722.033370][T17654] ? __pfx_vma_modify+0x10/0x10 [ 722.033394][T17654] vma_modify_flags+0x257/0x3d0 [ 722.033415][T17654] ? __pfx_vma_modify_flags+0x10/0x10 [ 722.033443][T17654] ? mtree_range_walk+0x6ce/0xcd0 [ 722.033466][T17654] mlock_fixup+0x302/0xf00 [ 722.033488][T17654] ? __pfx_mlock_fixup+0x10/0x10 [ 722.033513][T17654] apply_vma_lock_flags+0x256/0x370 [ 722.033536][T17654] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 722.033556][T17654] ? __pfx___might_resched+0x10/0x10 [ 722.033581][T17654] ? __pfx_down_write_killable+0x10/0x10 [ 722.033605][T17654] ? do_futex+0x192/0x350 [ 722.033625][T17654] do_mlock+0x261/0x7f0 [ 722.033647][T17654] ? __pfx_do_mlock+0x10/0x10 [ 722.033666][T17654] ? __x64_sys_futex+0x34f/0x4d0 [ 722.033683][T17654] ? __x64_sys_futex+0x358/0x4d0 [ 722.033702][T17654] ? xfd_validate_state+0x129/0x190 [ 722.033728][T17654] __x64_sys_mlock+0x59/0x80 [ 722.033749][T17654] do_syscall_64+0x106/0xf80 [ 722.033768][T17654] ? clear_bhb_loop+0x40/0x90 [ 722.033786][T17654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.033800][T17654] RIP: 0033:0x7fc46859c799 [ 722.033813][T17654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.033827][T17654] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 722.033843][T17654] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 722.033852][T17654] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 722.033861][T17654] RBP: 00007fc468632c99 R08: 0000000000000000 R09: 0000000000000000 [ 722.033870][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.033879][T17654] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 722.033899][T17654] [ 722.344402][T17532] veth1_vlan: entered promiscuous mode [ 722.363351][T17532] veth0_macvtap: entered promiscuous mode [ 722.371778][T17532] veth1_macvtap: entered promiscuous mode [ 722.387730][T17532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.397855][T17532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.686418][T14921] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.708990][T14921] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.775167][T14921] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.785604][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 722.910670][T14921] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.309097][T17667] can: request_module (can-proto-0) failed. [ 723.331219][T12500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.339037][T12500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.367397][T17670] can: request_module (can-proto-0) failed. [ 723.425779][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 723.431834][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 723.504548][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 723.511543][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 723.517525][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 723.581975][T17680] Bluetooth: hci7: command 0x0c1a tx timeout [ 723.588005][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 723.635689][T12500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.698794][T12500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.667513][T17697] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 724.774643][T17701] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 725.508810][T17680] Bluetooth: hci3: command 0x0c1a tx timeout [ 725.661662][T17680] Bluetooth: hci7: command 0x0c1a tx timeout [ 725.947768][T17720] FAULT_INJECTION: forcing a failure. [ 725.947768][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 726.115021][T17720] CPU: 0 UID: 0 PID: 17720 Comm: syz.1.2296 Tainted: G U L syzkaller #0 PREEMPT(full) [ 726.115049][T17720] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 726.115055][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.115065][T17720] Call Trace: [ 726.115070][T17720] [ 726.115076][T17720] dump_stack_lvl+0x100/0x190 [ 726.115104][T17720] should_fail_ex.cold+0x5/0xa [ 726.115123][T17720] should_failslab+0xc2/0x120 [ 726.115138][T17720] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 726.115160][T17720] ? __kernfs_new_node+0xd2/0x960 [ 726.115183][T17720] __kernfs_new_node+0xd2/0x960 [ 726.115204][T17720] ? kernfs_add_one+0x214/0x850 [ 726.115235][T17720] ? __pfx___kernfs_new_node+0x10/0x10 [ 726.115260][T17720] ? find_held_lock+0x2b/0x80 [ 726.115274][T17720] ? kernfs_root+0xee/0x2a0 [ 726.115294][T17720] ? kernfs_root+0xee/0x2a0 [ 726.115318][T17720] kernfs_new_node+0x11b/0x1a0 [ 726.115343][T17720] kernfs_create_link+0xcc/0x240 [ 726.115361][T17720] sysfs_do_create_link_sd+0x90/0x140 [ 726.115384][T17720] sysfs_create_link+0x61/0xc0 [ 726.115403][T17720] device_add+0x553/0x1950 [ 726.115504][T17720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 726.115529][T17720] ? __pfx_device_add+0x10/0x10 [ 726.115547][T17720] ? lockdep_init_map_type+0x5c/0x250 [ 726.115566][T17720] ? __init_waitqueue_head+0xca/0x150 [ 726.115592][T17720] netdev_register_kobject+0x1a9/0x3d0 [ 726.115667][T17720] register_netdevice+0x12e0/0x2210 [ 726.115737][T17720] ? __pfx_register_netdevice+0x10/0x10 [ 726.115766][T17720] __ip_tunnel_create+0x52b/0x670 [ 726.115816][T17720] ? __pfx___ip_tunnel_create+0x10/0x10 [ 726.115837][T17720] ? net_generic+0xea/0x2a0 [ 726.115863][T17720] ip_tunnel_init_net+0x230/0x780 [ 726.115887][T17720] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 726.115913][T17720] ? __kmalloc_noprof+0x320/0x850 [ 726.115936][T17720] ? __pfx_ipip_init_net+0x10/0x10 [ 726.115982][T17720] ops_init+0x1e2/0x5f0 [ 726.116046][T17720] setup_net+0x118/0x3a0 [ 726.116068][T17720] ? __pfx_setup_net+0x10/0x10 [ 726.116088][T17720] ? lockdep_init_map_type+0x5c/0x250 [ 726.116107][T17720] ? mutex_init_lockep+0x110/0x150 [ 726.116130][T17720] copy_net_ns+0x46f/0x7c0 [ 726.116154][T17720] create_new_namespaces+0x3ea/0xac0 [ 726.116174][T17720] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 726.116191][T17720] ksys_unshare+0x473/0xad0 [ 726.116210][T17720] ? __pfx_ksys_unshare+0x10/0x10 [ 726.116244][T17720] __x64_sys_unshare+0x31/0x40 [ 726.116262][T17720] do_syscall_64+0x106/0xf80 [ 726.116284][T17720] ? clear_bhb_loop+0x40/0x90 [ 726.116302][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.116318][T17720] RIP: 0033:0x7fc46859c799 [ 726.116331][T17720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.116346][T17720] RSP: 002b:00007fc46946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 726.116362][T17720] RAX: ffffffffffffffda RBX: 00007fc468815fa0 RCX: 00007fc46859c799 [ 726.116372][T17720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 726.116381][T17720] RBP: 00007fc468632c99 R08: 0000000000000000 R09: 0000000000000000 [ 726.116391][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.116399][T17720] R13: 00007fc468816038 R14: 00007fc468815fa0 R15: 00007ffdd5d00338 [ 726.116419][T17720] [ 726.613067][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2297'. [ 727.193922][T17737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.251008][T17737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.741641][T17680] Bluetooth: hci7: command 0x0c1a tx timeout [ 731.411886][T17802] netlink: 2468 bytes leftover after parsing attributes in process `syz.7.2313'. [ 734.926630][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 734.935988][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 734.947436][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 734.962078][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 734.970856][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 735.720737][T17856] netlink: 146 bytes leftover after parsing attributes in process `syz.7.2324'. [ 736.130890][T17850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.166377][T17850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.216817][T17850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.249275][T17850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.272685][T17850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 736.302675][T17850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 736.331167][T17850] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 736.356067][T17850] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 736.366947][T17861] synth uevent: /module/au0828: unknown uevent action string [ 736.387490][T17850] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 736.418494][T17850] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 736.444815][T17850] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 736.520279][T17850] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 736.886949][T17872] FAULT_INJECTION: forcing a failure. [ 736.886949][T17872] name fail_futex, interval 1, probability 0, space 0, times 0 [ 737.246426][T17872] CPU: 0 UID: 0 PID: 17872 Comm: syz.1.2329 Tainted: G U L syzkaller #0 PREEMPT(full) [ 737.246456][T17872] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 737.246462][T17872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.246471][T17872] Call Trace: [ 737.246476][T17872] [ 737.246482][T17872] dump_stack_lvl+0x100/0x190 [ 737.246511][T17872] should_fail_ex.cold+0x5/0xa [ 737.246530][T17872] get_futex_key+0x1d2/0x1620 [ 737.246551][T17872] ? __pfx_get_futex_key+0x10/0x10 [ 737.246568][T17872] ? map_get_next_key+0x274/0x730 [ 737.246591][T17872] ? bpf_lsm_bpf+0x9/0x10 [ 737.246608][T17872] ? __sys_bpf+0x173/0x4b90 [ 737.246626][T17872] futex_wake+0xea/0x530 [ 737.246645][T17872] ? __pfx___sys_bpf+0x10/0x10 [ 737.246662][T17872] ? __pfx_futex_wake+0x10/0x10 [ 737.246684][T17872] ? ksys_write+0x190/0x250 [ 737.246703][T17872] do_futex+0x32b/0x350 [ 737.246721][T17872] ? __pfx_do_futex+0x10/0x10 [ 737.246744][T17872] __x64_sys_futex+0x34f/0x4d0 [ 737.246764][T17872] ? __pfx___x64_sys_futex+0x10/0x10 [ 737.246789][T17872] do_syscall_64+0x106/0xf80 [ 737.246811][T17872] ? clear_bhb_loop+0x40/0x90 [ 737.246829][T17872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.246844][T17872] RIP: 0033:0x7fc46859c799 [ 737.246857][T17872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.246872][T17872] RSP: 002b:00007fc46946b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 737.246886][T17872] RAX: ffffffffffffffda RBX: 00007fc468815fa8 RCX: 00007fc46859c799 [ 737.246896][T17872] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc468815fac [ 737.246904][T17872] RBP: 00007fc468815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 737.246913][T17872] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 737.246922][T17872] R13: 00007fc468816038 R14: 00007ffdd5d00250 R15: 00007ffdd5d00338 [ 737.246940][T17872] [ 737.528518][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2327'. [ 737.700528][T17680] Bluetooth: hci1: command 0x0c1a tx timeout [ 737.884441][T17847] chnl_net:caif_netlink_parms(): no params data found [ 738.053196][T17867] FAULT_INJECTION: forcing a failure. [ 738.053196][T17867] name failslab, interval 1, probability 0, space 0, times 0 [ 738.069000][T17867] CPU: 0 UID: 0 PID: 17867 Comm: syz.8.2328 Tainted: G U L syzkaller #0 PREEMPT(full) [ 738.069026][T17867] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 738.069032][T17867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.069042][T17867] Call Trace: [ 738.069047][T17867] [ 738.069053][T17867] dump_stack_lvl+0x100/0x190 [ 738.069080][T17867] should_fail_ex.cold+0x5/0xa [ 738.069098][T17867] should_failslab+0xc2/0x120 [ 738.069114][T17867] __kmalloc_cache_noprof+0x7a/0x6f0 [ 738.069133][T17867] ? kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 738.069185][T17867] kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 738.069205][T17867] ? __pfx_kvm_vm_release+0x10/0x10 [ 738.069221][T17867] kvm_put_kvm+0xe4/0xb10 [ 738.069238][T17867] ? lockdep_hardirqs_on+0x78/0x100 [ 738.069259][T17867] ? _raw_spin_unlock_irq+0x2e/0x50 [ 738.069277][T17867] ? __pfx_kvm_vm_release+0x10/0x10 [ 738.069293][T17867] kvm_vm_release+0x3c/0x50 [ 738.069308][T17867] __fput+0x3ff/0xb40 [ 738.069329][T17867] task_work_run+0x150/0x240 [ 738.069350][T17867] ? __pfx_task_work_run+0x10/0x10 [ 738.069375][T17867] exit_to_user_mode_loop+0x100/0x4a0 [ 738.069396][T17867] do_syscall_64+0x668/0xf80 [ 738.069415][T17867] ? clear_bhb_loop+0x40/0x90 [ 738.069433][T17867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.069447][T17867] RIP: 0033:0x7fb59f79c799 [ 738.069461][T17867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.069475][T17867] RSP: 002b:00007fb5a05ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 738.069489][T17867] RAX: 0000000000000000 RBX: 00007fb59fa15fa0 RCX: 00007fb59f79c799 [ 738.069499][T17867] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 738.069507][T17867] RBP: 00007fb59f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 738.069516][T17867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.069524][T17867] R13: 00007fb59fa16038 R14: 00007fb59fa15fa0 R15: 00007ffcfe7bde88 [ 738.069544][T17867] [ 738.546271][T17680] Bluetooth: hci3: command 0x0c1a tx timeout [ 738.561559][T17680] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.570976][T17680] Bluetooth: hci4: command 0x0c1a tx timeout [ 738.577319][T17680] Bluetooth: hci6: command 0x0c1a tx timeout [ 738.591154][T17680] Bluetooth: hci5: command 0x0c1a tx timeout [ 738.597229][T17680] Bluetooth: hci0: command 0x0c1a tx timeout [ 738.604822][T17680] Bluetooth: hci8: command 0x041b tx timeout [ 738.621752][T17680] Bluetooth: hci7: command 0x0c1a tx timeout [ 739.295686][T17847] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.313903][T17847] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.344245][T17847] bridge_slave_0: entered allmulticast mode [ 739.367784][T17847] bridge_slave_0: entered promiscuous mode [ 739.488495][T17847] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.535676][T17847] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.577544][T17847] bridge_slave_1: entered allmulticast mode [ 739.627771][T17847] bridge_slave_1: entered promiscuous mode [ 739.845308][T17847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.925814][T17847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.133438][T17847] team0: Port device team_slave_0 added [ 740.183272][T17847] team0: Port device team_slave_1 added [ 740.359180][T17847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.402624][T17847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.567680][T17847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.672070][T17847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.679024][T17847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.726670][ T51] Bluetooth: hci8: command 0x041b tx timeout [ 740.732734][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 740.919333][T17847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.332050][T17847] hsr_slave_0: entered promiscuous mode [ 741.377738][T17847] hsr_slave_1: entered promiscuous mode [ 741.428766][T17847] debugfs: 'hsr0' already exists in 'hsr' [ 741.475942][T17847] Cannot create hsr debugfs directory [ 742.781401][ T51] Bluetooth: hci8: command 0x041b tx timeout [ 743.613338][T17847] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 743.721159][T17847] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 743.793409][T17847] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 744.059427][T17847] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 744.069176][T17951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2343'. [ 744.866463][ T51] Bluetooth: hci8: command 0x041b tx timeout [ 745.086226][T17847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.160238][T17847] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.266225][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.273360][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.380265][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.387406][ T9619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.580195][T17976] vhci_hcd vhci_hcd.2: invalid port number 16 [ 745.614230][T17976] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 746.257514][T17847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.944616][ T51] Bluetooth: hci8: command 0x041b tx timeout [ 747.267757][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.274771][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.356286][T17847] veth0_vlan: entered promiscuous mode [ 748.299307][T17847] veth1_vlan: entered promiscuous mode [ 748.621984][ T29] audit: type=1800 audit(1843107947.855:24): pid=18016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2353" name="dbroot" dev="configfs" ino=176931 res=0 errno=0 [ 748.974028][ T29] audit: type=1804 audit(1843107948.205:25): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2355" name="/newroot/613/file0" dev="tmpfs" ino=3257 res=1 errno=0 [ 749.023730][ T51] Bluetooth: hci8: command 0x041b tx timeout [ 749.480997][T17847] veth0_macvtap: entered promiscuous mode [ 749.610117][T17847] veth1_macvtap: entered promiscuous mode [ 749.906475][T17847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.962774][T17847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.060216][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2358'. [ 750.113637][T14913] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.162309][T14913] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.392877][T14913] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.465448][T14913] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.789314][T14933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.821264][T18041] openvswitch: HfR: Dropping previously announced user features [ 750.863268][T14933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.878503][T18044] openvswitch: netlink: Key type 326 is out of range max 32 [ 750.984181][T14933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.041539][T14933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.194553][T17680] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 752.199163][T17680] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 752.214103][T17680] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 752.214695][T17680] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 752.215076][T17680] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 753.777136][T18069] chnl_net:caif_netlink_parms(): no params data found [ 754.281228][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2367'. [ 754.305731][T17680] Bluetooth: hci9: command tx timeout [ 755.328021][T18069] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.429658][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.486196][T18069] bridge_slave_0: entered allmulticast mode [ 755.554827][T18069] bridge_slave_0: entered promiscuous mode [ 755.614111][T18069] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.667845][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.721304][T18069] bridge_slave_1: entered allmulticast mode [ 755.738943][T17680] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 755.783442][T18069] bridge_slave_1: entered promiscuous mode [ 755.970503][T18069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.085942][T18069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.388788][T17680] Bluetooth: hci9: command tx timeout [ 756.634313][T18069] team0: Port device team_slave_0 added [ 756.691999][T18069] team0: Port device team_slave_1 added [ 756.846406][T18069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.887009][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.074650][T18069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.589595][T18069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.643500][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.823146][T18069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.919106][T18132] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 758.113526][T18133] smpboot: CPU 1 is now offline [ 758.402670][T18069] hsr_slave_0: entered promiscuous mode [ 758.434375][T18069] hsr_slave_1: entered promiscuous mode [ 758.440399][T18069] debugfs: 'hsr0' already exists in 'hsr' [ 758.461637][T17680] Bluetooth: hci9: command tx timeout [ 758.501481][T18069] Cannot create hsr debugfs directory [ 759.078759][T18144] FAULT_INJECTION: forcing a failure. [ 759.078759][T18144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.166692][T18144] CPU: 0 UID: 0 PID: 18144 Comm: syz.8.2375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.166722][T18144] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.166728][T18144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 759.166737][T18144] Call Trace: [ 759.166743][T18144] [ 759.166750][T18144] dump_stack_lvl+0x100/0x190 [ 759.166777][T18144] should_fail_ex.cold+0x5/0xa [ 759.166797][T18144] _copy_to_iter+0x1f3/0x1720 [ 759.166820][T18144] ? __pfx__copy_to_iter+0x10/0x10 [ 759.166837][T18144] ? kernfs_seq_stop+0xcd/0x120 [ 759.166859][T18144] ? kernfs_put_active+0x93/0xe0 [ 759.166884][T18144] seq_read_iter+0xdab/0x1270 [ 759.166915][T18144] kernfs_fop_read_iter+0x46c/0x610 [ 759.166933][T18144] ? rw_verify_area+0xce/0x6d0 [ 759.166954][T18144] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 759.166972][T18144] vfs_read+0x825/0xb30 [ 759.166996][T18144] ? __pfx_vfs_read+0x10/0x10 [ 759.167030][T18144] ksys_read+0x12a/0x250 [ 759.167052][T18144] ? __pfx_ksys_read+0x10/0x10 [ 759.167079][T18144] do_syscall_64+0x106/0xf80 [ 759.167099][T18144] ? clear_bhb_loop+0x40/0x90 [ 759.167118][T18144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.167133][T18144] RIP: 0033:0x7fb59f79c799 [ 759.167146][T18144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.167161][T18144] RSP: 002b:00007fb5a05ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 759.167176][T18144] RAX: ffffffffffffffda RBX: 00007fb59fa15fa0 RCX: 00007fb59f79c799 [ 759.167186][T18144] RDX: 000000000000100a RSI: 0000200000001100 RDI: 0000000000000003 [ 759.167195][T18144] RBP: 00007fb59f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 759.167204][T18144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.167213][T18144] R13: 00007fb59fa16038 R14: 00007fb59fa15fa0 R15: 00007ffcfe7bde88 [ 759.167233][T18144] [ 760.209402][T18069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.542428][T17680] Bluetooth: hci9: command tx timeout [ 760.757631][T18069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.725664][T18069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.785436][T18069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.335355][T18181] random: crng reseeded on system resumption [ 763.487505][T18069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 763.573080][T18069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 763.727317][T18069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 763.850074][T18069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 763.902228][ T30] INFO: task syz.3.2051:16324 blocked for more than 143 seconds. [ 763.937900][ T30] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 763.963207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 764.030568][ T30] task:syz.3.2051 state:D stack:27464 pid:16324 tgid:16314 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 764.130397][ T30] Call Trace: [ 764.146256][ T30] [ 764.173930][ T30] __schedule+0xfee/0x6120 [ 764.208615][ T30] ? __lock_acquire+0x4a5/0x2630 [ 764.232521][ T30] ? __pfx___schedule+0x10/0x10 [ 764.267256][ T30] ? find_held_lock+0x2b/0x80 [ 764.293193][ T30] ? schedule+0x2bf/0x390 [ 764.322655][ T30] schedule+0xdd/0x390 [ 764.344203][ T30] schedule_preempt_disabled+0x13/0x30 [ 764.375178][ T30] __mutex_lock+0xc9a/0x1b90 [ 764.414180][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 764.430494][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 764.453621][ T30] ? net_generic+0xea/0x2a0 [ 764.476298][ T30] ? net_generic+0xea/0x2a0 [ 764.497795][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 764.525854][ T30] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 764.559024][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 764.583439][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 764.670532][ T30] ? genl_get_cmd+0x3ef/0x720 [ 764.741246][ T30] ? bpf_lsm_capable+0x9/0x10 [ 764.745956][ T30] ? security_capable+0x80/0x260 [ 764.750912][ T30] genl_rcv_msg+0x560/0x800 [ 764.799990][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.813912][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 764.820045][ T30] netlink_rcv_skb+0x159/0x420 [ 764.852784][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.857847][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.891563][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 764.896887][ T30] genl_rcv+0x28/0x40 [ 764.900882][ T30] netlink_unicast+0x5aa/0x870 [ 764.933278][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 764.938599][ T30] netlink_sendmsg+0x8b0/0xda0 [ 764.991223][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.996550][ T30] ? __import_iovec+0x1d2/0x640 [ 765.021593][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 765.027258][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 765.051353][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.056659][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.094541][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 765.099883][ T30] ___sys_sendmsg+0x190/0x1e0 [ 765.136596][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.153858][ T30] __sys_sendmsg+0x170/0x220 [ 765.158473][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 765.198234][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 765.212037][ T30] do_syscall_64+0x106/0xf80 [ 765.226058][ T30] ? clear_bhb_loop+0x40/0x90 [ 765.230742][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.258173][ T30] RIP: 0033:0x7ff0b219c799 [ 765.272314][ T30] RSP: 002b:00007ff0affb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.307319][ T30] RAX: ffffffffffffffda RBX: 00007ff0b2416270 RCX: 00007ff0b219c799 [ 765.331157][ T30] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000008 [ 765.339148][ T30] RBP: 00007ff0b2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 765.387137][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.422397][ T30] R13: 00007ff0b2416308 R14: 00007ff0b2416270 R15: 00007ffca975f398 [ 765.430392][ T30] [ 765.459808][ T30] INFO: task syz.5.2053:16350 blocked for more than 144 seconds. [ 765.608780][T18069] kthread_run failed with err -4 [ 765.631393][ T30] Tainted: G U L syzkaller #0 [ 765.671107][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 765.679790][ T30] task:syz.5.2053 state:D stack:24408 pid:16350 tgid:16345 ppid:14547 task_flags:0x400140 flags:0x00080002 [ 765.805324][ T30] Call Trace: [ 765.808635][ T30] [ 765.851588][ T30] __schedule+0xfee/0x6120 [ 765.856037][ T30] ? __lock_acquire+0x4a5/0x2630 [ 765.860974][ T30] ? __pfx___schedule+0x10/0x10 [ 765.909562][ T30] ? find_held_lock+0x2b/0x80 [ 765.928911][ T30] ? schedule+0x2bf/0x390 [ 765.947008][ T30] schedule+0xdd/0x390 [ 765.959616][ T30] schedule_preempt_disabled+0x13/0x30 [ 765.976933][ T30] __mutex_lock+0xc9a/0x1b90 [ 765.992612][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 766.015516][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 766.020569][ T30] ? net_generic+0xea/0x2a0 [ 766.047589][ T30] ? net_generic+0xea/0x2a0 [ 766.063555][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 766.081249][ T30] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 766.086807][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 766.113614][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 766.119719][ T30] ? genl_get_cmd+0x3ef/0x720 [ 766.153211][ T30] ? bpf_lsm_capable+0x9/0x10 [ 766.157901][ T30] ? security_capable+0x80/0x260 [ 766.181350][ T30] genl_rcv_msg+0x560/0x800 [ 766.185870][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 766.190879][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 766.232360][ T30] netlink_rcv_skb+0x159/0x420 [ 766.237150][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 766.281511][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 766.286832][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 766.311239][ T30] genl_rcv+0x28/0x40 [ 766.325890][ T30] netlink_unicast+0x5aa/0x870 [ 766.330677][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 766.356806][ T30] netlink_sendmsg+0x8b0/0xda0 [ 766.377108][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.393667][ T30] ? __import_iovec+0x1d2/0x640 [ 766.398549][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 766.430286][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 766.445596][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.450917][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.484884][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 766.490182][ T30] ___sys_sendmsg+0x190/0x1e0 [ 766.516028][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.532961][ T30] __sys_sendmsg+0x170/0x220 [ 766.537560][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 766.561270][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 766.566257][ T30] do_syscall_64+0x106/0xf80 [ 766.570835][ T30] ? clear_bhb_loop+0x40/0x90 [ 766.610543][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.628702][ T30] RIP: 0033:0x7fce50b9c799 [ 766.643154][ T30] RSP: 002b:00007fce51af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.671173][ T30] RAX: ffffffffffffffda RBX: 00007fce50e16180 RCX: 00007fce50b9c799 [ 766.679148][ T30] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 766.727249][ T30] RBP: 00007fce50c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 766.750789][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.775473][ T30] R13: 00007fce50e16218 R14: 00007fce50e16180 R15: 00007ffcb559c818 [ 766.810082][ T30] [ 766.981182][ T30] [ 766.981182][ T30] Showing all locks held in the system: [ 766.989239][ T30] 4 locks held by kworker/0:0/9: [ 767.081154][ T30] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 767.201159][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 767.209889][ T30] #2: ffff88807bd71020 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x2b2/0x540 [ 767.381129][ T30] #3: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 767.447757][ T30] 1 lock held by khungtaskd/30: [ 767.500381][ T30] #0: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 767.581352][ T30] 2 locks held by syz-executor/5827: [ 767.586653][ T30] #0: ffff88802a0880e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 767.697758][ T30] #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 767.781128][ T30] 2 locks held by kworker/0:4/5853: [ 767.786343][ T30] 2 locks held by getty/9573: [ 767.790992][ T30] #0: ffff888033ad50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 767.882692][ T30] #1: ffffc900062ab2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 767.913714][ T30] 3 locks held by kworker/0:2/13090: [ 767.931717][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 767.972201][ T30] #1: ffffc900051bfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 768.001793][ T30] #2: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 768.033133][ T30] 2 locks held by syz.4.1636/14288: [ 768.038340][ T30] #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 768.092474][ T30] #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 768.125137][ T30] 7 locks held by kworker/u8:52/14921: [ 768.130612][ T30] 3 locks held by kworker/u8:59/14928: [ 768.160214][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 768.186420][ T30] #1: ffffc90004c4fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 768.217957][ T30] #2: ffffffff905fb850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 768.252662][ T30] 2 locks held by syz.3.2051/16324: [ 768.257854][ T30] #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 768.303236][ T30] #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 768.333317][ T30] 2 locks held by syz.5.2053/16350: [ 768.338516][ T30] #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 768.375186][ T30] #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 768.412213][ T30] 2 locks held by syz.6.2232/17316: [ 768.417445][ T30] #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 768.451111][ T30] #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 768.481233][ T30] 5 locks held by syz-executor/18069: [ 768.486622][ T30] #0: ffff888089dc4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 768.541388][ T30] #1: ffff888089dc40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 768.570166][ T30] #2: ffffffff908ac448 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 768.610639][ T30] #3: ffff888045da22f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 768.644790][ T30] #4: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 768.677438][ T30] 1 lock held by syz.9.2381/18182: [ 768.695196][ T30] #0: ffffffff906140a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 768.726035][ T30] 1 lock held by syz.7.2382/18181: [ 768.747416][ T30] #0: ffffffff906140a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 768.778579][ T30] 1 lock held by syz.8.2383/18191: [ 768.800002][ T30] #0: ffffffff906140a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 768.856394][ T30] [ 768.858730][ T30] ============================================= [ 768.858730][ T30] [ 769.060809][ T30] NMI backtrace for cpu 0 [ 769.060826][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 769.060848][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 769.060853][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.060861][ T30] Call Trace: [ 769.060867][ T30] [ 769.060873][ T30] dump_stack_lvl+0x100/0x190 [ 769.060899][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 769.060921][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 769.060942][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 769.060961][ T30] sys_info+0x141/0x190 [ 769.061048][ T30] watchdog+0xd25/0x1050 [ 769.061067][ T30] ? __pfx_watchdog+0x10/0x10 [ 769.061082][ T30] ? __kthread_parkme+0x18c/0x230 [ 769.061099][ T30] ? kthread+0x13a/0x450 [ 769.061116][ T30] ? __pfx_watchdog+0x10/0x10 [ 769.061128][ T30] kthread+0x370/0x450 [ 769.061144][ T30] ? __pfx_kthread+0x10/0x10 [ 769.061163][ T30] ret_from_fork+0x754/0xd80 [ 769.061184][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 769.061205][ T30] ? __switch_to+0x7b4/0x1120 [ 769.061220][ T30] ? __pfx_kthread+0x10/0x10 [ 769.061239][ T30] ret_from_fork_asm+0x1a/0x30 [ 769.061262][ T30] [ 769.739726][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 769.746596][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 769.757251][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 769.762423][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.772459][ T30] Call Trace: [ 769.775719][ T30] [ 769.778631][ T30] dump_stack_lvl+0x100/0x190 [ 769.783305][ T30] vpanic+0x552/0x970 [ 769.787276][ T30] ? __pfx_vpanic+0x10/0x10 [ 769.791772][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 769.797910][ T30] panic+0xd1/0xe0 [ 769.801612][ T30] ? __pfx_panic+0x10/0x10 [ 769.806011][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 769.812142][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 769.818275][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 769.824409][ T30] ? watchdog.cold+0x198/0x1ca [ 769.829175][ T30] ? watchdog+0xd35/0x1050 [ 769.833571][ T30] watchdog.cold+0x1a9/0x1ca [ 769.838147][ T30] ? __pfx_watchdog+0x10/0x10 [ 769.842801][ T30] ? __kthread_parkme+0x18c/0x230 [ 769.847808][ T30] ? kthread+0x13a/0x450 [ 769.852037][ T30] ? __pfx_watchdog+0x10/0x10 [ 769.856689][ T30] kthread+0x370/0x450 [ 769.860741][ T30] ? __pfx_kthread+0x10/0x10 [ 769.865314][ T30] ret_from_fork+0x754/0xd80 [ 769.869893][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 769.874993][ T30] ? __switch_to+0x7b4/0x1120 [ 769.879651][ T30] ? __pfx_kthread+0x10/0x10 [ 769.884224][ T30] ret_from_fork_asm+0x1a/0x30 [ 769.888977][ T30] [ 769.892041][ T30] Kernel Offset: disabled [ 769.896350][ T30] Rebooting in 86400 seconds..