last executing test programs: 2m15.554005282s ago: executing program 32 (id=166): close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendfile$auto(r0, r0, 0x0, 0x7fffe000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0xfffffffc, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0xffffffffffffffbf}, {0x9, 0x3}}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)={0xd8bf, 0x5, 0x8, 0x9, 0x1, 0x4, 0x6, 0x3e06}) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) 2m10.607673838s ago: executing program 2 (id=269): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2m10.462265215s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4040084) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000180)=0x101) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r2) setsockopt$auto(r2, 0x1, 0x6, 0x0, 0xc089) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x55) write$auto(r1, &(0x7f00000001c0)='/dev/sg0\x00', 0xe651) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(r1, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000001e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={0x0}, 0x1, 0x0, 0x0, 0x2004c041}, 0x60000890) 2m10.262712767s ago: executing program 2 (id=273): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffffff, 0x9, 0x0) bind$auto(r0, 0x0, 0x68) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0xfffffffffffffff7, 0x2020009, 0x3, 0x214, 0xfffffffffffffffa, 0x0) r1 = socketcall$auto_SYS_GETSOCKOPT(0xf, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)=@raw_tracepoint={0x80000000, r1, 0x0, 0x8000000000000000}, 0xffff) ioctl$auto(r2, 0x1, r1) mremap$auto(0xfffffffffffffffa, 0x103, 0x606, 0xfffffffffffffffa, 0x100000000) socket(0x2a, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x44) madvise$auto(0x0, 0x200007, 0x19) r3 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r4) sendmsg$auto_BATADV_CMD_TP_METER(r3, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) pread64$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x8800000000) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x88180, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20481, 0x0) 2m9.759810696s ago: executing program 2 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x1) setrlimit$auto(0x1, 0x0) mlockall$auto(0x7) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x141000, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x128, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xa00000}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x54db5d01}]}, @NFSD_A_SERVER_PROTO_VERSION={0x40, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4de}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7}]}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1e}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xa}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3b}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}]}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x976}]}, @NFSD_A_SERVER_PROTO_VERSION={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x240}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfff}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x200}]}, @NFSD_A_SERVER_PROTO_VERSION={0x24, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x1c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xe8d}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24000001}, 0x100488c8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) getrlimit$auto(0x9, &(0x7f0000000040)={0x0, 0xf8f}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x1, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyxb\x00', 0xa000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) unshare$auto(0x40000080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="35092cbd7000ffdbdf250a0000000c000480080001800400ea00"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x105100, 0x0) 2m8.814763811s ago: executing program 2 (id=285): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x6, 0x5607) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x54) write$auto(r0, 0x0, 0x200) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r1, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x5, 0x5, 0xfffffff9, 0x6}, {0x4000, 0x3, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2m8.230820949s ago: executing program 2 (id=287): move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3, 0x10, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgget$auto(0xc, 0x77d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) mmap$auto(0x1000, 0x10000000000000, 0x7, 0x40eb1, 0x602, 0x300000008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000002c0)='/dev/audio1\x00\x1b[\xdc\\7:\xff\xc0% n%R|\xcc\t.mp\x99\x92\x84w\x91\xc4;|\x06\xb3\x03\xe1[\xd3\xef\xcb\x11\xcbL\x85m\x0f\xca\xd6a\nJ\x02\x01\x00\x00\x00\x85\x97\xea\x9b\x0e\xcfGs\xa7I\xd2\aN|\x82\xc1\xd7!\b\x01M', 0x100000a3d9) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28120000", @ANYRES16=r4, @ANYBLOB="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"], 0x1228}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) select$auto(0x6, 0x0, 0x0, &(0x7f0000000340)={[0x8, 0x9, 0x4, 0x8000000000005, 0x7ff, 0x8, 0x15f4da07, 0x3, 0x7, 0x68, 0x8000001e, 0xffc, 0x6d3e, 0x7, 0x2, 0x8]}, 0x0) 2m3.507948754s ago: executing program 1 (id=304): write$auto(0xffffffffffffffff, 0x0, 0x80000000) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf36f0f5fefa25e9701bf5d22502000000090004006e6673640000000014d90300850000000800010002000000"], 0x30}}, 0x4000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10000, 0x0) ioctl$auto(r2, 0x8924, 0x24) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x15) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r6) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) r8 = clone$auto(0x0, 0x2, &(0x7f0000000080)=0x8000, &(0x7f0000000280)=0x25, 0xb7ca) ptrace$auto_PTRACE_ARCH_PRCTL(0x1e, r8, 0x1, 0x4) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 2m0.579629295s ago: executing program 1 (id=314): r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$auto_wakeup_sources_stats_fops_wakeup(r0, &(0x7f0000000040)=""/200, 0xc8) r1 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x10001, &(0x7f0000000140)) write$auto_console_fops_tty_io(r1, &(0x7f0000000180)="a35e4077363d8b8a4c18fe357e634b1ba9724999d5639275ab182f788c5c3036b0c58229ade98d92919456467af99c2dd699d64c1cf3bc4fa6817eff", 0x3c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) recvfrom$auto(r1, &(0x7f00000001c0)="779dcb6251c5a18baf5b934466dd6a48c89a761ca848117a9426405f80e702a3d76ca57e3c6ac49c7d913df6ace9e601edab0a66bd7b02e2bb27057d78e94835c946eede483753e6e08912a7d8b9d229f29020ff5d14d6071f996375dafc2f7c6b5784f363c9", 0x401, 0x7, &(0x7f0000000280)=@nfc={0x27, r2, 0x0, 0x5}, &(0x7f00000002c0)=0x200) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000300), r1) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, &(0x7f0000000340)=""/191, 0xbf) r3 = ioctl$auto_NS_GET_MNTNS_ID(r1, 0x8008b705, &(0x7f0000000400)=0x56f2) r4 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000440), 0x102, 0x0) ioctl$auto(r3, 0x400, r4) r5 = signalfd$auto(r4, &(0x7f0000000480)={0x80000000}, 0xb) read$auto_fuse_dir_operations_dir(r1, &(0x7f00000004c0)=""/155, 0x9b) setsockopt$auto_SO_SNDBUFFORCE(r0, 0x6, 0x20, &(0x7f0000000580)='/sys/kernel/debug/wakeup_sources\x00', 0x8) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000600), r3) sendmsg$auto_NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@typed={0x14, 0x48, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd1}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) mmap$auto(0x3ff, 0x5, 0xe1c, 0xfffffffffffffffd, r0, 0x7) r7 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000740), r1) sendmsg$auto_NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xffff5fdb}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xb}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x6}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xc4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xdd3}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x80000000}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close_range$auto(r3, r0, 0x5) write$auto_tracing_entries_fops_trace(r1, &(0x7f0000000880)="7f105eecfdf01164e39ea65adbb47f9d4da2ecce8bd2db4fd926755cfa1384864b37d6ecc5dfd4d291bf2a8df482cdeb31139f1949d4ec0ad05108e61fa395ee6c558540312c3c124fa1c4333f0438", 0x4f) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000001b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b40)={&(0x7f0000000940)={0x11fc, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x11d0, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x5}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x634, 0x2, "d6b6871ef7fd2b36a9c019500bfef9a3d8845c72a7cbc75ee9c8cf4e70cfd31a69e314a82733cbe814ec4e9f6510c80cdb443a74fb6b7381dd34b341d9b44a5e656ca8ce5c380037795f68d62e238b662700a51bb778aa84600e3f484f6f32605c669321183c53b20c01644529f086076d37a168446f20282cf996088ddcb26e1fd6838232adf035ff248dfe271e202be7e67ba4e8d58244b450678e690aabb36052e884bb010b6d4fdd3fe80f2f00603e651d5c04c1a9f7e20d30327070e2e202973508c96cd0f3b56850058eb20bcb7a332001f3923cd54933b60aaab197eb559d2280693369805c41a45df3989cafd44a9776e4dcfa89cac09c3188099fc057df9e6536be605cac442a86575ec4146c63ab8a4a73b1d8bc5cecd941fd7284de4fc795e5c2954dafbac17817e25b210ac54462a96ac0d91889c0af09a29a692783979af3977cf3ff14224b11eb54c377942da768f4df9857982dc61e9de48b9f1f598be3f25f6186be316cd912834bd9143025de705978dbf82bb923d2497669db50e2e8a4c540a44421d89353ee56a12ac7d6691336202543b03feef416141ae7048dc9a36a344a2fe1e0d8d58ee19a5166820927171f20159f4eb6f2baa80c3f476cdb142095f4d31e94150e163cbeb617d2566c589f7f8843a0dfb42867c68db8a64d2b68299a2907899c6adb24e0d76b0eb17cd282c9312daf2e44a182ce77df85e339613bbbf7fcaf8129cdd3ff5b1798fcc4e24dddbfae0b0c956af1ea8ce40457eb1a07681f2d74d0e4dba878a9a73ea14450675f26a486f9ed02ef124aa882fc8b1beb3bb4432f0e1916416b0a01392d6894cc17fb5ef04ea6bc2a79ffb325a4932a885970e838c41741bd0ffc910157ab514829550da23bad2cec2eeebd5859a9586e64299790caebdf24baa34f4c4e5c26a3755886fa8dddb154c249f9240f6a4bb0808d19de637a5b3d15c003bb067327cb428a77314f0a35eb472e737fbe5cda2421855ac93e3cf928dfada88cdcfc3d4c8e8adbac71c77c35134239498047a257c30c866abeffe00f4e4132a17cd0701d7901b87193481d3b76c85c2610bdea2260091a3ddf2ea4e0e8ecd3e3478c314348eb2a6c1f630ccf6a3564e104cdb897b52dc43cbd1761e4240b8dd89693c1643b1f2ad82668d030469b2a10710bc4ada80484971f959dd63aa9c18c5ef714e6abd7e6cb38aed96e20096f37f78dc541104181b64e13ba288e2489fd98566ce7e545492a36379b1f0dd79277c4ecf80103ebcd248497cf37b2735066c3198371f825d8a133655406a7523e42e3ca5025b797a497e5e1a028e8f0f06218ee03a348ad54387c4806fa5c6f4be6ae66d5ad8a74f65143d2550fff785351f018d4b51c4c3f7d9b87b2620330909130a13ce291af626fff601e1e60db18a35cb767c79b734c755fd514fbf752cffb44e604bb4c5ae190462229b78ddd4b654e28dd0b37ff57d02f9ad7b01f2f58aff86721251767803f7b35a0ca868107bb4d5c6c3720f9cda3f1e67f2772dcb2db04ffbc5b8d43a9c642018cb108b1aadc8d438e8eded6b3b2dcc0186b4d1a2fa4c6bf32d0dea88667f50581d9ca38a26bfcdadba200bf4c8e4bb804a5b57329e1e9b35ed50612ba1a0f12e014c9b41534bc14535827a771c6128787e1825af54df1df04be253b54e7ba4aa6bf11a88b6bab789767211688f23da20b1a279b1595f643775d1430e6184fbd0516f7ee70a391ffaeff02971631ff70bf84fdbcd1acfb498739dfb4dd0a697aac6d06527ddeee5744b23a18aaf04cb0b4e1675aff280da867e855b551afefba1229bbfa0ed56f6cb24745c48c319b7c0d71e6005d0ac2284cfe9091c8960d29c2b75ec8bc35ab36b3b0b0f313f207f76bb40dc0cb8802efb43044a6648ba3d2f5cd68a47d2eab741c365d45b43c0e5f3d037a65d7ba997865ee98f91393e181a0005721fe7630f7037abc0814a5ca01d5eb0e2f19a738b47290cfc5fb0aa6ad9d29b0434bbf74aa1899f430ebe082e04326b0f3c5863f80c2fc5cab3f915caf5dc18b43e6544406c6b0960b068d9593b8c7c980e083f970baa8a8a2ccd605f8cb9a3fb199aeec622a5ca25d5b1d50ebdc12ed896634908a00b2ead0bb9bc9cea771f74e2395c57eba7f5fb855106fbe8153c0449561a93e7dfc4adfaf90d1edd99dd158bc1816114baf95a9edcef7f6b56f9907e1bc3b44193cbb3b16d004f18b0c"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x7e0, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x96}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x398, 0x2, "f8a44f134bda798d19653760272167d6a9a8f774291f7fe90d40a0e4037e492953880b151638242272332a3aa64b92b6540e621743ea9708890bd92df8e32345637721ab7f7e064dfb400b8f87059da6b1fe52255e59e5ba25613cb891acf8d2306c2a603a0a29d0651481448485fd8e1c0674d26de650fb6818b4cd4e2e58a547fe099a155fab953ff050e6757b015839defd48b9060a6ec8140536d9dc06a43a9219f4bfb93edd492d2c758702b29187e9b49fa27ff63a8c6ad43666b9c7054ba18b0847346eea91ff4b57be4d8ed0fabbfd7255d35835ce24d8d38346655a6e2da81b57eb8939b37eca57cb416fdfc908adf514aabb08596a5a0e6d8f8f7a4885e9359714b0dbc221c09000184835e0b9f77cd21e3921346c022e792d787f2f8dcdef1e45c3133462f7093661edcf905610fde89d70dd9dd25d928f9e855fcec7befda19235c7bc859f4dee73371d8d001745bb654bc59874ff097e806e2a0557eb9a39e8601d4654b1d55c56356ce9fe53e213ec343954bffbf6d9e9b8c348fe392ba806d8f7049ecfb8be715659c6eb88146ecc42a825a32fcee5a052536c066db8233cec39f590557598250f8d48257d5fef2d6bf018c2063a1e7f553d540d54b369158b2da9fcc32b4e00a4777dd5d1942f0cf03d293ec7317fd42d8ce6ebad4145b4758dd4b391652b9b08fcc1983b4e51fe06245a6734d988347cbc757fd7d9def381ba388ee923772b44abbdef7185b9c6277dd82a9ff6bfda7a952dd1f7aca02627d7e68dc64f5e419452864885f67e86c5b254194cb2bc4bb89b8d68c9b1b689a16db41e3f754678af09f23910331b07b2ac661159662bf1322fc2dc13631f35f2642bcfd4262ae55618d2fccb15b9b8d26d5de639b454a68088f4f5136a1b380fa66c7efaa2426ba00dd1aa157c15400e6102ddcbc79ce2b7b9d0e7970793751a3ee83032b6d482470452bf2ccb1109f6119b3249e62291f740fa7386b86919fdd00599068bc01b0e7244c9e0c29ab911f3465ec9125aa7a5eb768670e6f3daa2302e7a243cad802d676be43367474f233ea2d9ea6a41323f438edb8dfb0790db4f5186ddbbdc3bc504a6291f7959d52d0d250cc54fdc3e30904d48f8b9b927b1b97c23815e434dab75512b434d80f95bf6fcbe604995c39b03802e63dde107bf78311f7118f32c2a81a43b5dde5c7191fad70f2dac05d6f3f88fdb6fa848cbe374cd27a25a7e742613e9b958e681595626d12efe4e54a36486a5a0ecea5a7dcc07d054ef7016417511de05f2fb"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}]}, @NL80211_ATTR_KEY={0xb, 0x50, 0x0, 0x1, [@generic="cbe6a12bba3bd4"]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) userfaultfd$auto(0x101) r8 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001c00), r1) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, 0xbd26}, @GTPA_FAMILY={0x5, 0xd, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001d80), r3) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r9, 0x8, 0x70bd28, 0x25dfdbfd, {}, "211d07acbbcfdd0379a8b7a884a8f9cacbb8405702f1d1bda8e5c4c4bfc1f76d"}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x20008080) ioctl$auto_TUNSETOFFLOAD2(r1, 0x400454d0, &(0x7f0000001e80)=0x100) read$auto_check_wx_fops_(r3, &(0x7f0000001ec0)=""/92, 0x5c) socket(0x1a, 0x6, 0x16) 2m0.183325931s ago: executing program 1 (id=316): mmap$auto(0x9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async) pipe$auto(0x0) (async) pipe$auto(0x0) socket(0x2, 0x6, 0x8) write$auto(0x3, 0x0, 0xfdf3) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m59.644602643s ago: executing program 1 (id=318): mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x50400, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0xa, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffc, 0xf]}, 0x0) capset$auto(0x0, 0x0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x20202, 0x0) pread64$auto(r4, 0x0, 0xfffe, 0x9) close_range$auto(0x2, 0xa, 0x0) shmat$auto(0x0, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 1m58.408812567s ago: executing program 1 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(r1, &(0x7f0000000080)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fdbcdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20080054}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="1f0002010000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000180)=0x101) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r6, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000001e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={0x0}, 0x1, 0x0, 0x0, 0x2004c041}, 0x60000890) 1m57.568683803s ago: executing program 1 (id=324): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x29, 0xa, 0x101) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x11d802, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x3fd0}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) read$auto_hwsim_fops_ps_(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73) r2 = socket(0x2b, 0x2, 0x81) ioctl$auto(r2, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x3a42, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 1m53.033751734s ago: executing program 33 (id=287): move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3, 0x10, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgget$auto(0xc, 0x77d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) mmap$auto(0x1000, 0x10000000000000, 0x7, 0x40eb1, 0x602, 0x300000008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000002c0)='/dev/audio1\x00\x1b[\xdc\\7:\xff\xc0% n%R|\xcc\t.mp\x99\x92\x84w\x91\xc4;|\x06\xb3\x03\xe1[\xd3\xef\xcb\x11\xcbL\x85m\x0f\xca\xd6a\nJ\x02\x01\x00\x00\x00\x85\x97\xea\x9b\x0e\xcfGs\xa7I\xd2\aN|\x82\xc1\xd7!\b\x01M', 0x100000a3d9) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28120000", @ANYRES16=r4, @ANYBLOB="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"], 0x1228}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) select$auto(0x6, 0x0, 0x0, &(0x7f0000000340)={[0x8, 0x9, 0x4, 0x8000000000005, 0x7ff, 0x8, 0x15f4da07, 0x3, 0x7, 0x68, 0x8000001e, 0xffc, 0x6d3e, 0x7, 0x2, 0x8]}, 0x0) 1m44.616085042s ago: executing program 5 (id=333): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f1, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x6, 0x200) 1m44.216156652s ago: executing program 5 (id=353): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x4008) 1m44.045166303s ago: executing program 5 (id=354): r0 = mq_open$auto(&(0x7f0000000000)='%*\x9b^]\\:Y@!\\@\x0e@.^\x00', 0x4, 0x1, &(0x7f00000000c0)={0xa46a, 0xf, 0x100, 0x7}) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)=@link_detach={r0}, 0x1) (async) mmap$auto(0x0, 0x80005, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = socket(0x21, 0x6, 0x3) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC1\x00', 0x68080, 0x0) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async) mmap$auto(0x0, 0x9644, 0xdf, 0x9b71, 0x2, 0x800002d4a29c0) (async, rerun: 32) pivot_root$auto(0x0, 0x0) (async, rerun: 32) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) mmap$auto(0x0, 0x7fff, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x6, 0x6, 0x1) (async, rerun: 32) madvise$auto(0xfffffffffffffffc, 0x8000000000000000, 0x401) (rerun: 32) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x282d42, 0x0) (async, rerun: 64) readv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, 0x0) (async) r5 = getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) (async) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x4000007e, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x321, 0xeb1, r5, 0x8000) (async) socket(0x10, 0x2, 0x0) 1m42.416515712s ago: executing program 34 (id=324): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x29, 0xa, 0x101) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x11d802, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x3fd0}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) read$auto_hwsim_fops_ps_(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73) r2 = socket(0x2b, 0x2, 0x81) ioctl$auto(r2, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x3a42, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 1m28.848104225s ago: executing program 35 (id=354): r0 = mq_open$auto(&(0x7f0000000000)='%*\x9b^]\\:Y@!\\@\x0e@.^\x00', 0x4, 0x1, &(0x7f00000000c0)={0xa46a, 0xf, 0x100, 0x7}) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)=@link_detach={r0}, 0x1) (async) mmap$auto(0x0, 0x80005, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = socket(0x21, 0x6, 0x3) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC1\x00', 0x68080, 0x0) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async) mmap$auto(0x0, 0x9644, 0xdf, 0x9b71, 0x2, 0x800002d4a29c0) (async, rerun: 32) pivot_root$auto(0x0, 0x0) (async, rerun: 32) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) mmap$auto(0x0, 0x7fff, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x6, 0x6, 0x1) (async, rerun: 32) madvise$auto(0xfffffffffffffffc, 0x8000000000000000, 0x401) (rerun: 32) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x282d42, 0x0) (async, rerun: 64) readv$auto(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, 0x0) (async) r5 = getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) (async) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x4000007e, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x321, 0xeb1, r5, 0x8000) (async) socket(0x10, 0x2, 0x0) 1m18.631164698s ago: executing program 7 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x1) setrlimit$auto(0x1, 0x0) mlockall$auto(0x7) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x141000, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0xf0, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}, @NFSD_A_SERVER_PROTO_VERSION={0x40, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4de}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7}]}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1e}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xa}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3b}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}]}, @NFSD_A_SERVER_PROTO_VERSION={0xfffffffffffffe58}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x240}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfff}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x200}]}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x1c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xe8d}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000001}, 0x100488c8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) getrlimit$auto(0x9, &(0x7f0000000040)={0x0, 0xf8f}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r4, 0x8107, 0x1ff, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x1, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyxb\x00', 0xa000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) unshare$auto(0x40000080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000800)={0x20, r6, 0x935, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xea}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x105100, 0x0) 1m16.713321581s ago: executing program 7 (id=422): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = mq_open$auto(&(0x7f0000000280)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ\x02|S\xd2\xfd\xc0\xe8\x11\x9f\xbfq\x1ae\xb6W\xf2\x9c&\x98D\r\\:.\xbf\xfa\xb7:\xa8\xae\xa5\xc4\xba\xe0QY,\xdaA\x96j\x9fV\xca\x03\x11\xbc\x86^\n\xf6\x8e\xbbX\xe1\xb3[\xb2D\x8f D\x05U\x12\xc8\xa7\x00(l\xec\x97\xe5\x83\x13/+J\xdc\x8cc)\xa3rU\n?\xed\x89\f\x0e%\xddC\x8fbV|7\x90\xd2\x91', 0xa7c, 0xc, 0x0) mq_timedreceive$auto(r0, 0x0, 0x3, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x400c4d06, r1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x1) connect$auto(0xffffffffffffffff, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r2, 0x6) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_OOBINLINE(r3, 0xff, 0xa, &(0x7f0000000040)='/proc/self/mem\x00', &(0x7f0000000080)=0x6) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) sysfs$auto(0x2, 0x20, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) shmget$auto(0x8, 0x10563, 0x568d1af2) ioperm$auto(0x81, 0x6951b492, 0x2) 1m15.653060139s ago: executing program 7 (id=429): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400002, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/memory.pressure\x00', 0x82000, 0x0) read$auto(r0, 0x0, 0x20) (async, rerun: 32) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x7, @broadcast}, &(0x7f00000000c0)=0x5) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x80002, 0x73) (rerun: 32) io_uring_setup$auto(0x406, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x11, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x482703, 0x0) (rerun: 64) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0xd) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) socket(0x1f, 0x800, 0x6) (async) socketpair$auto(0xecd, 0x8, 0x76c5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) (async, rerun: 64) socket(0x2, 0x3, 0xa) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async, rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x8008551c, 0xffffffffffffffff) (rerun: 32) 1m14.899070681s ago: executing program 7 (id=431): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x8240, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c03, 0xfffffffffffffffd) 1m14.323862889s ago: executing program 7 (id=435): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010326bd7000fedbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) (async) recvfrom$auto(r1, &(0x7f0000000080), 0x5, 0x6, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r4, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x1a0, 0x10, 0x1}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {0xb, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) r7 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x2) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) (async) mmap$auto(0x0, 0x2000c, 0xe1, 0xeb1, r3, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0x402, 0x300000000000) (async) get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3) sendmsg$auto_NL80211_CMD_VENDOR(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002dbd7000fcdbdf256700000005000800fc007c0004000b000800010005030000060048000500000005008a00010000000800050009000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x124, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x38}, @NL80211_ATTR_MNTR_FLAGS={0xfc, 0x17, "06251cd0ee1c36c74a7cc33c81c95cb5e9994ae53188a3427287c60da26e43daa458e7bf8dadb9afb4069a3cc3888b35c5e9de9ea8aba6ed75292c3ff6069f3d46b4e2dbaa036e6ddd9afca0018a54b569e7e150c54b249a01a121cc6721c4e4f306f6abc95ae8a002af02c954a9cbf4ee189eb09afbaea931bfe2acb625d7352a27bbc0475aac4009576bfb87c37c015ae117d4e32ee765921506c3a24c12ecc73c70f46a9847fe7210aa235be1a312f5c8e62b33afdcad13b538cfb966fa71a5e5d6ab728781b13ca2b544ebef9d12b261bec4b77e34e3ceb08cc23fd6b2d92633bea3a4fa5908dc3fc6b67ac4179cda067cc1626651a5"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r9 = socket(0xa, 0x1, 0x84) getsockopt$auto(r9, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) (async) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) ioctl$auto_BLKPG(r10, 0x1269, 0x300) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) 1m14.099974349s ago: executing program 7 (id=436): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)=@task_fd_query={0x0, 0xffffffffffffffff, 0x1, 0x1568, 0x6, 0x15aa, r0, 0x4, 0xf}, 0x3) semctl$auto_SEM_INFO(0x4, 0x8000002, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) ioctl$auto_BLKTRACESTART(r1, 0x1274, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x8, 0x6, 0x3, 0x13, 0xffffffffffffffff, 0x400) membarrier$auto(0x9, 0x7, 0x7fffffff) prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 58.96836973s ago: executing program 36 (id=436): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)=@task_fd_query={0x0, 0xffffffffffffffff, 0x1, 0x1568, 0x6, 0x15aa, r0, 0x4, 0xf}, 0x3) semctl$auto_SEM_INFO(0x4, 0x8000002, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) ioctl$auto_BLKTRACESTART(r1, 0x1274, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x8, 0x6, 0x3, 0x13, 0xffffffffffffffff, 0x400) membarrier$auto(0x9, 0x7, 0x7fffffff) prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 45.823069203s ago: executing program 3 (id=531): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x2400f000}, 0xd0) 45.750688167s ago: executing program 8 (id=495): mmap$auto(0x73, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r0, 0x0, 0x0, 0xfffff29f) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) 45.457399035s ago: executing program 3 (id=533): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x4000000000008000) fcntl$auto(0x3, 0x10001, 0xa553) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x1f, 0x6, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4090ae82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = socket(0x2b, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r2) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x7, 0x0, 0xa, 0x7ff) mmap$auto(0x3, 0x400002000a, 0x4000000000db, 0xeb1, r1, 0x8000) unshare$auto(0x40000080) 44.621144601s ago: executing program 3 (id=535): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) clock_getres$auto(0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioprio_set$auto(0x3, 0x0, 0x4b34) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000080)={0x3, r1}) clock_gettime$auto(0x3, &(0x7f0000002100)={0x5599bbb4, 0x9b}) ioctl$auto(r2, 0x4b22, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x0) ioctl$auto(0x3, 0xc00caee0, r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x5810, 0xffc, 0x8000000008011, 0x3, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) r6 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0x400080, 0x0) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f0000000240)={{0x4dc, 0xee01, 0xee01, 0x200, 0x5, 0x8, 0x7}, 0x5a, 0x1, 0xfffffffffffffffd, 0x8, @raw=0xf, @raw=0x1, 0x5, 0x0, &(0x7f0000000180)="c0de397abae936c4f5c3259fecea695b79029f69d80798d7d15105489b39fce8fa6c0431c4e9258adb4fd7fb643953547a388c9c34e7f5bfeb507e382f6d76e1ca87befb2bdb4d47112c6edb0a1d152d5b492b748c8f5c858f79b4a9a1ec75f734f00be471b34663e782bd76810dc3c67ba0e9", &(0x7f0000000200)="60d07d1ff3c106e28a9e1fb1d766c5588f770022742230f534e19509925aa8b403482326a4fa6f32d3348cb4ea26652a5f74fd91965c3bf63c4e005dcd8c3c"}) r8 = socket(0x1d, 0x2, 0x7) r9 = getpgid$auto(0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r9}, 0x0) r10 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r8, &(0x7f0000000000)=@can={0x1d, r11}, 0x6a) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880a0000", @ANYRES16=r5, @ANYBLOB="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"/1414, @ANYRES32=r6, @ANYBLOB="0800d200", @ANYRES32=r7, @ANYBLOB="0d015c80abefcbcb51fab87e47d7ac9d42921895c75dffa4a84f045f973b0952415f677b6894273ea0bbec72686a28abbec72215d82b826e50d9062e209de414002b00fc0200000000000000000000000000000800c800", @ANYRES32=r4, @ANYBLOB="040043806fb3cb1b386e28fcaaad0696d9431151210a7585c9648d430005e75a59fd7ab477a1dbacb97aa81b4fda19b7c7fa31a460a6407b85b5da9ded63c175f143aecbea3df31f1ba16547b47c2a11b3f70cccf5c0aeba406e8a6745cdb69257955918faf408003900", @ANYRES32=r1, @ANYBLOB="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"], 0xa88}, 0x1, 0x0, 0x0, 0x27132b84c63e9e46}, 0x4000) 44.208778095s ago: executing program 3 (id=536): mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/ip_vs\x00', 0x500, 0x0) mmap$auto(0x0, 0x8, 0x9, 0x9b72, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) socketpair$auto(0x10000, 0x7, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x242a41, 0xc) socket(0xa, 0x3, 0x3b) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x40015504, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/local_cpus\x00', 0x103b02, 0x0) sendfile$auto(r2, r2, 0x0, 0xb2d) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) socket(0x23, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x74) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 43.276430947s ago: executing program 3 (id=540): io_uring_register$auto_IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, &(0x7f0000000000)="8876484b857c44472d0d53e514ccb563f5a1b22028a8386cb0f8b43b054ffaadcc735a749e84db312eafd6c3eac09979ba1589ba037493b8734a58d1f2", 0x3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1a, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x400008, 0x10000, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) write$auto(r0, 0x0, 0x98c7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r2, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) setresgid$auto(0x81, 0x800000a0, 0x8) prctl$auto(0x18, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0xb, 0x2) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) 42.452877246s ago: executing program 8 (id=541): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x2400feff}, 0xd0) 41.730045292s ago: executing program 3 (id=544): mmap$auto(0x2, 0x20009, 0x4000000000df, 0x10, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/config.gz\x00', 0x402, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(r0, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) socket(0x1f, 0x2, 0x4) mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0x401, 0x5) r1 = socket(0x11, 0x4, 0x1) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x7ac03, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) shmctl$auto_SHM_STAT_ANY(0x5, 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x102) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x10000000000003, 0x0) 41.017917823s ago: executing program 8 (id=547): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x1b, 0x74bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r6 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/environ\x00', 0x2800, 0x0) preadv$auto(r6, &(0x7f00000001c0)={0x0, 0x6b}, 0x8, 0xd2d, 0x8) bind$auto(0x3, 0x0, 0x6a) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0) 40.751245448s ago: executing program 8 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) 40.541278646s ago: executing program 8 (id=549): close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffff7, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x10000000}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x2, 0x76c5, 0x8, 0x100000000}}) socket(0x10, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @multicast2}, 0x68) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0x1, 0x0, 0x7) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) io_submit$auto(0x20, 0x7, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto_IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0x0, 0x696c, 0x7, 0x534c}) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, &(0x7f0000000180)=0x5) ioctl$auto(r2, 0x89a0, 0x4) 26.399203085s ago: executing program 37 (id=544): mmap$auto(0x2, 0x20009, 0x4000000000df, 0x10, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/config.gz\x00', 0x402, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(r0, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) socket(0x1f, 0x2, 0x4) mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0x401, 0x5) r1 = socket(0x11, 0x4, 0x1) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x7ac03, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) shmctl$auto_SHM_STAT_ANY(0x5, 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x102) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x10000000000003, 0x0) 25.416543655s ago: executing program 38 (id=549): close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffff7, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x10000000}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x2, 0x76c5, 0x8, 0x100000000}}) socket(0x10, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @multicast2}, 0x68) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0x1, 0x0, 0x7) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) io_submit$auto(0x20, 0x7, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto_IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0x0, 0x696c, 0x7, 0x534c}) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, &(0x7f0000000180)=0x5) ioctl$auto(r2, 0x89a0, 0x4) 13.427448571s ago: executing program 4 (id=609): ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000240)='!', 0x1) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181841, 0x0) write$auto(r1, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4, 0x8002, 0x7) r2 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) setsockopt$auto_SO_BUSY_POLL_BUDGET(r4, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000080)=0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) syz_clone3(0x0, 0x0) futex$auto(0x0, 0xc, 0x1, 0x0, 0x0, 0x7) modify_ldt$auto(0x1, 0x0, 0x10) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES16=r3, @ANYRES16=r6, @ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x240481d0}, 0x51) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00082abd7000fbcbdf250100"], 0x14}}, 0x200000c0) 11.765577912s ago: executing program 4 (id=612): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r2 = ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000001140)="43024eb44159f729474fbf0728eb44f02c6a56379f82ad2152bc6216b7aaf80b5fc617744938ada3b55847356727a3173672db550038d32a55432bbcf8082a7992e138bf42be767901fb158088d674b3665ce596b2989f696c0e4bcd389220c92b130139ecffef7198abb9257879ce23a085cf9fb464c3a52deaad6d8f571b9b628f16f1ac216727f42ae0804f3d7cdd70811abf76166898948c410d2f74dc872c6a44b40610149842d2c1") sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001100)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) statx$auto(r4, 0x0, 0x6d7, 0x80000008, 0x0) (async) mlock$auto(0x36a, 0x80008) mlockall$auto(0x800000000000005) (async) madvise$auto(0x0, 0x200007, 0x19) (async) link$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r5, 0x6f2d, 0xffffffffffffffff) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) mlock$auto(0x81, 0xffff) (async) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) (async) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) 9.577168214s ago: executing program 4 (id=616): r0 = socket(0x1a, 0x3, 0x9) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251400000008000400040a0000080007007bb50000"], 0x24}, 0x1, 0x0, 0x0, 0x4089c}, 0x20008081) r4 = prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001480)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c010000", @ANYRESDEC=r0, @ANYBLOB="000828bd7000fcdbdf251c000000700001800800030003000000080003002400000008000300010000001400020064756d6d79300000000000000000000008000100", @ANYRESHEX=r0, @ANYBLOB="1400020076657468315f746f5f6261746164760014000200626f6e6430000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="080003007e2900008800018008000100", @ANYRESOCT=0x0, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRESDEC=r5, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRESOCT=r4, @ANYRES16=r4, @ANYRES8=r0, @ANYBLOB="14000200bf696d7265672a075db1f5b8a50b000008000000f9bcd40efce5573d568fdddbdf37194337eb8e2f21b68cc898c7344da7dc5fabca5232a970282cdc7364318702cc34fb4fd819fb0dadb43a3feb86a2f8adbb95c93a2e95b219b084c057008a01ad954cc2faa35e03f8e2b4f39cb6d87c991b3d18cba15f6ec5715b2900899f8865530dbb02199833a60fd64765dbe6bf0e6e45e2fb77d0f853ed396d430f552e58f1e2321d134b751075557047bc03b95f2d67675cb68ef932ce774187537b23325bc924edfdc6e047b88fdafd1bd231371321fe4d687a9ffcd246febc0ada4719c7703fbe11321632", @ANYRES32=r2, @ANYRESDEC=r5, @ANYBLOB="23031a01af9ee73288e23fbf1e5e0baae875163416a1f6c1342934c1c6d61a59df4747bbf2b4400e123863eeb0", @ANYRESDEC=r3, @ANYRES16=r5, @ANYBLOB], 0x16c}, 0x1, 0x0, 0x0, 0x204c000}, 0x4015) read$auto(r5, &(0x7f00000001c0)='ethtool\x00', 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/bNumEndpoints\x00', 0xc0082, 0x0) sendfile$auto(r6, r6, 0x0, 0xef3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000ddde43a91f723ff4c", @ANYRES16=r7, @ANYRES16], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) syz_clone(0x20000080, &(0x7f0000001680)="551f16d7d2d76cf7746f824e3b695cb3aba7666548f7ea1570983fedc1557df81c6b6915df48cccf9b73aac486b76a31d1240687bba952282061cffa29f046290c6e516c06084d749a3e5722e6f232a626efe388c2b0ec11ee284b5c7fd621cf0d82f2b7097f49cc89ffdf4bac43ab62524e4fbf21ba83d101b8c5339e2a09622992535bb646105b06af9126f49717ead86d465f3ab478066228a5280224af3c9c59320aca379f5edd15e9688fbea5b8f940c4c5e5433da0d33d06d0b1fd2c963f54f7e1a5a5842d988b8566ac9b29b1c9c559de20f9053fbd945692ffd8b46cea76d7eba33848ed06be2a183927417c1c1e146e7e4079689503638687dfb22b50da7c10007a4d460801a5fdfae2f422b97a1a8c694917e933d27cd376276fcaf887ec8611fa74d1bff74e2a36abfc6d2b477e18c314ccbc08c7fa6ab946daa9d05885f7947cc8e5f9fc14c44b276c5c7533a574f3a106de14f0874147be2342f0775ee53d8cfbed7f29a80b06ac01f1701a90684611064cac070d911af4b308d1f13e5fb2ff08e3e9b3b78fe257eb73d3f6b687ded7c66f6e50ba6b860a66d0e6b4be1a08de59113dec693234ebc256d1d6485f2faef58496f6ad42121e5646760f1b8ebcfd4e02e6b43ad1ff009c9593b25bc0f191606128f99b6516f78989d7b84e67c0720d2df124ceca6644ad265bab34879c75cc82180ea0c6b9753ca2accaf120022179ef8d45f988c188bc1d7b264381dd367593e346b6925f3528d0baa0f23e857105442fd9d7370ddd3fb4f72326cc7cc55849519e8104cecc51bd2ff3a007f4b4a52c9a4bb7c9d966c6e9bf3f46e02db9718e61318a8325feb3c27b8c0a774c5f997b4d973ec3aaa472cee956dda7dc28a16c86be166a6083a51e5dda2f70b113e1a2c057cb94498426842dd879f90805272945b8aee07f2980f8e22563bd8f2b4c60adc673a05eb9b18dc0c93c81caf4f0473a8848e90855bacfd9c48d52de797a7f8376425985bd81a895c5cf3d493fcf50bbace7d8fc0962c528e60d120601ed6610ba1f90fc2ee261f61e17881c38786f55974cd1ef16804a808eb6ffbe3cd3aa9801772f855f2e36e2718fd76440c24d2c9316aa86ed1ffc727307e92761640e1f68ad632d88e7f195137f13388ab1c3d9866bd60fc24a292bce0eca05c4b25e077cb6ba2c10496ddc43621f486d1c3a30fed13fa88c9216c43b50465a7bff7a90072e85661a206c3d961874c06449cc4dc96bb5ea1a6e6a56d5ddeea151f96063d4e94c165df0d065dbf2f2847dd0e969bac185da232ef7ddb2cf0d76d1eb2026597df908ec85f62b879a565e960a60503408bb5f81fca2041eaf7a0dc6e16f70e3944e950a472bea6a2cd463e4c6278791075c4d39c55299d325813c5123b804723bca2fe87d36bcde6eece9cd715cb7ca25a69a63ffc816b5391f67754ab55cbfc980bcb16d5120c9eee6adb4c06aa04543894edba6a445fdff4cd5b243a901666516ab2283b2aece33f97b87c28c07bbcec35ab612bfa9e47b3f8545b7a3e7a750d21abde9a6d56055ab3fd147cb6da742703068b2f637ce646441c15caa80298792c865aa0d3c08bd2d7dd00fe3c147998dbb8eeada0d30d49de5c6a879a62501799229cf668e7da259b3f99a4bffe5d9b819671b20c305e3e6a72aaa6b3520839beca10ded362392fdc6e7604c52b1dda3f7bbaf008236fee6b6f81257f88ff8b35fd150e5f8e2c58ca2af32682e874ef5d23b28a4051adadde74586867e522551e174bef22a13cd2e87647b6971b253bbf3b0e05f5b209bfe18352d1e222b6a83604cf0bf925236041457bc843ea4a9d1d677814715ae1bcc60283444e0e39ec947d0833b6a143b498ca403fe55e83f611f0ee8ab99bce03afa68eed347274bcaf23c1808dec16d9877feb40d3a34783fe99b0769348c6014e7137bdfcde5d7c7cf5e9e9467c7a6c8a4030f883e96d40d80e7621d8144f2e48fe1de2e4b6faac716a28080ed8c430c28968982ff12fb113bdc53fb359d47a71d6658a2c7b5a005c862d5f76325242c54c365da6906602c277eb7d129866aed78c662f154803643bd1828ec979aaabf4a00c45f216344e2cdce3ca6bbd6d066dd9b10963c17d36452c20b8d80f80c5e5bb72ff0413fd80074106b9ba5fa2143ff7385a1c3efac5ba778a60ce6f577fa9422967e532be6ca055ceef5dd41cc44caf6c72d67d2f33edc1da26cb142827fb1264fbbd5e840ec030d231c0e9096789aaf5d077191b26f499c44a58a07a8ca076cc4a59d6ccee62ef1052ebe17e1d40ec1b311cd03b434f157ed283323730dc8a87d1c25106f26a27503e49267137b7be8ac10efa3ac7f30049a11ebb53d6e6c526ee5e91a32057e28622a6469ccc952df3a71294fe516ce2483295b8b4886786532c64a0926d06e7a580dc6c88a65eeb16ee503f1992892d28cf4dae7b4e7bd87a92338ed0ef2d2a7f2351c6c389085f3796b8422ddd70c9d34cb245d2f846078e70f7c16cfedcc6de2cf9364dfb48805236411c5dbc4a182fea1bf37f7e72b60c0d752a092a41756792942e4dc2ef2a7798f0d4bde459b5542e7d7a3cd6ff3fd5ef5b4b5c8c57a04c2a8868c1f6ac438adcd0efa392160c1ff4e30dcbe1edc1619cfb9c54ca51f2afba0c52605c000358ae7d008f02e321eb09781f51bf62ccb46f2b576d58aab739e03d64eefd336fced5effc4dab6f625b16df9cdb0a0207ee602f82e05cb8d18b033cecbef38d75a25b50d34e52542973140ecd10143c806ed74a5a28fceb2d68eb8b5bb9f309af445ffab21d1f62f0c0fc0d56c902f69fd3aac7bd8fe1a10f5ef0d39cccc43c99cb5f592e3b524955227e0c2607860270f75787d803418b45f9869686b054debb91aaec51c1b984fa26546f5b8913377ede08c6b71f1034359542728292570ae8d51145889e44fbc3f4311c4eda3262eb7079bf3522eac14d8fcfdbda80aab0b03949b0d881a1a88869243a193ea7b22f428ee0de6faae31cb5da5485120be9161b7dcbe6620f41ec636e1963c209ae297b3de13b7d2f58b21138ed84d39e6ecf3f8adc5a9b5b2a84edf504559cea1fa85b7c2473fb0ddc31942c0fe90464b4f7e865794ab9d4f68d2be3a3b7696f7a49c00c222db1b131647c5ef58cda60f057c17ba7859d780269fffc1db28c967d917106a101a48736b32f0a127e9e70c17160d294f28572e1faa06dbc2773a389537829f0fc5e8334df77d8c498e2acb4061809fc76297033c3788f4f5b1f27db21d7f65b8ebec8912a8af2b0f801e7fe5e6d3e47d059984d5cf4e2e0fdc10e3f857b18901667bb6f7af75607dfc7d291aa7228cbdd0293a4948a3205bed2d6b24f21210b1dd75e7886b5626a78047738145583ab3e8ab9c302f6d1cdc40394b1e51380a7c500a384b98ef79c5726a13425c26c02af1fd6e4acd09eb32a6bd2de44ae9ad638d6f2fb66af765dc65c493daa753c5bd8061119fc367729cbcae2261684d401ce051bd79637283604137962c2f83d0ca120a4d31c7de46e573c3d3db4c6ecd314ee482f4c5a3d610cbfc0063c676102fead13e981ca0ea6fd889088bfe18065755f4e447cfded4a7b2b01293baed8fd4f4ea2bca7e38695e4bd2f2d22ed5264157314ad9cbef3eb094e28c72f71c2a8789e11c96216885989faf877d1f924fbc7c20a97ac5dd87fadb20d97fae4c436db68b10091f8f38c1f65da438901fa00cf1e9dd9ae2b20b8b603a18243fa0d72ccc75c589edb24bdf39b4bf6161d2c4aba5ebeef58457964602b1e7d96f66919360a0c7778ea9b366699999cb49f71a13589e114647cbc7933c51c83178e5f6357ea8f8b549ae99f8c7e0e687039560abb82f93ddfc68b0c3bc7a408319450ba63dd47084b04409c081dc1a2ddf0d96889d08966f4556b7941e5ab0c7d3fa3477e6008cd1d315e930df6cf6851a89bd50dfc89458dbdd9e7ab523d8861156acb2f5a45cb605091a4b3daa54ae937d0f6bef070172906e9036045bd86fe9e94e7f18d758e9d98dca677afbbba482622c45cffc4d4e87c38f6e7facc79e8b48e27714ab3f5481a0a0fe3514b511014d5c0956ead80886abd9c7ebc19e06b92fe703a4f4261423d7a8bc7ddded36a3a458c31956876d3919c1ccfdb89aa5354650c94429c0bd43b3677357e5a93e8af967f70f179876ecef26b0e492b440eed5b5eb3c93e85aea6726b4c1a875ba448996d3ab6530640b6f56193f3a612be03d4849565460c34b1945f0fc089992bc23c15cb075200874290a7c2b951e7754a03888850b53647930885d524c3efab0815dc1e716b7f7c939f14ef472469dd9e0463eb1f16758bf4d795a29d88541d351728d03b31dbf29896a5b83d3d68431644821763d39c850d75304fad83624ddb71a9c649bcb1d8daf9e95637a5f821a939117160d956aee713267f78837c5b792a0376bf8f20e32564853ae47a770fe912150f481b45740ef0a249ade93ccdbdf713f34eecef10362873c9e0a50e553ce2be1a435eca8d5beb1617b8536b9388402cce9eea3869bcbae43933165578bce671e831f20b70525b01d0e88ca44608ee2a7d41a2eca0df5f386efd9ccb45a1cb6634970ee1d16574e8fcefe9cc3fda4e8ed34444ae51be16047a1e4e208f84eb622fd78edaeb228907416c460676e6eb3902796519a2f40c4c5af1a7db7e0a7b6db69dfcc00a66231b82fdafa4932398bfe6e44ce64c06f1136d56a5c9e87dff7b0627337ce04324aeb379d01b692c8ece5290cad7f1e076c725eab9f0a1e122f019df16d9f3276df7d0259007a0bd7e371e0ab6570478debe88bd00e481b634496dcc8aff8174ca185fd03f53bed0dfc1158f5f344c6d0260f80724e7db62a5f89168cd8a87fcec902385aaed3488014fadef184736b652c310e4323c1011afb1777284224273bc9e457494266a5e8d8bd085b27a663dfec9cdeac8e84744891869cfa2e51a2b5b27164dd106f59b3dfd0b9d0dd2736d8234c4868a4d10a4d6e2c17f5028e988254b72d4b236c026045c63a95eeda9ed9d87406ca054e3d245af0240ff03b0155f5856d24d4c240767b62409a44d770fc7c71f39105da867b83e253ce08197e06600e3f6efc18c1493ba826827cabf80fae768055145557ca5171f07c7126afa765bebf9ca5508b7cd3161754e936d824c4d3f048f6d95a52169462480325bec0e715c01012e29a8ef14849f988d98281a72459d488279f362f724e92bd441b19d521e7b6972c35d0c6c325e2a965581d632c7c97dcc866da972b08735b72e49ecd24b94508da53a252670f6a37747a6f8f782bffba41f7c739cc3ebdb367966e03867b71796a63e587c6746bec32b429f1517bb4c3633e84958406a579b3e5e83a9fd17e22dc550d1a581abb7b9e5946c5e8e892a2ae3b697fc9e55a4df4ff4ef6e7fdd10f65dd1fcc2e0a52dafe31f5dce55f39d92fdef7dac4d22fb85a2fbe8b4b709054037f6f69b7279db323fade4e02f22177f566786b382014312ed48883c53ae1bd83c40b5b78084217a067746c14d83d5486f742583df6e3548f980addf4aeea922913e65084d930acc495d0f7bd7f1cae99c1923f53bc80c88d0bcc6ddfc15b8b1af08b1b597ffb11dc4c888c33cc86c1b63e64d264b49282dcdb389b65867c11e8a0494b78d66ee4a200d08658f4c78e243e98382e2fbf624ec11cf58c7c213ba74ef4d891c132027938bc7d83f9c9ee2f95c26f9e534d136b007d2b29ac29870be3527f73758a19e5181219", 0x1000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)="f7512491815de0a2da232a1d322bf94897142687240d01b0d3ebebd4938c5583ae6fa568") close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fsopen$auto(0x0, 0x1) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xff\x05OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) r8 = fanotify_init$auto(0x200, 0x1) r9 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) ioctl$auto_IOCTL_GET_NUM_DEVICES(r8, 0x40046104, &(0x7f00000000c0)) r10 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r10, 0x1, &(0x7f0000000000)="140400000000000037") fanotify_mark$auto(r10, 0xd, 0x3c2, r9, 0x0) ioctl$auto__dev_ioctl_fops_dev_ioctl(r4, 0x2, &(0x7f0000000000)="c3fb5dc63808dc681062a8096f8290a56f93d1fbfe034f") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x224d81, 0x40) 9.172090312s ago: executing program 6 (id=620): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4bb43, 0x100) fanotify_mark$auto(0x0, 0x201, 0x4, r1, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) 8.922680509s ago: executing program 6 (id=621): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x20, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x68881, 0x0) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={{0x80000001}, 0x1, 0x6}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000) 8.629242624s ago: executing program 6 (id=624): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) wait4$auto(r0, 0x0, 0x80000001, 0x0) mmap$auto(0x0, 0x400, 0x9, 0xeb1, 0x1272, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) setresuid$auto(0x0, 0x8, 0x8000) setgid$auto(0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x2c, 0xf3, 0x7, @inferred=r1}}) 8.540610316s ago: executing program 4 (id=625): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x88880, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, 0xffffffffffffffff, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) (async) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d0c, 0x0) 8.399192292s ago: executing program 4 (id=627): mmap$auto(0x0, 0x4, 0x9, 0x9b7f, 0xffffffffffffffff, 0x7f136b49) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0xf, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x5) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_POST(r1, 0x5008, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x331503, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) socket(0xf, 0x3, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pread64$auto(r2, &(0x7f0000000080)='\x00dev/\xc6\xa7\x01U\xbc\x91\xc0\xa2\x98\x85\xb3\x1f\"4\xa6\x8a\xf5X\xbeE\x9a9\x9b\x00Q\xcb>\xc68\x9d \x9a\xf4\x8d\xa3\xcd\xca\xb9\xdb\x14\xc8\x8c\xa8\x1e\xa0N\xbb\xe8\x18\xce\x0fi\x05\x00'/69, 0x8000000000000001, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) write$auto(r5, 0x0, 0x0) sysfs$auto(0x0, 0x6, 0x1) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x5, 0x0, 0x8004) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x0, 0x62, 0x80000000, 0x7, 0x6d3e, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000140)='\x00dev/\xc6\xa7\x01U\xbc\x91\xc0\xa2\x98\x85\xb3\x1f\"4\xa6\x8a\xf5X\xbeE\x9a9\x9b\xa0\x05\xd6Z\x92\x00\x1a\x8cio1\x00Q\xcb>\xc68\x9d \x9a\xf4\x8d\xa3\xcd\xca\xb9\xdb\x14\xc8\x8c\xa8\x1e\xa0N\xbb\xe8\x18\xce\x0fi\x05', 0x100000a3d4) 7.480697359s ago: executing program 6 (id=630): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x20, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}]}, 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socketpair$auto(0xffffff6c, 0x4, 0x7ffffff, 0x0) socket(0x11, 0x3, 0x2) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) bpf$auto(0x2, 0x0, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 6.466890932s ago: executing program 4 (id=635): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/make-it-fail\x00', 0x381080, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb5, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) madvise$auto(0x0, 0x0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200001, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x4201, 0x64) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) r3 = prctl$auto(0x200, 0x1, 0x0, 0x1, 0x102) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = prctl$auto(0x3e, 0x0, 0x4, 0x8, 0x7fe) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x80002) r6 = io_uring_setup$auto(0x7, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x80000000, r6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BTRFS_IOC_SEND_32(r3, 0x40449426, &(0x7f00000005c0)={@inferred=r4, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) mmap$auto(0x20000, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x21, 0x6, 0x0) getsockopt$auto(r7, 0x0, 0x80, 0x0, 0x0) 4.974350379s ago: executing program 6 (id=641): unshare$auto(0x40000084) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/auto_msgmni\x00', 0x101000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x68742, 0x0) socket(0x11, 0x800, 0x10000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='X\x00\\\xa0\x04|\x03\xcb\x12\xfa\x18\x1c\xc7k', 0x81) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) fanotify_init$auto(0x2, 0x5) request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000080)='L^[^\x00', &(0x7f00000000c0)=',^@\\([-$&$(}/\x00', &(0x7f0000000100)=',^@\\([-$&$(}/\x00', 0xfffffffffffffff9) r3 = fcntl$auto(0x3, 0x4, 0xa553) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000005c0)={{@inferred, 0x1, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0x2, 0x1, @raw=0x8, @reserved="8aa03506c1c39daf5bcda939a026f2d0d75d1e206609e509533b9d37340ed90b2d991dc15b7f54e7228aceb21133c8722c84b0b76691828d127d547a58b659c6d9067aa90ca0ed3b40ec58f8c911bb668c73715853880254b2d220bb3b4357a8feace45c65fb1d9a3c09cf3a379dc1a2acaabb4f067f0d60b906e16aedc80e21", "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e53111217b0000000000000047a99807bcc1"}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/configuration\x00', 0x10b800, 0x0) readv$auto(r5, &(0x7f0000000080)={0x0, 0x5}, 0x2) renameat2$auto(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0x8, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) clock_adjtime$auto(0x8000, &(0x7f0000000080)={0x8001, 0x0, 0xaaa4, 0x3, 0x7fffffff, 0x7, 0x8, 0x0, 0x0, 0xb, 0x3, {0xb, 0x8}, 0xb7, 0x4, 0x9, 0x1, 0x0, 0xfe88, 0x6, 0x9, 0x401, 0x800, 0x3}) 4.844726223s ago: executing program 9 (id=642): futex_waitv$auto(&(0x7f0000000000)={0xfff, 0xb, 0x4002, 0x4}, 0x80000077, 0xfffffff8, 0x0, 0x162bd) r0 = socket(0x9, 0x2, 0xffffffff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x5) socket(0x10, 0x2, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$auto(r1, 0x400454d0, r1) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r0) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x8003, 0x25dfdbf9, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8010) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) mmap$auto(0x0, 0x20009, 0x8d, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r4, 0x0, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x9) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) write$auto(0x3, 0x0, 0xffd6) 3.817362179s ago: executing program 9 (id=643): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) r1 = socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty23\x00', 0x101e81, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x48900, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa8) 3.581040595s ago: executing program 6 (id=645): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop12\x00', 0x30d0f47cd7664d64, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0800010005000000"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) mmap$auto(0xfffffffffffffffb, 0x8, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) pread64$auto(r2, 0x0, 0x4, 0x102) setresuid$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x22240, 0x9) r3 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00'}) r4 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy6/hwsim/rx_rssi\x00', 0x2, 0x0) socket(0x1d, 0x2, 0x6) write$auto(r4, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xd10\"\x9ek\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x87) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x400080, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/write_same_max_bytes\x00', 0x40, 0x0) mmap$auto(0x0, 0x7f, 0xdd, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r6, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 3.493333824s ago: executing program 0 (id=646): r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7e, 0x0, 0x175c}}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ddc8a3addf71ab8315b7d870d7de771c862a26f7c9981ce0"}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x101}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004040) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1f0, r3, 0x2d7cf3fd3c6fe18f, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x70, 0x14e, "b1676fb745943f5c22e14481c7fc136bcc23a88c37b292aa69873de5ffac1da0b66dbde96e3e0208a266316eed51c8cb6a1db3df57c9b52998d0459d4d2a7a102bf54d69ddc03128882f37b39d723da7264090fc9cf676ceb10623a2a3e161043a3843e7d3d7a7f0218f3f85"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_HT_CAPABILITY={0xe2, 0x1f, "81e7c165e82883af614c52e98191b205f7c668bda445ba7635c49c34f29d33572bc5843eb123b9c62462f969a3399585e7c2dfe12bfee3dff687d4a49204a84191ac487f1c10caa1f62545980afc230fa6ff7701489e6ca0e449d2e22b8e9e4979767bb2ac4641f65a44b3831fa2c3bc6327a59b9f9a00840f6d3f726c720addeed182c3fe8f676d48d6daa9ce46d3f5e10b17a5dbdb02292b1a4549dfe684737329c1bca970ed9d155cfbcba81f94b9842991561256ba03687b25a485329d8c9c5c1ee81ff11b498acf367b8b067803fdcf5092d976317b5063ad0af15e"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x3e, 0x129, "a081ad032bf341c721585f36bb0581fc43b9a2a220d668f6f096525c28ddc3cca15e342a7429769fdc668884352e306af2a40ab83eca94b478f2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x23, 0xac, "09b77646a7c1c8924b268b67f65547e90cb571dcc68d34803956cc6a5676b2"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x44004}, 0x40040) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000000)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfc5cff035f4be6b7fe5e2f94bd9040100000015e48d", @raw=0x2}, 0x3, 0x5, 0x4, @raw=0x9, @reserved="1d5432d94a32bd4a1c203b896bfb666ca9f576b571553a19d3cfd3eb764c8648aded81f04b0e5ffdf9c863c3584fb3cf6a53816ae36fb3f8f4db7fa4a385a1d1cb3b07888602990abc954a297682b3b5b020f547efcb110f4ee8cda573fb9ac424fd51e4ccf58d31024fc0fd2f6a418670b5ec4b88b964e1b4456b45df1bb973", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(r0, 0x451, 0x8, r5, 0x0) r6 = prctl$auto(0x7, 0x7fffffff, 0x0, 0xffffffffffffff8c, 0x4) fcntl$auto_F_ADD_SEALS(r6, 0x409, 0x7fff) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) clock_nanosleep$auto(0x2, 0x9, &(0x7f00000002c0)={0x0, 0xc025}, 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') 3.177524544s ago: executing program 0 (id=647): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r1, 0x80026f47, 0x38) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xd, 0x2, 0xffffffff, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) socketpair$auto(0x1a, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r2, 0x54a0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) socket(0x28, 0x1, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) 3.033043267s ago: executing program 9 (id=648): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r1, 0x80026f47, 0x38) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xd, 0x2, 0xffffffff, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) socketpair$auto(0x1a, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r2, 0x54a0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) socket(0x28, 0x1, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) 2.694907529s ago: executing program 0 (id=649): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x606180, 0x0) close_range$auto(r1, r1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd1}, 0x8000054) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 2.46889666s ago: executing program 0 (id=650): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x28a000, 0x0) capget$auto(&(0x7f0000000080)={0x1, 0xffffffffffffffff}, &(0x7f0000000140)={0x81, 0xc94, 0x9}) (async) r2 = semctl$auto_GETPID(0x6, 0x10, 0xb, 0x5) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000180)={{@inferred=r1, 0x3, 0xffffffff, 0xffffff00, "6fa49183eee0ce533e5faba43416e8ed7bb7a0badd386a2246f8e6faafab5c34bd503572794127a28d8b91a3", @inferred=r2}, 0x1, @integer=@value=[0xe, 0x7f, 0x7, 0x97, 0x6a76, 0x3ff, 0x4, 0x1, 0x2, 0x8, 0xffffffff80000000, 0xa0000000000, 0x4, 0xb7, 0xf, 0x10001, 0x0, 0x2, 0x7fff, 0x4, 0x5, 0x7e96827f, 0x6, 0x4, 0x7, 0x4, 0x100000000, 0x401, 0xc1b, 0x4, 0x7ba0, 0x6ed8, 0x5, 0x9, 0x19, 0x80000000, 0x5, 0xb61f, 0xaf1, 0x1, 0x7, 0x3, 0xa000000000000000, 0x1, 0x7, 0xc58, 0x6e7, 0xf, 0xa, 0x7fff, 0x6, 0xffffffffffff8000, 0x1, 0x3, 0x0, 0x44f3, 0x1000, 0x5, 0x6, 0x3, 0xaa, 0x800, 0x62b7, 0x8a8, 0x100000001, 0x40008, 0x7, 0x55, 0x4, 0x1ff, 0x2, 0x7, 0x5, 0x4, 0x2, 0x800, 0x7, 0x1, 0x9, 0x8, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2, 0x6c9, 0x3, 0xb, 0x1, 0x2, 0x401, 0x4, 0x6, 0x4e, 0x4, 0x7, 0x2, 0x10001, 0xfff, 0x9, 0x8, 0x9, 0x2, 0x9, 0x4, 0x101, 0x1, 0x9, 0x4, 0x80000001, 0x35, 0x40, 0x6, 0x9, 0x3, 0x3, 0x9, 0x11, 0x3, 0x3, 0x10, 0x1, 0x3, 0x5, 0x7f, 0x2, 0x1, 0x9], "6e3d1ec41f4a9ee11fa4766b08b82b377e04f365e79f9f48584af58d8dd1a7391341f2e251e20cdf83c2b5ad807ee236c20db3e188e33e9f56ad40b3f2da3609d084dbfae462ccc55b05a9a23630ed211486f87ae1b2ed27d40e7d4523509ea7c14ea12ae28094e651829fb779dc88681f89b512e7588cfb70d646d644cee6fd"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 64) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2006, 0x0) 2.40054818s ago: executing program 9 (id=651): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb5, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x181f82, 0x0) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x181f82, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0xffffffff, 0x1, 0xfffffffe, 0xffffffff, 0x4e3, 0xffffffff, "00000000000000000000d0eab3dd0f00", 0x3, 0x26, 0x8, 0xe5, 0x4, 0x5, 0xfb}) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0xffffffff, 0x1, 0xfffffffe, 0xffffffff, 0x4e3, 0xffffffff, "00000000000000000000d0eab3dd0f00", 0x3, 0x26, 0x8, 0xe5, 0x4, 0x5, 0xfb}) unshare$auto(0x40000080) madvise$auto(0x0, 0x0, 0x5) (async) madvise$auto(0x0, 0x0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x4201, 0x64) (async) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x4201, 0x64) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) (async) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) setsockopt$auto_SO_TIMESTAMPING_NEW(r2, 0x6, 0x41, &(0x7f0000000040)=']\x00', 0x6) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x4e20, @multicast1}, 0x6) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = prctl$auto(0x3e, 0x0, 0x4, 0x8, 0x7fe) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r6, 0x0, 0x40000000f42c, 0x80002) io_uring_setup$auto(0x7, 0x0) (async) io_uring_setup$auto(0x7, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x4a, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BTRFS_IOC_SEND_32(r3, 0x40449426, &(0x7f00000005c0)={@inferred=r5, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) (async) ioctl$auto_BTRFS_IOC_SEND_32(r3, 0x40449426, &(0x7f00000005c0)={@inferred=r5, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r7, 0x0, 0x80, 0x0, 0x0) 2.176003825s ago: executing program 0 (id=652): socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x0, 0x3, 0xf4}, 0x6d) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r1, r1, 0x0, 0x43) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clock_gettime$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x200c00, 0x0) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) 1.721895712s ago: executing program 0 (id=653): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x5) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0x202, 0x0) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x0, 0x0) copy_file_range$auto(r1, &(0x7f0000000040)=0x7ff, r0, &(0x7f0000000100)=0x8000, 0x1000, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x5, 0x4, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x7) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x8001000}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r3, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x22000050}, 0xc0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) 1.123254093s ago: executing program 9 (id=654): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x5, 0x0) clock_nanosleep$auto(0xb, 0x6, 0x0, 0xfffffffffffffffd) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 0s ago: executing program 9 (id=655): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) setreuid$auto(0x7, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x4a00, 0x0) kernel console output (not intermixed with test programs): e: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.443116][ T7350] RSP: 002b:00007f8dde6f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.443130][ T7350] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa8 RCX: 00007f8ddd78f7c9 [ 161.443139][ T7350] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ddd9e5fa8 [ 161.443147][ T7350] RBP: 00007f8ddd9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 161.443156][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.443164][ T7350] R13: 00007f8ddd9e6038 R14: 00007ffdae8357f0 R15: 00007ffdae8358d8 [ 161.443182][ T7350] [ 163.300939][ T6649] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.478090][ T7386] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.383179][ T6649] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.474114][ T7418] : renamed from gre0 (while UP) [ 167.383547][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 168.643586][ T7470] netlink: zone id is out of range [ 168.670987][ T7470] netlink: zone id is out of range [ 168.690888][ T7470] netlink: zone id is out of range [ 168.701224][ T7470] netlink: zone id is out of range [ 168.721084][ T7467] FAULT_INJECTION: forcing a failure. [ 168.721084][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 168.721176][ T7470] netlink: zone id is out of range [ 168.769860][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.4.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.769903][ T7467] Tainted: [L]=SOFTLOCKUP [ 168.769913][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.769929][ T7467] Call Trace: [ 168.769938][ T7467] [ 168.769948][ T7467] dump_stack_lvl+0x16c/0x1f0 [ 168.769986][ T7467] should_fail_ex+0x512/0x640 [ 168.770023][ T7467] ? fs_reclaim_acquire+0xae/0x150 [ 168.770066][ T7467] should_failslab+0xc2/0x120 [ 168.770107][ T7467] kmem_cache_alloc_noprof+0x83/0x770 [ 168.770141][ T7467] ? jbd2__journal_start+0x193/0x6a0 [ 168.770183][ T7467] ? jbd2__journal_start+0x193/0x6a0 [ 168.770217][ T7467] jbd2__journal_start+0x193/0x6a0 [ 168.770263][ T7467] __ext4_journal_start_sb+0x195/0x640 [ 168.770290][ T7467] ? ext4_punch_hole+0x760/0x1060 [ 168.770325][ T7467] ext4_punch_hole+0x760/0x1060 [ 168.770366][ T7467] ext4_fallocate+0x2281/0x36c0 [ 168.770413][ T7467] ? __pfx_ext4_fallocate+0x10/0x10 [ 168.770447][ T7467] vfs_fallocate+0x5b4/0x10e0 [ 168.770488][ T7467] ? __pfx_vfs_fallocate+0x10/0x10 [ 168.770537][ T7467] ? madvise_vma_behavior+0x26d9/0x29e0 [ 168.770587][ T7467] madvise_vma_behavior+0x2679/0x29e0 [ 168.770633][ T7467] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 168.770674][ T7467] ? mas_prev+0x9b/0xf0 [ 168.770702][ T7467] ? __pfx_mas_prev+0x10/0x10 [ 168.770740][ T7467] ? find_vma_prev+0xd3/0x150 [ 168.770773][ T7467] ? find_held_lock+0x2b/0x80 [ 168.770806][ T7467] ? __pfx_find_vma_prev+0x10/0x10 [ 168.770854][ T7467] ? __futex_wait+0x24b/0x2f0 [ 168.770896][ T7467] madvise_walk_vmas+0x31f/0xac0 [ 168.770927][ T7467] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 168.770976][ T7467] madvise_do_behavior+0x1e2/0x530 [ 168.770999][ T7467] ? futex_private_hash_put+0x160/0x1b0 [ 168.771028][ T7467] ? __pfx_madvise_do_behavior+0x10/0x10 [ 168.771054][ T7467] ? down_read+0x13d/0x460 [ 168.771102][ T7467] do_madvise+0x176/0x240 [ 168.771126][ T7467] ? __pfx_do_madvise+0x10/0x10 [ 168.771148][ T7467] ? do_futex+0x122/0x350 [ 168.771203][ T7467] ? xfd_validate_state+0x61/0x180 [ 168.771226][ T7467] ? __pfx_ksys_write+0x10/0x10 [ 168.771268][ T7467] __x64_sys_madvise+0xa9/0x110 [ 168.771293][ T7467] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.771320][ T7467] do_syscall_64+0xcd/0xf80 [ 168.771350][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.771376][ T7467] RIP: 0033:0x7f8ddd78f7c9 [ 168.771399][ T7467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.771422][ T7467] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 168.771447][ T7467] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 168.771465][ T7467] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 168.771481][ T7467] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.771497][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.771525][ T7467] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 168.771557][ T7467] [ 168.775489][ T7470] netlink: zone id is out of range [ 169.110392][ T7470] netlink: zone id is out of range [ 169.110940][ T7467] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 169.116596][ T7470] netlink: zone id is out of range [ 169.130351][ T7470] netlink: zone id is out of range [ 169.135533][ T7470] netlink: zone id is out of range [ 169.357142][ T7475] FAULT_INJECTION: forcing a failure. [ 169.357142][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 169.380800][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.3.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.380842][ T7475] Tainted: [L]=SOFTLOCKUP [ 169.380852][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.380868][ T7475] Call Trace: [ 169.380876][ T7475] [ 169.380887][ T7475] dump_stack_lvl+0x16c/0x1f0 [ 169.380922][ T7475] should_fail_ex+0x512/0x640 [ 169.380957][ T7475] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 169.380995][ T7475] should_failslab+0xc2/0x120 [ 169.381031][ T7475] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 169.381062][ T7475] ? lookup_one_qstr_excl+0xb3/0x250 [ 169.381089][ T7475] ? alloc_inode+0x64/0x240 [ 169.381121][ T7475] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 169.381152][ T7475] ? alloc_inode+0x64/0x240 [ 169.381177][ T7475] alloc_inode+0x64/0x240 [ 169.381204][ T7475] new_inode+0x22/0x1c0 [ 169.381233][ T7475] rpc_new_file+0xa9/0x420 [ 169.381272][ T7475] rpc_fill_super+0x386/0x4f0 [ 169.381310][ T7475] ? __pfx_rpc_fill_super+0x10/0x10 [ 169.381344][ T7475] get_tree_keyed+0x10e/0x1d0 [ 169.381380][ T7475] vfs_get_tree+0x8e/0x330 [ 169.381409][ T7475] vfs_cmd_create+0xd7/0x2a0 [ 169.381465][ T7475] __do_sys_fsconfig+0x7b8/0xbe0 [ 169.381500][ T7475] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 169.381550][ T7475] do_syscall_64+0xcd/0xf80 [ 169.381580][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.381607][ T7475] RIP: 0033:0x7fba6e38f7c9 [ 169.381629][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.381654][ T7475] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 169.381679][ T7475] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 169.381697][ T7475] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 169.381712][ T7475] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.381729][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.381745][ T7475] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 169.381784][ T7475] [ 171.041274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b88f800: rx timeout, send abort [ 171.051341][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806b88f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.165663][ T7487] sd 0:0:1:0: PR command failed: 1026 [ 171.251576][ T7487] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 171.289481][ T7487] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 171.880865][ T7494] FAULT_INJECTION: forcing a failure. [ 171.880865][ T7494] name failslab, interval 1, probability 0, space 0, times 0 [ 171.930578][ T7494] CPU: 0 UID: 0 PID: 7494 Comm: syz.3.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.930619][ T7494] Tainted: [L]=SOFTLOCKUP [ 171.930627][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.930642][ T7494] Call Trace: [ 171.930650][ T7494] [ 171.930660][ T7494] dump_stack_lvl+0x16c/0x1f0 [ 171.930691][ T7494] should_fail_ex+0x512/0x640 [ 171.930726][ T7494] ? kmem_cache_alloc_noprof+0x62/0x770 [ 171.930762][ T7494] should_failslab+0xc2/0x120 [ 171.930798][ T7494] kmem_cache_alloc_noprof+0x83/0x770 [ 171.930824][ T7494] ? proc_reg_open+0x23f/0x5f0 [ 171.930860][ T7494] ? proc_reg_open+0x23f/0x5f0 [ 171.930888][ T7494] proc_reg_open+0x23f/0x5f0 [ 171.930921][ T7494] do_dentry_open+0x748/0x1590 [ 171.930952][ T7494] ? __pfx_proc_reg_open+0x10/0x10 [ 171.930991][ T7494] vfs_open+0x82/0x3f0 [ 171.931025][ T7494] path_openat+0x2078/0x3140 [ 171.931071][ T7494] ? __pfx_path_openat+0x10/0x10 [ 171.931122][ T7494] do_filp_open+0x20b/0x470 [ 171.931159][ T7494] ? __pfx_do_filp_open+0x10/0x10 [ 171.931218][ T7494] ? __pfx_kfree_link+0x10/0x10 [ 171.931256][ T7494] ? alloc_fd+0x471/0x7d0 [ 171.931298][ T7494] do_sys_openat2+0x11f/0x280 [ 171.931325][ T7494] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.931353][ T7494] ? find_held_lock+0x2b/0x80 [ 171.931394][ T7494] __x64_sys_openat+0x174/0x210 [ 171.931422][ T7494] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.931463][ T7494] do_syscall_64+0xcd/0xf80 [ 171.931494][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.931521][ T7494] RIP: 0033:0x7fba6e38f7c9 [ 171.931542][ T7494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.931566][ T7494] RSP: 002b:00007fba6f1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.931590][ T7494] RAX: ffffffffffffffda RBX: 00007fba6e5e6090 RCX: 00007fba6e38f7c9 [ 171.931608][ T7494] RDX: 0000000000040900 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 171.931626][ T7494] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.931642][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.931657][ T7494] R13: 00007fba6e5e6128 R14: 00007fba6e5e6090 R15: 00007fffc1e53698 [ 171.931693][ T7494] [ 172.797607][ T6683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.824803][ T6683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.844728][ T6683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.861374][ T6683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.882842][ T6683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.745327][ T7506] chnl_net:caif_netlink_parms(): no params data found [ 173.895041][ T7521] FAULT_INJECTION: forcing a failure. [ 173.895041][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 173.908340][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.3.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.908366][ T7521] Tainted: [L]=SOFTLOCKUP [ 173.908371][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.908381][ T7521] Call Trace: [ 173.908386][ T7521] [ 173.908392][ T7521] dump_stack_lvl+0x16c/0x1f0 [ 173.908414][ T7521] should_fail_ex+0x512/0x640 [ 173.908441][ T7521] should_failslab+0xc2/0x120 [ 173.908463][ T7521] kmem_cache_alloc_noprof+0x83/0x770 [ 173.908480][ T7521] ? __es_insert_extent+0x743/0x1440 [ 173.908506][ T7521] ? __es_insert_extent+0x743/0x1440 [ 173.908526][ T7521] __es_insert_extent+0x743/0x1440 [ 173.908555][ T7521] ext4_es_insert_extent+0x449/0x1120 [ 173.908583][ T7521] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 173.908611][ T7521] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 173.908630][ T7521] ? ext4_es_remove_extent+0x2ba/0x4f0 [ 173.908653][ T7521] ? __pfx_ext4_es_remove_extent+0x10/0x10 [ 173.908676][ T7521] ? __ext4_journal_start_sb+0x14c/0x640 [ 173.908696][ T7521] ext4_punch_hole+0x930/0x1060 [ 173.908718][ T7521] ext4_fallocate+0x2281/0x36c0 [ 173.908757][ T7521] ? __pfx_ext4_fallocate+0x10/0x10 [ 173.908778][ T7521] vfs_fallocate+0x5b4/0x10e0 [ 173.908802][ T7521] ? __pfx_vfs_fallocate+0x10/0x10 [ 173.908824][ T7521] ? madvise_vma_behavior+0x26d9/0x29e0 [ 173.908852][ T7521] madvise_vma_behavior+0x2679/0x29e0 [ 173.908879][ T7521] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 173.908902][ T7521] ? mas_prev+0x9b/0xf0 [ 173.908918][ T7521] ? __pfx_mas_prev+0x10/0x10 [ 173.908938][ T7521] ? find_vma_prev+0xd3/0x150 [ 173.908958][ T7521] ? find_held_lock+0x2b/0x80 [ 173.908977][ T7521] ? __pfx_find_vma_prev+0x10/0x10 [ 173.909010][ T7521] ? __futex_wait+0x24b/0x2f0 [ 173.909033][ T7521] madvise_walk_vmas+0x31f/0xac0 [ 173.909051][ T7521] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 173.909079][ T7521] madvise_do_behavior+0x1e2/0x530 [ 173.909092][ T7521] ? futex_private_hash_put+0x160/0x1b0 [ 173.909108][ T7521] ? __pfx_madvise_do_behavior+0x10/0x10 [ 173.909123][ T7521] ? down_read+0x13d/0x460 [ 173.909150][ T7521] do_madvise+0x176/0x240 [ 173.909163][ T7521] ? __pfx_do_madvise+0x10/0x10 [ 173.909175][ T7521] ? do_futex+0x122/0x350 [ 173.909205][ T7521] ? xfd_validate_state+0x61/0x180 [ 173.909218][ T7521] ? __pfx_ksys_write+0x10/0x10 [ 173.909242][ T7521] __x64_sys_madvise+0xa9/0x110 [ 173.909255][ T7521] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.909270][ T7521] do_syscall_64+0xcd/0xf80 [ 173.909287][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.909302][ T7521] RIP: 0033:0x7fba6e38f7c9 [ 173.909316][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.909329][ T7521] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 173.909343][ T7521] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 173.909353][ T7521] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 173.909363][ T7521] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.909372][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.909380][ T7521] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 173.909401][ T7521] [ 174.523406][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.560442][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.567746][ T7506] bridge_slave_0: entered allmulticast mode [ 174.602240][ T7506] bridge_slave_0: entered promiscuous mode [ 174.673522][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.713452][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.752851][ T7506] bridge_slave_1: entered allmulticast mode [ 174.789565][ T7506] bridge_slave_1: entered promiscuous mode [ 174.888328][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.932595][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.980517][ T6683] Bluetooth: hci1: command tx timeout [ 175.067413][ T7506] team0: Port device team_slave_0 added [ 175.079857][ T7506] team0: Port device team_slave_1 added [ 175.240150][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.250465][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.277996][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.315266][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.335263][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.441391][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.918505][ T7506] hsr_slave_0: entered promiscuous mode [ 175.930991][ T7506] hsr_slave_1: entered promiscuous mode [ 175.937619][ T7506] debugfs: 'hsr0' already exists in 'hsr' [ 175.952732][ T7506] Cannot create hsr debugfs directory [ 176.655435][ T7506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.699170][ T7506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.714029][ T7506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.728682][ T7506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.029237][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.062336][ T6683] Bluetooth: hci1: command tx timeout [ 177.084381][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.125082][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.132285][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.339427][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.346711][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.972362][ T7569] FAULT_INJECTION: forcing a failure. [ 177.972362][ T7569] name failslab, interval 1, probability 0, space 0, times 0 [ 178.010669][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.3.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.010715][ T7569] Tainted: [L]=SOFTLOCKUP [ 178.010724][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.010739][ T7569] Call Trace: [ 178.010748][ T7569] [ 178.010758][ T7569] dump_stack_lvl+0x16c/0x1f0 [ 178.010792][ T7569] should_fail_ex+0x512/0x640 [ 178.010829][ T7569] should_failslab+0xc2/0x120 [ 178.010867][ T7569] kmem_cache_alloc_node_noprof+0x86/0x800 [ 178.010896][ T7569] ? zswap_store+0x850/0x2800 [ 178.010930][ T7569] ? zswap_store+0x850/0x2800 [ 178.010956][ T7569] zswap_store+0x850/0x2800 [ 178.010999][ T7569] ? __pfx_zswap_store+0x10/0x10 [ 178.011027][ T7569] ? folio_free_swap+0x229/0x740 [ 178.011064][ T7569] ? do_raw_spin_unlock+0x172/0x230 [ 178.011093][ T7569] ? _raw_spin_unlock+0x28/0x50 [ 178.011130][ T7569] ? folio_free_swap+0x285/0x740 [ 178.011163][ T7569] ? rcu_is_watching+0x12/0xc0 [ 178.011200][ T7569] swap_writeout+0x3f4/0x1090 [ 178.011226][ T7569] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.011265][ T7569] shmem_writeout+0xc21/0x1140 [ 178.011299][ T7569] ? __pfx_shmem_writeout+0x10/0x10 [ 178.011329][ T7569] ? inode_to_bdi+0x9e/0x160 [ 178.011372][ T7569] ? folio_clear_dirty_for_io+0x112/0x6b0 [ 178.011413][ T7569] shrink_folio_list+0x2eed/0x45e0 [ 178.011451][ T7569] ? __pfx_shrink_folio_list+0x10/0x10 [ 178.011480][ T7569] ? __lock_acquire+0x436/0x2890 [ 178.011511][ T7569] ? rcu_is_watching+0x12/0xc0 [ 178.011552][ T7569] ? __lock_acquire+0x436/0x2890 [ 178.011609][ T7569] ? __lock_acquire+0x436/0x2890 [ 178.011640][ T7569] reclaim_folio_list+0xda/0x5a0 [ 178.011664][ T7569] ? __pfx_css_rstat_updated+0x10/0x10 [ 178.011690][ T7569] ? __pfx_reclaim_folio_list+0x10/0x10 [ 178.011730][ T7569] ? lru_gen_update_size+0x543/0xe10 [ 178.011773][ T7569] ? lru_gen_del_folio+0x32b/0x540 [ 178.011808][ T7569] reclaim_pages+0x3ec/0x570 [ 178.011836][ T7569] ? __pfx_reclaim_pages+0x10/0x10 [ 178.011856][ T7569] ? find_held_lock+0x2b/0x80 [ 178.011887][ T7569] ? madvise_cold_or_pageout_pte_range+0x739/0x2100 [ 178.011932][ T7569] madvise_cold_or_pageout_pte_range+0x1624/0x2100 [ 178.011988][ T7569] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 178.012030][ T7569] ? __lock_acquire+0x436/0x2890 [ 178.012054][ T7569] ? stack_trace_save+0x8e/0xc0 [ 178.012095][ T7569] ? stack_depot_save_flags+0x29/0x9b0 [ 178.012134][ T7569] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 178.012177][ T7569] walk_pgd_range+0xc10/0x1f80 [ 178.012234][ T7569] ? __pfx_walk_pgd_range+0x10/0x10 [ 178.012277][ T7569] __walk_page_range+0x163/0x820 [ 178.012313][ T7569] ? process_measurement+0x4a6/0x22d0 [ 178.012353][ T7569] ? down_write+0x14d/0x200 [ 178.012395][ T7569] walk_page_range_vma_unsafe+0x23f/0x9e0 [ 178.012435][ T7569] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 178.012476][ T7569] ? find_held_lock+0x2b/0x80 [ 178.012511][ T7569] ? mlock_drain_local+0x22d/0x4e0 [ 178.012547][ T7569] walk_page_range_vma+0x63/0x90 [ 178.012583][ T7569] madvise_pageout+0x257/0x540 [ 178.012622][ T7569] ? __pfx_madvise_pageout+0x10/0x10 [ 178.012687][ T7569] madvise_vma_behavior+0x912/0x29e0 [ 178.012728][ T7569] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 178.012757][ T7569] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 178.012797][ T7569] ? mas_prev+0x9b/0xf0 [ 178.012823][ T7569] ? __pfx_mas_prev+0x10/0x10 [ 178.012859][ T7569] ? find_vma_prev+0xd3/0x150 [ 178.012891][ T7569] ? find_held_lock+0x2b/0x80 [ 178.012921][ T7569] ? __pfx_find_vma_prev+0x10/0x10 [ 178.012968][ T7569] ? __futex_wait+0x24b/0x2f0 [ 178.013007][ T7569] madvise_walk_vmas+0x31f/0xac0 [ 178.013038][ T7569] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 178.013088][ T7569] madvise_do_behavior+0x1e2/0x530 [ 178.013111][ T7569] ? futex_private_hash_put+0x160/0x1b0 [ 178.013140][ T7569] ? __pfx_madvise_do_behavior+0x10/0x10 [ 178.013166][ T7569] ? down_read+0x13d/0x460 [ 178.013212][ T7569] do_madvise+0x176/0x240 [ 178.013235][ T7569] ? __pfx_do_madvise+0x10/0x10 [ 178.013276][ T7569] ? do_futex+0x122/0x350 [ 178.013329][ T7569] ? xfd_validate_state+0x61/0x180 [ 178.013368][ T7569] __x64_sys_madvise+0xa9/0x110 [ 178.013392][ T7569] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.013419][ T7569] do_syscall_64+0xcd/0xf80 [ 178.013450][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.013476][ T7569] RIP: 0033:0x7fba6e38f7c9 [ 178.013499][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.013524][ T7569] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 178.013549][ T7569] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 178.013567][ T7569] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000 [ 178.013584][ T7569] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.013600][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.013615][ T7569] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 178.013651][ T7569] [ 178.566122][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.672677][ T30] audit: type=1800 audit(1765229262.279:8): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.348" name="lu_gp_id" dev="configfs" ino=27806 res=0 errno=0 [ 179.108981][ T6683] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 179.140677][ T6683] Bluetooth: hci1: command tx timeout [ 179.445736][ T7506] veth0_vlan: entered promiscuous mode [ 179.483624][ T7506] veth1_vlan: entered promiscuous mode [ 179.664484][ T7506] veth0_macvtap: entered promiscuous mode [ 179.712123][ T7506] veth1_macvtap: entered promiscuous mode [ 179.824242][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.858001][ T7601] FAULT_INJECTION: forcing a failure. [ 179.858001][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 179.866650][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.895343][ T7601] CPU: 0 UID: 0 PID: 7601 Comm: syz.3.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.895389][ T7601] Tainted: [L]=SOFTLOCKUP [ 179.895399][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.895414][ T7601] Call Trace: [ 179.895423][ T7601] [ 179.895434][ T7601] dump_stack_lvl+0x16c/0x1f0 [ 179.895469][ T7601] should_fail_ex+0x512/0x640 [ 179.895514][ T7601] should_failslab+0xc2/0x120 [ 179.895556][ T7601] __kmalloc_cache_noprof+0x80/0x800 [ 179.895585][ T7601] ? __task_pid_nr_ns+0x1f5/0x500 [ 179.895611][ T7601] ? proc_self_get_link+0x1a9/0x230 [ 179.895646][ T7601] ? proc_self_get_link+0x1a9/0x230 [ 179.895674][ T7601] proc_self_get_link+0x1a9/0x230 [ 179.895705][ T7601] pick_link+0xb09/0x13b0 [ 179.895736][ T7601] ? __pfx_proc_self_get_link+0x10/0x10 [ 179.895770][ T7601] step_into_slowpath+0x6c6/0xf50 [ 179.895810][ T7601] ? __pfx_step_into_slowpath+0x10/0x10 [ 179.895850][ T7601] ? lookup_fast+0x156/0x610 [ 179.895878][ T7601] ? inode_permission+0x37b/0x640 [ 179.895910][ T7601] link_path_walk+0xd26/0x1c70 [ 179.895957][ T7601] path_openat+0x1bd/0x3140 [ 179.895991][ T7601] ? do_syscall_64+0xcd/0xf80 [ 179.896017][ T7601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.896055][ T7601] ? __pfx_path_openat+0x10/0x10 [ 179.896103][ T7601] do_filp_open+0x20b/0x470 [ 179.896141][ T7601] ? __pfx_do_filp_open+0x10/0x10 [ 179.896210][ T7601] ? alloc_fd+0x471/0x7d0 [ 179.896259][ T7601] do_sys_openat2+0x11f/0x280 [ 179.896288][ T7601] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.896330][ T7601] __x64_sys_openat+0x174/0x210 [ 179.896359][ T7601] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.896403][ T7601] do_syscall_64+0xcd/0xf80 [ 179.896433][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.896459][ T7601] RIP: 0033:0x7fba6e38f7c9 [ 179.896482][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.896506][ T7601] RSP: 002b:00007fba6f1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.896532][ T7601] RAX: ffffffffffffffda RBX: 00007fba6e5e6090 RCX: 00007fba6e38f7c9 [ 179.896550][ T7601] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 179.896567][ T7601] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.896584][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.896599][ T7601] R13: 00007fba6e5e6128 R14: 00007fba6e5e6090 R15: 00007fffc1e53698 [ 179.896637][ T7601] [ 180.180781][ T7201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.192031][ T7201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.200813][ T7201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.210044][ T7201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.451222][ T7523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.471323][ T7523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.541652][ T6833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.579549][ T6833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.142258][ T6649] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.225413][ T6649] Bluetooth: hci1: command tx timeout [ 183.236212][ T6649] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.348205][ T6683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.359529][ T6683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.367901][ T6683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.378479][ T6683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.393685][ T6683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.901976][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 184.166013][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.197270][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.225993][ T7642] bridge_slave_0: entered allmulticast mode [ 184.252733][ T7642] bridge_slave_0: entered promiscuous mode [ 184.293689][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.320451][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.327792][ T7642] bridge_slave_1: entered allmulticast mode [ 184.362394][ T7642] bridge_slave_1: entered promiscuous mode [ 184.465464][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.491808][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.576793][ T7642] team0: Port device team_slave_0 added [ 184.602798][ T7642] team0: Port device team_slave_1 added [ 184.722084][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.729137][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.813429][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.856886][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.870304][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.930346][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.068550][ T7642] hsr_slave_0: entered promiscuous mode [ 185.101587][ T7642] hsr_slave_1: entered promiscuous mode [ 185.107781][ T7642] debugfs: 'hsr0' already exists in 'hsr' [ 185.140487][ T7642] Cannot create hsr debugfs directory [ 185.257721][ T7664] netlink: 11766 bytes leftover after parsing attributes in process `syz.4.358'. [ 185.276575][ T7664] net_ratelimit: 47 callbacks suppressed [ 185.276596][ T7664] netlink: zone id is out of range [ 185.311188][ T7664] netlink: zone id is out of range [ 185.316470][ T7664] netlink: zone id is out of range [ 185.322341][ T7664] netlink: zone id is out of range [ 185.333828][ T7664] netlink: zone id is out of range [ 185.339165][ T7664] netlink: zone id is out of range [ 185.358287][ T7664] netlink: zone id is out of range [ 185.385799][ T7664] netlink: zone id is out of range [ 185.392651][ T7664] netlink: zone id is out of range [ 185.397951][ T7664] netlink: zone id is out of range [ 185.461476][ T6683] Bluetooth: hci5: command tx timeout [ 185.685056][ T7642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.704647][ T7642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.738301][ T7642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.758912][ T7642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.985206][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.042872][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.094378][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.101692][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.135528][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.142758][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.338876][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 186.349149][ T7679] netlink: 17 bytes leftover after parsing attributes in process `syz.3.360'. [ 186.360370][ T7679] netlink: 2 bytes leftover after parsing attributes in process `syz.3.360'. [ 186.671819][ T7686] netlink: 342 bytes leftover after parsing attributes in process `syz.3.361'. [ 186.689523][ T30] audit: type=1800 audit(1765229270.309:9): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file0" dev="tmpfs" ino=221 res=0 errno=0 [ 186.892394][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.245572][ T7697] FAULT_INJECTION: forcing a failure. [ 187.245572][ T7697] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.280606][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz.3.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.280647][ T7697] Tainted: [L]=SOFTLOCKUP [ 187.280657][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.280672][ T7697] Call Trace: [ 187.280687][ T7697] [ 187.280698][ T7697] dump_stack_lvl+0x16c/0x1f0 [ 187.280729][ T7697] should_fail_ex+0x512/0x640 [ 187.280771][ T7697] get_futex_key+0x1d0/0x15f0 [ 187.280803][ T7697] ? __pfx_get_futex_key+0x10/0x10 [ 187.280826][ T7697] futex_wake+0xea/0x530 [ 187.280848][ T7697] ? __pfx_futex_wake+0x10/0x10 [ 187.280875][ T7697] do_futex+0x1e3/0x350 [ 187.280892][ T7697] ? __pfx_do_futex+0x10/0x10 [ 187.280913][ T7697] __x64_sys_futex+0x1e0/0x4c0 [ 187.280932][ T7697] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.280948][ T7697] ? set_cred_ucounts+0x10f/0x200 [ 187.280967][ T7697] ? __sys_setresuid+0x6ad/0x1160 [ 187.280990][ T7697] do_syscall_64+0xcd/0xf80 [ 187.281006][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.281021][ T7697] RIP: 0033:0x7fba6e38f7c9 [ 187.281034][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.281047][ T7697] RSP: 002b:00007fba6f1cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.281062][ T7697] RAX: ffffffffffffffda RBX: 00007fba6e5e6098 RCX: 00007fba6e38f7c9 [ 187.281071][ T7697] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fba6e5e609c [ 187.281080][ T7697] RBP: 00007fba6e5e6090 R08: 00007fba6f1f1000 R09: 0000000000000000 [ 187.281089][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.281097][ T7697] R13: 00007fba6e5e6128 R14: 00007fffc1e535b0 R15: 00007fffc1e53698 [ 187.281116][ T7697] [ 187.681768][ T6649] Bluetooth: hci5: command tx timeout [ 188.390993][ T7642] veth0_vlan: entered promiscuous mode [ 188.491651][ T7642] veth1_vlan: entered promiscuous mode [ 188.615451][ T7642] veth0_macvtap: entered promiscuous mode [ 188.626031][ T7710] program syz.3.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.675340][ T7642] veth1_macvtap: entered promiscuous mode [ 188.742398][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.811718][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.849613][ T7303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.861201][ T7303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.897753][ T7303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.922511][ T7303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.199341][ T6807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.235294][ T6807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.336201][ T6654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.361890][ T6654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.474249][ T7714] syz.3.366 (7714): /proc/7713/oom_adj is deprecated, please use /proc/7713/oom_score_adj instead. [ 189.700947][ T6649] Bluetooth: hci5: command tx timeout [ 190.847235][ T7742] FAULT_INJECTION: forcing a failure. [ 190.847235][ T7742] name failslab, interval 1, probability 0, space 0, times 0 [ 190.870516][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.6.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.870541][ T7742] Tainted: [L]=SOFTLOCKUP [ 190.870546][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.870554][ T7742] Call Trace: [ 190.870560][ T7742] [ 190.870566][ T7742] dump_stack_lvl+0x16c/0x1f0 [ 190.870586][ T7742] should_fail_ex+0x512/0x640 [ 190.870606][ T7742] ? __kmalloc_cache_noprof+0x5f/0x800 [ 190.870625][ T7742] should_failslab+0xc2/0x120 [ 190.870646][ T7742] __kmalloc_cache_noprof+0x80/0x800 [ 190.870662][ T7742] ? open_substream+0xec/0x9d0 [ 190.870681][ T7742] ? mark_held_locks+0x49/0x80 [ 190.870696][ T7742] ? open_substream+0xec/0x9d0 [ 190.870712][ T7742] ? _raw_spin_unlock_irq+0x2e/0x50 [ 190.870735][ T7742] open_substream+0xec/0x9d0 [ 190.870755][ T7742] rawmidi_open_priv+0x543/0x6e0 [ 190.870778][ T7742] snd_rawmidi_open+0x4cb/0xbf0 [ 190.870801][ T7742] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 190.870822][ T7742] ? __pfx_default_wake_function+0x10/0x10 [ 190.870844][ T7742] ? kobject_get_unless_zero+0x156/0x1e0 [ 190.870863][ T7742] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 190.870883][ T7742] snd_open+0x22d/0x4c0 [ 190.870899][ T7742] ? __pfx_snd_open+0x10/0x10 [ 190.870913][ T7742] chrdev_open+0x234/0x6a0 [ 190.870935][ T7742] ? __pfx_apparmor_file_open+0x10/0x10 [ 190.870954][ T7742] ? __pfx_chrdev_open+0x10/0x10 [ 190.870976][ T7742] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 190.871002][ T7742] do_dentry_open+0x748/0x1590 [ 190.871022][ T7742] ? __pfx_chrdev_open+0x10/0x10 [ 190.871048][ T7742] vfs_open+0x82/0x3f0 [ 190.871065][ T7742] path_openat+0x2078/0x3140 [ 190.871101][ T7742] ? __pfx_path_openat+0x10/0x10 [ 190.871136][ T7742] do_filp_open+0x20b/0x470 [ 190.871170][ T7742] ? __pfx_do_filp_open+0x10/0x10 [ 190.871226][ T7742] ? alloc_fd+0x471/0x7d0 [ 190.871267][ T7742] do_sys_openat2+0x11f/0x280 [ 190.871292][ T7742] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.871335][ T7742] __x64_sys_openat+0x174/0x210 [ 190.871353][ T7742] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.871376][ T7742] do_syscall_64+0xcd/0xf80 [ 190.871393][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.871407][ T7742] RIP: 0033:0x7f488618f7c9 [ 190.871420][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.871433][ T7742] RSP: 002b:00007f4887035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.871448][ T7742] RAX: ffffffffffffffda RBX: 00007f48863e6090 RCX: 00007f488618f7c9 [ 190.871457][ T7742] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 190.871466][ T7742] RBP: 00007f4886213f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.871474][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.871482][ T7742] R13: 00007f48863e6128 R14: 00007f48863e6090 R15: 00007ffe80d02708 [ 190.871501][ T7742] [ 191.781599][ T6649] Bluetooth: hci5: command tx timeout [ 193.595810][ T7764] syz.6.375 (7764) used greatest stack depth: 19688 bytes left [ 196.105470][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.158959][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.203122][ T7812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 196.220967][ T7809] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 196.996122][ T6683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.006442][ T6683] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.017158][ T6683] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.028314][ T6683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.040356][ T6683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.145464][ T6683] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 198.105682][ T7830] chnl_net:caif_netlink_parms(): no params data found [ 198.564666][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.588685][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 198.622915][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.654511][ T7830] bridge_slave_0: entered allmulticast mode [ 198.696670][ T7830] bridge_slave_0: entered promiscuous mode [ 198.738394][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.760032][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.778098][ T7830] bridge_slave_1: entered allmulticast mode [ 198.802764][ T7830] bridge_slave_1: entered promiscuous mode [ 198.865265][ T7863] misc userio: No port type given on /dev/userio [ 198.941390][ T7863] netlink: 252 bytes leftover after parsing attributes in process `syz.6.394'. [ 198.997102][ T7830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.998356][ T7863] unsupported nla_type 65535 [ 199.086537][ T7830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.141371][ T6683] Bluetooth: hci6: command tx timeout [ 199.220585][ T6649] Bluetooth: hci5: command 0x2016 tx timeout [ 199.347651][ T7830] team0: Port device team_slave_0 added [ 199.396789][ T7830] team0: Port device team_slave_1 added [ 199.568559][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.575746][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.664242][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.713751][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.808539][ T7830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.848275][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.870567][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.944447][ T7830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.221273][ T7830] hsr_slave_0: entered promiscuous mode [ 200.231074][ T7830] hsr_slave_1: entered promiscuous mode [ 200.238248][ T7830] debugfs: 'hsr0' already exists in 'hsr' [ 200.247021][ T7830] Cannot create hsr debugfs directory [ 200.384394][ T7877] FAULT_INJECTION: forcing a failure. [ 200.384394][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 200.471014][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.4.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.471049][ T7877] Tainted: [L]=SOFTLOCKUP [ 200.471057][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.471069][ T7877] Call Trace: [ 200.471077][ T7877] [ 200.471086][ T7877] dump_stack_lvl+0x16c/0x1f0 [ 200.471117][ T7877] should_fail_ex+0x512/0x640 [ 200.471148][ T7877] ? kmem_cache_alloc_noprof+0x62/0x770 [ 200.471179][ T7877] should_failslab+0xc2/0x120 [ 200.471210][ T7877] kmem_cache_alloc_noprof+0x83/0x770 [ 200.471237][ T7877] ? security_file_alloc+0x34/0x2b0 [ 200.471277][ T7877] ? security_file_alloc+0x34/0x2b0 [ 200.471311][ T7877] security_file_alloc+0x34/0x2b0 [ 200.471346][ T7877] init_file+0x93/0x4c0 [ 200.471369][ T7877] alloc_empty_file+0x73/0x1e0 [ 200.471405][ T7877] alloc_file_pseudo+0x13a/0x230 [ 200.471431][ T7877] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 200.471457][ T7877] ? alloc_fd+0x471/0x7d0 [ 200.471492][ T7877] sock_alloc_file+0x50/0x210 [ 200.471515][ T7877] __sys_socket+0x1c0/0x260 [ 200.471538][ T7877] ? __pfx___sys_socket+0x10/0x10 [ 200.471555][ T7877] ? xfd_validate_state+0x61/0x180 [ 200.471573][ T7877] __x64_sys_socket+0x72/0xb0 [ 200.471589][ T7877] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.471605][ T7877] do_syscall_64+0xcd/0xf80 [ 200.471621][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.471636][ T7877] RIP: 0033:0x7f8ddd78f7c9 [ 200.471649][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.471662][ T7877] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 200.471676][ T7877] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 200.471686][ T7877] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 200.471694][ T7877] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.471702][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.471710][ T7877] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 200.471729][ T7877] [ 200.890771][ T7830] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 200.907208][ T7830] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 200.938916][ T7830] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 200.958632][ T7830] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 201.163038][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.183692][ T7830] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.188707][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.188799][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.205870][ T7891] FAULT_INJECTION: forcing a failure. [ 201.205870][ T7891] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.205916][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.6.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.205953][ T7891] Tainted: [L]=SOFTLOCKUP [ 201.205962][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.205977][ T7891] Call Trace: [ 201.205985][ T7891] [ 201.205995][ T7891] dump_stack_lvl+0x16c/0x1f0 [ 201.206028][ T7891] should_fail_ex+0x512/0x640 [ 201.206068][ T7891] get_futex_key+0x1d0/0x15f0 [ 201.206100][ T7891] ? __pfx_get_futex_key+0x10/0x10 [ 201.206138][ T7891] futex_wait_setup+0x9d/0x570 [ 201.206184][ T7891] __futex_wait+0x193/0x2f0 [ 201.206218][ T7891] ? __pfx___futex_wait+0x10/0x10 [ 201.206257][ T7891] ? __pfx_futex_wake_mark+0x10/0x10 [ 201.206298][ T7891] ? find_held_lock+0x2b/0x80 [ 201.206335][ T7891] ? futex_private_hash_put+0x160/0x1b0 [ 201.206374][ T7891] futex_wait+0xe8/0x380 [ 201.206410][ T7891] ? __pfx_futex_wait+0x10/0x10 [ 201.206456][ T7891] ? ksys_write+0x190/0x250 [ 201.206496][ T7891] do_futex+0x229/0x350 [ 201.206524][ T7891] ? __pfx_do_futex+0x10/0x10 [ 201.206562][ T7891] __x64_sys_futex+0x1e0/0x4c0 [ 201.206594][ T7891] ? fput+0x70/0xf0 [ 201.206617][ T7891] ? __pfx___x64_sys_futex+0x10/0x10 [ 201.206647][ T7891] ? xfd_validate_state+0x61/0x180 [ 201.206667][ T7891] ? __pfx_ksys_write+0x10/0x10 [ 201.206710][ T7891] do_syscall_64+0xcd/0xf80 [ 201.206740][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.206766][ T7891] RIP: 0033:0x7f488618f7c9 [ 201.206787][ T7891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.206811][ T7891] RSP: 002b:00007f48870350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.206833][ T7891] RAX: ffffffffffffffda RBX: 00007f48863e6098 RCX: 00007f488618f7c9 [ 201.206845][ T7891] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f48863e6098 [ 201.206858][ T7891] RBP: 00007f48863e6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.206871][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.206885][ T7891] R13: 00007f48863e6128 R14: 00007ffe80d02620 R15: 00007ffe80d02708 [ 201.206924][ T7891] [ 201.210058][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.210249][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.222962][ T6683] Bluetooth: hci6: command tx timeout [ 201.304950][ T6683] Bluetooth: hci5: command 0x2016 tx timeout [ 202.248112][ T6683] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 202.977117][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.304829][ T6683] Bluetooth: hci6: command tx timeout [ 203.846623][ T7830] veth0_vlan: entered promiscuous mode [ 203.947873][ T7830] veth1_vlan: entered promiscuous mode [ 204.147329][ T7830] veth0_macvtap: entered promiscuous mode [ 204.254567][ T7830] veth1_macvtap: entered promiscuous mode [ 204.343253][ T6683] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.355881][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.450063][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.566414][ T6833] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.692871][ T6833] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.872486][ T6833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.976215][ T6833] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.103442][ T7945] FAULT_INJECTION: forcing a failure. [ 205.103442][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 205.179994][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.4.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.180040][ T7945] Tainted: [L]=SOFTLOCKUP [ 205.180051][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.180067][ T7945] Call Trace: [ 205.180078][ T7945] [ 205.180090][ T7945] dump_stack_lvl+0x16c/0x1f0 [ 205.180127][ T7945] should_fail_ex+0x512/0x640 [ 205.180165][ T7945] ? fs_reclaim_acquire+0xae/0x150 [ 205.180210][ T7945] should_failslab+0xc2/0x120 [ 205.180250][ T7945] kmem_cache_alloc_noprof+0x83/0x770 [ 205.180298][ T7945] ? jbd2__journal_start+0x193/0x6a0 [ 205.180345][ T7945] ? jbd2__journal_start+0x193/0x6a0 [ 205.180383][ T7945] jbd2__journal_start+0x193/0x6a0 [ 205.180427][ T7945] __ext4_journal_start_sb+0x195/0x640 [ 205.180457][ T7945] ? ext4_punch_hole+0x760/0x1060 [ 205.180493][ T7945] ext4_punch_hole+0x760/0x1060 [ 205.180534][ T7945] ext4_fallocate+0x2281/0x36c0 [ 205.180583][ T7945] ? __pfx_ext4_fallocate+0x10/0x10 [ 205.180617][ T7945] vfs_fallocate+0x5b4/0x10e0 [ 205.180660][ T7945] ? __pfx_vfs_fallocate+0x10/0x10 [ 205.180696][ T7945] ? madvise_vma_behavior+0x26d9/0x29e0 [ 205.180746][ T7945] madvise_vma_behavior+0x2679/0x29e0 [ 205.180793][ T7945] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 205.180834][ T7945] ? mas_prev+0x9b/0xf0 [ 205.180862][ T7945] ? __pfx_mas_prev+0x10/0x10 [ 205.180900][ T7945] ? find_vma_prev+0xd3/0x150 [ 205.180944][ T7945] ? find_held_lock+0x2b/0x80 [ 205.180980][ T7945] ? __pfx_find_vma_prev+0x10/0x10 [ 205.181029][ T7945] ? __futex_wait+0x24b/0x2f0 [ 205.181071][ T7945] madvise_walk_vmas+0x31f/0xac0 [ 205.181103][ T7945] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 205.181156][ T7945] madvise_do_behavior+0x1e2/0x530 [ 205.181180][ T7945] ? futex_private_hash_put+0x160/0x1b0 [ 205.181211][ T7945] ? __pfx_madvise_do_behavior+0x10/0x10 [ 205.181240][ T7945] ? down_read+0x13d/0x460 [ 205.181290][ T7945] do_madvise+0x176/0x240 [ 205.181314][ T7945] ? __pfx_do_madvise+0x10/0x10 [ 205.181337][ T7945] ? do_futex+0x122/0x350 [ 205.181394][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 205.181437][ T7945] __x64_sys_madvise+0xa9/0x110 [ 205.181461][ T7945] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.181489][ T7945] do_syscall_64+0xcd/0xf80 [ 205.181520][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.181549][ T7945] RIP: 0033:0x7f8ddd78f7c9 [ 205.181571][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.181597][ T7945] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 205.181624][ T7945] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 205.181644][ T7945] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 205.181661][ T7945] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.181677][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.181710][ T7945] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 205.181750][ T7945] [ 205.181766][ T7945] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 205.503489][ T6683] Bluetooth: hci6: command tx timeout [ 205.529566][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.544425][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.656886][ T7783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.676701][ T7783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.999021][ T7950] tipc: Started in network mode [ 206.004262][ T7950] tipc: Node identity ee00, cluster identity 4711 [ 206.010694][ T7950] tipc: Node number set to 60928 [ 206.425573][ T6683] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.467405][ T7950] Process accounting resumed [ 207.180303][ T7972] netlink: 112 bytes leftover after parsing attributes in process `syz.7.415'. [ 207.484938][ T7982] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 209.085960][ T8008] zero sized request [ 211.495404][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.6.437'. [ 211.862984][ T8055] blktrace: Concurrent blktraces are not allowed on loop5 [ 212.224689][ T6683] Bluetooth: hci5: unexpected event 0x31 length: 19 > 6 [ 213.334356][ T8081] zswap: compressor not available [ 214.697414][ T8105] netlink: 'syz.6.449': attribute type 1 has an invalid length. [ 215.770251][ T8122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 215.976587][ T8125] FAULT_INJECTION: forcing a failure. [ 215.976587][ T8125] name failslab, interval 1, probability 0, space 0, times 0 [ 216.000729][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.3.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.000756][ T8125] Tainted: [L]=SOFTLOCKUP [ 216.000762][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.000771][ T8125] Call Trace: [ 216.000777][ T8125] [ 216.000784][ T8125] dump_stack_lvl+0x16c/0x1f0 [ 216.000805][ T8125] should_fail_ex+0x512/0x640 [ 216.000826][ T8125] ? kmem_cache_alloc_noprof+0x62/0x770 [ 216.000847][ T8125] should_failslab+0xc2/0x120 [ 216.000876][ T8125] kmem_cache_alloc_noprof+0x83/0x770 [ 216.000894][ T8125] ? __kernfs_new_node+0xd2/0x990 [ 216.000916][ T8125] ? __kernfs_new_node+0xd2/0x990 [ 216.000932][ T8125] __kernfs_new_node+0xd2/0x990 [ 216.000951][ T8125] ? __pfx___kernfs_new_node+0x10/0x10 [ 216.000973][ T8125] ? find_held_lock+0x2b/0x80 [ 216.000993][ T8125] ? kernfs_root+0xee/0x2a0 [ 216.001013][ T8125] kernfs_new_node+0x13c/0x1e0 [ 216.001036][ T8125] __kernfs_create_file+0x53/0x350 [ 216.001061][ T8125] sysfs_add_file_mode_ns+0x207/0x3c0 [ 216.001081][ T8125] sysfs_merge_group+0x1aa/0x340 [ 216.001099][ T8125] ? __pfx_sysfs_merge_group+0x10/0x10 [ 216.001120][ T8125] ? __pfx_dev_add_physical_location+0x10/0x10 [ 216.001145][ T8125] ? bus_to_subsys+0x131/0x160 [ 216.001164][ T8125] dpm_sysfs_add+0x237/0x280 [ 216.001178][ T8125] device_add+0x9cc/0x1980 [ 216.001194][ T8125] ? __pfx_device_add+0x10/0x10 [ 216.001208][ T8125] ? lockdep_init_map_type+0x5c/0x270 [ 216.001223][ T8125] ? __init_waitqueue_head+0xca/0x150 [ 216.001246][ T8125] netdev_register_kobject+0x1a9/0x3d0 [ 216.001266][ T8125] register_netdevice+0x13ac/0x21d0 [ 216.001285][ T8125] ? __pfx_register_netdevice+0x10/0x10 [ 216.001305][ T8125] __ip_tunnel_create+0x540/0x6b0 [ 216.001325][ T8125] ? __pfx___ip_tunnel_create+0x10/0x10 [ 216.001347][ T8125] ip_tunnel_init_net+0x22f/0x7d0 [ 216.001367][ T8125] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 216.001390][ T8125] ? ops_init+0x77/0x5f0 [ 216.001405][ T8125] ? __pfx_erspan_init_net+0x10/0x10 [ 216.001428][ T8125] ops_init+0x1e2/0x5f0 [ 216.001443][ T8125] setup_net+0x11d/0x3a0 [ 216.001457][ T8125] ? __pfx_setup_net+0x10/0x10 [ 216.001469][ T8125] ? lockdep_init_map_type+0x5c/0x270 [ 216.001484][ T8125] ? mutex_init_lockep+0x110/0x150 [ 216.001501][ T8125] copy_net_ns+0x351/0x7c0 [ 216.001518][ T8125] create_new_namespaces+0x3ea/0xab0 [ 216.001543][ T8125] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 216.001564][ T8125] ksys_unshare+0x45b/0xa40 [ 216.001588][ T8125] ? __pfx_ksys_unshare+0x10/0x10 [ 216.001611][ T8125] ? xfd_validate_state+0x61/0x180 [ 216.001631][ T8125] __x64_sys_unshare+0x31/0x40 [ 216.001653][ T8125] do_syscall_64+0xcd/0xf80 [ 216.001678][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.001695][ T8125] RIP: 0033:0x7fba6e38f7c9 [ 216.001708][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.001724][ T8125] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 216.001739][ T8125] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 216.001749][ T8125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 216.001757][ T8125] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.001766][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.001775][ T8125] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 216.001796][ T8125] [ 216.961996][ T8123] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 217.737292][ T30] audit: type=1800 audit(1765230324.349:10): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 217.800679][ T30] audit: type=1800 audit(1765230324.379:11): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 217.895408][ T30] audit: type=1800 audit(1765230324.379:12): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 217.929647][ T30] audit: type=1800 audit(1765230324.379:13): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 217.988384][ T30] audit: type=1800 audit(1765230324.379:14): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 218.013027][ T8165] vhci_hcd vhci_hcd.0: invalid port number 16 [ 218.252423][ T30] audit: type=1800 audit(1765230324.379:15): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 218.284103][ T30] audit: type=1800 audit(1765230324.379:16): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 218.341743][ T30] audit: type=1800 audit(1765230324.399:17): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 218.373726][ T30] audit: type=1800 audit(1765230324.399:18): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 218.410071][ T30] audit: type=1800 audit(1765230324.399:19): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.457" name="dbroot" dev="configfs" ino=32388 res=0 errno=0 [ 221.695157][ T8220] FAULT_INJECTION: forcing a failure. [ 221.695157][ T8220] name failslab, interval 1, probability 0, space 0, times 0 [ 221.741584][ T8220] CPU: 0 UID: 0 PID: 8220 Comm: syz.4.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.741627][ T8220] Tainted: [L]=SOFTLOCKUP [ 221.741637][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.741651][ T8220] Call Trace: [ 221.741660][ T8220] [ 221.741670][ T8220] dump_stack_lvl+0x16c/0x1f0 [ 221.741704][ T8220] should_fail_ex+0x512/0x640 [ 221.741736][ T8220] ? fs_reclaim_acquire+0xae/0x150 [ 221.741777][ T8220] should_failslab+0xc2/0x120 [ 221.741814][ T8220] kmem_cache_alloc_noprof+0x83/0x770 [ 221.741841][ T8220] ? jbd2__journal_start+0x193/0x6a0 [ 221.741886][ T8220] ? jbd2__journal_start+0x193/0x6a0 [ 221.741923][ T8220] jbd2__journal_start+0x193/0x6a0 [ 221.741967][ T8220] __ext4_journal_start_sb+0x195/0x640 [ 221.741997][ T8220] ? ext4_punch_hole+0x760/0x1060 [ 221.742032][ T8220] ext4_punch_hole+0x760/0x1060 [ 221.742073][ T8220] ext4_fallocate+0x2281/0x36c0 [ 221.742154][ T8220] ? __pfx_ext4_fallocate+0x10/0x10 [ 221.742190][ T8220] vfs_fallocate+0x5b4/0x10e0 [ 221.742231][ T8220] ? __pfx_vfs_fallocate+0x10/0x10 [ 221.742269][ T8220] ? madvise_vma_behavior+0x26d9/0x29e0 [ 221.742317][ T8220] madvise_vma_behavior+0x2679/0x29e0 [ 221.742363][ T8220] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 221.742403][ T8220] ? mas_prev+0x9b/0xf0 [ 221.742431][ T8220] ? __pfx_mas_prev+0x10/0x10 [ 221.742469][ T8220] ? find_vma_prev+0xd3/0x150 [ 221.742503][ T8220] ? find_held_lock+0x2b/0x80 [ 221.742536][ T8220] ? __pfx_find_vma_prev+0x10/0x10 [ 221.742585][ T8220] ? __futex_wait+0x24b/0x2f0 [ 221.742625][ T8220] madvise_walk_vmas+0x31f/0xac0 [ 221.742658][ T8220] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 221.742710][ T8220] madvise_do_behavior+0x1e2/0x530 [ 221.742734][ T8220] ? futex_private_hash_put+0x160/0x1b0 [ 221.742764][ T8220] ? __pfx_madvise_do_behavior+0x10/0x10 [ 221.742791][ T8220] ? down_read+0x13d/0x460 [ 221.742839][ T8220] do_madvise+0x176/0x240 [ 221.742863][ T8220] ? __pfx_do_madvise+0x10/0x10 [ 221.742885][ T8220] ? do_futex+0x122/0x350 [ 221.742940][ T8220] ? xfd_validate_state+0x61/0x180 [ 221.742963][ T8220] ? __pfx_ksys_write+0x10/0x10 [ 221.743001][ T8220] __x64_sys_madvise+0xa9/0x110 [ 221.743022][ T8220] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.743047][ T8220] do_syscall_64+0xcd/0xf80 [ 221.743077][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.743104][ T8220] RIP: 0033:0x7f8ddd78f7c9 [ 221.743134][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.743161][ T8220] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 221.743188][ T8220] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 221.743206][ T8220] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 221.743223][ T8220] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.743240][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.743257][ T8220] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 221.743296][ T8220] [ 221.801804][ T8220] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 223.457536][ T8253] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 223.765640][ T8255] FAULT_INJECTION: forcing a failure. [ 223.765640][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 223.806048][ T8255] CPU: 0 UID: 0 PID: 8255 Comm: syz.6.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.806095][ T8255] Tainted: [L]=SOFTLOCKUP [ 223.806113][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.806130][ T8255] Call Trace: [ 223.806140][ T8255] [ 223.806151][ T8255] dump_stack_lvl+0x16c/0x1f0 [ 223.806185][ T8255] should_fail_ex+0x512/0x640 [ 223.806221][ T8255] ? fs_reclaim_acquire+0xae/0x150 [ 223.806262][ T8255] should_failslab+0xc2/0x120 [ 223.806302][ T8255] kmem_cache_alloc_noprof+0x83/0x770 [ 223.806334][ T8255] ? jbd2__journal_start+0x193/0x6a0 [ 223.806379][ T8255] ? jbd2__journal_start+0x193/0x6a0 [ 223.806412][ T8255] jbd2__journal_start+0x193/0x6a0 [ 223.806457][ T8255] __ext4_journal_start_sb+0x195/0x640 [ 223.806486][ T8255] ? ext4_punch_hole+0x760/0x1060 [ 223.806520][ T8255] ext4_punch_hole+0x760/0x1060 [ 223.806561][ T8255] ext4_fallocate+0x2281/0x36c0 [ 223.806609][ T8255] ? __pfx_ext4_fallocate+0x10/0x10 [ 223.806643][ T8255] vfs_fallocate+0x5b4/0x10e0 [ 223.806683][ T8255] ? __pfx_vfs_fallocate+0x10/0x10 [ 223.806721][ T8255] ? madvise_vma_behavior+0x26d9/0x29e0 [ 223.806769][ T8255] madvise_vma_behavior+0x2679/0x29e0 [ 223.806815][ T8255] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 223.806855][ T8255] ? mas_prev+0x9b/0xf0 [ 223.806883][ T8255] ? __pfx_mas_prev+0x10/0x10 [ 223.806921][ T8255] ? find_vma_prev+0xd3/0x150 [ 223.806955][ T8255] ? find_held_lock+0x2b/0x80 [ 223.806986][ T8255] ? __pfx_find_vma_prev+0x10/0x10 [ 223.807035][ T8255] ? __futex_wait+0x24b/0x2f0 [ 223.807075][ T8255] madvise_walk_vmas+0x31f/0xac0 [ 223.807115][ T8255] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 223.807166][ T8255] madvise_do_behavior+0x1e2/0x530 [ 223.807189][ T8255] ? futex_private_hash_put+0x160/0x1b0 [ 223.807216][ T8255] ? __pfx_madvise_do_behavior+0x10/0x10 [ 223.807243][ T8255] ? down_read+0x13d/0x460 [ 223.807291][ T8255] do_madvise+0x176/0x240 [ 223.807313][ T8255] ? __pfx_do_madvise+0x10/0x10 [ 223.807336][ T8255] ? do_futex+0x122/0x350 [ 223.807389][ T8255] ? __pfx_ksys_write+0x10/0x10 [ 223.807429][ T8255] __x64_sys_madvise+0xa9/0x110 [ 223.807452][ T8255] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.807478][ T8255] do_syscall_64+0xcd/0xf80 [ 223.807507][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.807533][ T8255] RIP: 0033:0x7f488618f7c9 [ 223.807555][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.807581][ T8255] RSP: 002b:00007f4887056038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 223.807606][ T8255] RAX: ffffffffffffffda RBX: 00007f48863e5fa0 RCX: 00007f488618f7c9 [ 223.807625][ T8255] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 223.807641][ T8255] RBP: 00007f4886213f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.807658][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.807674][ T8255] R13: 00007f48863e6038 R14: 00007f48863e5fa0 R15: 00007ffe80d02708 [ 223.807712][ T8255] [ 223.807726][ T8255] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 224.214020][ T8260] FAULT_INJECTION: forcing a failure. [ 224.214020][ T8260] name failslab, interval 1, probability 0, space 0, times 0 [ 224.247820][ T8260] CPU: 1 UID: 0 PID: 8260 Comm: syz.4.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.247864][ T8260] Tainted: [L]=SOFTLOCKUP [ 224.247875][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.247888][ T8260] Call Trace: [ 224.247897][ T8260] [ 224.247908][ T8260] dump_stack_lvl+0x16c/0x1f0 [ 224.247942][ T8260] should_fail_ex+0x512/0x640 [ 224.247978][ T8260] ? fs_reclaim_acquire+0xae/0x150 [ 224.248021][ T8260] should_failslab+0xc2/0x120 [ 224.248069][ T8260] kmem_cache_alloc_noprof+0x83/0x770 [ 224.248103][ T8260] ? jbd2__journal_start+0x193/0x6a0 [ 224.248151][ T8260] ? jbd2__journal_start+0x193/0x6a0 [ 224.248188][ T8260] jbd2__journal_start+0x193/0x6a0 [ 224.248231][ T8260] __ext4_journal_start_sb+0x195/0x640 [ 224.248261][ T8260] ? ext4_punch_hole+0x760/0x1060 [ 224.248296][ T8260] ext4_punch_hole+0x760/0x1060 [ 224.248337][ T8260] ext4_fallocate+0x2281/0x36c0 [ 224.248384][ T8260] ? __pfx_ext4_fallocate+0x10/0x10 [ 224.248418][ T8260] vfs_fallocate+0x5b4/0x10e0 [ 224.248459][ T8260] ? __pfx_vfs_fallocate+0x10/0x10 [ 224.248496][ T8260] ? madvise_vma_behavior+0x26d9/0x29e0 [ 224.248545][ T8260] madvise_vma_behavior+0x2679/0x29e0 [ 224.248591][ T8260] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 224.248632][ T8260] ? mas_prev+0x9b/0xf0 [ 224.248660][ T8260] ? __pfx_mas_prev+0x10/0x10 [ 224.248698][ T8260] ? find_vma_prev+0xd3/0x150 [ 224.248732][ T8260] ? find_held_lock+0x2b/0x80 [ 224.248765][ T8260] ? __pfx_find_vma_prev+0x10/0x10 [ 224.248811][ T8260] ? __futex_wait+0x24b/0x2f0 [ 224.248852][ T8260] madvise_walk_vmas+0x31f/0xac0 [ 224.248890][ T8260] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 224.248942][ T8260] madvise_do_behavior+0x1e2/0x530 [ 224.248962][ T8260] ? futex_private_hash_put+0x160/0x1b0 [ 224.248990][ T8260] ? __pfx_madvise_do_behavior+0x10/0x10 [ 224.249018][ T8260] ? down_read+0x13d/0x460 [ 224.249073][ T8260] do_madvise+0x176/0x240 [ 224.249097][ T8260] ? __pfx_do_madvise+0x10/0x10 [ 224.249191][ T8260] ? do_futex+0x122/0x350 [ 224.249246][ T8260] ? xfd_validate_state+0x61/0x180 [ 224.249271][ T8260] ? __pfx_ksys_write+0x10/0x10 [ 224.249316][ T8260] __x64_sys_madvise+0xa9/0x110 [ 224.249340][ T8260] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.249369][ T8260] do_syscall_64+0xcd/0xf80 [ 224.249399][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.249428][ T8260] RIP: 0033:0x7f8ddd78f7c9 [ 224.249451][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.249478][ T8260] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 224.249504][ T8260] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 224.249523][ T8260] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 224.249540][ T8260] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.249558][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.249574][ T8260] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 224.249614][ T8260] [ 224.249630][ T8260] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 225.053472][ T8272] input: f¬ as /devices/virtual/input/input9 [ 225.272974][ T8272] zram: Removed device: zram0 [ 226.392718][ T8289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.454728][ T8289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.494201][ T8289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.500291][ T8289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.576136][ T8289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.613757][ T8289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.721851][ T8289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.796157][ T8289] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 226.825343][ T8289] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 226.965000][ T8289] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 227.020621][ T8289] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 227.040905][ T8289] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.082679][ T8289] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.197053][ T6649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 227.213288][ T6649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 227.225670][ T6649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 227.266755][ T6649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 227.274526][ T6649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 227.685077][ T8296] kexec: Could not allocate control_code_buffer [ 228.114920][ T6649] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.527112][ T7097] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.537022][ T6683] Bluetooth: hci4: command 0x0c1a tx timeout [ 228.544105][ T6649] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.596821][ T6649] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.633141][ T8315] chnl_net:caif_netlink_parms(): no params data found [ 228.845154][ T6649] Bluetooth: hci5: command 0x2016 tx timeout [ 229.075359][ T6649] Bluetooth: hci6: command 0x0c1a tx timeout [ 229.235595][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.253116][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.262504][ T8315] bridge_slave_0: entered allmulticast mode [ 229.277172][ T8315] bridge_slave_0: entered promiscuous mode [ 229.315735][ T6649] Bluetooth: hci7: command tx timeout [ 229.332302][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.365452][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.372825][ T8315] bridge_slave_1: entered allmulticast mode [ 229.427840][ T8370] FAULT_INJECTION: forcing a failure. [ 229.427840][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 229.442469][ T8315] bridge_slave_1: entered promiscuous mode [ 229.463332][ T8370] CPU: 1 UID: 0 PID: 8370 Comm: syz.3.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.463382][ T8370] Tainted: [L]=SOFTLOCKUP [ 229.463390][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.463405][ T8370] Call Trace: [ 229.463414][ T8370] [ 229.463425][ T8370] dump_stack_lvl+0x16c/0x1f0 [ 229.463460][ T8370] should_fail_ex+0x512/0x640 [ 229.463496][ T8370] ? fs_reclaim_acquire+0xae/0x150 [ 229.463540][ T8370] should_failslab+0xc2/0x120 [ 229.463578][ T8370] kmem_cache_alloc_noprof+0x83/0x770 [ 229.463609][ T8370] ? jbd2__journal_start+0x193/0x6a0 [ 229.463655][ T8370] ? jbd2__journal_start+0x193/0x6a0 [ 229.463690][ T8370] jbd2__journal_start+0x193/0x6a0 [ 229.463734][ T8370] __ext4_journal_start_sb+0x195/0x640 [ 229.463764][ T8370] ? ext4_punch_hole+0x760/0x1060 [ 229.463798][ T8370] ext4_punch_hole+0x760/0x1060 [ 229.463839][ T8370] ext4_fallocate+0x2281/0x36c0 [ 229.463887][ T8370] ? __pfx_ext4_fallocate+0x10/0x10 [ 229.463920][ T8370] vfs_fallocate+0x5b4/0x10e0 [ 229.463960][ T8370] ? __pfx_vfs_fallocate+0x10/0x10 [ 229.463997][ T8370] ? madvise_vma_behavior+0x26d9/0x29e0 [ 229.464045][ T8370] madvise_vma_behavior+0x2679/0x29e0 [ 229.464087][ T8370] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 229.464126][ T8370] ? mas_prev+0x9b/0xf0 [ 229.464153][ T8370] ? __pfx_mas_prev+0x10/0x10 [ 229.464191][ T8370] ? find_vma_prev+0xd3/0x150 [ 229.464225][ T8370] ? find_held_lock+0x2b/0x80 [ 229.464255][ T8370] ? __pfx_find_vma_prev+0x10/0x10 [ 229.464302][ T8370] ? __futex_wait+0x24b/0x2f0 [ 229.464346][ T8370] madvise_walk_vmas+0x31f/0xac0 [ 229.464375][ T8370] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 229.464425][ T8370] madvise_do_behavior+0x1e2/0x530 [ 229.464446][ T8370] ? futex_private_hash_put+0x160/0x1b0 [ 229.464473][ T8370] ? __pfx_madvise_do_behavior+0x10/0x10 [ 229.464494][ T8370] ? down_read+0x13d/0x460 [ 229.464522][ T8370] do_madvise+0x176/0x240 [ 229.464535][ T8370] ? __pfx_do_madvise+0x10/0x10 [ 229.464548][ T8370] ? do_futex+0x122/0x350 [ 229.464577][ T8370] ? xfd_validate_state+0x61/0x180 [ 229.464592][ T8370] ? __pfx_ksys_write+0x10/0x10 [ 229.464618][ T8370] __x64_sys_madvise+0xa9/0x110 [ 229.464631][ T8370] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.464646][ T8370] do_syscall_64+0xcd/0xf80 [ 229.464663][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.464679][ T8370] RIP: 0033:0x7fba6e38f7c9 [ 229.464692][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.464707][ T8370] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 229.464722][ T8370] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 229.464733][ T8370] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 229.464742][ T8370] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.464752][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.464761][ T8370] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 229.464782][ T8370] [ 229.464793][ T8370] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 229.899540][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.967837][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.217388][ T8315] team0: Port device team_slave_0 added [ 230.293082][ T8315] team0: Port device team_slave_1 added [ 230.390366][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.402377][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.442164][ T8315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.475238][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.494748][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.525904][ T8315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.687074][ T6649] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.710914][ T8315] hsr_slave_0: entered promiscuous mode [ 230.747901][ T8315] hsr_slave_1: entered promiscuous mode [ 230.754688][ T8315] debugfs: 'hsr0' already exists in 'hsr' [ 230.764757][ T8315] Cannot create hsr debugfs directory [ 230.926867][ T6683] Bluetooth: hci5: command 0x2016 tx timeout [ 231.110327][ T8378] FAULT_INJECTION: forcing a failure. [ 231.110327][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 231.136617][ T8388] can: request_module (can-proto-0) failed. [ 231.157402][ T6683] Bluetooth: hci6: command 0x0c1a tx timeout [ 231.176945][ T8378] CPU: 0 UID: 0 PID: 8378 Comm: syz.3.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.176988][ T8378] Tainted: [L]=SOFTLOCKUP [ 231.176998][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.177014][ T8378] Call Trace: [ 231.177024][ T8378] [ 231.177035][ T8378] dump_stack_lvl+0x16c/0x1f0 [ 231.177069][ T8378] should_fail_ex+0x512/0x640 [ 231.177104][ T8378] ? __kmalloc_noprof+0xca/0x910 [ 231.177136][ T8378] should_failslab+0xc2/0x120 [ 231.177176][ T8378] __kmalloc_noprof+0xeb/0x910 [ 231.177203][ T8378] ? proc_create_reg+0xe3/0x180 [ 231.177234][ T8378] ? xfrm_hash_alloc+0xd1/0x100 [ 231.177265][ T8378] ? __pfx_xfrm_net_init+0x10/0x10 [ 231.177299][ T8378] ? xfrm_hash_alloc+0xd1/0x100 [ 231.177340][ T8378] xfrm_hash_alloc+0xd1/0x100 [ 231.177380][ T8378] xfrm_state_init+0x9c/0x640 [ 231.177421][ T8378] ? __pfx_xfrm_net_init+0x10/0x10 [ 231.177455][ T8378] xfrm_net_init+0x210/0xcc0 [ 231.177498][ T8378] ? __pfx_xfrm_net_init+0x10/0x10 [ 231.177534][ T8378] ops_init+0x1e2/0x5f0 [ 231.177563][ T8378] setup_net+0x11d/0x3a0 [ 231.177588][ T8378] ? __pfx_setup_net+0x10/0x10 [ 231.177611][ T8378] ? lockdep_init_map_type+0x5c/0x270 [ 231.177639][ T8378] ? mutex_init_lockep+0x110/0x150 [ 231.177669][ T8378] copy_net_ns+0x351/0x7c0 [ 231.177701][ T8378] create_new_namespaces+0x3ea/0xab0 [ 231.177744][ T8378] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 231.177781][ T8378] ksys_unshare+0x45b/0xa40 [ 231.177819][ T8378] ? __pfx_ksys_unshare+0x10/0x10 [ 231.177858][ T8378] ? xfd_validate_state+0x61/0x180 [ 231.177894][ T8378] __x64_sys_unshare+0x31/0x40 [ 231.177932][ T8378] do_syscall_64+0xcd/0xf80 [ 231.177962][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.177989][ T8378] RIP: 0033:0x7fba6e38f7c9 [ 231.178011][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.178037][ T8378] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 231.178060][ T8378] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 231.178076][ T8378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 231.178091][ T8378] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.178106][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.178122][ T8378] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 231.178160][ T8378] [ 231.446226][ T6683] Bluetooth: hci7: command tx timeout [ 232.430156][ T8315] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 232.606948][ T8315] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 232.687508][ T8315] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 232.758139][ T6683] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.841033][ T8315] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 232.997176][ T6683] Bluetooth: hci5: command 0x2016 tx timeout [ 233.237847][ T6683] Bluetooth: hci6: command 0x0c1a tx timeout [ 233.423073][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.488206][ T6649] Bluetooth: hci7: command tx timeout [ 233.748799][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.823524][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.830685][ T6761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.869162][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.876335][ T6761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.558714][ T6683] Bluetooth: hci7: command tx timeout [ 235.701247][ T8436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.045903][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.224656][ T8315] veth0_vlan: entered promiscuous mode [ 237.268624][ T8461] FAULT_INJECTION: forcing a failure. [ 237.268624][ T8461] name failslab, interval 1, probability 0, space 0, times 0 [ 237.311712][ T8461] CPU: 1 UID: 0 PID: 8461 Comm: syz.3.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.311760][ T8461] Tainted: [L]=SOFTLOCKUP [ 237.311770][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.311787][ T8461] Call Trace: [ 237.311797][ T8461] [ 237.311808][ T8461] dump_stack_lvl+0x16c/0x1f0 [ 237.311844][ T8461] should_fail_ex+0x512/0x640 [ 237.311880][ T8461] ? __kmalloc_noprof+0xca/0x910 [ 237.311913][ T8461] should_failslab+0xc2/0x120 [ 237.311951][ T8461] __kmalloc_noprof+0xeb/0x910 [ 237.311981][ T8461] ? realloc_user_queue+0x288/0x320 [ 237.312021][ T8461] ? realloc_user_queue+0x288/0x320 [ 237.312052][ T8461] realloc_user_queue+0x288/0x320 [ 237.312088][ T8461] ? __pfx_snd_timer_user_open+0x10/0x10 [ 237.312123][ T8461] snd_timer_user_open+0xfc/0x180 [ 237.312157][ T8461] snd_open+0x22d/0x4c0 [ 237.312186][ T8461] ? __pfx_snd_open+0x10/0x10 [ 237.312214][ T8461] chrdev_open+0x234/0x6a0 [ 237.312251][ T8461] ? __pfx_apparmor_file_open+0x10/0x10 [ 237.312285][ T8461] ? __pfx_chrdev_open+0x10/0x10 [ 237.312324][ T8461] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 237.312371][ T8461] do_dentry_open+0x748/0x1590 [ 237.312406][ T8461] ? __pfx_chrdev_open+0x10/0x10 [ 237.312453][ T8461] vfs_open+0x82/0x3f0 [ 237.312484][ T8461] path_openat+0x2078/0x3140 [ 237.312543][ T8461] ? __pfx_path_openat+0x10/0x10 [ 237.312594][ T8461] do_filp_open+0x20b/0x470 [ 237.312635][ T8461] ? __pfx_do_filp_open+0x10/0x10 [ 237.312698][ T8461] ? alloc_fd+0x471/0x7d0 [ 237.312744][ T8461] do_sys_openat2+0x11f/0x280 [ 237.312773][ T8461] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.312815][ T8461] __x64_sys_openat+0x174/0x210 [ 237.312845][ T8461] ? __pfx___x64_sys_openat+0x10/0x10 [ 237.312888][ T8461] do_syscall_64+0xcd/0xf80 [ 237.312920][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.312948][ T8461] RIP: 0033:0x7fba6e38f7c9 [ 237.312971][ T8461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.312997][ T8461] RSP: 002b:00007fba6f1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.313024][ T8461] RAX: ffffffffffffffda RBX: 00007fba6e5e5fa0 RCX: 00007fba6e38f7c9 [ 237.313043][ T8461] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 237.313060][ T8461] RBP: 00007fba6e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.313078][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.313094][ T8461] R13: 00007fba6e5e6038 R14: 00007fba6e5e5fa0 R15: 00007fffc1e53698 [ 237.313132][ T8461] [ 237.655135][ T8315] veth1_vlan: entered promiscuous mode [ 237.933361][ T8315] veth0_macvtap: entered promiscuous mode [ 237.979181][ T8315] veth1_macvtap: entered promiscuous mode [ 238.107806][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.196768][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.272396][ T6669] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.357728][ T8442] Process accounting paused [ 238.375864][ T8471] FAULT_INJECTION: forcing a failure. [ 238.375864][ T8471] name failslab, interval 1, probability 0, space 0, times 0 [ 238.414191][ T6669] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.434333][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: syz.4.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.434379][ T8471] Tainted: [L]=SOFTLOCKUP [ 238.434389][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.434404][ T8471] Call Trace: [ 238.434414][ T8471] [ 238.434426][ T8471] dump_stack_lvl+0x16c/0x1f0 [ 238.434462][ T8471] should_fail_ex+0x512/0x640 [ 238.434499][ T8471] ? fs_reclaim_acquire+0xae/0x150 [ 238.434545][ T8471] should_failslab+0xc2/0x120 [ 238.434584][ T8471] kmem_cache_alloc_noprof+0x83/0x770 [ 238.434617][ T8471] ? jbd2__journal_start+0x193/0x6a0 [ 238.434673][ T8471] ? jbd2__journal_start+0x193/0x6a0 [ 238.434712][ T8471] jbd2__journal_start+0x193/0x6a0 [ 238.434758][ T8471] __ext4_journal_start_sb+0x195/0x640 [ 238.434789][ T8471] ? ext4_punch_hole+0x760/0x1060 [ 238.434824][ T8471] ext4_punch_hole+0x760/0x1060 [ 238.434866][ T8471] ext4_fallocate+0x2281/0x36c0 [ 238.434914][ T8471] ? __pfx_ext4_fallocate+0x10/0x10 [ 238.434950][ T8471] vfs_fallocate+0x5b4/0x10e0 [ 238.434991][ T8471] ? __pfx_vfs_fallocate+0x10/0x10 [ 238.435028][ T8471] ? madvise_vma_behavior+0x26d9/0x29e0 [ 238.435078][ T8471] madvise_vma_behavior+0x2679/0x29e0 [ 238.435124][ T8471] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 238.435171][ T8471] ? mas_prev+0x9b/0xf0 [ 238.435199][ T8471] ? __pfx_mas_prev+0x10/0x10 [ 238.435237][ T8471] ? find_vma_prev+0xd3/0x150 [ 238.435272][ T8471] ? find_held_lock+0x2b/0x80 [ 238.435304][ T8471] ? __pfx_find_vma_prev+0x10/0x10 [ 238.435354][ T8471] ? __futex_wait+0x24b/0x2f0 [ 238.435392][ T8471] madvise_walk_vmas+0x31f/0xac0 [ 238.435425][ T8471] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 238.435475][ T8471] madvise_do_behavior+0x1e2/0x530 [ 238.435500][ T8471] ? futex_private_hash_put+0x160/0x1b0 [ 238.435531][ T8471] ? __pfx_madvise_do_behavior+0x10/0x10 [ 238.435559][ T8471] ? down_read+0x13d/0x460 [ 238.435608][ T8471] do_madvise+0x176/0x240 [ 238.435633][ T8471] ? __pfx_do_madvise+0x10/0x10 [ 238.435663][ T8471] ? do_futex+0x122/0x350 [ 238.435720][ T8471] ? xfd_validate_state+0x61/0x180 [ 238.435745][ T8471] ? __pfx_ksys_write+0x10/0x10 [ 238.435790][ T8471] __x64_sys_madvise+0xa9/0x110 [ 238.435817][ T8471] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.435845][ T8471] do_syscall_64+0xcd/0xf80 [ 238.435874][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.435901][ T8471] RIP: 0033:0x7f8ddd78f7c9 [ 238.435929][ T8471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.435956][ T8471] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 238.435984][ T8471] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 238.436003][ T8471] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 238.436021][ T8471] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.436038][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.436054][ T8471] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 238.436093][ T8471] [ 238.436149][ T8471] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 238.782634][ T6669] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.850214][ T6669] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.159258][ T7303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.180656][ T7303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.198711][ T8481] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 239.198711][ T8481] The task syz.6.528 (8481) triggered the difference, watch for misbehavior. [ 239.350380][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.390653][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.772614][ T8522] binder: 8521:8522 ioctl c0306201 0 returned -14 [ 242.133489][ T8522] FAULT_INJECTION: forcing a failure. [ 242.133489][ T8522] name failslab, interval 1, probability 0, space 0, times 0 [ 242.193131][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.4.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.193174][ T8522] Tainted: [L]=SOFTLOCKUP [ 242.193184][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.193215][ T8522] Call Trace: [ 242.193224][ T8522] [ 242.193235][ T8522] dump_stack_lvl+0x16c/0x1f0 [ 242.193268][ T8522] should_fail_ex+0x512/0x640 [ 242.193303][ T8522] ? __kmalloc_cache_noprof+0x5f/0x800 [ 242.193336][ T8522] should_failslab+0xc2/0x120 [ 242.193384][ T8522] __kmalloc_cache_noprof+0x80/0x800 [ 242.193414][ T8522] ? find_held_lock+0x2b/0x80 [ 242.193444][ T8522] ? rpc_mkpipe_data+0x49/0x460 [ 242.193483][ T8522] ? rpc_mkpipe_data+0x49/0x460 [ 242.193514][ T8522] ? __pfx_sunrpc_init_net+0x10/0x10 [ 242.193551][ T8522] rpc_mkpipe_data+0x49/0x460 [ 242.193593][ T8522] ? __pfx_sunrpc_init_net+0x10/0x10 [ 242.193634][ T8522] rpc_pipefs_init_net+0x5b/0x140 [ 242.193684][ T8522] sunrpc_init_net+0xb7/0x190 [ 242.193740][ T8522] ops_init+0x1e2/0x5f0 [ 242.193769][ T8522] setup_net+0x11d/0x3a0 [ 242.193800][ T8522] ? __pfx_setup_net+0x10/0x10 [ 242.193833][ T8522] ? lockdep_init_map_type+0x5c/0x270 [ 242.193865][ T8522] ? mutex_init_lockep+0x110/0x150 [ 242.193898][ T8522] copy_net_ns+0x351/0x7c0 [ 242.193929][ T8522] create_new_namespaces+0x3ea/0xab0 [ 242.193978][ T8522] copy_namespaces+0x468/0x570 [ 242.194029][ T8522] copy_process+0x2a70/0x7430 [ 242.194096][ T8522] ? __pfx_copy_process+0x10/0x10 [ 242.194150][ T8522] ? futex_private_hash_put+0x160/0x1b0 [ 242.194210][ T8522] kernel_clone+0xfc/0x910 [ 242.194258][ T8522] ? __pfx_seq_read+0x10/0x10 [ 242.194312][ T8522] ? __pfx_kernel_clone+0x10/0x10 [ 242.194380][ T8522] __do_sys_clone+0xce/0x120 [ 242.194424][ T8522] ? __pfx___do_sys_clone+0x10/0x10 [ 242.194481][ T8522] ? xfd_validate_state+0x61/0x180 [ 242.194503][ T8522] ? __pfx___x64_sys_pread64+0x10/0x10 [ 242.194551][ T8522] do_syscall_64+0xcd/0xf80 [ 242.194582][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.194609][ T8522] RIP: 0033:0x7f8ddd78f7c9 [ 242.194631][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.194656][ T8522] RSP: 002b:00007f8dde6f7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 242.194690][ T8522] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 242.194708][ T8522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 242.194738][ T8522] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.194752][ T8522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.194767][ T8522] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 242.194805][ T8522] [ 242.608024][ T8534] FAULT_INJECTION: forcing a failure. [ 242.608024][ T8534] name fail_futex, interval 1, probability 0, space 0, times 0 [ 242.621719][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.3.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.621764][ T8534] Tainted: [L]=SOFTLOCKUP [ 242.621775][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.621792][ T8534] Call Trace: [ 242.621801][ T8534] [ 242.621811][ T8534] dump_stack_lvl+0x16c/0x1f0 [ 242.621848][ T8534] should_fail_ex+0x512/0x640 [ 242.621887][ T8534] get_futex_key+0x1d0/0x15f0 [ 242.621923][ T8534] ? __pfx_get_futex_key+0x10/0x10 [ 242.621964][ T8534] futex_wake+0xea/0x530 [ 242.621999][ T8534] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 242.622033][ T8534] ? __pfx_futex_wake+0x10/0x10 [ 242.622072][ T8534] ? __put_cred+0x110/0x170 [ 242.622101][ T8534] ? commit_creds+0x755/0x10e0 [ 242.622135][ T8534] do_futex+0x1e3/0x350 [ 242.622165][ T8534] ? __pfx_do_futex+0x10/0x10 [ 242.622197][ T8534] ? cap_task_prctl+0x2af/0xa80 [ 242.622240][ T8534] __x64_sys_futex+0x1e0/0x4c0 [ 242.622276][ T8534] ? __pfx___x64_sys_futex+0x10/0x10 [ 242.622309][ T8534] ? __pfx___do_sys_prctl+0x10/0x10 [ 242.622352][ T8534] do_syscall_64+0xcd/0xf80 [ 242.622384][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.622412][ T8534] RIP: 0033:0x7fba6e38f7c9 [ 242.622435][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.622460][ T8534] RSP: 002b:00007fba6f1cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 242.622487][ T8534] RAX: ffffffffffffffda RBX: 00007fba6e5e6098 RCX: 00007fba6e38f7c9 [ 242.622506][ T8534] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fba6e5e609c [ 242.622523][ T8534] RBP: 00007fba6e5e6090 R08: 00007fba6f1f1000 R09: 0000000000000000 [ 242.622541][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.622558][ T8534] R13: 00007fba6e5e6128 R14: 00007fffc1e535b0 R15: 00007fffc1e53698 [ 242.622596][ T8534] [ 243.332005][ T8538] FAULT_INJECTION: forcing a failure. [ 243.332005][ T8538] name fail_futex, interval 1, probability 0, space 0, times 0 [ 243.379666][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.6.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.379708][ T8538] Tainted: [L]=SOFTLOCKUP [ 243.379716][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.379730][ T8538] Call Trace: [ 243.379738][ T8538] [ 243.379746][ T8538] dump_stack_lvl+0x16c/0x1f0 [ 243.379775][ T8538] should_fail_ex+0x512/0x640 [ 243.379810][ T8538] get_futex_key+0x1d0/0x15f0 [ 243.379838][ T8538] ? __pfx_get_futex_key+0x10/0x10 [ 243.379863][ T8538] ? __lock_acquire+0x436/0x2890 [ 243.379887][ T8538] futex_wake+0xea/0x530 [ 243.379922][ T8538] ? futex_wait+0x120/0x380 [ 243.379954][ T8538] ? __pfx_futex_wake+0x10/0x10 [ 243.379988][ T8538] ? __fget_files+0x204/0x3c0 [ 243.380026][ T8538] do_futex+0x1e3/0x350 [ 243.380051][ T8538] ? __pfx_do_futex+0x10/0x10 [ 243.380075][ T8538] ? fdget+0x187/0x210 [ 243.380102][ T8538] ? __sys_sendmsg+0x18c/0x220 [ 243.380136][ T8538] __x64_sys_futex+0x1e0/0x4c0 [ 243.380164][ T8538] ? __pfx___x64_sys_futex+0x10/0x10 [ 243.380199][ T8538] do_syscall_64+0xcd/0xf80 [ 243.380222][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.380243][ T8538] RIP: 0033:0x7f488618f7c9 [ 243.380260][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.380280][ T8538] RSP: 002b:00007f48870560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.380299][ T8538] RAX: ffffffffffffffda RBX: 00007f48863e5fa8 RCX: 00007f488618f7c9 [ 243.380313][ T8538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f48863e5fac [ 243.380326][ T8538] RBP: 00007f48863e5fa0 R08: 00007f4887057000 R09: 0000000000000000 [ 243.380339][ T8538] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 243.380352][ T8538] R13: 00007f48863e6038 R14: 00007ffe80d02620 R15: 00007ffe80d02708 [ 243.380380][ T8538] [ 243.985774][ T8544] ALSA: mixer_oss: invalid OSS volume '' [ 245.812607][ T8570] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3869966346.0.0), cmd(4) [ 248.556909][ T8611] usb usb34: usbfs: process 8611 (syz.6.558) did not claim interface 16 before use [ 249.436610][ T8626] FAULT_INJECTION: forcing a failure. [ 249.436610][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 249.475413][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.4.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.475441][ T8626] Tainted: [L]=SOFTLOCKUP [ 249.475447][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.475456][ T8626] Call Trace: [ 249.475463][ T8626] [ 249.475470][ T8626] dump_stack_lvl+0x16c/0x1f0 [ 249.475491][ T8626] should_fail_ex+0x512/0x640 [ 249.475513][ T8626] ? kmem_cache_alloc_noprof+0x62/0x770 [ 249.475534][ T8626] should_failslab+0xc2/0x120 [ 249.475564][ T8626] kmem_cache_alloc_noprof+0x83/0x770 [ 249.475582][ T8626] ? getname_flags.part.0+0x4c/0x550 [ 249.475607][ T8626] ? getname_flags.part.0+0x4c/0x550 [ 249.475621][ T8626] getname_flags.part.0+0x4c/0x550 [ 249.475640][ T8626] getname_flags+0x93/0xf0 [ 249.475660][ T8626] do_sys_openat2+0xb8/0x280 [ 249.475676][ T8626] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.475692][ T8626] ? find_held_lock+0x2b/0x80 [ 249.475717][ T8626] __x64_sys_openat+0x174/0x210 [ 249.475733][ T8626] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.475752][ T8626] ? fput+0x70/0xf0 [ 249.475768][ T8626] do_syscall_64+0xcd/0xf80 [ 249.475785][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.475801][ T8626] RIP: 0033:0x7f8ddd78e010 [ 249.475815][ T8626] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 249.475830][ T8626] RSP: 002b:00007f8dde6f7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 249.475845][ T8626] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8ddd78e010 [ 249.475855][ T8626] RDX: 0000000000000002 RSI: 00007f8dde6f7fa0 RDI: 00000000ffffff9c [ 249.475864][ T8626] RBP: 00007f8dde6f7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 249.475873][ T8626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.475881][ T8626] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 249.475900][ T8626] [ 249.910999][ T8626] ptrace attach of "./syz-executor exec"[7095] was attempted by "./syz-executor exec"[8626] [ 250.284789][ T8643] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 252.569459][ T8667] FAULT_INJECTION: forcing a failure. [ 252.569459][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 252.592418][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.4.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.592464][ T8667] Tainted: [L]=SOFTLOCKUP [ 252.592474][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.592492][ T8667] Call Trace: [ 252.592501][ T8667] [ 252.592512][ T8667] dump_stack_lvl+0x16c/0x1f0 [ 252.592547][ T8667] should_fail_ex+0x512/0x640 [ 252.592583][ T8667] ? kmem_cache_alloc_noprof+0x62/0x770 [ 252.592620][ T8667] should_failslab+0xc2/0x120 [ 252.592660][ T8667] kmem_cache_alloc_noprof+0x83/0x770 [ 252.592692][ T8667] ? copy_process+0x26c6/0x7430 [ 252.592737][ T8667] ? copy_process+0x26c6/0x7430 [ 252.592770][ T8667] copy_process+0x26c6/0x7430 [ 252.592806][ T8667] ? preempt_schedule_thunk+0x16/0x30 [ 252.592847][ T8667] ? __pfx_copy_process+0x10/0x10 [ 252.592882][ T8667] ? find_held_lock+0x2b/0x80 [ 252.592920][ T8667] ? futex_private_hash_put+0x160/0x1b0 [ 252.592955][ T8667] kernel_clone+0xfc/0x910 [ 252.592992][ T8667] ? __pfx_futex_wake+0x10/0x10 [ 252.593036][ T8667] ? __pfx_kernel_clone+0x10/0x10 [ 252.593072][ T8667] ? __pfx_vfs_writev+0x10/0x10 [ 252.593125][ T8667] __do_sys_clone+0xce/0x120 [ 252.593161][ T8667] ? __pfx___do_sys_clone+0x10/0x10 [ 252.593214][ T8667] ? xfd_validate_state+0x61/0x180 [ 252.593237][ T8667] ? __pfx_do_writev+0x10/0x10 [ 252.593279][ T8667] do_syscall_64+0xcd/0xf80 [ 252.593308][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.593336][ T8667] RIP: 0033:0x7f8ddd78f7c9 [ 252.593359][ T8667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.593385][ T8667] RSP: 002b:00007f8dde6f7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 252.593411][ T8667] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 252.593430][ T8667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 252.593446][ T8667] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.593464][ T8667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.593480][ T8667] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 252.593519][ T8667] [ 255.779654][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 255.779669][ T30] audit: type=1800 audit(1765230362.380:75): pid=8703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.578" name="discovery_nqn" dev="configfs" ino=37068 res=0 errno=0 [ 258.239751][ T30] audit: type=1804 audit(1765230364.829:76): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.585" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 259.334972][ T6649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 259.403535][ T6649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 259.420553][ T6649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 259.432699][ T6649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 259.460915][ T6649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 260.507930][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 260.735758][ T6683] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.746078][ T6683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.754122][ T6683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.775155][ T6683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.782905][ T6683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.016031][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.025264][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.573125][ T6683] Bluetooth: hci8: command tx timeout [ 261.775201][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.801830][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.841961][ T8743] bridge_slave_0: entered allmulticast mode [ 261.850781][ T8743] bridge_slave_0: entered promiscuous mode [ 261.886282][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.927095][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.991878][ T8743] bridge_slave_1: entered allmulticast mode [ 262.011692][ T8743] bridge_slave_1: entered promiscuous mode [ 262.154926][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.227887][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.479059][ T8743] team0: Port device team_slave_0 added [ 262.561104][ T8743] team0: Port device team_slave_1 added [ 262.678899][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.712272][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.822039][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.840076][ T8764] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 262.862292][ T6683] Bluetooth: hci3: command tx timeout [ 262.877363][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 262.926104][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.952893][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.042121][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.516928][ T8743] hsr_slave_0: entered promiscuous mode [ 263.533879][ T8743] hsr_slave_1: entered promiscuous mode [ 263.542839][ T8743] debugfs: 'hsr0' already exists in 'hsr' [ 263.548702][ T8743] Cannot create hsr debugfs directory [ 263.652653][ T6683] Bluetooth: hci8: command tx timeout [ 263.768722][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.776122][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.786319][ T8755] bridge_slave_0: entered allmulticast mode [ 263.810637][ T8755] bridge_slave_0: entered promiscuous mode [ 263.864737][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.889701][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.927738][ T8755] bridge_slave_1: entered allmulticast mode [ 263.953998][ T8755] bridge_slave_1: entered promiscuous mode [ 264.088064][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.110616][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.145252][ T8777] vhci_hcd vhci_hcd.2: Wrong hub descriptor type for USB 3.0 roothub. [ 264.558082][ T8755] team0: Port device team_slave_0 added [ 264.706704][ T8755] team0: Port device team_slave_1 added [ 264.933616][ T6683] Bluetooth: hci3: command tx timeout [ 264.941468][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.981970][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.115884][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.250876][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.263403][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.298313][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.594406][ T8755] hsr_slave_0: entered promiscuous mode [ 265.600841][ T8755] hsr_slave_1: entered promiscuous mode [ 265.683733][ T8755] debugfs: 'hsr0' already exists in 'hsr' [ 265.689507][ T8755] Cannot create hsr debugfs directory [ 265.738382][ T6683] Bluetooth: hci8: command tx timeout [ 265.850612][ T8743] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 265.927585][ T8796] binder: 8792:8796 ioctl 40046f41 0 returned -22 [ 266.084616][ T8743] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 266.136696][ T8743] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 266.202488][ T8743] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 266.867799][ T8755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.014789][ T6683] Bluetooth: hci3: command tx timeout [ 267.027462][ T8755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.228892][ T8755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.453314][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.565271][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.713363][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.720606][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.821038][ T8755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.838875][ T6683] Bluetooth: hci8: command tx timeout [ 267.860389][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.867981][ T7746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.890651][ T8755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.940047][ T8755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.987960][ T8755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.057914][ T8805] net_ratelimit: 26 callbacks suppressed [ 268.057935][ T8805] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 268.179044][ T8743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.224884][ T8743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.578109][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.612781][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.695251][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.702389][ T7791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.840476][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.847671][ T6761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.095838][ T6683] Bluetooth: hci3: command tx timeout [ 269.129776][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.518639][ T8804] Process accounting resumed [ 270.173572][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.354299][ T8743] veth0_vlan: entered promiscuous mode [ 270.482004][ T8743] veth1_vlan: entered promiscuous mode [ 270.526776][ T8755] veth0_vlan: entered promiscuous mode [ 271.071969][ T8755] veth1_vlan: entered promiscuous mode [ 271.499164][ T8743] veth0_macvtap: entered promiscuous mode [ 271.525608][ T8755] veth0_macvtap: entered promiscuous mode [ 271.589409][ T8755] veth1_macvtap: entered promiscuous mode [ 271.666563][ T8743] veth1_macvtap: entered promiscuous mode [ 271.744153][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.805412][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.888280][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.997128][ T6658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.025919][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.065039][ T6658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.095375][ T6658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.126460][ T6658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.169040][ T8867] random: crng reseeded on system resumption [ 272.460843][ T7789] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.506068][ T7789] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.605939][ T7789] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.673026][ T7789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.885624][ T6647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.903902][ T6647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.077289][ T7303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.117662][ T7303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.271589][ T6671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.299326][ T6671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.402652][ T6671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.425316][ T6671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.448057][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.611'. [ 273.816363][ T30] audit: type=1800 audit(1765230380.401:77): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.612" name="dbroot" dev="configfs" ino=38726 res=0 errno=0 [ 273.986538][ T8884] syz.4.612: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.115649][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.4.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.115691][ T8884] Tainted: [L]=SOFTLOCKUP [ 274.115700][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.115712][ T8884] Call Trace: [ 274.115721][ T8884] [ 274.115730][ T8884] dump_stack_lvl+0x16c/0x1f0 [ 274.115761][ T8884] warn_alloc+0x248/0x3a0 [ 274.115791][ T8884] ? __pfx_warn_alloc+0x10/0x10 [ 274.115819][ T8884] ? __lock_acquire+0x436/0x2890 [ 274.115856][ T8884] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 274.115885][ T8884] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 274.115924][ T8884] ? __pfx___might_resched+0x10/0x10 [ 274.115958][ T8884] ? rcu_is_watching+0x12/0xc0 [ 274.115994][ T8884] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 274.116021][ T8884] ? find_held_lock+0x2b/0x80 [ 274.116049][ T8884] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 274.116074][ T8884] ? tomoyo_path_number_perm+0x295/0x580 [ 274.116110][ T8884] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.116155][ T8884] ? __pfx___mutex_lock+0x10/0x10 [ 274.116183][ T8884] ? tomoyo_path_number_perm+0x18d/0x580 [ 274.116214][ T8884] ? __schedule+0x1094/0x6150 [ 274.116250][ T8884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.116281][ T8884] ? lock_acquire+0x179/0x330 [ 274.116310][ T8884] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 274.116337][ T8884] __vmalloc_node_noprof+0xad/0xf0 [ 274.116372][ T8884] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 274.116403][ T8884] dvb_dvr_do_ioctl+0x15d/0x290 [ 274.116434][ T8884] dvb_usercopy+0x167/0x340 [ 274.116457][ T8884] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 274.116482][ T8884] ? __pfx_dvb_usercopy+0x10/0x10 [ 274.116519][ T8884] ? __fget_files+0x20e/0x3c0 [ 274.116549][ T8884] dvb_dvr_ioctl+0x29/0x40 [ 274.116568][ T8884] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 274.116593][ T8884] __x64_sys_ioctl+0x18e/0x210 [ 274.116617][ T8884] do_syscall_64+0xcd/0xf80 [ 274.116638][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.116656][ T8884] RIP: 0033:0x7f8ddd78f7c9 [ 274.116672][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.116690][ T8884] RSP: 002b:00007f8dde6f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.116707][ T8884] RAX: ffffffffffffffda RBX: 00007f8ddd9e5fa0 RCX: 00007f8ddd78f7c9 [ 274.116719][ T8884] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 274.116731][ T8884] RBP: 00007f8ddd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.116741][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.116752][ T8884] R13: 00007f8ddd9e6038 R14: 00007f8ddd9e5fa0 R15: 00007ffdae8358d8 [ 274.116777][ T8884] [ 274.414723][ T8884] Mem-Info: [ 274.417977][ T8884] active_anon:21147 inactive_anon:0 isolated_anon:0 [ 274.417977][ T8884] active_file:9619 inactive_file:50958 isolated_file:0 [ 274.417977][ T8884] unevictable:2027 dirty:456 writeback:0 [ 274.417977][ T8884] slab_reclaimable:13573 slab_unreclaimable:139008 [ 274.417977][ T8884] mapped:67739 shmem:2132 pagetables:1588 [ 274.417977][ T8884] sec_pagetables:0 bounce:0 [ 274.417977][ T8884] kernel_misc_reclaimable:0 [ 274.417977][ T8884] free:1182533 free_pcp:21161 free_cma:0 [ 274.463824][ T8884] Node 0 active_anon:84588kB inactive_anon:0kB active_file:38112kB inactive_file:203660kB unevictable:6572kB isolated(anon):0kB isolated(file):0kB mapped:270592kB dirty:1556kB writeback:0kB shmem:6992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:47104kB kernel_stack:17436kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.496434][ T8884] Node 1 active_anon:0kB inactive_anon:0kB active_file:364kB inactive_file:172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:364kB dirty:368kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.527242][ T8884] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.562126][ T8884] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 274.590278][ T8884] Node 0 DMA32 free:830992kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88712kB inactive_anon:0kB active_file:38112kB inactive_file:203660kB unevictable:6572kB writepending:1556kB zspages:220kB present:3129332kB managed:2541136kB mlocked:5036kB bounce:0kB free_pcp:71000kB local_pcp:38680kB free_cma:0kB [ 274.627600][ T8884] lowmem_reserve[]: 0 0 1 1 1 [ 274.633403][ T8884] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 274.727125][ T8884] lowmem_reserve[]: 0 0 0 0 0 [ 274.838883][ T8884] Node 1 Normal free:3879644kB boost:0kB min:55544kB low:69428kB high:83312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:364kB inactive_file:172kB unevictable:1536kB writepending:368kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13440kB local_pcp:9512kB free_cma:0kB [ 274.924463][ T8884] lowmem_reserve[]: 0 0 0 0 0 [ 274.947696][ T8884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.973501][ T8884] Node 0 DMA32: 5760*4kB (UME) 952*8kB (UM) 583*16kB (UME) 487*32kB (UME) 546*64kB (UME) 280*128kB (UME) 177*256kB (UME) 60*512kB (UM) 45*1024kB (UME) 4*2048kB (U) 139*4096kB (M) = 826000kB [ 275.066704][ T8884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 275.118402][ T8884] Node 1 Normal: 59*4kB (UM) 10*8kB (UME) 23*16kB (UME) 175*32kB (UME) 44*64kB (UME) 13*128kB (UME) 4*256kB (UME) 1*512kB (M) 1*1024kB (M) 2*2048kB (UE) 943*4096kB (M) = 3879948kB [ 275.202644][ T8884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.264422][ T8884] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 275.318633][ T8884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.371078][ T8884] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 275.404607][ T8884] 62505 total pagecache pages [ 275.492646][ T8884] 0 pages in swap cache [ 275.496878][ T8884] Free swap = 124896kB [ 275.531077][ T8884] Total swap = 124996kB [ 275.558536][ T8884] 2097051 pages RAM [ 275.562365][ T8884] 0 pages HighMem/MovableOnly [ 275.567018][ T8884] 429741 pages reserved [ 275.659330][ T8884] 0 pages cma reserved [ 276.151472][ T8927] netlink: zone id is out of range [ 276.156642][ T8927] netlink: zone id is out of range [ 276.228868][ T8927] netlink: zone id is out of range [ 276.248813][ T8927] netlink: zone id is out of range [ 276.253988][ T8927] netlink: zone id is out of range [ 276.315234][ T8927] netlink: zone id is out of range [ 276.354821][ T8927] netlink: zone id is out of range [ 276.356355][ T6683] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 276.360299][ T6683] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 276.385011][ T6683] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 276.386711][ T8927] netlink: zone id is out of range [ 276.431389][ T8935] program syz.4.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.478710][ T8927] netlink: zone id is out of range [ 276.507493][ T8927] netlink: zone id is out of range [ 279.466680][ T9004] FAULT_INJECTION: forcing a failure. [ 279.466680][ T9004] name failslab, interval 1, probability 0, space 0, times 0 [ 279.528369][ T9004] CPU: 0 UID: 0 PID: 9004 Comm: syz.0.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.528414][ T9004] Tainted: [L]=SOFTLOCKUP [ 279.528425][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.528441][ T9004] Call Trace: [ 279.528450][ T9004] [ 279.528461][ T9004] dump_stack_lvl+0x16c/0x1f0 [ 279.528495][ T9004] should_fail_ex+0x512/0x640 [ 279.528531][ T9004] ? fs_reclaim_acquire+0xae/0x150 [ 279.528576][ T9004] should_failslab+0xc2/0x120 [ 279.528621][ T9004] kmem_cache_alloc_noprof+0x83/0x770 [ 279.528654][ T9004] ? jbd2__journal_start+0x193/0x6a0 [ 279.528703][ T9004] ? jbd2__journal_start+0x193/0x6a0 [ 279.528742][ T9004] jbd2__journal_start+0x193/0x6a0 [ 279.528785][ T9004] __ext4_journal_start_sb+0x195/0x640 [ 279.528814][ T9004] ? ext4_punch_hole+0x760/0x1060 [ 279.528850][ T9004] ext4_punch_hole+0x760/0x1060 [ 279.528892][ T9004] ext4_fallocate+0x2281/0x36c0 [ 279.528940][ T9004] ? __pfx_ext4_fallocate+0x10/0x10 [ 279.528974][ T9004] vfs_fallocate+0x5b4/0x10e0 [ 279.529013][ T9004] ? __pfx_vfs_fallocate+0x10/0x10 [ 279.529050][ T9004] ? madvise_vma_behavior+0x26d9/0x29e0 [ 279.529098][ T9004] madvise_vma_behavior+0x2679/0x29e0 [ 279.529144][ T9004] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 279.529186][ T9004] ? mas_prev+0x9b/0xf0 [ 279.529213][ T9004] ? __pfx_mas_prev+0x10/0x10 [ 279.529251][ T9004] ? find_vma_prev+0xd3/0x150 [ 279.529286][ T9004] ? find_held_lock+0x2b/0x80 [ 279.529319][ T9004] ? __pfx_find_vma_prev+0x10/0x10 [ 279.529364][ T9004] ? __futex_wait+0x24b/0x2f0 [ 279.529404][ T9004] madvise_walk_vmas+0x31f/0xac0 [ 279.529437][ T9004] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 279.529489][ T9004] madvise_do_behavior+0x1e2/0x530 [ 279.529513][ T9004] ? futex_private_hash_put+0x160/0x1b0 [ 279.529544][ T9004] ? __pfx_madvise_do_behavior+0x10/0x10 [ 279.529572][ T9004] ? down_read+0x13d/0x460 [ 279.529627][ T9004] do_madvise+0x176/0x240 [ 279.529653][ T9004] ? __pfx_do_madvise+0x10/0x10 [ 279.529677][ T9004] ? do_futex+0x122/0x350 [ 279.529733][ T9004] ? xfd_validate_state+0x61/0x180 [ 279.529758][ T9004] ? __pfx_ksys_write+0x10/0x10 [ 279.529800][ T9004] __x64_sys_madvise+0xa9/0x110 [ 279.529825][ T9004] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.529853][ T9004] do_syscall_64+0xcd/0xf80 [ 279.529882][ T9004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.529910][ T9004] RIP: 0033:0x7fc254b8f7c9 [ 279.529933][ T9004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.529959][ T9004] RSP: 002b:00007fc255aee038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 279.529985][ T9004] RAX: ffffffffffffffda RBX: 00007fc254de5fa0 RCX: 00007fc254b8f7c9 [ 279.530004][ T9004] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 279.530021][ T9004] RBP: 00007fc254c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.530038][ T9004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.530055][ T9004] R13: 00007fc254de6038 R14: 00007fc254de5fa0 R15: 00007fff056efd78 [ 279.530096][ T9004] [ 279.530111][ T9004] EXT4-fs error (device sda1) in ext4_punch_hole:4436: Out of memory [ 280.876385][ T9027] FAULT_INJECTION: forcing a failure. [ 280.876385][ T9027] name fail_futex, interval 1, probability 0, space 0, times 0 [ 280.931139][ T9027] CPU: 1 UID: 0 PID: 9027 Comm: syz.9.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.931183][ T9027] Tainted: [L]=SOFTLOCKUP [ 280.931194][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.931209][ T9027] Call Trace: [ 280.931217][ T9027] [ 280.931224][ T9027] dump_stack_lvl+0x16c/0x1f0 [ 280.931246][ T9027] should_fail_ex+0x512/0x640 [ 280.931271][ T9027] get_futex_key+0x1d0/0x15f0 [ 280.931290][ T9027] ? __pfx_get_futex_key+0x10/0x10 [ 280.931307][ T9027] ? lock_acquire+0x179/0x330 [ 280.931325][ T9027] futex_wake+0xea/0x530 [ 280.931346][ T9027] ? __pfx_futex_wake+0x10/0x10 [ 280.931369][ T9027] ? ksys_write+0x190/0x250 [ 280.931393][ T9027] do_futex+0x1e3/0x350 [ 280.931411][ T9027] ? __pfx_do_futex+0x10/0x10 [ 280.931432][ T9027] __x64_sys_futex+0x1e0/0x4c0 [ 280.931450][ T9027] ? fput+0x70/0xf0 [ 280.931472][ T9027] ? __pfx___x64_sys_futex+0x10/0x10 [ 280.931489][ T9027] ? ksys_write+0x1ac/0x250 [ 280.931509][ T9027] ? __pfx_ksys_write+0x10/0x10 [ 280.931535][ T9027] do_syscall_64+0xcd/0xf80 [ 280.931553][ T9027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.931569][ T9027] RIP: 0033:0x7f73c1b8f7c9 [ 280.931582][ T9027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.931598][ T9027] RSP: 002b:00007f73c29b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.931612][ T9027] RAX: ffffffffffffffda RBX: 00007f73c1de5fa8 RCX: 00007f73c1b8f7c9 [ 280.931622][ T9027] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73c1de5fac [ 280.931631][ T9027] RBP: 00007f73c1de5fa0 R08: 00007f73c29b1000 R09: 0000000000000000 [ 280.931640][ T9027] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 280.931650][ T9027] R13: 00007f73c1de6038 R14: 00007ffc094c62c0 R15: 00007ffc094c63a8 [ 280.931671][ T9027] [ 283.548976][ T9063] zswap: compressor not available [ 285.346391][ T31] INFO: task kworker/u10:7:6692 blocked for more than 143 seconds. [ 285.378074][ T31] Tainted: G L syzkaller #0 [ 285.413300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.473340][ T31] task:kworker/u10:7 state:D stack:26776 pid:6692 tgid:6692 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 285.532476][ T31] Workqueue: netns cleanup_net [ 285.551187][ T31] Call Trace: [ 285.561286][ T31] [ 285.572203][ T31] ? __schedule+0x10b9/0x6150 [ 285.587256][ T31] __schedule+0x1139/0x6150 [ 285.597363][ T31] ? __lock_acquire+0x436/0x2890 [ 285.605268][ T31] ? __pfx___schedule+0x10/0x10 [ 285.613066][ T31] ? find_held_lock+0x2b/0x80 [ 285.627616][ T31] ? schedule+0x2d7/0x3a0 [ 285.642156][ T31] schedule+0xe7/0x3a0 [ 285.649934][ T31] schedule_timeout+0x257/0x290 [ 285.664924][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 285.683516][ T31] ? mark_held_locks+0x49/0x80 [ 285.717276][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.738855][ T31] __wait_for_common+0x2fc/0x4e0 [ 285.751156][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 285.768414][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 285.783505][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.801405][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 285.823672][ T31] __flush_workqueue+0x3e2/0x1230 [ 285.831651][ T31] ? __lock_acquire+0x436/0x2890 [ 285.848604][ T31] ? __lock_acquire+0x436/0x2890 [ 285.867158][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 285.880998][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 285.894403][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 285.906851][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 285.918141][ T31] rds_tcp_listen_stop+0x104/0x150 [ 285.936131][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 285.956309][ T31] rds_tcp_exit_net+0xcb/0x810 [ 285.972299][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 285.990479][ T31] ? __pfx___might_resched+0x10/0x10 [ 286.002776][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 286.011722][ T31] ops_undo_list+0x2ee/0xab0 [ 286.024302][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 286.043627][ T31] ? cleanup_net+0x347/0x830 [ 286.049360][ T31] ? idr_destroy+0x62/0x2e0 [ 286.069335][ T31] cleanup_net+0x41b/0x830 [ 286.078444][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 286.089740][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.097624][ T31] process_one_work+0x9ba/0x1b20 [ 286.105470][ T31] ? __pfx_process_one_work+0x10/0x10 [ 286.113295][ T31] ? assign_work+0x1a0/0x250 [ 286.120084][ T31] worker_thread+0x6c8/0xf10 [ 286.129001][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.138162][ T31] ? __pfx_worker_thread+0x10/0x10 [ 286.150776][ T31] kthread+0x3c5/0x780 [ 286.157474][ T31] ? __pfx_kthread+0x10/0x10 [ 286.172471][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.186265][ T31] ? __pfx_kthread+0x10/0x10 [ 286.203368][ T31] ret_from_fork+0x983/0xb10 [ 286.212338][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.221678][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.263810][ T31] ? __switch_to+0x7af/0x10d0 [ 286.281958][ T31] ? __pfx_kthread+0x10/0x10 [ 286.297614][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.314417][ T31] [ 286.320003][ T31] INFO: task syz.0.166:6781 blocked for more than 144 seconds. [ 286.332627][ T31] Tainted: G L syzkaller #0 [ 286.354650][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.367253][ T31] task:syz.0.166 state:D stack:26536 pid:6781 tgid:6780 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 286.391299][ T31] Call Trace: [ 286.400358][ T31] [ 286.405933][ T31] ? __schedule+0x10b9/0x6150 [ 286.423812][ T31] __schedule+0x1139/0x6150 [ 286.432862][ T31] ? __pfx___schedule+0x10/0x10 [ 286.442866][ T31] ? find_held_lock+0x2b/0x80 [ 286.452959][ T31] ? schedule+0x2d7/0x3a0 [ 286.472146][ T31] schedule+0xe7/0x3a0 [ 286.487863][ T31] schedule_timeout+0x257/0x290 [ 286.500245][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.514745][ T31] ? mark_held_locks+0x49/0x80 [ 286.529546][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.558441][ T31] __wait_for_common+0x2fc/0x4e0 [ 286.563428][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.579098][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 286.592683][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.607423][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 286.627955][ T31] __flush_workqueue+0x3e2/0x1230 [ 286.689309][ T31] ? __lock_acquire+0x436/0x2890 [ 286.701599][ T31] ? __lock_acquire+0x436/0x2890 [ 286.715152][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 286.740730][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 286.754037][ T31] ? release_sock+0x21/0x220 [ 286.768777][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 286.793461][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 286.810638][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 286.825186][ T31] rds_tcp_listen_stop+0x104/0x150 [ 286.837526][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 286.849981][ T31] rds_tcp_exit_net+0xcb/0x810 [ 286.868079][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 286.880392][ T31] ? __pfx___might_resched+0x10/0x10 [ 286.911097][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 286.921167][ T31] ops_undo_list+0x2ee/0xab0 [ 286.930134][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 286.939095][ T31] ? ops_init+0x2f0/0x5f0 [ 286.946920][ T31] ? ops_init+0x2fa/0x5f0 [ 286.963782][ T31] setup_net+0x1ff/0x3a0 [ 286.978322][ T31] ? __pfx_setup_net+0x10/0x10 [ 287.041118][ T31] ? lockdep_init_map_type+0x5c/0x270 [ 287.047472][ T31] ? mutex_init_lockep+0x110/0x150 [ 287.054353][ T31] copy_net_ns+0x351/0x7c0 [ 287.061020][ T31] create_new_namespaces+0x3ea/0xab0 [ 287.082137][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 287.092784][ T31] ksys_unshare+0x45b/0xa40 [ 287.098111][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 287.106855][ T31] ? xfd_validate_state+0x61/0x180 [ 287.112581][ T31] __x64_sys_unshare+0x31/0x40 [ 287.120292][ T31] do_syscall_64+0xcd/0xf80 [ 287.138390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.148794][ T31] RIP: 0033:0x7f657a38f7c9 [ 287.157772][ T31] RSP: 002b:00007f657b2c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.178742][ T31] RAX: ffffffffffffffda RBX: 00007f657a5e5fa0 RCX: 00007f657a38f7c9 [ 287.200810][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 287.215006][ T31] RBP: 00007f657a413f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.228855][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.248273][ T31] R13: 00007f657a5e6038 R14: 00007f657a5e5fa0 R15: 00007ffddb3adaa8 [ 287.264021][ T31] [ 287.274282][ T31] [ 287.274282][ T31] Showing all locks held in the system: [ 287.316655][ T31] 1 lock held by khungtaskd/31: [ 287.330171][ T31] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 287.352623][ T31] 2 locks held by getty/6539: [ 287.363772][ T31] #0: ffff88814e16e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.390584][ T31] #1: ffffc9000bbfc2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 287.418818][ T31] 3 locks held by kworker/u10:7/6692: [ 287.430272][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 287.451481][ T31] #1: ffffc9000f287c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 287.471570][ T31] #2: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 287.513787][ T31] 1 lock held by syz.0.166/6781: [ 287.524580][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.545806][ T31] 1 lock held by syz.2.287/7273: [ 287.556069][ T31] 1 lock held by syz.1.324/7458: [ 287.567382][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.593155][ T31] 1 lock held by syz.5.354/7619: [ 287.627814][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.645953][ T31] 1 lock held by syz.7.436/8051: [ 287.659069][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.683656][ T31] 1 lock held by syz.3.544/8544: [ 287.693697][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.724340][ T31] 1 lock held by syz.8.549/8560: [ 287.737123][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.776915][ T31] 1 lock held by syz.4.635/8999: [ 287.790512][ T31] #0: ffffffff901238d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 287.818201][ T31] 2 locks held by syz.9.638/9012: [ 287.831617][ T31] 3 locks held by syz.6.645/9040: [ 287.844614][ T31] 2 locks held by syz.9.655/9087: [ 287.860318][ T31] [ 287.894076][ T31] ============================================= [ 287.894076][ T31] [ 287.927957][ T31] NMI backtrace for cpu 0 [ 287.927985][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 287.928008][ T31] Tainted: [L]=SOFTLOCKUP [ 287.928013][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.928022][ T31] Call Trace: [ 287.928027][ T31] [ 287.928034][ T31] dump_stack_lvl+0x116/0x1f0 [ 287.928054][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 287.928074][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.928090][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 287.928111][ T31] sys_info+0x133/0x180 [ 287.928129][ T31] watchdog+0xe66/0x1180 [ 287.928155][ T31] ? rcu_is_watching+0x12/0xc0 [ 287.928175][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.928195][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.928211][ T31] ? __kthread_parkme+0x19e/0x250 [ 287.928233][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.928254][ T31] kthread+0x3c5/0x780 [ 287.928268][ T31] ? __pfx_kthread+0x10/0x10 [ 287.928283][ T31] ? rcu_is_watching+0x12/0xc0 [ 287.928302][ T31] ? __pfx_kthread+0x10/0x10 [ 287.928316][ T31] ret_from_fork+0x983/0xb10 [ 287.928331][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.928347][ T31] ? __switch_to+0x7af/0x10d0 [ 287.928366][ T31] ? __pfx_kthread+0x10/0x10 [ 287.928380][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.928410][ T31] [ 287.928416][ T31] Sending NMI from CPU 0 to CPUs 1: [ 288.072470][ C1] NMI backtrace for cpu 1 [ 288.072492][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.072533][ C1] Tainted: [L]=SOFTLOCKUP [ 288.072541][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.072556][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 288.072585][ C1] Code: 36 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 f7 15 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 288.072609][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 288.072629][ C1] RAX: 000000000014eb4f RBX: 0000000000000001 RCX: ffffffff8b7466d9 [ 288.072645][ C1] RDX: 0000000000000000 RSI: ffffffff8dabea1e RDI: ffffffff8bf24480 [ 288.072662][ C1] RBP: ffffed1003b58b70 R08: 0000000000000001 R09: ffffed10170a673d [ 288.072677][ C1] R10: ffff8880b85339eb R11: ffff88801dac66b0 R12: 0000000000000001 [ 288.072693][ C1] R13: ffff88801dac5b80 R14: ffffffff90882bd0 R15: 0000000000000000 [ 288.072709][ C1] FS: 0000000000000000(0000) GS:ffff888124a0e000(0000) knlGS:0000000000000000 [ 288.072732][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.072748][ C1] CR2: 00007f73c294dd58 CR3: 000000007616a000 CR4: 00000000003526f0 [ 288.072764][ C1] Call Trace: [ 288.072773][ C1] [ 288.072781][ C1] default_idle+0x13/0x20 [ 288.072810][ C1] default_idle_call+0x6c/0xb0 [ 288.072838][ C1] do_idle+0x38d/0x510 [ 288.072872][ C1] ? __pfx_do_idle+0x10/0x10 [ 288.072906][ C1] cpu_startup_entry+0x4f/0x60 [ 288.072936][ C1] start_secondary+0x21d/0x2d0 [ 288.072974][ C1] ? __pfx_start_secondary+0x10/0x10 [ 288.073014][ C1] common_startup_64+0x13e/0x148 [ 288.073052][ C1] [ 288.275911][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.282921][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 288.293629][ T31] Tainted: [L]=SOFTLOCKUP [ 288.297971][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.308048][ T31] Call Trace: [ 288.311354][ T31] [ 288.314300][ T31] dump_stack_lvl+0x3d/0x1f0 [ 288.318923][ T31] vpanic+0x640/0x6f0 [ 288.322997][ T31] panic+0xca/0xd0 [ 288.326714][ T31] ? __pfx_panic+0x10/0x10 [ 288.331127][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.337113][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 288.343265][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 288.349430][ T31] ? watchdog+0xe83/0x1180 [ 288.353952][ T31] ? watchdog+0xe76/0x1180 [ 288.358395][ T31] watchdog+0xe94/0x1180 [ 288.362658][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.367422][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.372118][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.377308][ T31] ? __kthread_parkme+0x19e/0x250 [ 288.382333][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.387014][ T31] kthread+0x3c5/0x780 [ 288.391121][ T31] ? __pfx_kthread+0x10/0x10 [ 288.395790][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.400561][ T31] ? __pfx_kthread+0x10/0x10 [ 288.405531][ T31] ret_from_fork+0x983/0xb10 [ 288.410225][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.415371][ T31] ? __switch_to+0x7af/0x10d0 [ 288.420062][ T31] ? __pfx_kthread+0x10/0x10 [ 288.424648][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.429428][ T31] [ 288.432840][ T31] Kernel Offset: disabled [ 288.437171][ T31] Rebooting in 86400 seconds..