last executing test programs: 9m13.934439903s ago: executing program 3 (id=860): rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000100)="810238e9e2d5b290ee1c285c47c9f28bd6859675664ac1b2a5ff21752d148b258d50de2be3d75f37575fcf54442481b4411cad17f00590aad6185b36a210fccc012ea6f914d3382aee5043fcca1e36445822fa6ed7a4af1eec1d958990a13c4f6169e85f2e68540ea62e40095cbecfc9e3400b7b82be3ece5514edcda4fcc8a14931e55a50d78ddc75a0344dbf25b653c427073553961fa30246a0f776047fc60818e16607c2892a29f5f26b18d376a81f76fcdcf74cb5595e17be087870985918391d12820f0f6ff809cb490a9410f72cc6ebb20d11e191bced75440d76abf86c5f5b9d19c0218b1dc0323437496d3cf4b2e670cf0414", 0xad2b, &(0x7f0000000200)="0937f4cbc485a03183e86021b247baff1e56bb63be9249c3250cecee2c90b6adc13f6e6e05409c56bf9261e003a5b0fcbb699ed485e0c66650d605987d8edfd8d3869af6ef1897e9409258e392082eb2f3de6cb228aa445647a3f3c0827022daa5eaa0c1ccb185d247afbf64615efb329fe13e54842d48dc4a70322f0fa56672434f2297b669dfeeb73c60c082a254048919c5dcd9bff0f055b951d58bf4d563274150815c63949a6f9982c45d2edcbe2a5c110efcf332e807e15c383b375f49786ea5b6c046e1c023affcea8c5cc7253b396289bd081e79c76a3b5a89f0f13135e23619330b7580e51f1ee1fb4315", 0x8, &(0x7f0000000300)="1fb009018ae3741c3542f45cd9c96bb115941c35fb9b1dbeae721110f707448d11809292fe65348225e582dcd4754b574432183bdfbfa3fdab38e4da446a1cac9d35c045b8c55744455cd16f3315c9803a66d7117753f1b28394c7d07edcf5bc63e26efa45d18a8930eaddc04165b898617fa4eabcb20e47a7701a51eb827f5785f4bcdcd4f087ec4b11cbc515", &(0x7f00000003c0)}) ppoll$auto(&(0x7f0000000440)={r0, 0x8a, 0x48}, 0x8, &(0x7f0000000480)={0x0, 0xfffffffffffffffa}, &(0x7f00000004c0), 0x8) 9m13.716515688s ago: executing program 3 (id=861): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x12, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/disable_ifindex\x00', 0x2641, 0x0) write$auto(r0, &(0x7f0000000640)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\x01&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5P@\x13\x9fa\xd3\x8a\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xc7m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\xeb\n\xad\x86\xd9A)+\x88-\xfe', 0x1) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xab) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r1, 0x0, 0x810) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(0xffffffffffffffff, 0x0, 0x80) sendmsg$auto_SMC_NETLINK_DUMP_SEID(0xffffffffffffffff, 0x0, 0x4000) write$auto(0x4, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto(0x3, 0x0, 0x70) fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x52, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci5/rfkill30/name\x00', 0x10440, 0x0) mmap$auto(0x4000000096, 0xfff, 0xffffffffffffffae, 0x16, r2, 0x4028000) 9m13.468443114s ago: executing program 3 (id=864): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/rndis_host/uevent\x00', 0x100000, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0xc, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x4000000003b, 0x8) 9m11.176383323s ago: executing program 3 (id=870): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x2, 0xffffffffffffffff, 0xff, 0x800000000801f, 0x3, 0x100000001) r0 = prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffd93, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0xfffffffffffffff8, 0x4, 0x3, 0x3, 0x62, 0x0, 0x7, 0x6d3f, 0x100, 0x6, 0xfffffffffffffffe]}, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio16\x00', 0x402, 0x0) close_range$auto(r0, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xebf, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x123002, 0x0) write$auto(r3, 0x0, 0x80000000) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r4, 0x541c, 0xffffffffffffffff) getsockopt$auto(0xffffffffffffffff, 0x6b, 0x4, 0xfffffffffffffffe, 0x0) 8m56.128028468s ago: executing program 32 (id=870): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x2, 0xffffffffffffffff, 0xff, 0x800000000801f, 0x3, 0x100000001) r0 = prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffd93, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0xfffffffffffffff8, 0x4, 0x3, 0x3, 0x62, 0x0, 0x7, 0x6d3f, 0x100, 0x6, 0xfffffffffffffffe]}, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio16\x00', 0x402, 0x0) close_range$auto(r0, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xebf, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x123002, 0x0) write$auto(r3, 0x0, 0x80000000) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r4, 0x541c, 0xffffffffffffffff) getsockopt$auto(0xffffffffffffffff, 0x6b, 0x4, 0xfffffffffffffffe, 0x0) 2m31.314446148s ago: executing program 33 (id=2163): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) shmget$auto(0x100000000, 0x3, 0x79e56dc9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x50040, 0x0) shmctl$auto(0x7, 0x0, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x3, 0x2}, 0x7, 0x1, 0x1120d96a, 0x5, @raw=0x7, @raw=0x2, 0x1, 0x0, &(0x7f0000000180)="a1724abd1fa25b8299d1d1f01f313d333cb3a0", &(0x7f00000001c0)="8eb063525b13008bd5280b30961ac037c43d55c40b53658572424fcfd3806fbe79745ceeba50fb2934e28ea524270730a18be1a5e38edad57c17d8227cd1696f56afe01b11668a319f405f45c7a5e76e2e8db26d4df3a6f6be4ae4295a7de058cf1ebf54e00801a7f85ac94a4fc51854554d58452b35978faf37bbb321aa936718ee64e7f329273dc2a6a76b944a0d146c126f74ed61bf2b2a251249622016d7ea47942f513f9b618a86ff3294432416a774a1276b4a0e9cfb59bd732b6a1d"}) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000340), 0x208200, 0x0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000800}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x40) socket(0x0, 0x800, 0x8) socket(0xa, 0x2, 0x0) unshare$auto(0x6c000000) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/udp\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa401, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) 2m12.604864734s ago: executing program 34 (id=2196): prctl$auto_PR_SET_VMA(0x53564d41, 0x7fffffffffffffff, 0x9, 0x7fffffff, 0x6) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x339c00, 0x0) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x2, 0x3ff}, {0x10, 0x9}}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) syz_clone(0x800400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x207, 0x4006) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) r3 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r3, 0xff02, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000340)='%]{\fZ', 0xffffffff) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) ioctl$auto(r2, 0x5646, r2) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x7, 0xa55, 0x3) madvise$auto(0x0, 0xffff7fffffff0001, 0x15) prctl$auto(0x1000000003b, 0x4, 0x0, 0x5, 0x8) 2m1.813589676s ago: executing program 6 (id=2250): mmap$auto(0x7fffffffffffffff, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x3bbb) socket(0x2b, 0x1, 0x1) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0xf, 0xa, 0x0, 0x0, @str='ovs_packet\x00'}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) set_mempolicy$auto(0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020008, 0x10, 0xeb1, r2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x401, 0x2, 0x0, 0x9, 0x80000001) mmap$auto(0xfffffffffffffe6d, 0xe9d, 0xae6, 0x10, r3, 0x7) close_range$auto(0x2, 0x8, 0x0) r4 = mq_open$auto(&(0x7f0000000000)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) mq_timedreceive$auto(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x1, 0x40, 0x0, 0x0, 0x2) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m1.027789186s ago: executing program 35 (id=2218): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder0\x00', 0x739280, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x24001, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000380)="33094ea328b1a461f2910ab6c13634d5264a3d7e12272a34166de90fa08ff26b029c77e5de603f51dadce80ab6eb6140b7a963931a93ac1824501b137a4075a740dbd5897f2e2302375d96766691261820b9c3194b93b9451d6bce6fa64f6070390764627d15aa48e77511bd06a85ccf7dec8469bbf6a0ce3e717e2a47801821b4b53fc3a7782fd35a20582ca7f867c428c5045a128d76a2b1712ebbc6a17e21b0d145ef7d2af28ecf450a1d749dfa741eea85bb8fdf8f64ff21280b451e693db6767488c90feaac87aaec793f") sysfs$auto(0x2, 0x41, 0x0) mmap$auto(0x0, 0x80000400008, 0xde, 0x17, 0x47, 0x9) futex_wait$auto(0x0, 0x906, 0x5, 0x4000009, 0x0, 0x81) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyu9\x00', 0x610801, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xffffffffffffff88) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptyd7\x00', 0x2f3003, 0x0) ioctl$auto(r3, 0x5608, 0x1) mmap$auto(0x3, 0x1, 0x9, 0x411, r2, 0xb) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8400, 0x0) msync$auto(0x78afb701, 0x3ad, 0x7) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000080)="f70b9ab1b01332df7889499a3abc470b1756d7614e92", 0x3f26) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/tty/ttye0/power/runtime_suspended_time\x00', 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$auto(r4, 0x8004b70f, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x200, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109300, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptysc\x00', 0x220101, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) ioctl$auto(r5, 0x4b3a, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x880081, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x8a000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000040)={{@raw=0x7, 0x7, 0x3b6, 0x4, "3c70d528a4a70ef32de672c6300000fc2e990000cc3b67a2203555dc971000", @inferred=0x0}, 0x7, 0x6, 0x4, @inferred, @enumerated={0x2, 0xd, "7e84e6c428a94d86f1da07124ae3fe2e694832d7218694764444d9dfa511d5246626da11e26b6b267e1a2cb6e1d41331d12d9e78470cd1d0b56d0cd2145340fc", 0x7, 0x7cd04bb4}, "71bc01bc5686085ca15f095a841b25d66c148f52a1ad31a489e59be291336905d64a8f7dbd9775e74d1ee3d57ca9b9ac2d9c4c00fb687b7327a575257b3c0deb"}) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x6, 0xfc3, 0x2, 0x6, 0x6, 0xffffffffffffffff}) syz_clone3(&(0x7f00000004c0)={0x20000000, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x10}, &(0x7f0000001840)=""/4107, 0x100b, &(0x7f0000000580)=""/74, &(0x7f00000002c0)=[0x0, r8, 0x0], 0x3}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0x0, 0x802000, 0x7, @raw=0x3, &(0x7f0000000100)={@inferred=r7, 0xa, 0x9, 0x407, "60d6d361f5c4a25561a55f282f856a43f1f31f9f3bfe9bd3d86a046f1302fe4a4bb437445efbd6340fe7278d", @inferred=r9}, "1a85cd92a3323d310f5aeae8d3d23add5da57fd039d0c05c700600d1319323563cd57741543e1106d8f63829505c678c9bf6"}) socket$nl_generic(0x10, 0x3, 0x10) 2m0.745768635s ago: executing program 6 (id=2253): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) pwrite64$auto(r0, &(0x7f00000004c0)='\xf7X\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\x81 ?\xfebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x0f\xd0\xc1\xf2\x14^\x0fn\x84\xfc\x89\v\xea\x1b\x95\xb0Q;C\\\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\x86@X\xb9_\xdd*\xd1\x14\xe0\xe9~\a}?\xe0Fo\x92^\xbe\xa2', 0x3, 0x7) write$auto(r0, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x9) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) mmap$auto(0x6, 0x5, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) munmap$auto(0x200000008000, 0xffffffff) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000002540), 0xe33aa2acd6c4279d, 0x0) writev$auto(r2, &(0x7f0000002940)={0x0, 0x8}, 0x81) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) mmap$auto(0x800000000, 0x3, 0x20ffb, 0x8000000008010, 0xffffffffffffffff, 0x200000) mmap$auto(0x9e93, 0x7, 0xd7f, 0xeb1, r3, 0xfffffffffffffffc) r4 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="050927bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x801) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000084) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000480)='\xf7\xff\xff\xff\xff\xff\xff\xff\x00'/19, 0x101000006, 0x4) 1m59.994186081s ago: executing program 6 (id=2254): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/device\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto(r1, 0x0, 0x3) mlock$auto(0x7c88, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x0) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x101, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = getpid() process_vm_readv$auto(r5, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, 0x0, 0x7) 1m58.285483792s ago: executing program 6 (id=2256): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x19d500, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4000, 0x20000047) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x240000000, 0x4, 0xeb1, r3, 0x40000008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(r1, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x17ba42, 0x0) 1m57.617469265s ago: executing program 6 (id=2257): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x4f) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x6c000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x6, 0x0) acct$auto(&(0x7f0000000280)='/dev/vhci\x00') mount$auto(0x0, &(0x7f0000000300)='}[,&*}\x00', &(0x7f0000000580)='nfsd\x00\xa8\x91\xf0\xd3\x12ji\xe9{9~C\xd8C\x95\xa89\x18\x0f\xb1\b0[\xb67\xd0\x8e`\x85\xd9Y\"\x811\xf9\x15X\rF\x82`b\xa2\xa9\xa2\x9c\xd2\xa0\xfa\xcd \a\xcd\xb969[T\xfbG\x11\x1e[\xfe>\xeb\xeb?N\xd0\xea\x11\n\xcbR<\x17;\xda\xb0K\xd8&\xb8\xcd\x81{\x9c\xc4\x1d}1]\xf4\xf8M\xb8\xfe\xa2x+\xeb\x86e\x91\xb8U\xa4va0\x1c\x8d\xdc\x00\x00\x005\x86rTq\x8c\x1e\xed\b\x85\xfa\x8f\xb3\xeaF\xc3F\x15/\xfe\xd6O\xd9\xe1\xb7P[F\x86\xa5\x86\x8an}\x90\x9dz\x81:\xb5\x12\x15\xdb\xca]tsg\xf7B\xe2\xb4\xb8w\xf4\x88.\t\x01\x84\x02\xdfcJ\x8d\xaf`\x8a\x04\xbc\'\xee\x93\a\xe9\x98\xebg\xb8\xd5\xc1k\x8e0K\x98~\xf98&\a\x1ef^4\xaf\xfb9Si\x83\xb5\v\xd9f\xfd\x88E@\xf0\x89\'\xdcQW\xa4E\xd9/\x1c\xcb\x86\xce-]D\x7fh\xb9!\x19\xdb\xf5\"7\xb4B0>qn^\xbb\n\xbf\xb5wy7\xcft\t\x16\x1f\r\xf8\xe8\x0f\xe0\xaa\xe9\x1b\x96\xed/\x11vH>\x89\x83q\x14jb3\xbb\xdd/', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb5, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x5, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x15, 0x3, 0x3fda, 0x8, 0x7fffffffb000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyee/power/runtime_status\x00', 0x28200, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="6fa23b5ef3bda83a8497614d5cdf3d50c6e8641cc6d91e17f67da92df5765013eeb5e1a151b9ef268908133113547c76912c5f57238c5ad9c22912a7540759567a283e534bb599001c7a6a2aadea2d67b53a47f20d14bb91f8d8a2e0b5b4932a99a39bf8a490e3f78e74fa6eb0ffd2390a91aa364224e615dfb273e054cff80fb64b5ce3288ae267", @ANYRES32=r4, @ANYRES64=r5], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 1m56.04706504s ago: executing program 6 (id=2259): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x414f, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x81) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x1b5, 0x10, 0x7, 0xc, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0xa773}, 0x14) (async) bpf$auto(0x1a, 0x0, 0x92) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0xeda5, 0xc86) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}}, 0x4) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x6, 0xa505}, 0x800}, 0x7, 0x4008) (async) getsockopt$auto_SO_RCVTIMEO_NEW(0xffffffffffffffff, 0x8, 0x42, &(0x7f0000000000)=',}+\x00', &(0x7f0000000040)) 1m50.013400413s ago: executing program 36 (id=2245): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x2000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x81, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r1, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @inferred, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 1m41.021293947s ago: executing program 37 (id=2259): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x414f, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x81) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x1b5, 0x10, 0x7, 0xc, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0xa773}, 0x14) (async) bpf$auto(0x1a, 0x0, 0x92) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0xeda5, 0xc86) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}}, 0x4) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x6, 0xa505}, 0x800}, 0x7, 0x4008) (async) getsockopt$auto_SO_RCVTIMEO_NEW(0xffffffffffffffff, 0x8, 0x42, &(0x7f0000000000)=',}+\x00', &(0x7f0000000040)) 1m14.73058916s ago: executing program 9 (id=2354): mmap$auto(0x0, 0x4, 0x8, 0x11, 0xffffffffffffffff, 0x28000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0}, 0x6, 0x2, 0x0) 1m14.484828706s ago: executing program 9 (id=2355): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x6, 0x25, &(0x7f0000000040)='(\x00', 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async) getrandom$auto(0x0, 0x6000000, 0x3) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0x2003f2, 0x15) msgsnd$auto(0x5a, 0x0, 0xf, 0xc45) (async) rseq$auto(&(0x7f0000000280)={0x7, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) (async) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(0x3, 0x0, 0x1) (async) setsockopt$auto(r1, 0x110, 0x1, 0x0, 0x8) (async) gettid() (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f00000003c0)="46dbe2282d", 0x5) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) 1m12.97372618s ago: executing program 9 (id=2359): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x161302, 0x17f) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0xd76}, 0x4, 0x5) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2584, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x4000000003b, 0x8) 1m11.122583065s ago: executing program 9 (id=2363): mmap$auto(0x0, 0x420007, 0x44, 0xeb1, 0x405, 0x8004) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x4000012, 0x0, 0x9, 0x0, 0x9, 0x2}, 0x10001}, 0x5, 0x7) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0xffffffffffffff3d) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, 0x0, 0x40000003, 0x5ef2) r1 = bpf$auto(0x0, 0x0, 0xd) r2 = bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r1, @new_prog_fd, 0x403, @old_map_fd=r1}, 0x9) close_range$auto(0xffffffffffffffff, r2, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x10000, 0x52) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise$auto(0x20000000000, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x4, 0x4, 0x101) socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x40, &(0x7f0000000080)={@_si_pad}, 0xd) r3 = socket(0x2c, 0x3, 0x2) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x9a6, 0x9fc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb/drivers/ums-freecom/bind\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x4080}, 0x79bc0dc83ed66e97) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) 1m9.374952439s ago: executing program 9 (id=2368): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x13, 0xfffffff8, 0x0, 0x22) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xeff7fffe, 0x6, 0x7fff, 0x5, 0xffffffffffffffff, [0x0, 0x6, 0xb246], {0x2, 0x10001, 0xb, 0x2de, 0x101, 0x1, 0x80, 0x6, 0x8004}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="a70c0000d2f09370a7a0e7e62dc4819cd414052e5d796a6c47cf8434eca651f28a9a6f107f174a54e733f7f05933fe22f5811a4f1b402605be06af2fd73e65", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72000014001c0000000000000000000000ffffe0000001"], 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) 1m7.669227147s ago: executing program 9 (id=2372): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) memfd_secret$auto(0x0) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) madvise$auto(0x0, 0x240007, 0x19) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32) userfaultfd$auto(0x1) (rerun: 32) 52.510794639s ago: executing program 38 (id=2372): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) memfd_secret$auto(0x0) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) madvise$auto(0x0, 0x240007, 0x19) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32) userfaultfd$auto(0x1) (rerun: 32) 51.685954555s ago: executing program 7 (id=2407): mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) setresgid$auto(0x0, 0x800000a0, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x40001, 0x0) write$auto(r1, 0x0, 0x0) setresuid$auto(0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x1ff) r2 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy11/short_retry_limit\x00', 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x20000036, 0x12, r1, 0x9a0b) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) socket(0x1d, 0x2, 0x6) socket(0x2, 0x5, 0xe8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/netdevsim0/proxy_ndp\x00', 0xd2401, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x40400, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya3\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) socketpair$auto(0x1, 0x8, 0x6, 0x0) close_range$auto(0x2, r3, 0x0) open(0x0, 0x20240, 0x8b) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x80, 0x0) pread64$auto(r5, &(0x7f0000000000)='/proc/timer_list\x00', 0xfcef, 0xfff) ioctl$auto(0x3, 0x40106f52, r4) setsockopt$auto_SO_ATTACH_FILTER(r2, 0x6, 0x1a, &(0x7f0000000080)='@\\]\x00', 0x1) 51.156533286s ago: executing program 7 (id=2409): mmap$auto(0x0, 0x2020005, 0x3, 0x4eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x100006, 0x0) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x101000, 0x0) lseek$auto(r0, 0x7fffffffffffffff, 0x1) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x28, 0x0, 0xc) write$auto_console_fops_tty_io(r1, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x141702, 0x0) write$auto(r3, 0x0, 0x7ffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000080)="48db6bd805b269c38eeeaf125665d3e3e0a357eb282c50596d0fbcd0f63275c65e718c37084046a2316b60365c4569ad187e1e019c2c3263a5fc1ae5c5acd878f24a0463aedaea6d29df21ce592abd16430819a25aedce6499488f70ea81838c7b4eb72ab5a5b74fb8167351c360d0326e3ef797e50755a49f4b2209a04f86b702000000000000008f372ed5befd288523ecac14993b0143d2a4ae44da89680cde759b4bfaf8575f2d1a9b052ec6e1306477", 0x12, 0x0, 0x5, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) r4 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x0, 0x0) read$auto_ftrace_system_enable_fops_trace_events(r4, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) 49.63855647s ago: executing program 7 (id=2411): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0xa, 0x2, 0x0) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r1, &(0x7f0000000140)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\nu(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1f, 0x3, 0x7}, 0xffff, 0x10010000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) 47.845822001s ago: executing program 7 (id=2414): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(0x0, r3, 0x0) setfsuid$auto(0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x401070cd, 0x5) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000480), 0x1a9040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x65) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/schedstat\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x9}, 0x7) 46.828388027s ago: executing program 0 (id=2416): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r1 = pipe$auto(0x0) dup2$auto(0x5, 0x4) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x7, 0xffffffffffffffff, 0x5, 0xee00, 0x5) keyctl$auto(0x18, 0xffffffffffffffff, 0x0, 0x0, 0x8) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x200109) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="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"], 0x120}}, 0x1) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) 46.755936851s ago: executing program 7 (id=2417): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x13, 0xfffffff8, 0x0, 0x22) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xeff7fffe, 0x6, 0x7fff, 0x5, 0xffffffffffffffff, [0x0, 0x6, 0xb246], {0x2, 0x10001, 0xb, 0x2de, 0x101, 0x1, 0x80, 0x6, 0x8004}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="a70c0000d2f09370a7a0e7e62dc4819cd414052e5d796a6c47cf8434eca651f28a9a6f107f174a54e733f7f05933fe22f5811a4f1b402605be06af2fd73e65", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72000014001c0000000000000000000000ffffe0000001"], 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) 45.826128247s ago: executing program 0 (id=2419): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x2, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) read$auto_tracing_thresh_fops_trace(r0, &(0x7f0000000380)=""/86, 0x56) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) r3 = socket(0x10, 0x2, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) timerfd_create$auto(0x9, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f00000000c0)='MJC802154_HWSIM\x00\xcb\x0fXS\v^\x02\xf7\xb5T\x04\xad\x96\xf4\xbc2UWT1\x02\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a\x00\x00A\xd8\xe8}q\xca|\x9aU9\x19\x8aU\xe1\xc6\xaby\xe3;]\xe5\xf9\x87\x90\xb6#\xc8\x12\x17\xe6\x18\x86\xb0\xdd\x9eh\x80\xff\x01,\x9f\xe6', 0x1060) read$auto(r3, 0x0, 0xb4d3) socket(0x23, 0x3, 0x1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100"}, 0x4, 0xfffffffe, 0x3, @raw=0xd, @integer={0x2, 0x9, 0x7fffffffffffffff}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4059a078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = socket(0x2b, 0x1, 0x1) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x0, 0x2, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, 0x0, 0x24084005) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) prctl$auto(0x42643399, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x89, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0xf518, 0x100002, 0x9, 0x5, 0x800, 0x7, 0xaf, 0x6, 0x5, 0x13, 0x5, 0x7, 0x4, 0x3, 0x7, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7ffc, 0xffffffffffffffff, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x400000, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1000000000000003, 0x6d76]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 44.740604069s ago: executing program 7 (id=2420): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x82001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mknod$auto(&(0x7f00000048c0)='./file0\x00', 0xc4ee, 0xffffffff) open(&(0x7f0000000000)='./file0\x00', 0x541102, 0x0) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000180)={{0xfffffffc, 0x0, 0x0, 0x5, 0x5f, 0xcf, 0x5}, &(0x7f0000000100)=0xd, 0x0, 0x7, 0x7, 0x6, 0x3, 0x14cd21ec, 0x3, 0x7, 0x4, @inferred=0xffffffffffffffff}) write$auto(r2, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3, 0xffffffffffffffff}, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) process_madvise$auto_MADV_NOHUGEPAGE(r3, &(0x7f0000000140)={&(0x7f0000000100)="eafaca39a3c674d1cf42f9ad987cb069597df20a75b3161909116ba6a97ebd8b75f8dbf95b5d5629a99b0f65d269b9", 0xffff}, 0x400000008000, 0xf, 0x3) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) unshare$auto(0x40000080) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x480, 0x29, &(0x7f0000000000)=']\x00', 0x8) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) unshare$auto(0x40000080) 43.848249031s ago: executing program 0 (id=2422): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x11c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x7}, @NL80211_ATTR_HE_OBSS_PD={0x100, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x68}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xb}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xcb, 0x5, "367b18af29c76b0c2c5a61e4de3a20c6b64ede2a396cabc063a7986096dbc0472c514cc0a43d85d75291144d2f77835d423d1c90507ddf4f06bf3b96d5c627fb9bae291ebb62091d3b40c8fa51e20e11a534bbd0d3b697e30c3760bec63c18623a125725ffca4a12e74f07fb27c296d5add8ff268a5073dbc2ebcf138ba6f639ff147df464b376713736682fece839ca96212afd3b575db18e9c1bcdf19f62308d40d0543a6372e1ce7ff730155407ae0d625fc681e4136e963de9c7653b2d62c97c5abb5e9b66"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xad}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) read$auto(0xffffffffffffffff, 0x0, 0x1f40) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000006c0)=@bpf_attr_7={@map_id=0x80000000, 0xa, 0x100, r1}, 0x400) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40015}, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0x100082) 42.206500338s ago: executing program 0 (id=2424): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) socket(0x11, 0x5, 0x100) setuid$auto(0xe) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semget$auto(0x7, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) set_mempolicy$auto(0x1, 0x0, 0x21) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) setsockopt$auto(0xffffffffffffffff, 0x9, 0x1, &(0x7f0000000080)='/dev/nullb0\x00', 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0x4, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') mlock$auto(0x7c88, 0x7fff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) close_range$auto(0x2, 0x8, 0x0) 42.010163009s ago: executing program 0 (id=2425): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x13, 0xfffffff8, 0x0, 0x22) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xeff7fffe, 0x6, 0x7fff, 0x5, 0xffffffffffffffff, [0x0, 0x6, 0xb246], {0x2, 0x10001, 0xb, 0x2de, 0x101, 0x1, 0x80, 0x6, 0x8004}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="a70c0000d2f09370a7a0e7e62dc4819cd414052e5d796a6c47cf8434eca651f28a9a6f107f174a54e733f7f05933fe22f5811a4f1b402605be06af2fd73e65", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72000014001c0000000000000000000000ffffe0000001"], 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) 40.07088942s ago: executing program 0 (id=2427): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise$auto(0xfff, 0x7, 0xfffff001) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r0, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu8\x00', 0x8001, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x400004, 0x49, 0x2000009b72, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000050c0), 0x80000, 0x0) ioctl$auto_UI_GET_VERSION(r3, 0x8004552d, 0x0) read$auto(r1, 0x0, 0x20) r4 = prctl$auto(0xbb, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x810000000001, 0x8, 0x4000000000df, 0x14, r0, 0x8000) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000340)={{&(0x7f0000001480)="fe5b2d8db432cb5a35c4154613e8b597098c1e9df23abf601321936169a4041fe5f10be4abf9002eb2e691a89374249f802c975635e5c54c80ef15efdc731526901f703c3005aa3aeb8ade3eecfb686884f11a12f3a0a722cb8b03269aa95d7c2f179e066f34ed7ef4b51da252095db4817a81d1539230bd12ddff40a2816d7c6af7a53ff07b1d84d61117b2aa83bf9f5dd378d266f8ab109974431f219e7a166e0e9b3c0535b0bdbd5ebfbf1a686fe76ecaffe3306b5c2f", 0xfffffffe, &(0x7f0000000200)={0x0, 0x40000000000007}, 0x1, &(0x7f0000001380)="d8ee39bef928c3ca32f9c1aad3008750535c4327759d007a44ed1ac1da593bc201fcf22dffcb1220bf4cb4cf01142fffc5e3253d4bbf6e351919f43c70f9aa2f1a24dcaadd7f9288dfc957aa715c634bdb873dfbfb55211eda3da55adca66e9bdbc1ee4fada01e76ac4615c998cd3471a6a2208f5ca87ce67137219e5a723b0654b6371febbcf61a1968281d62119d0cce427a032686715f08af04e8f5996fc46119dd3bbc24afab5339d1c81e7519cd1d411290b6b0040d71ac804c9bf4bd5d507daa503a3c", 0x4, 0x1}, 0x1}, 0x6, 0x4) open(0x0, 0x595002, 0x408) close_range$auto(0x2, 0x8, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x6c01c2, 0x0) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2, 0x0) write$auto_mousedev_fops_mousedev(r5, &(0x7f0000000040)="a97fa79f5d22b517df475fc013cde6df00402776adf2f0c42b22d17cc4a1d0f11cfe8869a641f85ce52700236d21735e5c8ada8478b14bbaeb2a2e80d0", 0x3d) socket(0x23, 0x1, 0x30) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 37.604481073s ago: executing program 3 (id=2405): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x13, 0xfffffff8, 0x0, 0x22) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xeff7fffe, 0x6, 0x7fff, 0x5, 0xffffffffffffffff, [0x0, 0x6, 0xb246], {0x2, 0x10001, 0xb, 0x2de, 0x101, 0x1, 0x80, 0x6, 0x8004}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="a70c0000d2f09370a7a0e7e62dc4819cd414052e5d796a6c47cf8434eca651f28a9a6f107f174a54e733f7f05933fe22f5811a4f1b402605be06af2fd73e65", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72000014001c0000000000000000000000ffffe0000001"], 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) 36.575251339s ago: executing program 3 (id=2431): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x35bb8ac0a5fd1827, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000003c0)={@inferred, "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"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x428101, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_gettime$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@query={@target_fd=r2, 0x89e3, 0x0, 0x3, 0xe, @prog_cnt=0x8, 0x0, 0x3, 0x401, 0x1, 0x5cd}, 0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(r3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) 32.290084247s ago: executing program 8 (id=2436): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x0) r1 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000000)=0x94d) read$auto_ptdump_curusr_fops_(r1, &(0x7f0000000100)=""/137, 0x89) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r2, &(0x7f0000000180)=""/38, 0x26) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mlockall$auto(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x1fffffe, 0x9) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x400000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) 30.867412226s ago: executing program 8 (id=2437): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$auto_FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000400)="954bec4f535e7c81") socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r2 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x10004010) fcntl$auto(0x3, 0x4, 0xa553) socket(0x11, 0x3, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x5f) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 30.795922286s ago: executing program 8 (id=2438): r0 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0xdce40a92b3a16a4b, 0x0) mmap$auto(0x0, 0x202000b, 0x2003, 0xeb1, r0, 0x8000) shutdown$auto(0x200000003, 0x2) r1 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0x107200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.events\x00', 0x2040, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x11, 0x0, 0x10) clock_nanosleep$auto(0x2, 0x80000200, 0x0, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media7\x00', 0x40, 0x0) setrlimit$auto(0x7, &(0x7f0000000380)={0x0, 0x100}) ioctl$auto_media_devnode_fops_mc_devnode(r2, 0x80047c05, 0x0) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socket(0x25, 0xb, 0x7) socket(0x10, 0x2, 0x0) pread64$auto(r3, 0x0, 0xdc, 0x800000000000c) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x23, 0x5, 0x0) ioctl$auto(r4, 0x89ef, 0x74) unshare$auto(0x40000080) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x0, 0x200005, 0x1, 0x10000000040eb2, r1, 0x308000000000) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000080)={0x0, 0x34, 0x7fff, 0x1000000005, 0x80000000009, 0x2, 0x9, 0x7, 0x800000000005, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x4) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) 30.409934906s ago: executing program 8 (id=2439): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) shmget$auto(0x100000000, 0x3, 0x79e56dc9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x50040, 0x0) shmctl$auto(0x7, 0x0, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x3, 0x2}, 0x7, 0x1, 0x1120d96a, 0x5, @raw=0x7, @raw=0x2, 0x1, 0x0, &(0x7f0000000180)="a1724abd1fa25b8299d1d1f01f313d333cb3a0", &(0x7f00000001c0)="8eb063525b13008bd5280b30961ac037c43d55c40b53658572424fcfd3806fbe79745ceeba50fb2934e28ea524270730a18be1a5e38edad57c17d8227cd1696f56afe01b11668a319f405f45c7a5e76e2e8db26d4df3a6f6be4ae4295a7de058cf1ebf54e00801a7f85ac94a4fc51854554d58452b35978faf37bbb321aa936718ee64e7f329273dc2a6a76b944a0d146c126f74ed61bf2b2a251249622016d7ea47942f513f9b618a86ff3294432416a774a1276b4a0e9cfb59bd732b6a1d"}) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000340), 0x208200, 0x0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000800}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="700001ff", @ANYRES16=r1, @ANYBLOB="000828bd7000fbdbdf256400000005001c00010000001400040070696d72656731000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x40) socket(0x0, 0x800, 0x8) socket(0xa, 0x2, 0x0) unshare$auto(0x6c000000) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/udp\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa401, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) pread64$auto(r3, 0x0, 0x200000000006, 0x7) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfdef) 30.088180894s ago: executing program 8 (id=2440): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x13, 0xfffffff8, 0x0, 0x22) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xeff7fffe, 0x6, 0x7fff, 0x5, 0xffffffffffffffff, [0x0, 0x6, 0xb246], {0x2, 0x10001, 0xb, 0x2de, 0x101, 0x1, 0x80, 0x6, 0x8004}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="a70c0000d2f09370a7a0e7e62dc4819cd414052e5d796a6c47cf8434eca651f28a9a6f107f174a54e733f7f05933fe22f5811a4f1b402605be06af2fd73e65", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72000014001c0000000000000000000000ffffe0000001"], 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) 29.438765869s ago: executing program 39 (id=2420): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x82001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mknod$auto(&(0x7f00000048c0)='./file0\x00', 0xc4ee, 0xffffffff) open(&(0x7f0000000000)='./file0\x00', 0x541102, 0x0) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000180)={{0xfffffffc, 0x0, 0x0, 0x5, 0x5f, 0xcf, 0x5}, &(0x7f0000000100)=0xd, 0x0, 0x7, 0x7, 0x6, 0x3, 0x14cd21ec, 0x3, 0x7, 0x4, @inferred=0xffffffffffffffff}) write$auto(r2, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3, 0xffffffffffffffff}, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) process_madvise$auto_MADV_NOHUGEPAGE(r3, &(0x7f0000000140)={&(0x7f0000000100)="eafaca39a3c674d1cf42f9ad987cb069597df20a75b3161909116ba6a97ebd8b75f8dbf95b5d5629a99b0f65d269b9", 0xffff}, 0x400000008000, 0xf, 0x3) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) unshare$auto(0x40000080) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x480, 0x29, &(0x7f0000000000)=']\x00', 0x8) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) unshare$auto(0x40000080) 29.125219283s ago: executing program 8 (id=2442): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/afs/servers\x00', 0x400, 0x0) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x203, 0x5) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xab1, 0xfffffffffffffffa, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a7, 0x7000000) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x2, 0x80002, 0x73) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_SYS_DISPATCH_OFF(0x7, 0x0, 0x0, 0x9, 0xcb) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10010000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x110}}, 0x24048084) ioctl$auto(r5, 0x2006611, r4) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) write$auto(r8, &(0x7f0000000040)='+[).#\xc4\x00', 0x1e) write$auto(r8, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x92\xa3\x99\xc4 \xbcr^\x9f\x8a\a\xd7\x19\xc3k\xa2\xce\xdb\xab?\xec\x1f\x00\x068\xae\b\x1e~\xe0{\x1f\xf6^\x92\xdfDng', 0x80) 24.891230017s ago: executing program 40 (id=2427): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise$auto(0xfff, 0x7, 0xfffff001) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r0, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu8\x00', 0x8001, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x400004, 0x49, 0x2000009b72, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000050c0), 0x80000, 0x0) ioctl$auto_UI_GET_VERSION(r3, 0x8004552d, 0x0) read$auto(r1, 0x0, 0x20) r4 = prctl$auto(0xbb, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x810000000001, 0x8, 0x4000000000df, 0x14, r0, 0x8000) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000340)={{&(0x7f0000001480)="fe5b2d8db432cb5a35c4154613e8b597098c1e9df23abf601321936169a4041fe5f10be4abf9002eb2e691a89374249f802c975635e5c54c80ef15efdc731526901f703c3005aa3aeb8ade3eecfb686884f11a12f3a0a722cb8b03269aa95d7c2f179e066f34ed7ef4b51da252095db4817a81d1539230bd12ddff40a2816d7c6af7a53ff07b1d84d61117b2aa83bf9f5dd378d266f8ab109974431f219e7a166e0e9b3c0535b0bdbd5ebfbf1a686fe76ecaffe3306b5c2f", 0xfffffffe, &(0x7f0000000200)={0x0, 0x40000000000007}, 0x1, &(0x7f0000001380)="d8ee39bef928c3ca32f9c1aad3008750535c4327759d007a44ed1ac1da593bc201fcf22dffcb1220bf4cb4cf01142fffc5e3253d4bbf6e351919f43c70f9aa2f1a24dcaadd7f9288dfc957aa715c634bdb873dfbfb55211eda3da55adca66e9bdbc1ee4fada01e76ac4615c998cd3471a6a2208f5ca87ce67137219e5a723b0654b6371febbcf61a1968281d62119d0cce427a032686715f08af04e8f5996fc46119dd3bbc24afab5339d1c81e7519cd1d411290b6b0040d71ac804c9bf4bd5d507daa503a3c", 0x4, 0x1}, 0x1}, 0x6, 0x4) open(0x0, 0x595002, 0x408) close_range$auto(0x2, 0x8, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x6c01c2, 0x0) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2, 0x0) write$auto_mousedev_fops_mousedev(r5, &(0x7f0000000040)="a97fa79f5d22b517df475fc013cde6df00402776adf2f0c42b22d17cc4a1d0f11cfe8869a641f85ce52700236d21735e5c8ada8478b14bbaeb2a2e80d0", 0x3d) socket(0x23, 0x1, 0x30) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 21.379055463s ago: executing program 41 (id=2431): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x35bb8ac0a5fd1827, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000003c0)={@inferred, "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"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x428101, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_gettime$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@query={@target_fd=r2, 0x89e3, 0x0, 0x3, 0xe, @prog_cnt=0x8, 0x0, 0x3, 0x401, 0x1, 0x5cd}, 0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(r3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) 16.515022971s ago: executing program 2 (id=2454): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x49, 0x0, 0x5) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyq7\x00', 0x2480, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x5}, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0xe9) unshare$auto(0x40000080) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) bpf$auto(0x0, &(0x7f0000000200)=@link_create={@map_fd=r2, @target_fd=r1, 0x81, 0x10000, @netkit={@relative_fd=r3, 0x4}}, 0xa3) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x40100, 0x0) read$auto_tracing_entries_fops_trace(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) mmap$auto(0xffff, 0x2020009, 0x3, 0x100eb1, 0xfffffffffffffffa, 0x2) r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r5, &(0x7f0000000040)="a5cac73806f9a7", 0x7) io_uring_setup$auto(0x2002, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) 15.416704119s ago: executing program 2 (id=2455): mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x148002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r3, 0xc0a85320, 0x38) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) socket(0xa, 0x2, 0x0) 13.869148753s ago: executing program 42 (id=2442): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/afs/servers\x00', 0x400, 0x0) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x203, 0x5) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xab1, 0xfffffffffffffffa, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a7, 0x7000000) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x2, 0x80002, 0x73) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_SYS_DISPATCH_OFF(0x7, 0x0, 0x0, 0x9, 0xcb) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10010000", @ANYRES16=r7, @ANYBLOB="00022fbd7200fd01df250c00001b2c0fd721384e4d78afb95a4a00f0000380e90003804024db62167795396c96a4e343bff9149879ad9eebb7e77a49263969f75742895cb3962f9ed6e31f781017064b0eed1f5d005eee0319e2b960db068266685e9e196861feb281753760034e0f1f0a97daa509390e92146f482378a329e891222652fc481f63bfde5620dbc5c6f0a2713720a52697c1050809d7fd6f6a3258fdceb6f0ad16deaa04157c1d3d363acd39c435389895fc4eeff27d57dae4bab4dfbafb775978704f295b6d2ccb8880c28210d2fdc410e302a6cb10c124bc86c81233d9931e1c84527cfcf65792ca69e6d30e504c88317bf161ab2712892e5c9f82108500e07f34", @ANYRES32=0x0, @ANYBLOB], 0x110}}, 0x24048084) ioctl$auto(r5, 0x2006611, r4) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) write$auto(r8, &(0x7f0000000040)='+[).#\xc4\x00', 0x1e) write$auto(r8, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x92\xa3\x99\xc4 \xbcr^\x9f\x8a\a\xd7\x19\xc3k\xa2\xce\xdb\xab?\xec\x1f\x00\x068\xae\b\x1e~\xe0{\x1f\xf6^\x92\xdfDng', 0x80) 13.85507161s ago: executing program 2 (id=2459): setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x1, 0xffffffffffffffff, 0x210) ioctl$auto(0xffffffffffffffff, 0x5423, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x5, 0x8000400) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x773002, 0x0) mremap$auto(0x0, 0x100000000, 0x3fd6, 0x3, 0x7fffffffb000) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, 0x0, 0xd5d) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) close_range$auto(0x2, 0x8, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x189101, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-subdev3\x00', 0x100, 0x0) ioctl$auto(r1, 0xc0145608, r2) semctl$auto(0x7, 0x6, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x2100, 0x0) ioctl$auto_XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9, 0x2, 0xffff, 0xa, [0x7, 0x0, 0x200, 0xbe6, 0x8000000000000001, 0x2]}) 13.050775431s ago: executing program 2 (id=2460): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e24}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_STA_FLAGS2={0x25, 0x43, "31924ebda1caf5c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff4e}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffff}, @NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, "42e28b6e759cde6edf63f0b7b3273f"}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto_BTRFS_IOC_ENCODED_READ_32(r1, 0x80789440, &(0x7f00000001c0)={0x7ff, 0xe, 0xffffffffffffffff, 0xffffffff00000000, 0x962, 0x7, 0x100000000, 0x1, 0x401, "1e7d6de11b02706fe560d0bf78d9200692dd808d1c7c7e242f061b2c3f7c5052ec5e6dd01bf9a5da94b6e520886b4818f93693e8c7cb20ddd690ac185ae3b4a0"}) 2.927843563s ago: executing program 1 (id=2476): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/rndis_host/uevent\x00', 0x100000, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) write$auto_vga_arb_device_fops_vgaarb(0xffffffffffffffff, &(0x7f0000000100), 0x0) mmap$auto(0x0, 0x7fffff, 0x7, 0x80000011, r0, 0x0) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0x80000, 0x8, 0x948b, 0x9, 0x15f4da0a, 0x6, 0x10, 0x200000064, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8000000000001fd, 0x20080000006, 0x80000001, 0x1000000000000bc3, 0x800, 0x4, 0xfc, 0x10003, 0x400000000007, 0x1ae9, 0x80000000a55, 0x0, 0x80000000, 0x1, 0xffffdfffffffff81, 0x3]}, 0x0) 2.348980162s ago: executing program 4 (id=2458): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x141b00, 0x0) fsetxattr$auto(r0, &(0x7f0000000040)='{\x00', &(0x7f0000000140)="34839380340b53b0c362485b2ef3089a2f0cda7ea7de4d384e38ad359c55e33e81b1bb30425ae9ccc49ca4d06b522b7faaeb21bac978351341001786fe0367c507f6053c4aeed251e082076886588a7c9f93d7e65700169d2febefc4986b8d11b672d7f97106f6788e8b6fc7256fdb0579e0e2db156ba35b17bf13a25521848c086ed929af1159bce7457d0fbad06f04627eb921cefef0c73afa460125f5c3b624e870873b0f3b8f26527f36af1c4c46711c0aee2b5af1bf2222069d6fcfb3b173143c049f91", 0x5, 0x100) r1 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x18) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x80000000, 0x20df, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) capset$auto(0x0, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, r3, 0x0) syz_clone3(&(0x7f00000006c0)={0xa8208000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x1d}, &(0x7f0000000500)=""/232, 0xe8, &(0x7f0000000600)=""/72, &(0x7f0000000680), 0x0, {r4}}, 0x58) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r4) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x5) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x64801, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) 2.055909424s ago: executing program 4 (id=2477): mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) arch_prctl$auto_ARCH_MAP_VDSO_X32(0x2001, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1.886022771s ago: executing program 4 (id=2478): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x141b00, 0x0) fsetxattr$auto(r0, &(0x7f0000000040)='{\x00', &(0x7f0000000140)="34839380340b53b0c362485b2ef3089a2f0cda7ea7de4d384e38ad359c55e33e81b1bb30425ae9ccc49ca4d06b522b7faaeb21bac978351341001786fe0367c507f6053c4aeed251e082076886588a7c9f93d7e65700169d2febefc4986b8d11b672d7f97106f6788e8b6fc7256fdb0579e0e2db156ba35b17bf13a25521848c086ed929af1159bce7457d0fbad06f04627eb921cefef0c73afa460125f5c3b624e870873b0f3b8f26527f36af1c4c46711c0aee2b5af1bf2222069d6fcfb3b173143c049f91", 0x5, 0x100) r1 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x18) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x80000000, 0x20df, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) capset$auto(0x0, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, r3, 0x0) syz_clone3(&(0x7f00000006c0)={0xa8208000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x1d}, &(0x7f0000000500)=""/232, 0xe8, &(0x7f0000000600)=""/72, &(0x7f0000000680), 0x0, {r4}}, 0x58) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r4) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020026bd7000000000001300000006000e00fdff000016001f002f6465762f736e642f6d6957694332"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x5) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x64801, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) 1.664632045s ago: executing program 4 (id=2479): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x9cd, 0x420009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8003) socket(0x2, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) bind$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5a, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af032ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc9", 0x3a) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r3, 0x0, 0x100000000, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x3) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 327.092078ms ago: executing program 4 (id=2480): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x80400, 0x0) ioctl$auto_EVIOCSMASK(r0, 0x40104593, &(0x7f00000002c0)={0x2, 0x8, 0x3}) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000ae8f146a675a41ef3effe47a263e05ac231303fb9960620a51f3feb88398334a7d0796eb18cb7c1f074c30e530a7bb8a2fb6a4fba97fa0fb83a1f257bf45bf5d2c171ed04431a4607db9f0891c92ca5c9b35e6bdf638bd45ba051972d028", @ANYRES16=r1, @ANYBLOB="1b0029bd7800fddbdf250300000004000800100003800c0011800400f2800400310012000100898771f1c19f1779048590828847000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) unshare$auto(0x10) mmap$auto(0x2, 0x6, 0xaa, 0x19, r3, 0x44) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') fchdir$auto(r4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0) 0s ago: executing program 4 (id=2481): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x202041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x13) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f00000000c0), 0x101c41, 0x0) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) ioctl$auto(r1, 0x40046103, 0x81) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f0000000180)={0x0, 0x1000}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0x1) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) pwrite64$auto(r3, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x400000000001, 0x8) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) kernel console output (not intermixed with test programs): _mark+0x10/0x10 [ 658.035864][T16418] ? rcu_read_lock_any_held+0x6a/0xa0 [ 658.035882][T16418] ? find_held_lock+0x2b/0x80 [ 658.035898][T16418] ? ksys_write+0x190/0x250 [ 658.035922][T16418] do_futex+0x371/0x440 [ 658.035937][T16418] ? __pfx_do_futex+0x10/0x10 [ 658.035952][T16418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.035979][T16418] __x64_sys_futex+0x34f/0x4d0 [ 658.035997][T16418] ? __pfx___x64_sys_futex+0x10/0x10 [ 658.036021][T16418] do_syscall_64+0x115/0x840 [ 658.036035][T16418] ? clear_bhb_loop+0x40/0x90 [ 658.036053][T16418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.036070][T16418] RIP: 0033:0x7fb5df19de59 [ 658.036084][T16418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.036098][T16418] RSP: 002b:00007fb5dffd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 658.036113][T16418] RAX: ffffffffffffffda RBX: 00007fb5df425fa0 RCX: 00007fb5df19de59 [ 658.036123][T16418] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 658.036131][T16418] RBP: 00007fb5df233e6f R08: 0000000000000000 R09: 000000008000fff5 [ 658.036140][T16418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.036149][T16418] R13: 00007fb5df426038 R14: 00007fb5df425fa0 R15: 00007ffd78511eb8 [ 658.036168][T16418] [ 658.628390][ T29] audit: type=1804 audit(4294967307.584:18): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2021" name="/newroot/528/file0" dev="tmpfs" ino=2766 res=1 errno=0 [ 658.673271][ T29] audit: type=1804 audit(4294967307.634:19): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2021" name="/newroot/528/file0" dev="tmpfs" ino=2766 res=1 errno=0 [ 658.758830][ T29] audit: type=1800 audit(4294967307.674:20): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2021" name="file0" dev="tmpfs" ino=2766 res=0 errno=0 [ 659.116189][T16435] futex_wake_op: syz.2.2023 tries to shift op by -1; fix this program [ 664.105230][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 664.240144][T16516] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2039: iget: checksum invalid [ 664.299079][T16516] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 664.368563][T16516] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2039: iget: checksum invalid [ 664.426315][T16516] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 664.497110][T16516] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2039: iget: checksum invalid [ 664.547163][T16516] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 664.657084][T16516] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2039: iget: checksum invalid [ 664.770186][T16516] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 664.879255][T16516] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 664.932301][T16516] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 669.405301][T16601] hub 1-0:1.0: USB hub found [ 669.430868][T16601] hub 1-0:1.0: 1 port detected [ 671.471679][T16653] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2069'. [ 672.352315][T16666] FAULT_INJECTION: forcing a failure. [ 672.352315][T16666] name failslab, interval 1, probability 0, space 0, times 0 [ 672.439560][T16666] CPU: 0 UID: 0 PID: 16666 Comm: syz.1.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.439587][T16666] Tainted: [L]=SOFTLOCKUP [ 672.439593][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.439602][T16666] Call Trace: [ 672.439608][T16666] [ 672.439613][T16666] dump_stack_lvl+0x100/0x190 [ 672.439635][T16666] should_fail_ex.cold+0x5/0xa [ 672.439653][T16666] should_failslab+0xc2/0x120 [ 672.439672][T16666] __kvmalloc_node_noprof+0x116/0x970 [ 672.439688][T16666] ? __x64_sys_futex+0x358/0x4d0 [ 672.439706][T16666] ? __do_sys_setgroups+0x126/0x4f0 [ 672.439728][T16666] __do_sys_setgroups+0x126/0x4f0 [ 672.439750][T16666] ? 0xffffffffff600000 [ 672.439764][T16666] do_syscall_64+0x115/0x840 [ 672.439778][T16666] ? clear_bhb_loop+0x40/0x90 [ 672.439796][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.439811][T16666] RIP: 0033:0x7f9aded9de59 [ 672.439824][T16666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.439839][T16666] RSP: 002b:00007f9adcfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 672.439854][T16666] RAX: ffffffffffffffda RBX: 00007f9adf026090 RCX: 00007f9aded9de59 [ 672.439864][T16666] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 672.439873][T16666] RBP: 00007f9adee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 672.439882][T16666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.439891][T16666] R13: 00007f9adf026128 R14: 00007f9adf026090 R15: 00007ffc1c632218 [ 672.439907][T16666] ? 0xffffffffff600000 [ 672.439921][T16666] [ 673.394538][T16681] MTRR 1 not used [ 675.364987][ T29] audit: type=1800 audit(4294967324.413:21): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2083" name="features" dev="configfs" ino=91766 res=0 errno=0 [ 676.459046][T16751] ima: policy update failed [ 676.494019][ T29] audit: type=1802 audit(4294967325.549:22): pid=16751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2088" res=0 errno=0 [ 677.008567][T16737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.163298][T16787] binder: 16786:16787 ioctl c018620c 200000000040 returned -22 [ 680.018841][T16800] FAULT_INJECTION: forcing a failure. [ 680.018841][T16800] name failslab, interval 1, probability 0, space 0, times 0 [ 680.079245][T16800] CPU: 0 UID: 0 PID: 16800 Comm: syz.4.2097 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.079272][T16800] Tainted: [L]=SOFTLOCKUP [ 680.079277][T16800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.079287][T16800] Call Trace: [ 680.079293][T16800] [ 680.079299][T16800] dump_stack_lvl+0x100/0x190 [ 680.079321][T16800] should_fail_ex.cold+0x5/0xa [ 680.079340][T16800] should_failslab+0xc2/0x120 [ 680.079359][T16800] kmem_cache_alloc_noprof+0x91/0x6a0 [ 680.079376][T16800] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 680.079392][T16800] ? acpi_ps_alloc_op+0x212/0x2b0 [ 680.079410][T16800] acpi_ps_alloc_op+0x212/0x2b0 [ 680.079423][T16800] ? acpi_ut_status_exit+0x111/0x1c0 [ 680.079439][T16800] acpi_ps_create_op+0x4b3/0xd10 [ 680.079462][T16800] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 680.079484][T16800] ? acpi_ut_create_generic_state+0x61/0xc0 [ 680.079508][T16800] ? acpi_ut_status_exit+0x111/0x1c0 [ 680.079526][T16800] acpi_ps_parse_loop+0x93f/0x26e0 [ 680.079560][T16800] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 680.079584][T16800] ? acpi_ut_status_exit+0x111/0x1c0 [ 680.079600][T16800] ? acpi_ds_call_control_method+0x435/0xab0 [ 680.079625][T16800] acpi_ps_parse_aml+0x81e/0x1120 [ 680.079653][T16800] acpi_ps_execute_method+0x5c4/0xe90 [ 680.079674][T16800] acpi_ns_evaluate+0x640/0x1670 [ 680.079695][T16800] acpi_evaluate_object+0x420/0xe00 [ 680.079715][T16800] ? __kvmalloc_node_noprof+0x34f/0x970 [ 680.079730][T16800] ? seq_read_iter+0x819/0x1270 [ 680.079753][T16800] ? vfs_read+0x82e/0xb40 [ 680.079776][T16800] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 680.079795][T16800] ? lock_acquire+0x1b9/0x370 [ 680.079822][T16800] acpi_evaluate_integer+0xdf/0x220 [ 680.079840][T16800] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 680.079858][T16800] ? __lock_acquire+0x49f/0x1a40 [ 680.079885][T16800] ? __pfx_status_show+0x10/0x10 [ 680.079905][T16800] status_show+0xa0/0x120 [ 680.079925][T16800] ? __pfx_status_show+0x10/0x10 [ 680.079949][T16800] dev_attr_show+0x52/0xa0 [ 680.079970][T16800] ? __pfx_dev_attr_show+0x10/0x10 [ 680.079989][T16800] sysfs_kf_seq_show+0x217/0x3f0 [ 680.080012][T16800] seq_read_iter+0x32f/0x1270 [ 680.080031][T16800] ? lock_acquire+0x1b9/0x370 [ 680.080059][T16800] kernfs_fop_read_iter+0x46c/0x610 [ 680.080076][T16800] ? rw_verify_area+0xce/0x6d0 [ 680.080095][T16800] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 680.080113][T16800] vfs_read+0x82e/0xb40 [ 680.080136][T16800] ? __pfx_vfs_read+0x10/0x10 [ 680.080169][T16800] ksys_read+0x12a/0x250 [ 680.080190][T16800] ? __pfx_ksys_read+0x10/0x10 [ 680.080216][T16800] do_syscall_64+0x115/0x840 [ 680.080230][T16800] ? clear_bhb_loop+0x40/0x90 [ 680.080249][T16800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.080264][T16800] RIP: 0033:0x7f84be79de59 [ 680.080278][T16800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.080292][T16800] RSP: 002b:00007f84bc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.080307][T16800] RAX: ffffffffffffffda RBX: 00007f84bea25fa0 RCX: 00007f84be79de59 [ 680.080318][T16800] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 680.080328][T16800] RBP: 00007f84be833e6f R08: 0000000000000000 R09: 0000000000000000 [ 680.080336][T16800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.080346][T16800] R13: 00007f84bea26038 R14: 00007f84bea25fa0 R15: 00007fff12eefd88 [ 680.080367][T16800] [ 680.080438][T16800] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 681.097717][T16800] ACPI Error: Aborting method \_SB.LNKB._STA due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 681.165154][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.343719][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.504227][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'. [ 681.662492][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.815748][T16809] hsr_slave_0 (unregistering): left promiscuous mode [ 681.824319][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.846725][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.858625][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.867972][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.876999][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.043742][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.155242][ T35] bridge_slave_1: left allmulticast mode [ 683.190340][ T35] bridge_slave_1: left promiscuous mode [ 683.239201][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.332500][ T35] bridge_slave_0: left allmulticast mode [ 683.380414][ T35] bridge_slave_0: left promiscuous mode [ 683.408022][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.593355][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2105'. [ 683.918619][ T5631] Bluetooth: hci2: command tx timeout [ 684.035549][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.065375][ T35] bond0 (unregistering): Released all slaves [ 684.135746][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 684.200526][ T35] &#$@\]\-: left promiscuous mode [ 684.715210][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.723319][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.649947][T16884] random: crng reseeded on system resumption [ 685.717385][ T35] hsr_slave_0: left promiscuous mode [ 685.758992][ T35] hsr_slave_1: left promiscuous mode [ 685.872993][ T35] veth1_macvtap: left promiscuous mode [ 685.883054][T16896] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2108'. [ 685.923445][ T35] veth0_macvtap: left promiscuous mode [ 685.957805][ T35] veth1_vlan: left promiscuous mode [ 685.987499][ T5631] Bluetooth: hci2: command tx timeout [ 686.004641][ T35] veth0_vlan: left promiscuous mode [ 686.364885][T16904] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2110'. [ 686.575525][ T35] team0 (unregistering): Port device team_slave_1 removed [ 686.590513][ T35] team0 (unregistering): Port device team_slave_0 removed [ 686.740862][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 687.755728][T16820] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.799981][T16820] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.846115][T16820] bridge_slave_0: entered allmulticast mode [ 687.889659][T16820] bridge_slave_0: entered promiscuous mode [ 687.932481][T16820] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.964580][T16820] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.004851][T16820] bridge_slave_1: entered allmulticast mode [ 688.037617][T16820] bridge_slave_1: entered promiscuous mode [ 688.056058][ T5631] Bluetooth: hci2: command tx timeout [ 688.133465][ T5631] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 688.168720][T16902] Process accounting paused [ 688.246686][T16820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.335250][T16820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.371845][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 688.569367][T16952] blktrace: Concurrent blktraces are not allowed on nbd5 [ 688.600221][T16820] team0: Port device team_slave_0 added [ 688.638426][T16820] team0: Port device team_slave_1 added [ 689.064075][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2118'. [ 689.128006][T16820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.168776][T16820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.261714][T16820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.330648][T16964] bond0: (slave bond_slave_0): Releasing backup interface [ 689.523910][T16820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.566474][T16820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.681423][T16820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.125163][ T5631] Bluetooth: hci2: command tx timeout [ 690.173929][T16820] hsr_slave_0: entered promiscuous mode [ 690.198482][T16820] hsr_slave_1: entered promiscuous mode [ 690.217360][T16820] debugfs: 'hsr0' already exists in 'hsr' [ 690.236609][T16820] Cannot create hsr debugfs directory [ 690.271281][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 693.625860][T17050] random: crng reseeded on system resumption [ 694.696496][T16820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 694.725582][T16820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.865286][T16820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 694.898847][T16820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.001861][T16820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 695.043809][T16820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.120496][T16820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 695.167813][T16820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.755178][T16820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.933099][T16820] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.237307][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.244503][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.553626][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.560797][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.473502][ T5631] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 699.473542][ T5631] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 699.488662][ T5631] Bluetooth: hci0: Dropping invalid advertising data [ 699.496952][ T5631] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 699.496969][ T5631] Bluetooth: hci0: Dropping invalid advertising data [ 699.512919][ T5631] Bluetooth: hci0: unknown advertising packet type: 0x79 [ 699.512941][ T5631] Bluetooth: hci0: Dropping invalid advertising data [ 699.527331][ T5631] Bluetooth: hci0: Malformed LE Event: 0x02 [ 699.805353][T16820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.307882][T16820] veth0_vlan: entered promiscuous mode [ 700.350611][T16820] veth1_vlan: entered promiscuous mode [ 700.470261][T16820] veth0_macvtap: entered promiscuous mode [ 700.601049][T16820] veth1_macvtap: entered promiscuous mode [ 700.608241][ T5631] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 700.753717][T16820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.831715][T16820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.934944][T17151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.005456][T17151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.057244][T17151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.131399][T17151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.237266][T17256] FAULT_INJECTION: forcing a failure. [ 701.237266][T17256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.350211][T17256] CPU: 0 UID: 0 PID: 17256 Comm: syz.2.2143 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.350240][T17256] Tainted: [L]=SOFTLOCKUP [ 701.350245][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.350256][T17256] Call Trace: [ 701.350261][T17256] [ 701.350268][T17256] dump_stack_lvl+0x100/0x190 [ 701.350290][T17256] should_fail_ex.cold+0x5/0xa [ 701.350305][T17256] ? prepare_alloc_pages+0x16d/0x5f0 [ 701.350326][T17256] should_fail_alloc_page+0xeb/0x140 [ 701.350346][T17256] prepare_alloc_pages+0x1f0/0x5f0 [ 701.350370][T17256] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 701.350386][T17256] ? folio_batch_move_lru+0x37c/0xc00 [ 701.350410][T17256] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 701.350434][T17256] ? folio_batch_move_lru+0x3a9/0xc00 [ 701.350456][T17256] ? __pfx_lru_add+0x10/0x10 [ 701.350479][T17256] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 701.350501][T17256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.350526][T17256] ? __lock_acquire+0x49f/0x1a40 [ 701.350547][T17256] ? __lock_acquire+0x49f/0x1a40 [ 701.350573][T17256] ? lock_acquire+0x1b9/0x370 [ 701.350594][T17256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 701.350615][T17256] ? policy_nodemask+0xed/0x4f0 [ 701.350636][T17256] alloc_pages_mpol+0x1fb/0x540 [ 701.350656][T17256] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 701.350681][T17256] folio_alloc_mpol_noprof+0x36/0x260 [ 701.350703][T17256] vma_alloc_folio_noprof+0xed/0x1d0 [ 701.350724][T17256] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 701.350752][T17256] do_anonymous_page+0xb2b/0x2080 [ 701.350775][T17256] ? rcu_read_unlock+0x2d/0xb0 [ 701.350793][T17256] __handle_mm_fault+0x1d2c/0x2a00 [ 701.350817][T17256] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 701.350835][T17256] ? __pfx___handle_mm_fault+0x10/0x10 [ 701.350858][T17256] ? pte_offset_map_lock+0x174/0x320 [ 701.350876][T17256] ? find_held_lock+0x2b/0x80 [ 701.350905][T17256] ? follow_page_pte+0x4d0/0x13f0 [ 701.350929][T17256] handle_mm_fault+0x37b/0xa30 [ 701.350956][T17256] __get_user_pages+0x1178/0x32a0 [ 701.350983][T17256] ? __pfx___get_user_pages+0x10/0x10 [ 701.351008][T17256] populate_vma_page_range+0x267/0x3f0 [ 701.351030][T17256] ? __pfx_populate_vma_page_range+0x10/0x10 [ 701.351050][T17256] ? __pfx_find_vma_intersection+0x10/0x10 [ 701.351073][T17256] __mm_populate+0x107/0x3a0 [ 701.351093][T17256] ? __pfx___mm_populate+0x10/0x10 [ 701.351114][T17256] ? up_write+0x2e5/0x5c0 [ 701.351130][T17256] vm_mmap_pgoff+0x37f/0x470 [ 701.351150][T17256] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 701.351175][T17256] ? __pfx_do_futex+0x10/0x10 [ 701.351189][T17256] ? __do_sys_clone+0xd9/0x120 [ 701.351208][T17256] ksys_mmap_pgoff+0xe4/0x610 [ 701.351227][T17256] ? __x64_sys_futex+0x358/0x4d0 [ 701.351242][T17256] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 701.351262][T17256] ? xfd_validate_state+0x129/0x190 [ 701.351281][T17256] __x64_sys_mmap+0x125/0x190 [ 701.351300][T17256] do_syscall_64+0x115/0x840 [ 701.351313][T17256] ? clear_bhb_loop+0x40/0x90 [ 701.351332][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.351349][T17256] RIP: 0033:0x7fb5df19de59 [ 701.351362][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.351377][T17256] RSP: 002b:00007fb5dffd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 701.351392][T17256] RAX: ffffffffffffffda RBX: 00007fb5df425fa0 RCX: 00007fb5df19de59 [ 701.351402][T17256] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 701.351411][T17256] RBP: 00007fb5df233e6f R08: ffffffffffffffff R09: 0000000000000000 [ 701.351421][T17256] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 701.351430][T17256] R13: 00007fb5df426038 R14: 00007fb5df425fa0 R15: 00007ffd78511eb8 [ 701.351451][T17256] [ 702.210018][T17152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.231630][T17152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.249985][T17152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.265026][T17152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.101218][T17288] netlink: 'syz.2.2147': attribute type 4 has an invalid length. [ 708.946742][T17407] bond0: no command found in slaves file - use +ifname or -ifname [ 709.336772][T17397] random: crng reseeded on system resumption [ 709.668125][T17151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.840273][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 709.857062][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 709.865498][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 709.877848][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 709.885440][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.003333][T17151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.226462][T17151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.825488][T17151] bridge_slave_1: left allmulticast mode [ 710.847540][T17151] bridge_slave_1: left promiscuous mode [ 710.868069][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.895356][T17151] bridge_slave_0: left allmulticast mode [ 710.912248][T17151] bridge_slave_0: left promiscuous mode [ 710.932018][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.604097][T17151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.675874][T17151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.725936][T17151] bond0 (unregistering): Released all slaves [ 711.941354][ T5627] Bluetooth: hci1: command tx timeout [ 712.073398][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 712.311384][T17151] hsr_slave_0: left promiscuous mode [ 712.322514][T17151] hsr_slave_1: left promiscuous mode [ 712.338077][T17151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.355667][T17151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.373352][T17151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.390244][T17151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.425900][T17151] veth1_macvtap: left promiscuous mode [ 712.439425][T17151] veth0_macvtap: left promiscuous mode [ 712.452637][T17151] veth1_vlan: left promiscuous mode [ 712.465041][T17151] veth0_vlan: left promiscuous mode [ 713.018782][T17151] team0 (unregistering): Port device team_slave_1 removed [ 713.053233][T17151] team0 (unregistering): Port device team_slave_0 removed [ 713.193540][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 713.980243][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 714.002136][ T5627] Bluetooth: hci1: command tx timeout [ 714.636079][T17517] FAULT_INJECTION: forcing a failure. [ 714.636079][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 714.778369][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.1.2176 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.778394][T17517] Tainted: [L]=SOFTLOCKUP [ 714.778400][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 714.778408][T17517] Call Trace: [ 714.778416][T17517] [ 714.778422][T17517] dump_stack_lvl+0x100/0x190 [ 714.778442][T17517] should_fail_ex.cold+0x5/0xa [ 714.778459][T17517] should_failslab+0xc2/0x120 [ 714.778479][T17517] kmem_cache_alloc_noprof+0x91/0x6a0 [ 714.778497][T17517] ? mas_preallocate+0x1105/0x14a0 [ 714.778519][T17517] mas_preallocate+0x1105/0x14a0 [ 714.778539][T17517] ? __pfx_mas_preallocate+0x10/0x10 [ 714.778562][T17517] ? anon_vma_name+0x5a/0x250 [ 714.778586][T17517] __split_vma+0x33d/0xda0 [ 714.778612][T17517] ? __pfx___split_vma+0x10/0x10 [ 714.778638][T17517] ? __pfx___vma_start_write+0x10/0x10 [ 714.778659][T17517] ? __pfx_mas_prev+0x10/0x10 [ 714.778679][T17517] vms_gather_munmap_vmas+0x3a5/0x1720 [ 714.778707][T17517] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 714.778744][T17517] __mmap_region+0x4a7/0x2db0 [ 714.778770][T17517] ? __pfx___mmap_region+0x10/0x10 [ 714.778791][T17517] ? __pfx___might_resched+0x10/0x10 [ 714.778816][T17517] ? __lock_acquire+0x49f/0x1a40 [ 714.778846][T17517] ? find_held_lock+0x2b/0x80 [ 714.778862][T17517] ? ima_match_policy+0x8c4/0x2350 [ 714.778881][T17517] ? ima_match_policy+0x8c4/0x2350 [ 714.778913][T17517] ? __pfx___might_resched+0x10/0x10 [ 714.778934][T17517] ? find_held_lock+0x2b/0x80 [ 714.778950][T17517] ? process_measurement+0x4c8/0x2350 [ 714.778965][T17517] ? process_measurement+0x4c8/0x2350 [ 714.778979][T17517] ? down_write+0x146/0x1f0 [ 714.779024][T17517] mmap_region+0x527/0x620 [ 714.779040][T17517] ? __pfx_mmap_region+0x10/0x10 [ 714.779057][T17517] ? cap_mmap_addr+0x4b/0x120 [ 714.779078][T17517] ? bpf_lsm_mmap_addr+0x9/0x30 [ 714.779100][T17517] ? security_mmap_addr+0x71/0x1e0 [ 714.779123][T17517] ? __get_unmapped_area+0x255/0x3e0 [ 714.779144][T17517] do_mmap+0xc63/0x12f0 [ 714.779166][T17517] ? __pfx_do_mmap+0x10/0x10 [ 714.779184][T17517] ? __pfx_down_write_killable+0x10/0x10 [ 714.779204][T17517] vm_mmap_pgoff+0x29e/0x470 [ 714.779227][T17517] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 714.779244][T17517] ? __fget_files+0x215/0x3d0 [ 714.779268][T17517] ? __fget_files+0x21f/0x3d0 [ 714.779292][T17517] ksys_mmap_pgoff+0x3cb/0x610 [ 714.779313][T17517] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 714.779330][T17517] ? fput+0x79/0x100 [ 714.779345][T17517] ? ksys_write+0x1ac/0x250 [ 714.779366][T17517] ? __pfx_ksys_write+0x10/0x10 [ 714.779390][T17517] __x64_sys_mmap+0x125/0x190 [ 714.779409][T17517] do_syscall_64+0x115/0x840 [ 714.779422][T17517] ? clear_bhb_loop+0x40/0x90 [ 714.779440][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.779455][T17517] RIP: 0033:0x7f4fcb19de59 [ 714.779468][T17517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.779482][T17517] RSP: 002b:00007f4fc9393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 714.779497][T17517] RAX: ffffffffffffffda RBX: 00007f4fcb426450 RCX: 00007f4fcb19de59 [ 714.779507][T17517] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 714.779515][T17517] RBP: 00007f4fc9393090 R08: 00000000000000dd R09: 0000000000000000 [ 714.779524][T17517] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 714.779533][T17517] R13: 00007f4fcb4264e8 R14: 00007f4fcb426450 R15: 00007ffd08063178 [ 714.779552][T17517] [ 715.205553][T17414] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.212738][T17414] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.220764][T17414] bridge_slave_0: entered allmulticast mode [ 715.227793][T17414] bridge_slave_0: entered promiscuous mode [ 715.235424][T17414] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.242504][T17414] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.249902][T17414] bridge_slave_1: entered allmulticast mode [ 715.256872][T17414] bridge_slave_1: entered promiscuous mode [ 715.284457][T17414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.295872][T17414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.323230][T17414] team0: Port device team_slave_0 added [ 715.330873][T17414] team0: Port device team_slave_1 added [ 715.353214][T17414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.360259][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.386158][T17414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.398178][T17414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.405170][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.432167][T17414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.470891][T17414] hsr_slave_0: entered promiscuous mode [ 715.477217][T17414] hsr_slave_1: entered promiscuous mode [ 715.483372][T17414] debugfs: 'hsr0' already exists in 'hsr' [ 715.489284][T17414] Cannot create hsr debugfs directory [ 715.971486][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 716.069872][ T5627] Bluetooth: hci1: command tx timeout [ 718.140212][ T5627] Bluetooth: hci1: command tx timeout [ 718.630807][T17542] Process accounting resumed [ 718.765038][T17414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 718.813878][T17414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.840398][T17414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 718.901274][T17414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.930219][T17414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 718.964370][T17414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.027308][T17414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.060664][T17414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.628009][T17414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.719814][T17414] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.774797][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.782012][T17151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.999781][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.006950][T17141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.556332][T17414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.747465][T17414] veth0_vlan: entered promiscuous mode [ 721.814549][T17414] veth1_vlan: entered promiscuous mode [ 721.935759][T17414] veth0_macvtap: entered promiscuous mode [ 722.012601][T17414] veth1_macvtap: entered promiscuous mode [ 722.107226][T17414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.186114][T17414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.440210][T17150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.482022][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 722.495948][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 722.504329][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 722.520696][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 722.535624][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 722.583371][T17659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 722.602362][T17150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.799794][T17150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.858910][T17150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.595273][T17144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.642159][T17144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.734660][T17141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.782900][T17141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.995081][T17694] FAULT_INJECTION: forcing a failure. [ 723.995081][T17694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.078691][T17694] CPU: 0 UID: 0 PID: 17694 Comm: syz.1.2190 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.078716][T17694] Tainted: [L]=SOFTLOCKUP [ 724.078721][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.078730][T17694] Call Trace: [ 724.078735][T17694] [ 724.078740][T17694] dump_stack_lvl+0x100/0x190 [ 724.078762][T17694] should_fail_ex.cold+0x5/0xa [ 724.078779][T17694] _copy_from_user+0x2e/0xd0 [ 724.078800][T17694] do_sys_poll+0x345/0xe90 [ 724.078822][T17694] ? bpf_ksym_find+0x124/0x1c0 [ 724.078837][T17694] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 724.078858][T17694] ? is_bpf_text_address+0x94/0x1a0 [ 724.078879][T17694] ? __pfx_do_sys_poll+0x10/0x10 [ 724.078899][T17694] ? arch_stack_walk+0xa6/0xf0 [ 724.078967][T17694] ? find_held_lock+0x2b/0x80 [ 724.078983][T17694] ? timespec64_add_safe+0x192/0x220 [ 724.079004][T17694] ? __pfx_timespec64_add_safe+0x10/0x10 [ 724.079024][T17694] ? set_user_sigmask+0x1e1/0x270 [ 724.079047][T17694] ? __pfx_set_user_sigmask+0x10/0x10 [ 724.079070][T17694] ? ktime_get_ts64+0x318/0x420 [ 724.079090][T17694] ? ktime_get_ts64+0x257/0x420 [ 724.079113][T17694] __x64_sys_ppoll+0x2b5/0x350 [ 724.079138][T17694] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 724.079165][T17694] ? ksys_write+0x1ac/0x250 [ 724.079186][T17694] ? __pfx_ksys_write+0x10/0x10 [ 724.079213][T17694] do_syscall_64+0x115/0x840 [ 724.079226][T17694] ? clear_bhb_loop+0x40/0x90 [ 724.079244][T17694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.079259][T17694] RIP: 0033:0x7f4fcb19de59 [ 724.079272][T17694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.079287][T17694] RSP: 002b:00007f4fcbf9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 724.079301][T17694] RAX: ffffffffffffffda RBX: 00007f4fcb426090 RCX: 00007f4fcb19de59 [ 724.079311][T17694] RDX: 0000200000000180 RSI: 00000000000000b3 RDI: 0000200000000140 [ 724.079320][T17694] RBP: 00007f4fcbf9a090 R08: 0000000000000008 R09: 0000000000000000 [ 724.079329][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.079338][T17694] R13: 00007f4fcb426128 R14: 00007f4fcb426090 R15: 00007ffd08063178 [ 724.079357][T17694] [ 724.549331][ T5631] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 724.587818][ T5627] Bluetooth: hci3: command tx timeout [ 724.726423][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.741232][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.293551][T17728] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 725.965657][T17656] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.008290][T17656] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.033280][T17656] bridge_slave_0: entered allmulticast mode [ 726.055658][T17656] bridge_slave_0: entered promiscuous mode [ 726.117392][T17656] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.139672][T17656] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.162964][T17656] bridge_slave_1: entered allmulticast mode [ 726.186424][T17656] bridge_slave_1: entered promiscuous mode [ 726.425812][T17656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.480681][T17656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.639258][T17656] team0: Port device team_slave_0 added [ 726.660619][ T5631] Bluetooth: hci3: command tx timeout [ 726.749224][T17656] team0: Port device team_slave_1 added [ 726.968994][T17656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.007039][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.095571][T17656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.176390][T17656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.216993][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.301018][T17656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.685010][T17656] hsr_slave_0: entered promiscuous mode [ 727.696340][T17656] hsr_slave_1: entered promiscuous mode [ 727.703006][T17656] debugfs: 'hsr0' already exists in 'hsr' [ 727.708852][T17656] Cannot create hsr debugfs directory [ 728.724342][ T5631] Bluetooth: hci3: command tx timeout [ 729.069084][T17656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 729.109846][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.239079][T17656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 729.275366][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.333384][T17656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 729.344617][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.384036][T17656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.396842][T17656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.969307][T17656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.084080][T17656] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.387360][T17138] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.394537][T17138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.478372][T17138] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.485550][T17138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.794209][ T5631] Bluetooth: hci3: command tx timeout [ 731.567305][T17656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.964785][T17656] veth0_vlan: entered promiscuous mode [ 731.994113][T17656] veth1_vlan: entered promiscuous mode [ 732.053505][T17656] veth0_macvtap: entered promiscuous mode [ 732.074500][T17656] veth1_macvtap: entered promiscuous mode [ 732.109880][T17656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.139133][T17656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.179047][T17141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.214004][T17141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.251617][T17141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.293916][T17141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.439048][T17138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.463040][T17138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.538985][T17141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.563021][T17141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.462240][T17854] random: crng reseeded on system resumption [ 734.843603][T17858] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 735.129686][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2215'. [ 735.200057][T17861] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2215: iget: checksum invalid [ 735.315677][T17861] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 735.387634][T17861] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2215: iget: checksum invalid [ 735.477455][T17861] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 735.532081][T17861] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2215: iget: checksum invalid [ 735.575516][T17861] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 735.604738][T17868] FAULT_INJECTION: forcing a failure. [ 735.604738][T17868] name failslab, interval 1, probability 0, space 0, times 0 [ 735.627044][T17861] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2215: iget: checksum invalid [ 735.646029][T17868] CPU: 0 UID: 0 PID: 17868 Comm: syz.0.2216 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.646054][T17868] Tainted: [L]=SOFTLOCKUP [ 735.646060][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.646069][T17868] Call Trace: [ 735.646075][T17868] [ 735.646080][T17868] dump_stack_lvl+0x100/0x190 [ 735.646102][T17868] should_fail_ex.cold+0x5/0xa [ 735.646119][T17868] should_failslab+0xc2/0x120 [ 735.646139][T17868] __kmalloc_cache_noprof+0x91/0x6c0 [ 735.646161][T17868] ? find_held_lock+0x2b/0x80 [ 735.646178][T17868] ? __pollwait+0x2c3/0x490 [ 735.646201][T17868] ? __pfx___pollwait+0x10/0x10 [ 735.646220][T17868] __pollwait+0x2c3/0x490 [ 735.646241][T17868] ? __pfx___pollwait+0x10/0x10 [ 735.646260][T17868] pipe_poll+0x195/0x6e0 [ 735.646288][T17868] ? __pfx_pipe_poll+0x10/0x10 [ 735.646309][T17868] do_sys_poll+0x6e5/0xe90 [ 735.646335][T17868] ? __pfx_do_sys_poll+0x10/0x10 [ 735.646355][T17868] ? arch_stack_walk+0xa6/0xf0 [ 735.646391][T17868] ? __pfx___pollwait+0x10/0x10 [ 735.646413][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646435][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646456][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646477][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646498][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646519][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646540][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646561][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646583][T17868] ? __pfx_pollwake+0x10/0x10 [ 735.646603][T17868] ? find_held_lock+0x2b/0x80 [ 735.646618][T17868] ? timespec64_add_safe+0x192/0x220 [ 735.646640][T17868] ? __pfx_timespec64_add_safe+0x10/0x10 [ 735.646660][T17868] ? set_user_sigmask+0x1e1/0x270 [ 735.646682][T17868] ? __pfx_set_user_sigmask+0x10/0x10 [ 735.646704][T17868] ? ktime_get_ts64+0x318/0x420 [ 735.646725][T17868] ? ktime_get_ts64+0x257/0x420 [ 735.646747][T17868] __x64_sys_ppoll+0x2b5/0x350 [ 735.646771][T17868] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 735.646792][T17868] ? ksys_write+0x1ac/0x250 [ 735.646813][T17868] ? __pfx_ksys_write+0x10/0x10 [ 735.646840][T17868] do_syscall_64+0x115/0x840 [ 735.646853][T17868] ? clear_bhb_loop+0x40/0x90 [ 735.646871][T17868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.646886][T17868] RIP: 0033:0x7f8ac8b9de59 [ 735.646899][T17868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.646913][T17868] RSP: 002b:00007f8ac6dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 735.646928][T17868] RAX: ffffffffffffffda RBX: 00007f8ac8e26090 RCX: 00007f8ac8b9de59 [ 735.646938][T17868] RDX: 0000200000000180 RSI: 00000000000000b3 RDI: 0000200000000140 [ 735.646947][T17868] RBP: 00007f8ac6dd5090 R08: 0000000000000008 R09: 0000000000000000 [ 735.646956][T17868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.646965][T17868] R13: 00007f8ac8e26128 R14: 00007f8ac8e26090 R15: 00007ffc6a764078 [ 735.646984][T17868] [ 735.951806][T17861] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 735.961356][T17861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 735.971652][T17861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 736.128401][T17870] futex_wake_op: syz.0.2217 tries to shift op by -2048; fix this program [ 736.140574][T17870] FAULT_INJECTION: forcing a failure. [ 736.140574][T17870] name failslab, interval 1, probability 0, space 0, times 0 [ 736.153680][T17870] CPU: 0 UID: 0 PID: 17870 Comm: syz.0.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.153706][T17870] Tainted: [L]=SOFTLOCKUP [ 736.153711][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.153721][T17870] Call Trace: [ 736.153727][T17870] [ 736.153733][T17870] dump_stack_lvl+0x100/0x190 [ 736.153755][T17870] should_fail_ex.cold+0x5/0xa [ 736.153773][T17870] should_failslab+0xc2/0x120 [ 736.153794][T17870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 736.153811][T17870] ? trace_kmem_cache_alloc+0xdd/0x100 [ 736.153830][T17870] ? security_file_alloc+0x34/0x2c0 [ 736.153851][T17870] security_file_alloc+0x34/0x2c0 [ 736.153869][T17870] init_file+0x95/0x480 [ 736.153886][T17870] alloc_empty_file+0x79/0x1c0 [ 736.153904][T17870] alloc_file_pseudo+0x183/0x290 [ 736.153921][T17870] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 736.153939][T17870] ? security_inode_init_security_anon+0x7b/0x230 [ 736.153959][T17870] __do_sys_memfd_secret+0x11d/0x3d0 [ 736.153990][T17870] do_syscall_64+0x115/0x840 [ 736.154005][T17870] ? clear_bhb_loop+0x40/0x90 [ 736.154024][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.154041][T17870] RIP: 0033:0x7f8ac8b9de59 [ 736.154055][T17870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.154069][T17870] RSP: 002b:00007f8ac6df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 736.154084][T17870] RAX: ffffffffffffffda RBX: 00007f8ac8e25fa0 RCX: 00007f8ac8b9de59 [ 736.154094][T17870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.154103][T17870] RBP: 00007f8ac8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 736.154112][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.154121][T17870] R13: 00007f8ac8e26038 R14: 00007f8ac8e25fa0 R15: 00007ffc6a764078 [ 736.154140][T17870] [ 737.704273][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2221'. [ 737.744991][T17880] bond0: (slave bond_slave_0): Releasing backup interface [ 741.081918][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 741.099575][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 741.112880][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 741.123575][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 741.131618][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.745971][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.767636][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.782686][T17932] bridge_slave_0: entered allmulticast mode [ 742.796703][T17932] bridge_slave_0: entered promiscuous mode [ 742.831080][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.859981][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.885459][T17932] bridge_slave_1: entered allmulticast mode [ 742.906625][T17932] bridge_slave_1: entered promiscuous mode [ 743.006659][T17932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.048492][T17932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.181368][T17932] team0: Port device team_slave_0 added [ 743.206806][T17932] team0: Port device team_slave_1 added [ 743.213315][ T5627] Bluetooth: hci5: command tx timeout [ 743.329484][T17932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.357614][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.442961][T17932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.485990][T17932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.504906][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.591085][T17932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.754348][T17932] hsr_slave_0: entered promiscuous mode [ 743.784224][T17932] hsr_slave_1: entered promiscuous mode [ 743.809619][T17932] debugfs: 'hsr0' already exists in 'hsr' [ 743.831677][T17932] Cannot create hsr debugfs directory [ 745.278160][ T5627] Bluetooth: hci5: command tx timeout [ 745.358731][T17932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 745.395685][T17932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 745.540301][T17932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 745.561555][T17932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 745.588396][T17932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.609606][T17932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 745.810122][T17932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 745.849324][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.855810][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.888760][T17932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.504407][T18010] netlink: 'syz.4.2240': attribute type 11 has an invalid length. [ 746.523298][T18010] netlink: 'syz.4.2240': attribute type 11 has an invalid length. [ 746.543804][T18010] netlink: 'syz.4.2240': attribute type 11 has an invalid length. [ 746.576965][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.766690][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.836879][T17141] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.844063][T17141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.916802][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.923976][T17141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.996232][T18020] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 747.348248][ T5627] Bluetooth: hci5: command tx timeout [ 748.592005][T17932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.995737][T17932] veth0_vlan: entered promiscuous mode [ 749.046085][T17932] veth1_vlan: entered promiscuous mode [ 749.104091][T17932] veth0_macvtap: entered promiscuous mode [ 749.125927][T17932] veth1_macvtap: entered promiscuous mode [ 749.165916][T17932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.194029][T17932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.227007][T17138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.252630][T17138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.272748][T17138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.304746][T17138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.417090][ T5627] Bluetooth: hci5: command tx timeout [ 749.469316][T17144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.497264][T17144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.548144][T17144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.568819][T17144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.628410][T18108] kafs: addr_prefs: Invalid Command [ 752.650706][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.669140][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 752.678818][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 752.694582][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 752.702836][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 754.022459][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2254'. [ 754.750403][ T5631] Bluetooth: hci6: command tx timeout [ 755.520654][T18131] kexec: Could not allocate control_code_buffer [ 755.646854][T18144] Process accounting resumed [ 755.652312][T18110] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.686995][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.813183][T18110] bridge_slave_0: entered allmulticast mode [ 755.846054][T18110] bridge_slave_0: entered promiscuous mode [ 755.876673][T18110] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.892103][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.907816][T18110] bridge_slave_1: entered allmulticast mode [ 755.925374][T18110] bridge_slave_1: entered promiscuous mode [ 756.020221][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.091372][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.175870][T18157] ubi0: attaching mtd0 [ 756.221492][T18110] team0: Port device team_slave_0 added [ 756.227200][T18157] ubi0: scanning is finished [ 756.244925][T18110] team0: Port device team_slave_1 added [ 756.284001][T18157] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 756.356107][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.383684][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.475181][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.514739][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.545920][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.635092][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.707309][T18157] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 756.819733][ T5631] Bluetooth: hci6: command tx timeout [ 756.838794][T18110] hsr_slave_0: entered promiscuous mode [ 756.857332][T18110] hsr_slave_1: entered promiscuous mode [ 756.866205][T18110] debugfs: 'hsr0' already exists in 'hsr' [ 756.884034][T18110] Cannot create hsr debugfs directory [ 757.578028][T18110] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 757.606393][T18110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.622911][T18110] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 757.642181][T18110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.664761][T18110] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 757.678415][T18110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.697588][T18110] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 757.726124][T18110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.957629][T18110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.993041][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.022875][T17138] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.030018][T17138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.066601][T17138] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.073775][T17138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.887524][ T5631] Bluetooth: hci6: command tx timeout [ 758.926487][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.316258][T18110] veth0_vlan: entered promiscuous mode [ 759.347939][T18110] veth1_vlan: entered promiscuous mode [ 759.428074][T18110] veth0_macvtap: entered promiscuous mode [ 759.455920][T18110] veth1_macvtap: entered promiscuous mode [ 759.490198][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.520792][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.555962][T17138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.574800][T17138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.589895][T18199] FAULT_INJECTION: forcing a failure. [ 759.589895][T18199] name failslab, interval 1, probability 0, space 0, times 0 [ 759.620183][T17138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.638893][T17138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.650918][T18199] CPU: 0 UID: 0 PID: 18199 Comm: syz.0.2262 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.650946][T18199] Tainted: [L]=SOFTLOCKUP [ 759.650953][T18199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 759.650963][T18199] Call Trace: [ 759.650969][T18199] [ 759.650976][T18199] dump_stack_lvl+0x100/0x190 [ 759.650999][T18199] should_fail_ex.cold+0x5/0xa [ 759.651017][T18199] should_failslab+0xc2/0x120 [ 759.651037][T18199] kmem_cache_alloc_noprof+0x91/0x6a0 [ 759.651055][T18199] ? trace_kmem_cache_alloc+0xdd/0x100 [ 759.651075][T18199] ? security_file_alloc+0x34/0x2c0 [ 759.651097][T18199] security_file_alloc+0x34/0x2c0 [ 759.651115][T18199] init_file+0x95/0x480 [ 759.651132][T18199] alloc_empty_file+0x79/0x1c0 [ 759.651150][T18199] alloc_file_pseudo+0x183/0x290 [ 759.651169][T18199] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 759.651187][T18199] ? security_inode_init_security_anon+0x7b/0x230 [ 759.651207][T18199] __anon_inode_getfile+0xe8/0x280 [ 759.651225][T18199] ? _copy_to_user+0xaf/0xd0 [ 759.651249][T18199] io_uring_setup.cold+0x1928/0x1c2e [ 759.651274][T18199] ? __pfx_io_uring_setup+0x10/0x10 [ 759.651300][T18199] ? __pfx_do_futex+0x10/0x10 [ 759.651326][T18199] ? xfd_validate_state+0x129/0x190 [ 759.651348][T18199] __x64_sys_io_uring_setup+0xc2/0x170 [ 759.651371][T18199] do_syscall_64+0x115/0x840 [ 759.651385][T18199] ? clear_bhb_loop+0x40/0x90 [ 759.651404][T18199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.651421][T18199] RIP: 0033:0x7f8ac8b9de59 [ 759.651436][T18199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.651450][T18199] RSP: 002b:00007f8ac6dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 759.651465][T18199] RAX: ffffffffffffffda RBX: 00007f8ac8e26090 RCX: 00007f8ac8b9de59 [ 759.651476][T18199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 759.651485][T18199] RBP: 00007f8ac8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 759.651501][T18199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.651510][T18199] R13: 00007f8ac8e26128 R14: 00007f8ac8e26090 R15: 00007ffc6a764078 [ 759.651530][T18199] [ 760.444415][T17150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.494619][T17150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.557294][T17150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.574232][T17150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.601692][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 760.784530][T18207] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 760.888293][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 760.958325][ T5631] Bluetooth: hci6: command tx timeout [ 760.985090][T18215] random: crng reseeded on system resumption [ 761.887570][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 762.889494][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 763.110067][T18254] MTRR 1 not used [ 763.658096][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 763.677056][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 763.685779][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 763.696508][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 763.705915][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 763.887452][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 764.889103][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 765.614975][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.630244][T18265] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.647784][T18265] bridge_slave_0: entered allmulticast mode [ 765.665901][T18265] bridge_slave_0: entered promiscuous mode [ 765.684404][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.699481][T18265] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.716182][T18265] bridge_slave_1: entered allmulticast mode [ 765.731094][T18265] bridge_slave_1: entered promiscuous mode [ 765.737102][ T5627] Bluetooth: hci7: command tx timeout [ 765.887259][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 765.914712][T18265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.005596][T18265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.440476][T18265] team0: Port device team_slave_0 added [ 766.475271][T18265] team0: Port device team_slave_1 added [ 766.673192][T18265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.698692][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.784606][T18265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.820891][T18265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.843410][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.888182][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 766.943439][T18265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.112930][T18265] hsr_slave_0: entered promiscuous mode [ 767.138319][T18265] hsr_slave_1: entered promiscuous mode [ 767.158389][T18265] debugfs: 'hsr0' already exists in 'hsr' [ 767.177422][T18265] Cannot create hsr debugfs directory [ 767.689318][T18307] FAULT_INJECTION: forcing a failure. [ 767.689318][T18307] name failslab, interval 1, probability 0, space 0, times 0 [ 767.800850][ T5627] Bluetooth: hci7: command tx timeout [ 767.890481][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 767.933016][T18307] CPU: 0 UID: 0 PID: 18307 Comm: syz.0.2280 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.933043][T18307] Tainted: [L]=SOFTLOCKUP [ 767.933049][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.933060][T18307] Call Trace: [ 767.933066][T18307] [ 767.933073][T18307] dump_stack_lvl+0x100/0x190 [ 767.933096][T18307] should_fail_ex.cold+0x5/0xa [ 767.933114][T18307] should_failslab+0xc2/0x120 [ 767.933134][T18307] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 767.933154][T18307] ? debugfs_create_symlink+0x29/0x220 [ 767.933179][T18307] kstrdup+0x51/0xe0 [ 767.933196][T18307] debugfs_create_symlink+0x29/0x220 [ 767.933216][T18307] ref_tracker_dir_symlink+0x257/0x3b0 [ 767.933240][T18307] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 767.933288][T18307] ? __pfx_net_ns_net_init+0x10/0x10 [ 767.933307][T18307] net_ns_net_init+0x7e/0x120 [ 767.933325][T18307] ops_init+0x1e2/0x5f0 [ 767.933349][T18307] setup_net+0x118/0x3a0 [ 767.933368][T18307] ? __pfx_setup_net+0x10/0x10 [ 767.933387][T18307] ? mutex_init_lockdep+0xf1/0x120 [ 767.933417][T18307] copy_net_ns+0x46f/0x7c0 [ 767.933438][T18307] create_new_namespaces+0x3ea/0xac0 [ 767.933466][T18307] unshare_nsproxy_namespaces+0xf2/0x220 [ 767.933483][T18307] ksys_unshare+0x438/0xab0 [ 767.933502][T18307] ? __pfx_ksys_unshare+0x10/0x10 [ 767.933527][T18307] __x64_sys_unshare+0x31/0x40 [ 767.933544][T18307] do_syscall_64+0x115/0x840 [ 767.933558][T18307] ? clear_bhb_loop+0x40/0x90 [ 767.933576][T18307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.933601][T18307] RIP: 0033:0x7f8ac8b9de59 [ 767.933620][T18307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.933635][T18307] RSP: 002b:00007f8ac6dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.933668][T18307] RAX: ffffffffffffffda RBX: 00007f8ac8e26090 RCX: 00007f8ac8b9de59 [ 767.933679][T18307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 767.933688][T18307] RBP: 00007f8ac8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 767.933697][T18307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.933706][T18307] R13: 00007f8ac8e26128 R14: 00007f8ac8e26090 R15: 00007ffc6a764078 [ 767.933726][T18307] [ 768.503284][T18265] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 768.588845][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.607504][T18265] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 768.647142][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.710778][T18265] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 768.728341][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.746473][T18265] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 768.778614][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.887021][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 769.300322][T18265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.349502][T18265] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.367425][T18324] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 769.441281][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.448446][T17150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.475084][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.482244][T17150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.597997][T18324] CIFS mount error: No usable UNC path provided in device string! [ 769.597997][T18324] [ 769.677954][T18324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 769.870069][ T5627] Bluetooth: hci7: command tx timeout [ 769.886972][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 770.901015][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 770.911685][T18265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.810977][T18265] veth0_vlan: entered promiscuous mode [ 771.853752][T18265] veth1_vlan: entered promiscuous mode [ 771.886802][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 771.941440][ T5627] Bluetooth: hci7: command tx timeout [ 772.181357][T18265] veth0_macvtap: entered promiscuous mode [ 772.218416][T18265] veth1_macvtap: entered promiscuous mode [ 772.343420][T18265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.720438][T18386] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 772.862402][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 772.882478][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 772.892283][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 772.901806][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 772.918534][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 772.926547][T18390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2292'. [ 772.940877][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 773.079500][T18265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.192224][T18390] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.200738][T18390] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.316432][T18390] bridge0: entered promiscuous mode [ 773.494713][T17151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.523625][T17151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.604724][T17151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.670001][T17151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.719768][T18386] netlink: 322 bytes leftover after parsing attributes in process `syz.7.2292'. [ 773.887030][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 774.157302][T17138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.223976][T17138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.359129][T17150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.400583][T17150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.890757][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 775.043351][ T5631] Bluetooth: hci8: command tx timeout [ 775.863742][T18394] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.886541][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 775.901008][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.925972][T18394] bridge_slave_0: entered allmulticast mode [ 775.956816][T18394] bridge_slave_0: entered promiscuous mode [ 775.983739][T18394] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.009803][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.035318][T18394] bridge_slave_1: entered allmulticast mode [ 776.062185][T18394] bridge_slave_1: entered promiscuous mode [ 776.168233][T18394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.211992][T18394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.312868][T18394] team0: Port device team_slave_0 added [ 776.340673][T18394] team0: Port device team_slave_1 added [ 776.477409][T18394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.512953][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.635957][T18394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.690819][T18394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.727648][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.846651][T18394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.886447][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 777.101775][T18394] hsr_slave_0: entered promiscuous mode [ 777.113098][ T5631] Bluetooth: hci8: command tx timeout [ 777.141083][T18394] hsr_slave_1: entered promiscuous mode [ 777.176419][T18394] debugfs: 'hsr0' already exists in 'hsr' [ 777.213949][T18394] Cannot create hsr debugfs directory [ 777.886985][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 778.886566][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 779.181730][ T5631] Bluetooth: hci8: command tx timeout [ 779.246265][T18394] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 779.277649][T18394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.306204][T18394] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 779.352505][T18394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.378871][T18394] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 779.421356][T18394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 779.447955][T18394] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 779.503098][T18394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.813222][T18394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.886920][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 779.910759][T18394] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.960159][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.967341][T17150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.072901][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.080089][T17150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.886112][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 781.251044][ T5631] Bluetooth: hci8: command tx timeout [ 781.406114][T18520] bond0: invalid ARP target specified [ 781.508279][T18520] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 781.523494][T18394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.886072][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 782.702593][T18394] veth0_vlan: entered promiscuous mode [ 782.890882][T18394] veth1_vlan: entered promiscuous mode [ 782.910514][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 783.278523][T18394] veth0_macvtap: entered promiscuous mode [ 783.441293][T18394] veth1_macvtap: entered promiscuous mode [ 783.610830][T18394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.661099][T18394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.888345][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 783.907716][T17151] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.949924][T17151] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.086561][T18563] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 784.350919][T17151] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.411291][T17151] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.885813][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 785.539598][T17155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.596874][T17155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.772754][T17144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.809121][T17144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.885738][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 786.885724][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 787.086512][ T5717] Process accounting resumed [ 787.210346][T18605] random: crng reseeded on system resumption [ 787.541380][T18607] zswap: compressor 000 not available [ 787.720388][T18607] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 787.885590][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 788.886691][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 788.906654][T18618] futex_wake_op: syz.0.2322 tries to shift op by -2048; fix this program [ 788.977274][T18619] 0x004100000001-0x004500000004 : "" [ 789.092545][T18619] mtd: partition "" is out of reach -- disabled [ 789.277911][T18619] ftl_cs: FTL header not found. [ 789.885416][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 790.883487][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2327'. [ 790.896142][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 791.193591][T18653] FAULT_INJECTION: forcing a failure. [ 791.193591][T18653] name failslab, interval 1, probability 0, space 0, times 0 [ 791.346827][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.8.2327 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.346856][T18653] Tainted: [L]=SOFTLOCKUP [ 791.346862][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.346872][T18653] Call Trace: [ 791.346878][T18653] [ 791.346884][T18653] dump_stack_lvl+0x100/0x190 [ 791.346907][T18653] should_fail_ex.cold+0x5/0xa [ 791.346925][T18653] should_failslab+0xc2/0x120 [ 791.346945][T18653] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 791.346964][T18653] ? __d_alloc+0x35/0xa50 [ 791.346983][T18653] __d_alloc+0x35/0xa50 [ 791.347000][T18653] d_alloc+0x4a/0x1e0 [ 791.347015][T18653] lookup_one_qstr_excl+0x171/0x250 [ 791.347035][T18653] start_dirop+0x59/0xb0 [ 791.347057][T18653] simple_start_creating+0xf9/0x110 [ 791.347079][T18653] ? __pfx_simple_start_creating+0x10/0x10 [ 791.347102][T18653] ? mntput+0x70/0xa0 [ 791.347122][T18653] ? simple_pin_fs+0xa3/0x190 [ 791.347143][T18653] debugfs_start_creating.part.0+0x82/0x170 [ 791.347165][T18653] __debugfs_create_file+0xb3/0x4f0 [ 791.347188][T18653] debugfs_create_file_full+0x41/0x60 [ 791.347209][T18653] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 791.347232][T18653] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 791.347276][T18653] ? kasan_save_track+0x14/0x30 [ 791.347294][T18653] ? __kasan_kmalloc+0xaa/0xb0 [ 791.347313][T18653] ? lockdep_init_map_type+0x5c/0x250 [ 791.347341][T18653] preinit_net.part.0+0x43b/0x920 [ 791.347362][T18653] copy_net_ns+0x339/0x7c0 [ 791.347384][T18653] create_new_namespaces+0x3ea/0xac0 [ 791.347413][T18653] unshare_nsproxy_namespaces+0xf2/0x220 [ 791.347430][T18653] ksys_unshare+0x438/0xab0 [ 791.347449][T18653] ? __pfx_ksys_unshare+0x10/0x10 [ 791.347474][T18653] __x64_sys_unshare+0x31/0x40 [ 791.347491][T18653] do_syscall_64+0x115/0x840 [ 791.347504][T18653] ? clear_bhb_loop+0x40/0x90 [ 791.347523][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.347539][T18653] RIP: 0033:0x7f42cdd9de59 [ 791.347553][T18653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.347568][T18653] RSP: 002b:00007f42cbfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 791.347584][T18653] RAX: ffffffffffffffda RBX: 00007f42ce026180 RCX: 00007f42cdd9de59 [ 791.347595][T18653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 791.347604][T18653] RBP: 00007f42cde33e6f R08: 0000000000000000 R09: 0000000000000000 [ 791.347614][T18653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.347623][T18653] R13: 00007f42ce026218 R14: 00007f42ce026180 R15: 00007fffe41f7808 [ 791.347644][T18653] [ 791.895895][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 791.987392][T18673] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2332'. [ 792.817036][T18673] veth0_macvtap: left promiscuous mode [ 792.838855][T18673] macvtap0: entered promiscuous mode [ 792.883810][T18673] macvtap0: entered allmulticast mode [ 792.890780][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 793.201831][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2335'. [ 793.885452][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 794.885140][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 795.889710][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 795.932004][T18724] i2c i2c-0: delete_device: Can't find device in list [ 796.885506][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 797.887622][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 798.170247][T18763] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2350'. [ 798.292495][T18763] veth1_macvtap: left promiscuous mode [ 798.885707][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 799.472026][T18786] zswap: compressor F(- not available [ 799.885834][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 800.884587][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 801.887844][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 802.398237][T18839] netlink: 'syz.8.2362': attribute type 3 has an invalid length. [ 802.884440][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 802.915920][T18854] bridge0: port 3(team0) entered blocking state [ 802.936078][T18854] bridge0: port 3(team0) entered disabled state [ 802.969770][T18854] team0: entered allmulticast mode [ 803.007035][T18854] team_slave_0: entered allmulticast mode [ 803.057654][T18854] team_slave_1: entered allmulticast mode [ 803.108220][T18854] team0: entered promiscuous mode [ 803.167326][T18854] team_slave_0: entered promiscuous mode [ 803.249480][T18854] team_slave_1: entered promiscuous mode [ 803.293424][T18854] bridge0: port 3(team0) entered blocking state [ 803.299852][T18854] bridge0: port 3(team0) entered forwarding state [ 803.884396][ T5719] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 803.942511][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 804.884313][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 805.893201][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 806.536392][T18896] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17414] was attempted by "=!\x22BסUsĘL0ͺ8\x5cٔ-9x9 5`Ku,YdAェzm83SX\x0bْB=lp@H@p3zqS~n\x0c\x0c\x07C莽\x0cL\x0ca)/* ågoi&ՙdٔ2ץs\x5cH\x0a7eo'^ke5X#GqhkQ&`m&xP\x0a_TWƚ J \x0cdPQpu}x㸥?#pXpMcc`Ģ\x0aSGGgTdN\x09Ќ^q7W\x22ok帟Z†hDٳJ\x0b}w~g1yCZ+;k0jK0(,5&};cz)Xig@C8I<\x1b AdIEQ*[x?Jm܍ᱦ]}Kerͱ\x5cve^9ݥ>\x0cکh0 2 P໒{Gm)\x5cدU8:>6<'^p?'hSLX\x0d-sCJ5>\x5c3\x0aL٥ӌJBQlD`'>wW\x0bBH]93}HGWRJ)\x1b}\x1b\x0b4Bs[ih|QjrV;Y5\x22Y*H^!d Bp^ֶpKɓxȳ [ 806.884126][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 807.038803][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.047365][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.884614][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 808.885400][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 809.117839][T18932] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 809.629715][T18938] futex_wake_op: syz.7.2383 tries to shift op by -2048; fix this program [ 809.659538][T18938] futex_wake_op: syz.7.2383 tries to shift op by -2048; fix this program [ 809.883896][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 810.883817][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 811.560606][T18954] random: crng reseeded on system resumption [ 811.884123][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 812.884818][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 813.806256][T18967] random: crng reseeded on system resumption [ 813.884516][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 814.884696][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 815.883446][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 816.883390][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 817.883278][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 818.770241][T19025] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 818.888450][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 819.883137][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 820.883375][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 821.228781][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 821.242184][ T5631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 821.250876][ T5631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 821.265507][ T5631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 821.278925][ T5631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 821.459391][T19058] pim6reg: entered allmulticast mode [ 821.800779][T19068] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 821.885349][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 822.906734][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 823.351894][ T5631] Bluetooth: hci9: command tx timeout [ 823.884194][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 824.275578][T19094] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2410'. [ 824.538484][T19054] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.573055][T19054] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.606700][T19054] bridge_slave_0: entered allmulticast mode [ 824.636137][T19054] bridge_slave_0: entered promiscuous mode [ 824.672141][T19054] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.710676][T19054] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.750124][T19054] bridge_slave_1: entered allmulticast mode [ 824.783289][T19054] bridge_slave_1: entered promiscuous mode [ 824.882757][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 825.003544][T19054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.109725][T19054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.131241][T19116] random: crng reseeded on system resumption [ 825.310874][T19054] team0: Port device team_slave_0 added [ 825.360082][T19054] team0: Port device team_slave_1 added [ 825.421607][ T5631] Bluetooth: hci9: command tx timeout [ 825.521964][T19054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.576849][T19054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.710946][T19054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.830849][T19121] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 825.882661][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 825.894438][T19054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.945579][T19054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.072620][T19054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.231865][T19124] program syz.8.2415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.283437][T19054] hsr_slave_0: entered promiscuous mode [ 826.300075][T19054] hsr_slave_1: entered promiscuous mode [ 826.313411][T19054] debugfs: 'hsr0' already exists in 'hsr' [ 826.330046][T19054] Cannot create hsr debugfs directory [ 826.381826][T19124] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2415: iget: checksum invalid [ 826.417760][T19124] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 826.473517][T19124] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2415: iget: checksum invalid [ 826.541134][T19124] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 826.606096][T19124] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2415: iget: checksum invalid [ 826.662335][T19124] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 826.721312][T19124] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2415: iget: checksum invalid [ 826.762425][T19124] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 826.816218][T19124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 826.865848][T19124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 826.883885][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 827.490490][ T5631] Bluetooth: hci9: command tx timeout [ 827.885956][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 828.884353][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 829.559777][ T5631] Bluetooth: hci9: command tx timeout [ 829.883210][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 830.235046][T19054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 830.280380][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.321870][T19054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 830.389325][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.450990][T19054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 830.499206][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.534117][T19054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 830.585789][T19054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.887945][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 831.176078][T19054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.265062][T19054] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.318998][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.326158][T17150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.426728][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.433881][T17150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.882232][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 832.883405][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 833.152702][T19054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.338369][T19054] veth0_vlan: entered promiscuous mode [ 833.477136][T19054] veth1_vlan: entered promiscuous mode [ 833.882081][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 834.098038][T19054] veth0_macvtap: entered promiscuous mode [ 834.172118][T19054] veth1_macvtap: entered promiscuous mode [ 834.313111][T19054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.359255][T19054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.399499][T17155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.439877][T17155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.476608][T17155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.502116][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 834.539981][T17155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.884838][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 835.244447][T17152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.315138][T17152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.447759][T17150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.502402][T17150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.881917][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 836.783793][T19311] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2430'. [ 836.889044][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 837.882722][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 838.894334][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 839.283854][T19375] FAULT_INJECTION: forcing a failure. [ 839.283854][T19375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 839.357271][T19375] CPU: 0 UID: 0 PID: 19375 Comm: syz.8.2434 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.357299][T19375] Tainted: [L]=SOFTLOCKUP [ 839.357305][T19375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.357315][T19375] Call Trace: [ 839.357321][T19375] [ 839.357332][T19375] dump_stack_lvl+0x100/0x190 [ 839.357355][T19375] should_fail_ex.cold+0x5/0xa [ 839.357370][T19375] ? prepare_alloc_pages+0x16d/0x5f0 [ 839.357393][T19375] should_fail_alloc_page+0xeb/0x140 [ 839.357415][T19375] prepare_alloc_pages+0x1f0/0x5f0 [ 839.357437][T19375] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 839.357454][T19375] ? vfs_write+0x6ac/0x1050 [ 839.357476][T19375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.357501][T19375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 839.357528][T19375] ? trace_kmalloc+0xeb/0x110 [ 839.357546][T19375] ? __kasan_kmalloc+0xaa/0xb0 [ 839.357563][T19375] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 839.357582][T19375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 839.357603][T19375] ? policy_nodemask+0xed/0x4f0 [ 839.357624][T19375] alloc_pages_mpol+0x1fb/0x540 [ 839.357644][T19375] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 839.357662][T19375] ? __alloc_skb+0x5b7/0x710 [ 839.357678][T19375] ? __pfx___alloc_skb+0x10/0x10 [ 839.357698][T19375] alloc_pages_noprof+0x1a/0x160 [ 839.357719][T19375] alloc_skb_with_frags+0x4e7/0x760 [ 839.357744][T19375] sock_alloc_send_pskb+0x801/0x980 [ 839.357766][T19375] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 839.357790][T19375] tun_get_user+0x904/0x3c20 [ 839.357814][T19375] ? __pfx_tun_get_user+0x10/0x10 [ 839.357830][T19375] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 839.357858][T19375] ? find_held_lock+0x2b/0x80 [ 839.357876][T19375] ? tun_get+0x191/0x370 [ 839.357896][T19375] ? tun_get+0x191/0x370 [ 839.357922][T19375] tun_chr_write_iter+0xdc/0x200 [ 839.357939][T19375] vfs_write+0x6ac/0x1050 [ 839.357962][T19375] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 839.357981][T19375] ? __pfx_vfs_write+0x10/0x10 [ 839.358001][T19375] ? find_held_lock+0x2b/0x80 [ 839.358029][T19375] __x64_sys_pwrite64+0x1eb/0x250 [ 839.358052][T19375] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 839.358080][T19375] do_syscall_64+0x115/0x840 [ 839.358095][T19375] ? clear_bhb_loop+0x40/0x90 [ 839.358114][T19375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.358131][T19375] RIP: 0033:0x7f42cdd9de59 [ 839.358148][T19375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.358164][T19375] RSP: 002b:00007f42cbff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 839.358180][T19375] RAX: ffffffffffffffda RBX: 00007f42ce026090 RCX: 00007f42cdd9de59 [ 839.358192][T19375] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 839.358201][T19375] RBP: 00007f42cde33e6f R08: 0000000000000000 R09: 0000000000000000 [ 839.358211][T19375] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 839.358221][T19375] R13: 00007f42ce026128 R14: 00007f42ce026090 R15: 00007fffe41f7808 [ 839.358241][T19375] [ 839.881627][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 840.881642][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 841.881461][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 842.928024][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 843.884715][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 843.991038][T19441] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 844.003074][T19441] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 844.011970][T19441] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 844.023666][T19441] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 844.032595][T19441] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 844.656320][T19440] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.663790][T19440] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.671437][T19440] bridge_slave_0: entered allmulticast mode [ 844.678605][T19440] bridge_slave_0: entered promiscuous mode [ 844.685218][T19441] Bluetooth: hci3: command 0x0406 tx timeout [ 844.726604][T19440] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.734011][T19440] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.741773][T19440] bridge_slave_1: entered allmulticast mode [ 844.748950][T19440] bridge_slave_1: entered promiscuous mode [ 844.778010][T19440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.789726][T19440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.827140][T19440] team0: Port device team_slave_0 added [ 844.837602][T19440] team0: Port device team_slave_1 added [ 844.864873][T19440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.871927][T19440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.898731][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 844.911361][T19440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.933696][T19440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.943545][T19440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.970186][T19440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.020748][T19440] hsr_slave_0: entered promiscuous mode [ 845.027172][T19440] hsr_slave_1: entered promiscuous mode [ 845.034982][T19440] debugfs: 'hsr0' already exists in 'hsr' [ 845.042553][T19440] Cannot create hsr debugfs directory [ 845.226772][T19440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 845.237150][T19440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.245615][T19440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.256479][T19440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.266408][T19440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 845.279021][T19440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.286961][T19440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 845.296917][T19440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.329513][T19440] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.336658][T19440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.344128][T19440] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.351230][T19440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.423009][T19440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.439324][T17150] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.447845][T17150] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.461192][T19440] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.480264][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.487449][T17155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.520419][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.527598][T17155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.551724][T19440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.563465][T19440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.881189][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 845.899782][T19440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.949166][T19440] veth0_vlan: entered promiscuous mode [ 845.968837][T19440] veth1_vlan: entered promiscuous mode [ 845.996746][T19440] veth0_macvtap: entered promiscuous mode [ 846.008870][T19440] veth1_macvtap: entered promiscuous mode [ 846.042142][T19440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.057820][T19440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.071296][T17138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.086648][T17138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.111396][T17138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.120830][ T5627] Bluetooth: hci10: command tx timeout [ 846.196814][T17138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.269833][T17152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.293106][T17152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.318118][T17152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.330937][T17152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.881141][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 847.881064][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 848.186650][ T5627] Bluetooth: hci10: command tx timeout [ 848.648311][T19441] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 848.665706][T19441] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 848.683780][T19441] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 848.697670][T19441] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 848.710272][T19441] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 848.882087][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 849.731963][T19489] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.739674][T19489] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.756646][T19489] bridge_slave_0: entered allmulticast mode [ 849.773548][T19489] bridge_slave_0: entered promiscuous mode [ 849.802699][T19489] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.821019][T19489] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.833433][T19489] bridge_slave_1: entered allmulticast mode [ 849.847221][T19489] bridge_slave_1: entered promiscuous mode [ 849.880822][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 849.955134][T19489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.986134][T19489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.104802][T19489] team0: Port device team_slave_0 added [ 850.126754][T19489] team0: Port device team_slave_1 added [ 850.190157][T19489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.216481][T19489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.266211][T19441] Bluetooth: hci10: command tx timeout [ 850.285815][T19489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.314463][T19489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.328684][T19489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.364816][T19489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.472047][T19489] hsr_slave_0: entered promiscuous mode [ 850.489456][T19489] hsr_slave_1: entered promiscuous mode [ 850.501056][T19489] debugfs: 'hsr0' already exists in 'hsr' [ 850.511327][T19489] Cannot create hsr debugfs directory [ 850.730873][T19441] Bluetooth: hci11: command tx timeout [ 850.880809][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 850.984739][T19516] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2447'. [ 851.041039][T19489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.462557][T19489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.581735][T19489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.660597][T19489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.880698][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 852.277423][ T5627] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 852.292936][ T5627] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 852.304252][ T5627] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 852.318261][ T5627] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 852.326150][T16821] Bluetooth: hci10: command tx timeout [ 852.333064][ T5627] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 852.698771][T19489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 852.726297][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.751809][T19489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 852.779750][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.807618][ T5627] Bluetooth: hci11: command tx timeout [ 852.839146][T19489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.880601][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 852.899679][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.993002][T19489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 853.015597][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.300149][T19489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.379781][T19489] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.408654][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.415814][T17151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.490174][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.497352][T17151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.761439][T19527] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.787298][T19527] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.814138][T19527] bridge_slave_0: entered allmulticast mode [ 853.836622][T19527] bridge_slave_0: entered promiscuous mode [ 853.871602][T19527] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.880522][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 853.906688][T19527] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.934795][T19527] bridge_slave_1: entered allmulticast mode [ 853.956826][T19527] bridge_slave_1: entered promiscuous mode [ 854.058434][T19527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.106615][T19527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.206776][T19527] team0: Port device team_slave_0 added [ 854.229514][T19527] team0: Port device team_slave_1 added [ 854.299742][T19527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.333643][T19527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.400374][ T5627] Bluetooth: hci12: command tx timeout [ 854.418563][T19527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.453659][T19527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.486086][T19527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.612919][T19527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.780240][T19527] hsr_slave_0: entered promiscuous mode [ 854.816051][T19527] hsr_slave_1: entered promiscuous mode [ 854.834562][T19527] debugfs: 'hsr0' already exists in 'hsr' [ 854.850125][T19527] Cannot create hsr debugfs directory [ 854.868074][ T5627] Bluetooth: hci11: command tx timeout [ 854.874729][T19489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.882387][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 855.152888][T19489] veth0_vlan: entered promiscuous mode [ 855.205060][T19489] veth1_vlan: entered promiscuous mode [ 855.312498][T19489] veth0_macvtap: entered promiscuous mode [ 855.478607][T19527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.566591][T19489] veth1_macvtap: entered promiscuous mode [ 855.620219][T19489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.687413][T19527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.749009][T19489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.762474][ T5627] block nbd1: Receive control failed (result -107) [ 855.846306][T19527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.880426][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 855.920902][T17138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.989776][T19527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.033363][T17138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.100058][T17138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.196705][T17138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.343507][T17138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.393458][T17138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.455772][T17138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.464535][ T5627] Bluetooth: hci12: command tx timeout [ 856.498859][T17138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.859205][T19527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 856.880515][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 856.891748][T19527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.911298][T19587] random: crng reseeded on system resumption [ 856.931789][T19527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 856.939378][ T5627] Bluetooth: hci11: command tx timeout [ 856.979684][T19589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 856.994525][T19527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 857.010193][T19527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 857.048037][T19527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 857.160788][T19527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 857.211424][T19527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.880218][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 858.381342][T19604] ICMPv6: process `syz.2.2455' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 858.422465][T19527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.532052][ T5627] Bluetooth: hci12: command tx timeout [ 858.659656][T19527] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.709535][T17138] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.716764][T17138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.824587][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.832456][T17151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.887311][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 859.856684][T19441] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 859.873387][T19441] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 859.888794][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 859.898520][T19441] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 859.915752][T19441] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 859.925203][T19441] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 860.250093][T19527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.598387][T19441] Bluetooth: hci12: command tx timeout [ 860.880111][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 861.073276][T19652] bridge0: port 3(team0) entered blocking state [ 861.133378][T19652] bridge0: port 3(team0) entered disabled state [ 861.181697][T19652] team0: entered allmulticast mode [ 861.226480][T19652] team_slave_0: entered allmulticast mode [ 861.278505][T19652] team_slave_1: entered allmulticast mode [ 861.341437][T19652] team0: entered promiscuous mode [ 861.387202][T19652] team_slave_0: entered promiscuous mode [ 861.434739][T19652] team_slave_1: entered promiscuous mode [ 861.482614][T19652] bridge0: port 3(team0) entered blocking state [ 861.489038][T19652] bridge0: port 3(team0) entered forwarding state [ 861.740375][T19527] veth0_vlan: entered promiscuous mode [ 861.828914][T19527] veth1_vlan: entered promiscuous mode [ 861.879950][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 862.030753][T19441] Bluetooth: hci13: command tx timeout [ 862.180205][T19527] veth0_macvtap: entered promiscuous mode [ 862.253258][T19527] veth1_macvtap: entered promiscuous mode [ 862.434978][T19527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.530593][T19527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.695504][T17144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.764848][T17144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.789184][T17144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.843805][T17144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.867027][T19625] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.879933][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 862.898631][T19625] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.917986][T19625] bridge_slave_0: entered allmulticast mode [ 862.935414][T19625] bridge_slave_0: entered promiscuous mode [ 862.965348][T19625] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.028747][T19625] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.072740][T19625] bridge_slave_1: entered allmulticast mode [ 863.089100][T19625] bridge_slave_1: entered promiscuous mode [ 863.219996][T19625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.271070][T19625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.331227][T17138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.361031][T17138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.378170][T19625] team0: Port device team_slave_0 added [ 863.422660][T19625] team0: Port device team_slave_1 added [ 863.583642][T19625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.604707][T19625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.692766][T19625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.743165][T19625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.755718][T17144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.772180][T19625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.798689][T17144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.858426][T19625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.879793][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 864.100976][ T5627] Bluetooth: hci13: command tx timeout [ 864.294959][T19625] hsr_slave_0: entered promiscuous mode [ 864.345217][T19625] hsr_slave_1: entered promiscuous mode [ 864.386547][T19625] debugfs: 'hsr0' already exists in 'hsr' [ 864.431606][T19625] Cannot create hsr debugfs directory [ 864.574905][ T5627] Bluetooth: hci12: unexpected subevent 0x01 length: 123 > 18 [ 864.879699][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 865.054942][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 865.819463][T19625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.879626][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 866.175526][T19441] Bluetooth: hci13: command tx timeout [ 866.209386][T19625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.400705][T19694] random: crng reseeded on system resumption [ 866.503211][T19625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.651743][T16821] Bluetooth: hci12: command 0x2016 tx timeout [ 866.688683][T19625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.881250][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 867.808909][T19625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 867.879443][ T5360] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 867.889430][T19625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.946261][T19625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 867.992620][T19625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.035188][T19625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.087419][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.093886][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.107396][T19625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.166021][T19625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.238712][T19441] Bluetooth: hci13: command tx timeout [ 868.256152][T19625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.494848][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2472'. [ 868.725777][T19441] Bluetooth: hci12: command 0x2016 tx timeout [ 868.790480][T19625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.887053][T19625] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.900903][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 868.962763][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.969946][T17155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.039920][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.047107][T17155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.879328][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 870.105108][T19625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.449779][T19625] veth0_vlan: entered promiscuous mode [ 870.462321][T19625] veth1_vlan: entered promiscuous mode [ 870.504339][T19625] veth0_macvtap: entered promiscuous mode [ 870.514475][T19625] veth1_macvtap: entered promiscuous mode [ 870.535200][T19625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.554043][T19625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.578273][T17144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.613513][T17144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.658447][T17144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.718267][T17144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.812534][T17144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.836598][T17144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.864369][T17155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.882841][T18060] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 870.902503][T17155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.883050][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 871.926678][T19762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.299725][T19762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.558257][T19762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.674216][T19762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.880811][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 873.879254][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 874.880661][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 875.263541][T16821] Bluetooth: hci6: command 0x0406 tx timeout [ 875.879379][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 876.878778][ T5634] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 876.995155][ T30] INFO: task syz-executor:16820 blocked for more than 143 seconds. [ 877.008483][ T30] Tainted: G L syzkaller #0 [ 877.016884][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 877.025905][ T30] task:syz-executor state:D stack:23864 pid:16820 tgid:16820 ppid:1 task_flags:0x400140 flags:0x00080002 [ 877.038476][ T30] Call Trace: [ 877.041778][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 877.045060][ T30] __schedule+0x125c/0x6730 [ 877.063983][ T30] ? do_raw_spin_lock+0x128/0x260 [ 877.069130][ T30] ? __pfx___schedule+0x10/0x10 [ 877.093569][ T30] ? find_held_lock+0x2b/0x80 [ 877.104064][ T30] ? schedule+0x225/0x2c0 [ 877.110085][ T30] schedule+0xdd/0x2c0 [ 877.122626][ T30] schedule_preempt_disabled+0x13/0x30 [ 877.132205][ T30] __mutex_lock+0xccc/0x1bd0 [ 877.142329][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 877.157584][ T30] ? __lock_acquire+0x49f/0x1a40 [ 877.171855][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 877.180099][ T30] ? net_generic+0xea/0x2a0 [ 877.191640][ T30] ? net_generic+0xea/0x2a0 [ 877.211780][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 877.218645][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 877.233154][ T30] nfsd_umount+0x3b/0x60 [ 877.241859][ T30] deactivate_locked_super+0xc1/0x1b0 [ 877.267487][ T30] deactivate_super+0xe7/0x110 [ 877.301082][ T30] cleanup_mnt+0x21f/0x450 [ 877.330192][ T30] task_work_run+0x150/0x240 [ 877.341394][ T30] ? __pfx_task_work_run+0x10/0x10 [ 877.353536][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 877.358973][ T30] ? rcu_is_watching+0x12/0xc0 [ 877.364075][ T30] do_syscall_64+0x652/0x840 [ 877.368679][ T30] ? clear_bhb_loop+0x40/0x90 [ 877.373637][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.379542][ T30] RIP: 0033:0x7f4fcb19f097 [ 877.384273][ T30] RSP: 002b:00007ffd080623e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 877.403760][ T30] RAX: 0000000000000000 RBX: 00007f4fcb2332ca RCX: 00007f4fcb19f097 [ 877.412140][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd080624a0 [ 877.420127][ T30] RBP: 00007ffd080624a0 R08: 00007ffd080634a0 R09: 00000000ffffffff [ 877.430050][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd08063530 [ 877.438782][ T30] R13: 00007f4fcb2332ca R14: 00000000000b1718 R15: 00007ffd08063570 [ 877.447823][ T30] [ 877.452020][ T30] [ 877.452020][ T30] Showing all locks held in the system: [ 877.459781][ T30] 1 lock held by khungtaskd/30: [ 877.476997][ T30] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 877.487204][ T30] 2 locks held by getty/12877: [ 877.492309][ T30] #0: ffff8880336e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 877.508666][ T30] #1: ffffc900068df2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 877.520477][ T30] 2 locks held by syz-executor/16820: [ 877.525862][ T30] #0: ffff88807e6540d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.538623][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.548836][ T30] 2 locks held by kworker/u8:12/17141: [ 877.556911][ T30] #0: ffff88801e77b140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 877.568501][ T30] #1: ffffc90003c47d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 877.580480][ T30] 2 locks held by syz.2.2163/17381: [ 877.585684][ T30] #0: ffffffff90b4d848 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 877.594298][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 877.610984][ T30] 2 locks held by syz-executor/17414: [ 877.616405][ T30] #0: ffff8880368c00d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.627637][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.644031][ T30] 2 locks held by syz-executor/17656: [ 877.649915][ T30] #0: ffff88807cafc0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.661253][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.671649][ T30] 2 locks held by syz-executor/17932: [ 877.677033][ T30] #0: ffff8880640420d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.687649][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.697443][ T30] 2 locks held by syz.4.2245/18046: [ 877.707783][ T30] #0: ffff888033fc80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.720443][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.730884][ T30] 2 locks held by syz-executor/18110: [ 877.736270][ T30] #0: ffff8880314fe0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.746904][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.759372][ T30] 2 locks held by syz-executor/18265: [ 877.764767][ T30] #0: ffff88802aec40d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.776071][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.786479][ T30] 2 locks held by syz-executor/18394: [ 877.794300][ T30] #0: ffff88808910e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.809886][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.819792][ T30] 2 locks held by syz-executor/19054: [ 877.825167][ T30] #0: ffff8880783600d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.837026][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.847488][ T30] 2 locks held by syz-executor/19440: [ 877.853163][ T30] #0: ffff88807bcbe0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.864791][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.876295][ T30] 2 locks held by syz-executor/19489: [ 877.882209][T18061] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 877.892461][ T30] #0: ffff88807f3fe0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.903098][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.919601][ T30] 2 locks held by syz-executor/19527: [ 877.925024][ T30] #0: ffff8880583c20d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.935689][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.946600][ T30] 2 locks held by syz-executor/19625: [ 877.955905][ T30] #0: ffff8880637240d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 877.966490][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 877.977423][ T30] [ 877.983588][ T30] ============================================= [ 877.983588][ T30] [ 877.992459][ T30] NMI backtrace for cpu 0 [ 877.992475][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 877.992496][ T30] Tainted: [L]=SOFTLOCKUP [ 877.992501][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.992510][ T30] Call Trace: [ 877.992516][ T30] [ 877.992522][ T30] dump_stack_lvl+0x100/0x190 [ 877.992543][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 877.992561][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 877.992579][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 877.992602][ T30] sys_info+0x141/0x190 [ 877.992619][ T30] watchdog+0xcb1/0x1030 [ 877.992642][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 877.992664][ T30] ? __pfx_watchdog+0x10/0x10 [ 877.992685][ T30] ? __kthread_parkme+0x18c/0x230 [ 877.992702][ T30] ? kthread+0x13a/0x450 [ 877.992719][ T30] ? __pfx_watchdog+0x10/0x10 [ 877.992737][ T30] kthread+0x370/0x450 [ 877.992754][ T30] ? __pfx_kthread+0x10/0x10 [ 877.992774][ T30] ret_from_fork+0x72b/0xd50 [ 877.992791][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 877.992809][ T30] ? __switch_to+0x800/0x10f0 [ 877.992830][ T30] ? __switch_to_asm+0x39/0x70 [ 877.992848][ T30] ? __pfx_kthread+0x10/0x10 [ 877.992867][ T30] ret_from_fork_asm+0x1a/0x30 [ 877.992895][ T30] [ 878.150873][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 878.157744][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 878.168407][ T30] Tainted: [L]=SOFTLOCKUP [ 878.172718][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.182756][ T30] Call Trace: [ 878.186020][ T30] [ 878.188935][ T30] dump_stack_lvl+0x100/0x190 [ 878.193602][ T30] vpanic+0x552/0x970 [ 878.197570][ T30] ? __pfx_vpanic+0x10/0x10 [ 878.202060][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 878.208207][ T30] panic+0xd1/0xe0 [ 878.211915][ T30] ? __pfx_panic+0x10/0x10 [ 878.216339][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 878.222516][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 878.228675][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 878.234832][ T30] ? watchdog.cold+0x1ec/0x234 [ 878.239600][ T30] ? watchdog+0xcc1/0x1030 [ 878.244017][ T30] watchdog.cold+0x1fd/0x234 [ 878.248606][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 878.254415][ T30] ? __pfx_watchdog+0x10/0x10 [ 878.259082][ T30] ? __kthread_parkme+0x18c/0x230 [ 878.264093][ T30] ? kthread+0x13a/0x450 [ 878.268324][ T30] ? __pfx_watchdog+0x10/0x10 [ 878.272987][ T30] kthread+0x370/0x450 [ 878.277044][ T30] ? __pfx_kthread+0x10/0x10 [ 878.281623][ T30] ret_from_fork+0x72b/0xd50 [ 878.286203][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 878.291301][ T30] ? __switch_to+0x800/0x10f0 [ 878.295969][ T30] ? __switch_to_asm+0x39/0x70 [ 878.300722][ T30] ? __pfx_kthread+0x10/0x10 [ 878.305303][ T30] ret_from_fork_asm+0x1a/0x30 [ 878.310064][ T30] [ 878.313138][ T30] Kernel Offset: disabled [ 878.317463][ T30] Rebooting in 86400 seconds..