last executing test programs: 2m26.60122093s ago: executing program 32 (id=1092): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x5, 0x7, 0x3, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000240)=0x7fffffffffffffff, 0xcd9) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x0) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x4000007c) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) unshare$auto(0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0x20) sendfile$auto(r2, r2, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x6, 0x4, 0x6d41, 0x8, 0xa, 0xfffffffffffffdfa]}, 0x0) write$auto(r3, &(0x7f0000000400), 0x100000a3d9) socketpair$auto(0x1, 0x2, 0x10000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/sctp/eps\x00', 0x181800, 0x0) 2m25.442948416s ago: executing program 33 (id=1098): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x29d1c1, 0x0) write$auto(r0, &(0x7f0000000280)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xc0\xfb\xa2\n\xa9)\fNR\xea\xb3\xf6\xc6\x88\xf0\xb9\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x9du\xbc\xe8\xd3j\x06\xc25x\xde\x84\xad\x17(\x0f\xc0\x14<6\x1eyY`\xd4g\xc3\xdeIJ\x0ew4\xa3\xde{\xfc\xe9\xa0i\xe4\\\b>-$\x96\xbc\x02\x1c\x04\xbe\xa6\x93\x8fC\xe4@\xce\xbf\r.\x98\x8c\x0f\x90\n\xfa\"\xaa&?\xfdW\xdd\xd8<\n\x81\x9bU\xa3+wN\xd64O2\n\xa1\x937J\'\xa5\xb0\xf2%\x15`Z\xf8\xf8\x0eQ\x82\xc6\xc9\xef:~S\xcd\x17\xe3E\xe4\"\xdb\xf1\x7f\x90\xc6\xe9\xdfDi\x17{]*\xbe\x88H\xafZ\x0e\x1d=U\x88\x00\x00\x00\x00\x00\x00\x00', 0x7) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x400008000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffa, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x80000000, 0x4008) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon16\x00', 0x123202, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x500c200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x11000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) (async) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x9, 0x20009, 0x4000000000db, 0x14, r2, 0x6) (async) mmap$auto(0x9, 0x20009, 0x4000000000db, 0x14, r2, 0x6) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x108600, 0x0) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x108600, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ram10\x00', 0x36f6c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x6) r4 = memfd_create$auto(0x0, 0x4) statx$auto(r4, 0x0, 0x1100, 0xbdf4, 0x0) (async) statx$auto(r4, 0x0, 0x1100, 0xbdf4, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1m49.951191256s ago: executing program 4 (id=1340): unshare$auto(0x40000080) (async) r0 = open(0x0, 0x80a40, 0x9e) write$auto(0xffffffffffffffff, 0x0, 0x6) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/82, 0x52) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x4084) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r3, 0xb3eaee9e9ed11725, 0x70bd29, 0x25c7dbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) 1m49.360299185s ago: executing program 4 (id=1344): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = eventfd$auto(0x3) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd8/mq/0/nr_reserved_tags\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0) r1 = ioctl$auto_TUNGETVNETBE2(r0, 0x800454df, &(0x7f0000000180)=0x734) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000340)={0x7, 0x50}) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) pwritev$auto(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff741f26f506}, 0x0) getpid() shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f00000002c0)={{0x6, 0xffffffffffffffff, 0xee00, 0x2, 0xf833, 0x8, 0x8000}, 0xf, 0x7, 0x8, 0x1, @inferred, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000200)="b5af5dff4ded0e649d07722b535ebc6e5599f4fdb1486a2db0c061fa4b355cc0695598a20d41f036c77ef3f309e1ca49d12d3344d8d7d6d365ff3a2c6f545e2998be32f1dc740c128b808543b55a840f3f70d2d675609fd194930e6b85f4a11b5e20c15949c323001dd1d26344235b7299bf2d30a25520783f05d46717b57f7b59954488c049d1f1f6e3be4e63", &(0x7f0000000140)="5cb1cfadf94aa884e5e0df91d3da1d24490d5518fb5ad77c632020"}) 1m48.397451599s ago: executing program 4 (id=1349): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0) ioctl$auto(r1, 0x8, 0xffffffffffffffff) (async) ioctl$auto(r1, 0x8, 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r1, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001340)=""/4112, 0x1010) (async) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001340)=""/4112, 0x1010) mmap$auto(0x3, 0x0, 0x400002, 0x15, r0, 0x5) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) socket(0x2, 0x2, 0x0) (async) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r4) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vivid.0/video4linux/vbi4/power/control\x00', 0x4aa181, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vivid.0/video4linux/vbi4/power/control\x00', 0x4aa181, 0x0) write$auto(r5, &(0x7f0000000240)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x100000006) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x2, 0x1, 0x30d, 0x40000000000401) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m47.22027251s ago: executing program 4 (id=1354): r0 = socket(0xa, 0x2, 0x1) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) (async) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) (async) unshare$auto(0x40000080) (async) r2 = socket(0xb, 0x800, 0x2) getpeername$auto(r2, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x122) (async) r5 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r5, 0xff01, &(0x7f0000000080)=0x80) (async) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async) close_range$auto(r4, r0, 0x7) (async) getsockopt$auto_SO_RCVLOWAT(r4, 0x0, 0x12, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x19a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80802, 0x0) r7 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r4, 0x40789440, &(0x7f00000000c0)={0x100, 0x5, 0x6, 0x8, 0x9, 0xe37, 0x5, 0x6, 0x9, "57ef0f140300000000000000aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4113f72a36f28bbcf4c8ec369de0"}) bind$auto(r6, &(0x7f0000000040)=@qipcrtr={0x2a, 0x2}, 0x6b) (async) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 1m36.631928898s ago: executing program 34 (id=1331): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/dirty_bytes\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) sysfs$auto(0x2, 0xe, 0x0) (async) r0 = socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) bind$auto(0x3, 0x0, 0x6a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r1, 0x0, 0x401, 0x5, 0x3}}}) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) unshare$auto(0x40000080) getpid() openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) (async) read$auto(r2, 0x0, 0x800) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) socket(0x18, 0xa, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) (async) socket(0x2, 0x3, 0xa) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd40, 0x1, 0x948f, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xa, 0x8, 0x6]}, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0002"], 0x18}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) 1m31.980006239s ago: executing program 35 (id=1354): r0 = socket(0xa, 0x2, 0x1) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) (async) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) (async) unshare$auto(0x40000080) (async) r2 = socket(0xb, 0x800, 0x2) getpeername$auto(r2, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x122) (async) r5 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r5, 0xff01, &(0x7f0000000080)=0x80) (async) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async) close_range$auto(r4, r0, 0x7) (async) getsockopt$auto_SO_RCVLOWAT(r4, 0x0, 0x12, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x19a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80802, 0x0) r7 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r4, 0x40789440, &(0x7f00000000c0)={0x100, 0x5, 0x6, 0x8, 0x9, 0xe37, 0x5, 0x6, 0x9, "57ef0f140300000000000000aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4113f72a36f28bbcf4c8ec369de0"}) bind$auto(r6, &(0x7f0000000040)=@qipcrtr={0x2a, 0x2}, 0x6b) (async) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 1m27.432174909s ago: executing program 1 (id=1418): ioperm$auto(0x4, 0xbc6, 0x81) quotactl$auto(0x2, 0x0, 0x62a0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) fcntl$auto(0xff80000000000000, 0x409, 0x13) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd9\x00', 0x0, 0x0) ioctl$auto(r0, 0xab02, r0) mmap$auto(0x7ffffdfde000, 0x2020004, 0x9, 0x11, 0x8000000000000000, 0x7fffffffffffffff) 1m27.275341449s ago: executing program 1 (id=1419): socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7ffffffff001, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) futex$auto(&(0x7f0000000080)=0x7, 0x3, 0x1f, 0x0, &(0x7f00000000c0)=0x3, 0x440a48d3) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) 1m26.892548899s ago: executing program 1 (id=1420): move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xb, 0xa, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x2, 0xff, 0x9f9f, 0x1, @count=0x1, 0x0, 0x200, 0x7dc0, 0x8, 0x8}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xc, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2480, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket(0x28, 0x1, 0x2000000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r2, 0x64c5, r2) sysfs$auto(0x2, 0x4d, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000f6dbdf250100000008000a00080009009c781e01060002000000000008001700"/50, @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x11, 0x2, 0x6, 0x5, 0x208, 0xffffffffffffffff, [], {0xd74c, 0x9, 0x7, 0x29f, 0x100, 0x82, 0x80101, 0x0, 0x2}, {0xfffffffe, 0x1, 0x10001, 0x7, 0x4, 0x40, 0x76c5, 0x4, 0x100000008}}) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) 1m24.99233428s ago: executing program 1 (id=1425): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000280)="13") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000440)={0xcc}) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0) 1m24.525059781s ago: executing program 1 (id=1427): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(r1, 0x0, 0xfffffffffffffffb) ioctl$auto(0x3, 0x540a, r1) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\a\xf9L\xe2H\xddW\x1b\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2', 0x8002) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x8, 0x43, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x145002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000600)='/Eev/audio1\x00[\t\xf9\xb8\x9fo\xbaO,\x91V(`\xfe\xe7VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"6\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7l\xd7\x1b-O\x12D\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xf2o\xc1\x83\x80E\xce\f\xcd\xed$\xe6vjVb\x17VF\x8b\xd2\x0fw\xf4\xeaZ,9\xa3\xe8\xa3\xfa;i\xc5\xaa\x18\xa1\xd0\xae\xb6nL\xc9T\xfd\xf4\x8b\xf9\n\\\x96qp\xdcb\xdd_\xbbY\x98j\xa1yj\x19-\xc0\x93%z3;5\x9a\rC\xdc\xef\x1e\xe2\xb5\"\x92\xb0\x98d\xf7\xad\n\xa3j_>\x0e?LH\x80\xd3\xd2\xd5\x9e\xdc\xc0\xb3\xbdu\xab\xe1G\xf0\x9aw\xd1\xf7\xff\xfe\xc1W\xc53]\xd7\x99pp\rs%\x18\xefJ?\xcefc}\xa3', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b300") r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) r4 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000180), 0x20080, 0x0) write$auto_evm_key_ops_evm_secfs(r4, &(0x7f0000000200)="f6913da2c250b99430f2916f1526a798564b9430bce765867f3955ec264621c22534b7683584b7c6cf79a86f9ec31448241a6ff1aea707fe99e4163f9cd86cd52716b1535555bfb54a8e488f757aa0b7b77c1b691ccdb01accbfcd2e3be0aadff13d", 0x62) ioctl$auto_UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x1ffffff, 0x8000}) read$auto_hpet_fops_hpet(0xffffffffffffffff, &(0x7f0000000500)=""/229, 0xe5) getpgid$auto(0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x28002, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m23.334891973s ago: executing program 1 (id=1432): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) mmap$auto(0x0, 0x400005, 0x40000000df, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) io_setup$auto(0x7ffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) timerfd_create$auto(0x23, 0x0) ioctl$auto_FICLONE(r0, 0x40049409, r0) socket(0x80000000000000a, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(0x0, 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) (async) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) socket(0xa, 0x3, 0x73) (async) socket(0xa, 0x3, 0x73) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x668401, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) 1m8.072375101s ago: executing program 36 (id=1432): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) mmap$auto(0x0, 0x400005, 0x40000000df, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) io_setup$auto(0x7ffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) timerfd_create$auto(0x23, 0x0) ioctl$auto_FICLONE(r0, 0x40049409, r0) socket(0x80000000000000a, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(0x0, 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) (async) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) socket(0xa, 0x3, 0x73) (async) socket(0xa, 0x3, 0x73) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x668401, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) 1m4.366016823s ago: executing program 6 (id=1495): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, 0x0) ioctl$auto_XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000080)={0x5, 0x100000000, 0x746c, 0x8, 0x3}) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 1m2.629179017s ago: executing program 6 (id=1502): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) fchown$auto(0xffffffffffffffff, 0x0, 0x400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, 0x0, 0x400800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0) setresuid$auto(0x0, 0x8, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x7) madvise$auto(0x8000, 0x87fff, 0xc) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r1 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000040)="d1325f9d351927cad155b44e129ea6145007494e138ad265e324350af517888d4f50609fd3d5dd26816b19c9503cef84467ffd57656577a3d1a4103b179bc977") syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd8/hctx0/cpu0/poll_rq_list\x00', 0x848000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m2.510349314s ago: executing program 6 (id=1503): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r0) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_HT_CAPABILITY={0xfa, 0x1f, "f08aabb361ae468e4e4db6d62154d1a545f748b609f317c7d4dc6eb7dd0d406af73a500328af17fe25893e1f7676283c187c5b02000b6e9af1a6919371fc251d1f2d0f218bd1a864d6d7a531355dc21b3ad7a6a4a42b4d3e84d56313d173ebb56cdf9675a07d837eb520a6ebabbf576ea8421dc1bd6cb9d649fca9bbadf94319196d7e34d7848e299a91f2dd21fc5ced0f2343c4244bf4a7189f7e019e83612f75e1b66586c0b7e0cb99b8aa41bbe1b2e34f1aac66f0aa124cb5cf85e785c03caefbcf17d210a7cd3164f0af55fa5f53790a02340baa46646d748c394f19b67574ef8feeb71ac78990d80a9e11dd4fd54573a93bfd9e"}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x20044061}, 0x1) (async) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r3, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x6) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c014}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x4020}, 0x4004) r4 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/oom_score_adj\x00', 0x202600, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/midi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x1, 0xff, "50b82e6c92b172b4cfaaca8e"}) (async) read$auto_proc_oom_score_adj_operations_base(r4, &(0x7f0000000300)=""/202, 0xca) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@enable_stats={0x8}, 0x5) 1m2.18466361s ago: executing program 6 (id=1504): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000380), r2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r5, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) gettid() r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r6, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x6, 0x2e) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) 1m0.322044446s ago: executing program 6 (id=1512): socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c80", @ANYRES32, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2d172dbd7000fedbdf2504"], 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) 59.23192952s ago: executing program 6 (id=1517): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) readv$auto(0xffffffffffffffff, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b02, 0x0) (async) semctl$auto(0x7, 0x2, 0x13, 0x1) (async) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0x5, 0x0, 0xce24) 53.452212557s ago: executing program 8 (id=1545): move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x5, 0x3, 0x7fff) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000240)='/Ee\x01/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xe7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xff{GP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D', 0x7ffffffdffff8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) capset$auto(0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) lseek$auto(0x3, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r3, 0x0) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 52.434101702s ago: executing program 8 (id=1549): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0xd, 0x0, 0x221) (async) setresuid$auto(0xd, 0x0, 0x221) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) readv$auto(r0, &(0x7f0000000240)={0x0, 0x28}, 0x1) setrlimit$auto(0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 52.30563074s ago: executing program 8 (id=1550): mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) (async) socket(0x28, 0x5, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x26, 0x6, 0x0) (async) unshare$auto(0x40000080) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) (async) mmap$auto(0x0, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x10000000008000) (async) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) unshare$auto(0x1) (async) pwrite64$auto(r1, 0x0, 0x2, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x2, 0x100000001, 0x2, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x3}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x7f, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async) sendto$auto(r2, 0x0, 0xe25c, 0x9, 0x0, 0x20) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000100)={'wg1\x00'}) 52.303126075s ago: executing program 7 (id=1551): mmap$auto(0x0, 0x200004, 0x4800000000e3, 0x100000040eb2, 0xffffffffffffffff, 0xdd0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy3/airtime_flags\x00', 0x2481, 0x0) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x121140, 0x0) mmap$auto(0x8, 0xca7, 0xffffffffffffffff, 0x35, 0xfffffffffffffffa, 0x1) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x401, 0x200000000000000, 0xfffffffffffffff8, 0x0) setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2}) socket(0xf, 0x800, 0x4) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) read$auto(r3, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) 51.922273752s ago: executing program 8 (id=1553): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000300)={@_si_pad}, 0x0, &(0x7f0000000180)={{0x0, 0xa369}, {0x3, 0x7fff}, 0xfffffffffff7f000, 0x8, 0x5, 0x7, 0xab, 0x3, 0x17, 0x5, 0xffffffff, 0xffff, 0x0, 0x8, 0x3, 0xff}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000240)={0x3, 0x100, 0x9, 0xc1, 0xf48c, r5}) r6 = fcntl$auto_F_GETOWN(r0, 0x9, 0x6770) shmctl$auto_SHM_STAT(0x8, 0xd, &(0x7f00000000c0)={{0x10001, 0x0, 0xee00, 0x8, 0x6, 0x3, 0x5}, 0x101, 0x4, 0x92, 0x9, @raw=0x22, @inferred, 0x6, 0x0, &(0x7f0000000040)="2a25f11d71b0f60b78b824a28b076a686ebcbbe2b057795ed9df6bc16bff3f3f3d98f3071a50fac526ee1d24f14a38d86da78a0e", &(0x7f0000000080)="3d19f06f910f5afc6892aa22e303089ee2"}) r8 = semctl$auto_GETPID(0x9, 0x6, 0xb, 0x9) r9 = gettid() setpgid$auto(r9, 0xe83) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)={0x14dc, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x1104, 0x9, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @uid=r4}, @typed={0x70, 0x23, 0x0, 0x0, @binary="c3d6aebf99e5fa0557c8f7e5de6fe313acf0e4f0a891e5e15f5bde08d0bf0bd4a4e4d3b8d369f8c255f2cf2e494f6644980a543c618c1786aee76346b9b0ce8938879499ee2e01be7988e27ec80b49a32309cbae0c56d39fdf054f6be191b819221acbe6498d4cfcb0b91ac3"}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r0}, @nested={0x107f, 0x3c, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x48}, @typed={0x4, 0x94}, @generic="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", @typed={0x4, 0x25}, @generic="2fadf6b093ef5bf3fdbca0ac6a40941dd8d61d4625fbc0ca1013f6b761185878eb7b2fb9c3b35820e1e645c2289ed31fcb6407338d273c31e565db1bc6579f7be3711355d1db496bb34434065db127cdfeebd4053dc409e3e68d7d98cfe49bdfa450631cd1b951"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x269, 0x2, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @fd=r0}, @generic="62ebed13657cc104c3aa8550e916241bed5c4e49f4a9f949283e0deb66420a650f7807730a42d1d1c7a8a60552e84af98baad808e9fc4dc8e13b9f84339c01b5530bb58b564fa5981831f47e3d5f354898f44267178d977fd730cd77da2336864838d3930c9ae1b5e5915b65a5f7add1cd071ffb8b5297a5a395cde8b0d6", @typed={0x8, 0x2, 0x0, 0x0, @pid=r6}, @nested={0x150, 0xa0, 0x0, 0x1, [@generic="c39ed2232d24b1b9cdbb312773a74aa8e8b526dd06cf489700", @generic="e06e222c8fef6bc883c2c23112934a5fa42a369dcad798b450338f70275b193fdc563265e4fd53c59f3b42dbe020e6ff5b317795583fc0c6ba54727360fee7c215368cb6e51e4bd5b288e7c0772720647ffdb9e7ac3d4d5581c263a6494cb65a7e3a667338e7469e6243f2e5bd3d8811e5f7b0f1e73deace75799d719bbd0a5b0bce2a8ee9e39f84ae8452422e5b3049747f554ca22425c12bb0a02d29761b3e546cd403a97e1c764ab19f507823c14a92d06a2f85a5098929b80a32941ee3e10567b623bfbe4002cd0247ca53b5778ceb0894036dce18f56bbef0bf747eb13605aa4d65145e6a5fdff84e8d6dc09d", @typed={0x39, 0x5e, 0x0, 0x0, @binary="e13d647cb165303970ad11fb6d463a487d27cab33ee257bde7b9dc8c8db229588c54162264fa790c9bdac98d25ca9670f1e0fab0bc"}, @typed={0x8, 0x10b, 0x0, 0x0, @u32=0x4}]}, @nested={0x50, 0x3e, 0x0, 0x1, [@generic="6919de2150313a8da3ae1817a204d692528ac2f6a9009ab5c9c15770", @typed={0x14, 0xba, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, @generic="88e4d10da7e7cf467c9ab7524463788d9d607dfcf2a75b843518e25bde333a5205dbad00576cb2302e0af37c8eaa8db90d50b27088a07b"]}, @MACSEC_ATTR_OFFLOAD={0x28, 0x9, 0x0, 0x1, [@nested={0x1b, 0x3f, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @u32=0xa003}, @nested={0x4, 0x7f}, @nested={0x4, 0x151}, @generic="302dfec54a915b"]}, @typed={0x8, 0xf8, 0x0, 0x0, @uid=r7}]}, @MACSEC_ATTR_SA_CONFIG={0x11b, 0x3, 0x0, 0x1, [@typed={0x4, 0xc0}, @typed={0x8, 0xc, 0x0, 0x0, @pid=r8}, @generic="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", @typed={0x8, 0x65, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x155, 0x0, 0x0, @uid=0xee00}]}, @MACSEC_ATTR_OFFLOAD={0x13, 0x9, 0x0, 0x1, [@generic="4d23c1c667c662190a8f466f4af0ce"]}]}, 0x14dc}}, 0x4c010) fsopen$auto(0x0, 0x1) io_uring_setup$auto(0xb, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0xff) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) 51.827203369s ago: executing program 7 (id=1554): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x5, 0x0, &(0x7f0000000000)={[0x9, 0xc, 0x3, 0x4, 0x2, 0x7, 0x0, 0xff, 0xffffffffffffffff, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129542, 0x0) memfd_create$auto(0x0, 0x0) capset$auto(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) 51.610590551s ago: executing program 8 (id=1555): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) write$auto(0x3, 0x0, 0x5c8) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x300, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x40000) read$auto_tracing_entries_fops_trace(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto(0x3, 0x5402, r4) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r6, 0x0, 0x400000000006) msgctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000180)={{0x0, 0xee01, 0xee00, 0x2, 0x7f17, 0x9, 0x9c30}, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x3, 0x9, 0xffffffffffffffff, 0x2, 0x2, 0x7fffffff, 0x6, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0x4}) r8 = getegid() setfsgid$auto(r8) msgctl$auto_MSG_INFO(0x8001, 0xc, &(0x7f0000000300)={{0x2, r7, r8, 0xffff8000, 0xc, 0x2, 0x9}, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0xa3, 0x42d, 0x6, 0x4177ad48, 0xffffffff, 0x2, 0xfffa, 0x7, 0xf49, @raw=0xffffffff, @raw=0x9}) fsconfig$auto(r5, 0xc, &(0x7f0000000080)='\x00', &(0x7f0000000140)="e741606b5a39ee5e37fc0dfcca4f750bbeab0d82a05172cdb8d58f571df23626ad0fca9cc6220195620bfba6f3edba3932f66d362ff88b5067e960d227e7c2c5fc00553e585470f0bdc9a7b585f1a63c5c0418bfa854ab234ac8eea2be4ca2bf5ae0fae75504272049320267242abcd3997422f05a2e69c929ecd2", r8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mq_timedreceive$auto(r0, 0x0, 0x10000000000000, 0x0, 0x0) 51.514633217s ago: executing program 7 (id=1556): r0 = socket(0x2a, 0x2, 0xffffffff) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x4a083, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x864b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/memory/memory3/uevent\x00', 0x474040, 0x0) symlink$auto(0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) readv$auto(r3, &(0x7f0000000100)={0x0, 0x2}, 0x7) write$auto(0x3, 0x0, 0xffd8) futex$auto(&(0x7f0000000140)=0x80000000, 0x101, 0x3, &(0x7f0000000180)={0x0, 0x1000}, &(0x7f0000000200)=0xe, 0x91f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r5, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf25040000000500000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x36}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r2, 0x0, 0x20) statmount$auto(0x0, 0x0, 0x1fe, 0x1) 51.110558624s ago: executing program 7 (id=1559): mmap$auto(0x2, 0x40005, 0x10000, 0x9b72, 0x7, 0x28003) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x7a8c, 0x8040009, 0x5, 0x9b72, 0x7, 0x200009) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) socket(0x2d, 0x2, 0x0) mmap$auto(0x8000000000000001, 0xce7, 0x200000000f, 0xeb1, 0x401, 0x7bfe) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x214001, 0x0) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000080), 0x582101, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x700) mmap$auto(0x1, 0x20009, 0x10000000000de, 0x419, r1, 0x8000) mincore$auto(0x200000001004, 0x8000000008001, 0x0) socket(0x18, 0x80004, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='0[.[\x00', 0xcd04) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = epoll_create$auto(0x12b8) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 50.777413978s ago: executing program 8 (id=1560): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x630202, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r1) mmap$auto(0x0, 0x3, 0x4000000000e2, 0xeb1, 0x401, 0x8001) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4044811}, 0x200000b0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x1ac}, 0x1, 0x0, 0x0, 0xaa2c1a0e01dacb44}, 0x801) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x213, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="44008fb00000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000003000180005ac0f0032ebf97695400700ffe0b758d2c73164a1f6ae0699ce56379ef99a84df0cae6adee96b3394a81968"], 0x44}, 0x1, 0x0, 0x0, 0x22008004}, 0x40448a0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x29, 0x3, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x125200, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x3d1c82, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x0, 0x0) sysfs$auto(0x2, 0x3c, 0x0) 48.881396142s ago: executing program 7 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, 0x0, 0x800) r1 = clone$auto(0x15, 0x1ff, 0x0, 0x0, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x800, 0x5, 0xd) setxattrat$auto(r3, 0x0, 0xa, 0x0, 0x0, 0x1) madvise$auto(0x10001, 0x240008, 0x19) prctl$auto(0x9, 0xfffffffffffffffd, r1, 0x42, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 47.759453253s ago: executing program 7 (id=1562): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000004000480060003002a00000004000500080002000200000008000800", @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, r2, 0x0) 43.641636906s ago: executing program 37 (id=1517): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) readv$auto(0xffffffffffffffff, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b02, 0x0) (async) semctl$auto(0x7, 0x2, 0x13, 0x1) (async) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0x5, 0x0, 0xce24) 38.222037429s ago: executing program 9 (id=1568): sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20044011}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0) sendmsg$auto_SMC_PNETID_DEL(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000006942b9a614d7795201b07b1fd06acc98b6d68ecd800160945346c85ef51f1611aa8f34267eb6b873e7a72b3decdb8749b96d9ad2ac9abfa150417d08d1eef8f22de8bb0cfd0cf5f15cdb7cc45515cbf0bc13ba5ff8ac0a497d2c7cbb99295e60b47353538484d51a62e282132a4b7f6b78174acd6da2ba734c3cce13f56a85ed4ae7ea4293589f114820b1c6378fb03c7268fed6d0e220038ac56d52999e51968ed8991c3507a10c511d4300956de9ae8f2d887c3f", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) getgroups$auto(0x1a1, 0xfffffffffffffffd) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x8000000000000, 0x201, 0x4000000000df, 0x40eb1, r1, 0x8001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf251b0000002000018014000000000000000000000000000005e9643f520666cb321cfaf4407f40852e84ca1c25a3b4e17813459ee7630e73e0b15c0378fb5bb715d59ba94c7af02f684a1bff820624fa904cbccf4543e34f50477241f0e8edd81d8eb906881d806c3a7805a7bb415037591b5014eab6e7397684de537898dfcb9f2e155d45d83c44eaa476bc680a0e0b672c481f07679b7a31a2f7895efc34c2d2"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x2000000000000000, 0x8, 0x2000000efb, 0x8000000008011, r5, 0x8000) setresgid$auto(0x0, 0x0, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, 0x0) shmctl$auto_SHM_STAT(0x1, 0xd, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) lseek$auto(r4, 0x7fff, 0x40001000) madvise$auto(0x0, 0x400053, 0xc) connect$auto(r6, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x56) 35.983731444s ago: executing program 5 (id=1581): socket(0x15, 0x5, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x800) timer_create$auto(0x8, 0x0, 0x0) timer_getoverrun$auto(0x0) madvise$auto(0x800, 0x3, 0x4) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0xa7) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) sendmsg$auto_NET_SHAPER_CMD_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf2d0200000008000800", @ANYRES32=0x0, @ANYBLOB="080006000400000008000600050000002400018008000200080000000800010006000000080001000500000008000200070000000800060000000000080002000800000004000180"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/module/ueagle_atm/parameters/altsetting\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x40, 0x801ffdf, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 35.734883773s ago: executing program 38 (id=1560): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x630202, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r1) mmap$auto(0x0, 0x3, 0x4000000000e2, 0xeb1, 0x401, 0x8001) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4044811}, 0x200000b0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x1ac}, 0x1, 0x0, 0x0, 0xaa2c1a0e01dacb44}, 0x801) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x213, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="44008fb00000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000003000180005ac0f0032ebf97695400700ffe0b758d2c73164a1f6ae0699ce56379ef99a84df0cae6adee96b3394a81968"], 0x44}, 0x1, 0x0, 0x0, 0x22008004}, 0x40448a0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x29, 0x3, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x125200, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x3d1c82, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x0, 0x0) sysfs$auto(0x2, 0x3c, 0x0) 35.718538012s ago: executing program 5 (id=1583): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="011329bd7000fddbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004840) 35.607274092s ago: executing program 5 (id=1584): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) waitid$auto(0xffffff6e, 0xffffffffffffffff, 0x0, 0x66cd8758, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x48d, 0x400, 0x9}]}) connect$auto(0x3, 0x0, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r0) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x9}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x80000000}, @HWSIM_ATTR_PMSR_SUPPORT={0xbc, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x5}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x64, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x1}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x2ea}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xfffffffe}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x2}]}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x38, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0xa}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}]}]}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x7f}, @HWSIM_ATTR_REG_HINT_ALPHA2={0xd, 0xb, '/dev/kvm\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x800, 0xae, 0x1, &(0x7f0000000140)="a4e61f60056162440c3b0607ff0b612d39b3e6d1ddcb4f7066029a0dfca7ca09765a2620d5a88c678ee1b174d02196cbd95ccbf6aa059b43b129f7333a5f046aa1dff8dcf3a5a923fcc7ecfaa6f663bbe47495a3159947a368b6a9764eb9f510c72a992514202cb375e86e7fa2da77e6440001ab9476955117b937b86db350b7b369d271e9c827cd5667daa11d5e90867b57d41bc49a9a1d255aa15f1e015e452e58038771d7bda5937af74de901bc9f918e3c1eb83d7558112059d7826e8f72c90c44ffd6596b7b67cc132abe6976c9265896506af6cd60cb71c8c6d9efd3914d2fd2c00ab65c55d4b1", 0xe000) 35.107289672s ago: executing program 5 (id=1585): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x5, 0x0, &(0x7f0000000000)={[0x9, 0xc, 0x3, 0x4, 0x2, 0x7, 0x0, 0xff, 0xffffffffffffffff, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129542, 0x0) memfd_create$auto(0x0, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11s\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) capset$auto(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x20000, 0x0) io_uring_register$auto(r0, 0xc, &(0x7f00000001c0)="842f95955328ec06c653c715f74b1eca4276900f2ebc3f97f9f2c0184d1449b6b012541264", 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, 0x0, 0x6f4) 35.00218958s ago: executing program 5 (id=1586): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r1 = clone$auto(0x15, 0x1ff, 0x0, 0x0, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x800, 0x5, 0xd) setxattrat$auto(r3, 0x0, 0xa, 0x0, 0x0, 0x1) madvise$auto(0x10001, 0x240008, 0x19) prctl$auto(0x9, 0xfffffffffffffffd, r1, 0x42, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 33.011293556s ago: executing program 5 (id=1587): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x7, 0x5, 0x9, 0x3, 0x5, 0x1, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/3/effective_affinity\x00', 0x189c02, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x2000006) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) setresuid$auto(0x0, 0x0, 0x0) (async) msgctl$auto_MSG_STAT(0xff, 0xb, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x6, 0x3, 0x8, 0x7a99}, 0x0, &(0x7f0000000040)=0x4, 0xfffffffffffffffc, 0x0, 0x5, 0x5, 0x70, 0x8, 0x6, 0x400, @inferred, @raw=0x6}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid$auto(&(0x7f0000000380)=0x4, &(0x7f00000003c0)=0xd, &(0x7f0000000440)=0x1000) (async) ptrace$auto(0x10, r1, 0x4, 0x7) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x2003f2, 0x15) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) (async, rerun: 64) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x20, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) write$auto(r4, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xf5d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfbLn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xc2\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x99\x1d\xa6\x1a\aW\x05\xa5\xe8\xf9\xe4p\xebu\\U', 0x100000abd9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) close_range$auto(0x2, r5, 0x0) (async, rerun: 32) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000040)="405a9ec40ef243f541e50a683084f24008b1fc5ed86084a7cb0a38aae9af9854d12feb5b524e653b285366f0d16f3d4440a22fe6ad7bb5918436e4cd757cabc689917de5a6a803894f57d4645bf459e1c2c46a49386da23883088dbedd5029da219fd9c8e9194425b12063b44eb01fd15f1eb4443bc17618381e21350f2340cb1bade72609f2311f4e4f0c0860e1f3908d242cf847c266d1bee8bfe64e3423c105192797b0228c69d0bcfd082d1aae4615601e786584fe") (rerun: 32) 31.950020261s ago: executing program 39 (id=1562): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000004000480060003002a00000004000500080002000200000008000800", @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, r2, 0x0) 23.050067223s ago: executing program 40 (id=1568): sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20044011}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0) sendmsg$auto_SMC_PNETID_DEL(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000006942b9a614d7795201b07b1fd06acc98b6d68ecd800160945346c85ef51f1611aa8f34267eb6b873e7a72b3decdb8749b96d9ad2ac9abfa150417d08d1eef8f22de8bb0cfd0cf5f15cdb7cc45515cbf0bc13ba5ff8ac0a497d2c7cbb99295e60b47353538484d51a62e282132a4b7f6b78174acd6da2ba734c3cce13f56a85ed4ae7ea4293589f114820b1c6378fb03c7268fed6d0e220038ac56d52999e51968ed8991c3507a10c511d4300956de9ae8f2d887c3f", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) getgroups$auto(0x1a1, 0xfffffffffffffffd) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x8000000000000, 0x201, 0x4000000000df, 0x40eb1, r1, 0x8001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf251b0000002000018014000000000000000000000000000005e9643f520666cb321cfaf4407f40852e84ca1c25a3b4e17813459ee7630e73e0b15c0378fb5bb715d59ba94c7af02f684a1bff820624fa904cbccf4543e34f50477241f0e8edd81d8eb906881d806c3a7805a7bb415037591b5014eab6e7397684de537898dfcb9f2e155d45d83c44eaa476bc680a0e0b672c481f07679b7a31a2f7895efc34c2d2"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x2000000000000000, 0x8, 0x2000000efb, 0x8000000008011, r5, 0x8000) setresgid$auto(0x0, 0x0, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, 0x0) shmctl$auto_SHM_STAT(0x1, 0xd, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) lseek$auto(r4, 0x7fff, 0x40001000) madvise$auto(0x0, 0x400053, 0xc) connect$auto(r6, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x56) 17.780309112s ago: executing program 41 (id=1587): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x7, 0x5, 0x9, 0x3, 0x5, 0x1, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/3/effective_affinity\x00', 0x189c02, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x2000006) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) setresuid$auto(0x0, 0x0, 0x0) (async) msgctl$auto_MSG_STAT(0xff, 0xb, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x6, 0x3, 0x8, 0x7a99}, 0x0, &(0x7f0000000040)=0x4, 0xfffffffffffffffc, 0x0, 0x5, 0x5, 0x70, 0x8, 0x6, 0x400, @inferred, @raw=0x6}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid$auto(&(0x7f0000000380)=0x4, &(0x7f00000003c0)=0xd, &(0x7f0000000440)=0x1000) (async) ptrace$auto(0x10, r1, 0x4, 0x7) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x2003f2, 0x15) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) (async, rerun: 64) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x20, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) write$auto(r4, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xf5d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfbLn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xc2\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x99\x1d\xa6\x1a\aW\x05\xa5\xe8\xf9\xe4p\xebu\\U', 0x100000abd9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) close_range$auto(0x2, r5, 0x0) (async, rerun: 32) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000040)="405a9ec40ef243f541e50a683084f24008b1fc5ed86084a7cb0a38aae9af9854d12feb5b524e653b285366f0d16f3d4440a22fe6ad7bb5918436e4cd757cabc689917de5a6a803894f57d4645bf459e1c2c46a49386da23883088dbedd5029da219fd9c8e9194425b12063b44eb01fd15f1eb4443bc17618381e21350f2340cb1bade72609f2311f4e4f0c0860e1f3908d242cf847c266d1bee8bfe64e3423c105192797b0228c69d0bcfd082d1aae4615601e786584fe") (rerun: 32) 9.102116667s ago: executing program 2 (id=1655): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r1, 0x1b, 0x70bd25, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x6}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/aql_enable\x00', 0x0, 0x0) pwrite64$auto(r3, 0x0, 0x3, 0x4200000000000005) 8.909714894s ago: executing program 2 (id=1656): r0 = socket(0xf, 0x1, 0x85) (async, rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r1, 0x0, 0x401, 0x5, 0x3}}}) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') (async) r3 = getpid() (async, rerun: 32) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r2) (rerun: 32) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x130}}, 0x4004010) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) (async) getsockopt$auto(r0, 0x84, 0x7c, 0x0, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 32) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, r4, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0x4) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) read$auto(r5, &(0x7f0000000000)='\x00', 0x91e2) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x10, 0x2, 0xc) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) (async) fanotify_init$auto(0x65, 0x2) 8.35886711s ago: executing program 4 (id=1629): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) r1 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) pwrite64$auto(r1, 0x0, 0x2, 0xfffd) r2 = open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) sendfile$auto(r2, r2, 0x0, 0x7ffff000) sendfile$auto(r2, r1, 0x0, 0x2000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendfile$auto(0x1, 0x3, 0x0, 0x74c) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xd52d, 0x0, 0xfffffffffffffffd, &(0x7f0000000300)="46f141e3d7c73f06e40bcf7fcf0a085a2900c3b8c746bd14f2572d82f365caf9c5abae36642f2769b011020c4a670c4da9bd9f1d8e8bd46a58f32983423c7b0dffb4e1a2dcc138e09e1599e0f360ef1f3ffd2cc30756f839a754ee33319c77ad66a6ad93c9a30ed5c54ec91b7deb194be780b3958d80be3c05b3795bd84ad810dd7e82de56403135cec281a27e4e425b2efa961c7f98d791110bb3db2d328e8784c9f5be21dbb5922d5586c45244dea18088baaddabfdcd30ab5119e90a818dbc3e0744a73048a7263c34584129a46ceac815f56a05b69b79d168a792c53c06055bd66eca722265a0268f681588c7283bb8a2deab6996396768973e20640e1455362277ca4e58fa5bd58edf0066d53a40fbfc1cd553387441d2cdc236fcaa1343c8ded93f4282370643f3d2da175238b9b5ed238a2e1b38c5b24a99b077ed16d4ae0e2fd799bbb6ab5e149588c7f709a3065c407caab5b8391c8607ad1f2eb2d5f06219edaf3e9bd894059b0184c11c37ee63d60642c2366edcc8e5b8d78a3a8c528e9daad734a7e17919af28544308a7788c1b160d717c65d822864a095f4eacfd2dc6579e2fb00351ab236b1a675d52e8058707e0fd7c850c301be0227c548bf39ea72ef973532887e633e81cca7e39761aecc71147e5a3ab9d94ef3e8b1c69db5af48cc69d1dae449e44fcb03065abfd10a17b7d0d034f993a866db0e", 0x5, 0x8001}, 0x4}, 0xfffffffb, 0x1000, &(0x7f0000000180)={0x8000, 0x7}) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b41", 0xfdef) setitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000000)={{0x10001, 0x7fffffffffffffff}, {0x100, 0x5}}, &(0x7f0000000080)={{0x7, 0xe}}) 7.968731443s ago: executing program 4 (id=1659): socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x1a, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/gpio/drivers_probe\x00', 0x400142, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x10005, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x900, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x2) mmap$auto(0x2, 0x9, 0x7, 0x2000000000009b73, 0x7, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x7, 0x0, 0x0) getsockopt$auto(r1, 0x107, 0x7, 0x0, 0x0) 7.862263098s ago: executing program 2 (id=1660): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/module/parameters/sig_enforce\x00', 0x2402, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x4319635b, 0x1eb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) mprotect$auto(0xfffff000, 0xa588, 0x6) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$auto_BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)=0x9) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x1, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000000180)="89d8a35f3bc5cb133c25edbad8e159eb798eec8fd955660cd7f90327cf1e952768db85f21e98b317d469b57d1e5f580a88d1d3b4bb0a4c3a82ceda78b4a4b3a4133e4cdbc5f738b9e69cbf71663ecc9bef349a057669a640e6f7c1a68e802579d3d466cf3a084f72c0adee8f22e5c24deebf6226fba0427673988712f3f87a9e85", 0x4) setsockopt$auto(0xffffffffffffffff, 0x5, 0x3, &(0x7f0000000080)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x2) r6 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x401c5820, 0x0) 7.455270409s ago: executing program 2 (id=1662): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x5, 0x0, &(0x7f0000000000)={[0x9, 0xc, 0x3, 0x4, 0x2, 0x7, 0x0, 0xff, 0xffffffffffffffff, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129542, 0x0) memfd_create$auto(0x0, 0x0) capset$auto(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x21000000, 0x0, 0x6f4) 7.076912926s ago: executing program 2 (id=1663): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) kcmp$auto(0x1, 0x1, 0x7, 0x4, 0xe) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0xbd01, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) copy_file_range$auto(r0, &(0x7f0000000140), r1, &(0x7f0000000180)=0xfffffffffffffff2, 0x356, 0x3) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000c0, 0x0) 5.773071193s ago: executing program 2 (id=1667): madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000100)='./file0\x00', 0x161302, 0x16c) (async) setfsuid$auto(0xee00) r1 = ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, 0x0) (async) r2 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r2, 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x460401, 0x0) (async) ioctl$auto_SG_IO(r1, 0x2285, &(0x7f0000000000)="635770e9ca1cc69575d85b84432cb342d7d437e51419dce86ec18a6532dac98479a7bc0ddb0d322417db9b95fa639353c35356bad5545e3d84adb77959") (async) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x141300, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r3 = bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x9, 0x92f1, 0x4000004, 0xffffffffffffffff}, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x80000001, 0x7, 0x77, 0x0) (async) adjtimex$auto(0x0) adjtimex$auto(0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), r4) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x4, 0x6, 0x3, 0xd, 0xffffffff80000000, 0x8000000000000001, 0x7fffffffffffffff, 0x9}}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7fff}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x20080000) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000001080)={@inferred, "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"}) 4.352450787s ago: executing program 0 (id=1671): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory14/phys_index\x00', 0x204000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/uid_map\x00', 0x8081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) statx$auto(r0, 0x0, 0x1003, 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x400c4d01, r1) socket(0xf, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x;\x184\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0) mlockall$auto(0x5) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/add_random\x00', 0x800, 0x0) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0xa) 4.177347253s ago: executing program 0 (id=1672): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x5, 0x0, &(0x7f0000000000)={[0x9, 0xc, 0x3, 0x4, 0x2, 0x7, 0x0, 0xff, 0xffffffffffffffff, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129542, 0x0) memfd_create$auto(0x0, 0x0) capset$auto(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x22000000, 0x0, 0x6f4) 4.102014802s ago: executing program 0 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x7ffd, r0, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(r1, 0x0, 0xd1, 0xfffffffffffffffc, 0x3) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(r3, 0xaf01, 0xe) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x10, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fchmod$auto(r4, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f616085f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 3.836338208s ago: executing program 0 (id=1675): mmap$auto(0xfffffffffffffffd, 0x2020009, 0x4, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffedf, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/config.gz\x00', 0x2100, 0x0) lseek$auto(0x3, 0x2, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='j'], 0x1ac}}, 0x20000040) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) 3.725738235s ago: executing program 0 (id=1677): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3fe}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) r3 = socket(0x18, 0xa, 0x10) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x8000000000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0x3, 0x0, 0xfdef) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x64e8, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a3, 0xe000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x1}, 0x7f, 0x9) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x11d242, 0x0) r5 = socket(0x2, 0x3, 0x2) setsockopt$auto(r5, 0x0, 0x8, 0xfffffffffffffffc, 0x0) r6 = bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10004, 0x1, 0x9, 0x80000000, 0x3, 0x4, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x82, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0xe, 0x1ff, 0x100000002, 0x101, 0xe4, r3}, 0x1000) unshare$auto(0x40000080) sendmsg$auto_TCP_METRICS_CMD_GET(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8050) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f0000000000)={0x0, 0xffeb}, 0x6, 0x0, 0x5, 0x7}, 0x6}, 0xffffffff, 0xb00) 3.354443407s ago: executing program 0 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r1 = clone$auto(0x15, 0x1ff, 0x0, 0x0, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x800, 0x5, 0xd) setxattrat$auto(r3, 0x0, 0xa, 0x0, 0x0, 0x1) madvise$auto(0x10001, 0x240008, 0x19) prctl$auto(0x9, 0xfffffffffffffffd, r1, 0x42, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 1.973419803s ago: executing program 3 (id=1681): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x20008000) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0xffc3, 0x0, 0x5c5fd097d751f33e}, 0x80) 1.687474533s ago: executing program 3 (id=1682): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x5, 0x0, &(0x7f0000000000)={[0x9, 0xc, 0x3, 0x4, 0x2, 0x7, 0x0, 0xff, 0xffffffffffffffff, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129542, 0x0) memfd_create$auto(0x0, 0x0) capset$auto(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, 0x0, 0xa8) 1.548027171s ago: executing program 3 (id=1683): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd10/rqos/wbt/inflight\x00', 0x68100, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x103801, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x35, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x10001, 0x2000, 0x200, 0x0, 0x81, 0x2, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 1.303889186s ago: executing program 3 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x7ffd, r0, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(r1, 0x0, 0xd1, 0xfffffffffffffffc, 0x3) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(r3, 0xaf01, 0xe) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x10, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fchmod$auto(r4, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1bb3e135ef23203752a9a06f5adc02fe", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 954.88259ms ago: executing program 3 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002840)='/sys/devices/virtual/net/bond0/bonding/ad_user_port_key\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002880)=""/226, 0xe2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket(0x1d, 0x2, 0x6) getsockopt$auto(r2, 0x7, 0x4, 0x0, 0x0) (async) read$auto(r0, &(0x7f00000004c0)=':)%-\x00', 0x1) 0s ago: executing program 3 (id=1686): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) kcmp$auto(0x0, 0x1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) sysfs$auto(0x19532000, 0x0, 0xfffffffffffffffa) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x101202, 0x0) write$auto(r0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x3) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = fanotify_init$auto(0x5, 0x2000000000002) r2 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r1, 0x9, 0x9, r2, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) kernel console output (not intermixed with test programs): 2b/0x80 [ 466.636348][T11576] ? is_bpf_text_address+0x8a/0x1a0 [ 466.636395][T11576] ? is_bpf_text_address+0x8a/0x1a0 [ 466.636445][T11576] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.636479][T11576] ? is_bpf_text_address+0x94/0x1a0 [ 466.636527][T11576] ? kernel_text_address+0x8d/0x100 [ 466.636569][T11576] ? __kernel_text_address+0xd/0x30 [ 466.636607][T11576] ? unwind_get_return_address+0x59/0xa0 [ 466.636677][T11576] alloc_pages_bulk_noprof+0x782/0x1490 [ 466.636749][T11576] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 466.636803][T11576] ? kasan_save_stack+0x30/0x50 [ 466.636859][T11576] ? alloc_pages_noprof+0x233/0x390 [ 466.636895][T11576] __kasan_populate_vmalloc+0xf0/0x210 [ 466.636948][T11576] alloc_vmap_area+0x95d/0x2bd0 [ 466.636998][T11576] ? __pfx_alloc_vmap_area+0x10/0x10 [ 466.637041][T11576] __get_vm_area_node+0x1ca/0x330 [ 466.637083][T11576] __vmalloc_node_range_noprof+0x213/0x1530 [ 466.637123][T11576] ? kernel_clone+0xfc/0x9a0 [ 466.637156][T11576] ? find_held_lock+0x2b/0x80 [ 466.637183][T11576] ? local_lock_release+0x99/0x130 [ 466.637218][T11576] ? local_lock_release+0x99/0x130 [ 466.637258][T11576] ? kernel_clone+0xfc/0x9a0 [ 466.637295][T11576] ? find_held_lock+0x2b/0x80 [ 466.637323][T11576] ? rcu_read_unlock+0x17/0x60 [ 466.637355][T11576] ? rcu_read_unlock+0x17/0x60 [ 466.637389][T11576] ? obj_cgroup_charge_account+0x46d/0x640 [ 466.637425][T11576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 466.637467][T11576] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 466.637508][T11576] ? rcu_is_watching+0x12/0xc0 [ 466.637555][T11576] ? trace_kmem_cache_alloc+0xf3/0x120 [ 466.637592][T11576] ? kernel_clone+0xfc/0x9a0 [ 466.637624][T11576] __vmalloc_node_noprof+0xad/0xf0 [ 466.637661][T11576] ? kernel_clone+0xfc/0x9a0 [ 466.637700][T11576] copy_process+0x5ec/0x7a40 [ 466.637750][T11576] ? __pfx___futex_wait+0x10/0x10 [ 466.637813][T11576] ? __pfx_copy_process+0x10/0x10 [ 466.637867][T11576] kernel_clone+0xfc/0x9a0 [ 466.637899][T11576] ? __pfx_futex_wait+0x10/0x10 [ 466.637943][T11576] ? __pfx_kernel_clone+0x10/0x10 [ 466.638002][T11576] __do_sys_clone+0xd9/0x120 [ 466.638038][T11576] ? __pfx___do_sys_clone+0x10/0x10 [ 466.638094][T11576] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 466.638135][T11576] ? syscall_user_dispatch+0x76/0x130 [ 466.638191][T11576] do_syscall_64+0x106/0xf80 [ 466.638236][T11576] ? clear_bhb_loop+0x40/0x90 [ 466.638275][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.638307][T11576] RIP: 0033:0x7f563df9c799 [ 466.638333][T11576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.638395][T11576] RSP: 002b:00007f563ef04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 466.638428][T11576] RAX: ffffffffffffffda RBX: 00007f563e216090 RCX: 00007f563df9c799 [ 466.638448][T11576] RDX: 0000200000000080 RSI: 000000000000000b RDI: 0000000000000008 [ 466.638466][T11576] RBP: 00007f563e032c99 R08: 0000000000000002 R09: 0000000000000000 [ 466.638483][T11576] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 466.638501][T11576] R13: 00007f563e216128 R14: 00007f563e216090 R15: 00007ffdebe4cc98 [ 466.638542][T11576] [ 467.078044][T11576] syz.5.1251: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 467.078230][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.5.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.078276][T11576] Tainted: [L]=SOFTLOCKUP [ 467.078287][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.078306][T11576] Call Trace: [ 467.078317][T11576] [ 467.078329][T11576] dump_stack_lvl+0x100/0x190 [ 467.078380][T11576] warn_alloc.cold+0x95/0x1c1 [ 467.078463][T11576] ? __pfx_warn_alloc+0x10/0x10 [ 467.078505][T11576] ? lockdep_hardirqs_on+0x78/0x100 [ 467.078555][T11576] ? __get_vm_area_node+0x2c5/0x330 [ 467.078599][T11576] ? __get_vm_area_node+0x208/0x330 [ 467.078643][T11576] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 467.078681][T11576] ? find_held_lock+0x2b/0x80 [ 467.078709][T11576] ? local_lock_release+0x99/0x130 [ 467.078755][T11576] ? local_lock_release+0x99/0x130 [ 467.078796][T11576] ? kernel_clone+0xfc/0x9a0 [ 467.078833][T11576] ? find_held_lock+0x2b/0x80 [ 467.078860][T11576] ? rcu_read_unlock+0x17/0x60 [ 467.078893][T11576] ? rcu_read_unlock+0x17/0x60 [ 467.078926][T11576] ? obj_cgroup_charge_account+0x46d/0x640 [ 467.078961][T11576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 467.079004][T11576] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 467.079046][T11576] ? rcu_is_watching+0x12/0xc0 [ 467.079094][T11576] ? trace_kmem_cache_alloc+0xf3/0x120 [ 467.079130][T11576] ? kernel_clone+0xfc/0x9a0 [ 467.079164][T11576] __vmalloc_node_noprof+0xad/0xf0 [ 467.079200][T11576] ? kernel_clone+0xfc/0x9a0 [ 467.079237][T11576] copy_process+0x5ec/0x7a40 [ 467.079273][T11576] ? __pfx___futex_wait+0x10/0x10 [ 467.079331][T11576] ? __pfx_copy_process+0x10/0x10 [ 467.079383][T11576] kernel_clone+0xfc/0x9a0 [ 467.079413][T11576] ? __pfx_futex_wait+0x10/0x10 [ 467.079459][T11576] ? __pfx_kernel_clone+0x10/0x10 [ 467.079514][T11576] __do_sys_clone+0xd9/0x120 [ 467.079548][T11576] ? __pfx___do_sys_clone+0x10/0x10 [ 467.079600][T11576] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 467.079639][T11576] ? syscall_user_dispatch+0x76/0x130 [ 467.079685][T11576] do_syscall_64+0x106/0xf80 [ 467.079725][T11576] ? clear_bhb_loop+0x40/0x90 [ 467.079769][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.079798][T11576] RIP: 0033:0x7f563df9c799 [ 467.079823][T11576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.079850][T11576] RSP: 002b:00007f563ef04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 467.079876][T11576] RAX: ffffffffffffffda RBX: 00007f563e216090 RCX: 00007f563df9c799 [ 467.079896][T11576] RDX: 0000200000000080 RSI: 000000000000000b RDI: 0000000000000008 [ 467.079914][T11576] RBP: 00007f563e032c99 R08: 0000000000000002 R09: 0000000000000000 [ 467.079933][T11576] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 467.079951][T11576] R13: 00007f563e216128 R14: 00007f563e216090 R15: 00007ffdebe4cc98 [ 467.079991][T11576] [ 467.080062][T11576] Mem-Info: [ 467.080078][T11576] active_anon:31974 inactive_anon:7 isolated_anon:0 [ 467.080078][T11576] active_file:10147 inactive_file:46404 isolated_file:0 [ 467.080078][T11576] unevictable:768 dirty:1033 writeback:0 [ 467.080078][T11576] slab_reclaimable:13105 slab_unreclaimable:110749 [ 467.080078][T11576] mapped:37310 shmem:9119 pagetables:1394 [ 467.080078][T11576] sec_pagetables:0 bounce:0 [ 467.080078][T11576] kernel_misc_reclaimable:0 [ 467.080078][T11576] free:1236817 free_pcp:22490 free_cma:0 [ 467.080177][T11576] Node 0 active_anon:127896kB inactive_anon:28kB active_file:40588kB inactive_file:185412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149240kB dirty:4128kB writeback:0kB shmem:34940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:13008kB pagetables:5460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.080270][T11576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.080362][T11576] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.080468][T11576] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 467.080566][T11576] Node 0 DMA32 free:985320kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:127896kB inactive_anon:28kB active_file:40588kB inactive_file:185412kB unevictable:1536kB writepending:4128kB zspages:692kB present:3129332kB managed:2537384kB mlocked:0kB bounce:0kB free_pcp:87896kB local_pcp:45872kB free_cma:0kB [ 467.080686][T11576] lowmem_reserve[]: 0 0 1 1 1 [ 467.080806][T11576] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 467.080944][T11576] lowmem_reserve[]: 0 0 0 0 0 [ 467.081007][T11576] Node 1 Normal free:3946588kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 467.081102][T11576] lowmem_reserve[]: 0 0 0 0 0 [ 467.081189][T11576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.081475][T11576] Node 0 DMA32: 2329*4kB (UME) 2180*8kB (UM) 1674*16kB (UME) 697*32kB (UME) 470*64kB (UME) 220*128kB (UM) 317*256kB (UM) 160*512kB (UME) 78*1024kB (UM) 9*2048kB (UM) 144*4096kB (M) = 985284kB [ 467.081799][T11576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 467.081969][T11576] Node 1 Normal: 13*4kB (UM) 13*8kB (UM) 4*16kB (UM) 4*32kB (UM) 6*64kB (UM) 5*128kB (UM) 7*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946588kB [ 467.082240][T11576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.082265][T11576] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 467.082289][T11576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.082313][T11576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 467.082337][T11576] 65686 total pagecache pages [ 467.082349][T11576] 3 pages in swap cache [ 467.082361][T11576] Free swap = 124772kB [ 467.082373][T11576] Total swap = 124996kB [ 467.082385][T11576] 2097051 pages RAM [ 467.082397][T11576] 0 pages HighMem/MovableOnly [ 467.082408][T11576] 430825 pages reserved [ 467.082419][T11576] 0 pages cma reserved [ 467.650229][T11594] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 469.643430][T11617] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1261'. [ 469.797753][T11619] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 469.837816][T11619] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 470.337220][ T5909] Process accounting resumed [ 470.494703][T11646] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 470.690307][T11652] FAULT_INJECTION: forcing a failure. [ 470.690307][T11652] name failslab, interval 1, probability 0, space 0, times 0 [ 470.873563][T11652] CPU: 1 UID: 0 PID: 11652 Comm: syz.1.1270 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.873613][T11652] Tainted: [L]=SOFTLOCKUP [ 470.873624][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.873643][T11652] Call Trace: [ 470.873654][T11652] [ 470.873666][T11652] dump_stack_lvl+0x100/0x190 [ 470.873717][T11652] should_fail_ex.cold+0x5/0xa [ 470.873751][T11652] should_failslab+0xc2/0x120 [ 470.873783][T11652] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 470.873826][T11652] ? alloc_inode+0x183/0x250 [ 470.873860][T11652] ? stashed_dentry_get+0x10a/0x2c0 [ 470.873893][T11652] ? stashed_dentry_get+0x10a/0x2c0 [ 470.873927][T11652] alloc_inode+0x183/0x250 [ 470.873967][T11652] path_from_stashed+0x25b/0x750 [ 470.873998][T11652] ? do_raw_spin_unlock+0x145/0x1e0 [ 470.874046][T11652] ns_get_path+0x60/0x80 [ 470.874075][T11652] proc_ns_get_link+0x121/0x230 [ 470.874116][T11652] ? __pfx_proc_ns_get_link+0x10/0x10 [ 470.874162][T11652] ? atime_needs_update+0x8b/0x6b0 [ 470.874206][T11652] pick_link+0xd17/0x13c0 [ 470.874248][T11652] ? __pfx_proc_ns_get_link+0x10/0x10 [ 470.874296][T11652] step_into_slowpath+0x9ba/0xf90 [ 470.874349][T11652] ? __pfx_step_into_slowpath+0x10/0x10 [ 470.874392][T11652] ? find_held_lock+0x2b/0x80 [ 470.874432][T11652] path_openat+0xf95/0x31a0 [ 470.874475][T11652] ? __pfx_path_openat+0x10/0x10 [ 470.874521][T11652] do_file_open+0x20e/0x430 [ 470.874568][T11652] ? __pfx_do_file_open+0x10/0x10 [ 470.874626][T11652] ? alloc_fd+0x476/0x790 [ 470.874662][T11652] ? do_getname+0x191/0x390 [ 470.874701][T11652] do_sys_openat2+0x10d/0x1e0 [ 470.874770][T11652] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.874811][T11652] ? __fget_files+0x21f/0x3d0 [ 470.874847][T11652] __x64_sys_openat+0x12d/0x210 [ 470.874887][T11652] ? __pfx___x64_sys_openat+0x10/0x10 [ 470.874939][T11652] do_syscall_64+0x106/0xf80 [ 470.874979][T11652] ? clear_bhb_loop+0x40/0x90 [ 470.875017][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.875045][T11652] RIP: 0033:0x7f01de15cfce [ 470.875068][T11652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 470.875095][T11652] RSP: 002b:00007f01df095ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.875124][T11652] RAX: ffffffffffffffda RBX: 00007f01df0966c0 RCX: 00007f01de15cfce [ 470.875144][T11652] RDX: 0000000000000002 RSI: 00007f01df095f90 RDI: ffffffffffffff9c [ 470.875163][T11652] RBP: 00007f01de232c99 R08: 0000000000000000 R09: 0000000000000000 [ 470.875181][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.875197][T11652] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 470.875235][T11652] [ 472.094854][T11685] Zero length message leads to an empty skb [ 473.712470][T11732] FAULT_INJECTION: forcing a failure. [ 473.712470][T11732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.828280][T11732] CPU: 0 UID: 0 PID: 11732 Comm: syz.0.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.828326][T11732] Tainted: [L]=SOFTLOCKUP [ 473.828337][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.828354][T11732] Call Trace: [ 473.828363][T11732] [ 473.828375][T11732] dump_stack_lvl+0x100/0x190 [ 473.828424][T11732] should_fail_ex.cold+0x5/0xa [ 473.828460][T11732] _copy_from_user+0x2e/0xd0 [ 473.828612][T11732] cache_do_downcall+0x47/0x130 [ 473.828720][T11732] cache_write_procfs+0xf5/0x160 [ 473.828761][T11732] ? __pfx_cache_write_procfs+0x10/0x10 [ 473.828803][T11732] proc_reg_write+0x240/0x330 [ 473.828851][T11732] vfs_write+0x2aa/0x1070 [ 473.828880][T11732] ? __pfx_proc_reg_write+0x10/0x10 [ 473.828927][T11732] ? __pfx_vfs_write+0x10/0x10 [ 473.828972][T11732] ? __fget_files+0x215/0x3d0 [ 473.829010][T11732] ? __fget_files+0x21f/0x3d0 [ 473.829048][T11732] ksys_write+0x12a/0x250 [ 473.829075][T11732] ? __pfx_ksys_write+0x10/0x10 [ 473.829116][T11732] do_syscall_64+0x106/0xf80 [ 473.829155][T11732] ? clear_bhb_loop+0x40/0x90 [ 473.829192][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.829222][T11732] RIP: 0033:0x7efe3c79c799 [ 473.829245][T11732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.829273][T11732] RSP: 002b:00007efe3d650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.829300][T11732] RAX: ffffffffffffffda RBX: 00007efe3ca15fa0 RCX: 00007efe3c79c799 [ 473.829319][T11732] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 473.829336][T11732] RBP: 00007efe3d650090 R08: 0000000000000000 R09: 0000000000000000 [ 473.829352][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.829369][T11732] R13: 00007efe3ca16038 R14: 00007efe3ca15fa0 R15: 00007ffcaa7ace58 [ 473.829410][T11732] [ 474.283285][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 474.353914][T11745] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 475.000195][T11768] FAULT_INJECTION: forcing a failure. [ 475.000195][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 475.013998][T11768] CPU: 1 UID: 0 PID: 11768 Comm: syz.1.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.014044][T11768] Tainted: [L]=SOFTLOCKUP [ 475.014054][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.014068][T11768] Call Trace: [ 475.014074][T11768] [ 475.014081][T11768] dump_stack_lvl+0x100/0x190 [ 475.014114][T11768] should_fail_ex.cold+0x5/0xa [ 475.014135][T11768] should_failslab+0xc2/0x120 [ 475.014154][T11768] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 475.014182][T11768] ? dup_to_netobj+0x58/0xb0 [ 475.014256][T11768] kmemdup_noprof+0x29/0x60 [ 475.014292][T11768] dup_to_netobj+0x58/0xb0 [ 475.014312][T11768] rsc_parse+0x12a/0xdf0 [ 475.014335][T11768] ? kasan_save_stack+0x3f/0x50 [ 475.014361][T11768] ? kasan_save_stack+0x30/0x50 [ 475.014387][T11768] ? kasan_save_track+0x14/0x30 [ 475.014412][T11768] ? __kasan_kmalloc+0xaa/0xb0 [ 475.014438][T11768] ? __kvmalloc_node_noprof+0x360/0xa00 [ 475.014472][T11768] ? cache_write_procfs+0xd7/0x160 [ 475.014495][T11768] ? proc_reg_write+0x240/0x330 [ 475.014522][T11768] ? __pfx_rsc_parse+0x10/0x10 [ 475.014543][T11768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.014596][T11768] ? find_held_lock+0x2b/0x80 [ 475.014622][T11768] ? __might_fault+0xc5/0x140 [ 475.014659][T11768] ? __might_fault+0xc5/0x140 [ 475.014710][T11768] cache_do_downcall+0xbd/0x130 [ 475.014736][T11768] cache_write_procfs+0xf5/0x160 [ 475.014761][T11768] ? __pfx_cache_write_procfs+0x10/0x10 [ 475.014793][T11768] proc_reg_write+0x240/0x330 [ 475.014836][T11768] vfs_write+0x2aa/0x1070 [ 475.014864][T11768] ? __pfx_proc_reg_write+0x10/0x10 [ 475.014903][T11768] ? __pfx_vfs_write+0x10/0x10 [ 475.014931][T11768] ? __fget_files+0x215/0x3d0 [ 475.014953][T11768] ? __fget_files+0x21f/0x3d0 [ 475.014978][T11768] ksys_write+0x12a/0x250 [ 475.014995][T11768] ? __pfx_ksys_write+0x10/0x10 [ 475.015017][T11768] do_syscall_64+0x106/0xf80 [ 475.015042][T11768] ? clear_bhb_loop+0x40/0x90 [ 475.015063][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.015081][T11768] RIP: 0033:0x7f01de19c799 [ 475.015097][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.015114][T11768] RSP: 002b:00007f01df096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.015131][T11768] RAX: ffffffffffffffda RBX: 00007f01de415fa0 RCX: 00007f01de19c799 [ 475.015142][T11768] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 475.015152][T11768] RBP: 00007f01df096090 R08: 0000000000000000 R09: 0000000000000000 [ 475.015162][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.015172][T11768] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 475.015195][T11768] [ 475.726927][T11787] Format for adding new port is "id [perm_addr]" (uint MAC). [ 475.827098][T11789] binder: 11786:11789 ioctl 40086602 e20 returned -22 [ 475.999834][T11795] vivid-007: ================= START STATUS ================= [ 476.042282][T11795] vivid-007: Enable Output Cropping: true [ 476.077073][T11795] vivid-007: Enable Output Composing: true [ 476.100269][T11795] vivid-007: Enable Output Scaler: true [ 476.127590][T11795] vivid-007: Tx RGB Quantization Range: Automatic [ 476.134140][T11795] vivid-007: Transmit Mode: HDMI [ 476.159733][T11795] vivid-007: Hotplug Present: 0x00000000 [ 476.175769][T11795] vivid-007: RxSense Present: 0x00000000 [ 476.189672][T11795] vivid-007: EDID Present: 0x00000000 [ 476.201820][T11795] vivid-007: ================== END STATUS ================== [ 477.187440][T11807] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 477.221381][T11807] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 477.989327][T11826] rnbd_client L213: map_device: Parameters missing [ 478.359094][T11834] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 478.377706][T11835] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 478.538202][T11841] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 478.562529][T11841] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 478.603655][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 478.894843][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'. [ 478.916893][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.924347][T11851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.939185][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.950960][T11851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.987546][T11854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 479.367609][T11871] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 480.194696][T11881] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 480.281246][T11881] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 480.976942][T11894] FAULT_INJECTION: forcing a failure. [ 480.976942][T11894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 480.998613][T11894] CPU: 0 UID: 0 PID: 11894 Comm: syz.1.1333 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.998670][T11894] Tainted: [L]=SOFTLOCKUP [ 480.998681][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.998699][T11894] Call Trace: [ 480.998709][T11894] [ 480.998722][T11894] dump_stack_lvl+0x100/0x190 [ 480.998775][T11894] should_fail_ex.cold+0x5/0xa [ 480.998813][T11894] get_futex_key+0x1d2/0x1620 [ 480.998856][T11894] ? __pfx_get_futex_key+0x10/0x10 [ 480.998896][T11894] ? update_se+0x94/0x760 [ 480.998942][T11894] futex_wait_setup+0x83/0x510 [ 480.999001][T11894] __futex_wait+0x19f/0x300 [ 480.999061][T11894] ? __pfx___futex_wait+0x10/0x10 [ 480.999105][T11894] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 480.999144][T11894] ? lockdep_hardirqs_on+0x78/0x100 [ 480.999187][T11894] ? __pfx_futex_wake_mark+0x10/0x10 [ 480.999234][T11894] ? find_held_lock+0x2b/0x80 [ 480.999262][T11894] ? futex_wake+0x456/0x530 [ 480.999314][T11894] futex_wait+0xed/0x380 [ 480.999361][T11894] ? __pfx_futex_wait+0x10/0x10 [ 480.999427][T11894] do_futex+0x1ef/0x350 [ 480.999468][T11894] ? __pfx_do_futex+0x10/0x10 [ 480.999507][T11894] ? __pfx___might_resched+0x10/0x10 [ 480.999546][T11894] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 480.999679][T11894] __x64_sys_futex+0x34f/0x4d0 [ 480.999725][T11894] ? __pfx___x64_sys_futex+0x10/0x10 [ 480.999770][T11894] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 480.999819][T11894] ? syscall_user_dispatch+0x76/0x130 [ 480.999869][T11894] do_syscall_64+0x106/0xf80 [ 480.999909][T11894] ? clear_bhb_loop+0x40/0x90 [ 480.999945][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.999978][T11894] RIP: 0033:0x7f01de19c799 [ 481.000006][T11894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.000044][T11894] RSP: 002b:00007f01df0750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 481.000075][T11894] RAX: ffffffffffffffda RBX: 00007f01de416098 RCX: 00007f01de19c799 [ 481.000096][T11894] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f01de416098 [ 481.000114][T11894] RBP: 00007f01de416090 R08: 0000000000000000 R09: 0000000000000000 [ 481.000133][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.000150][T11894] R13: 00007f01de416128 R14: 00007ffe8dbceb70 R15: 00007ffe8dbcec58 [ 481.000191][T11894] [ 483.352773][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 484.898486][T11965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 484.920385][T11965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 484.926688][T11965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.932853][T11965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.938835][T11965] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 484.968083][T11965] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.854247][T12007] mmap: syz.5.1357 (12007) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 486.277219][T10778] Bluetooth: hci2: command 0x0c1a tx timeout [ 486.767095][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 486.817135][T12017] FAULT_INJECTION: forcing a failure. [ 486.817135][T12017] name failslab, interval 1, probability 0, space 0, times 0 [ 486.839756][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.1.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.839801][T12017] Tainted: [L]=SOFTLOCKUP [ 486.839810][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.839826][T12017] Call Trace: [ 486.839834][T12017] [ 486.839845][T12017] dump_stack_lvl+0x100/0x190 [ 486.839892][T12017] should_fail_ex.cold+0x5/0xa [ 486.839926][T12017] should_failslab+0xc2/0x120 [ 486.839955][T12017] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 486.839999][T12017] ? __request_module+0x2d5/0x6c0 [ 486.840043][T12017] kstrdup+0x51/0xe0 [ 486.840088][T12017] __request_module+0x2d5/0x6c0 [ 486.840127][T12017] ? __pfx___request_module+0x10/0x10 [ 486.840181][T12017] ? find_held_lock+0x2b/0x80 [ 486.840208][T12017] ? _gss_mech_get_by_name+0x13c/0x280 [ 486.840235][T12017] ? _gss_mech_get_by_name+0x13c/0x280 [ 486.840275][T12017] gss_mech_get_by_name+0x46/0x60 [ 486.840303][T12017] rsc_parse+0xc15/0xdf0 [ 486.840343][T12017] ? __kasan_kmalloc+0xaa/0xb0 [ 486.840382][T12017] ? __kvmalloc_node_noprof+0x360/0xa00 [ 486.840425][T12017] ? cache_write_procfs+0xd7/0x160 [ 486.840461][T12017] ? proc_reg_write+0x240/0x330 [ 486.840500][T12017] ? __pfx_rsc_parse+0x10/0x10 [ 486.840534][T12017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.840605][T12017] ? find_held_lock+0x2b/0x80 [ 486.840631][T12017] ? __might_fault+0xc5/0x140 [ 486.840695][T12017] cache_do_downcall+0xbd/0x130 [ 486.840731][T12017] cache_write_procfs+0xf5/0x160 [ 486.840780][T12017] ? __pfx_cache_write_procfs+0x10/0x10 [ 486.840819][T12017] proc_reg_write+0x240/0x330 [ 486.840864][T12017] vfs_write+0x2aa/0x1070 [ 486.840893][T12017] ? __pfx_proc_reg_write+0x10/0x10 [ 486.840937][T12017] ? __pfx_vfs_write+0x10/0x10 [ 486.840981][T12017] ? __fget_files+0x215/0x3d0 [ 486.841017][T12017] ? __fget_files+0x21f/0x3d0 [ 486.841057][T12017] ksys_write+0x12a/0x250 [ 486.841083][T12017] ? __pfx_ksys_write+0x10/0x10 [ 486.841122][T12017] do_syscall_64+0x106/0xf80 [ 486.841160][T12017] ? clear_bhb_loop+0x40/0x90 [ 486.841195][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.841224][T12017] RIP: 0033:0x7f01de19c799 [ 486.841249][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.841275][T12017] RSP: 002b:00007f01df096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.841303][T12017] RAX: ffffffffffffffda RBX: 00007f01de415fa0 RCX: 00007f01de19c799 [ 486.841321][T12017] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 486.841336][T12017] RBP: 00007f01df096090 R08: 0000000000000000 R09: 0000000000000000 [ 486.841353][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.841370][T12017] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 486.841407][T12017] [ 487.126691][T10778] Bluetooth: hci5: command 0x0c1a tx timeout [ 487.132764][T10778] Bluetooth: hci4: command 0x0c1a tx timeout [ 487.139647][T10778] Bluetooth: hci3: command 0x0c1a tx timeout [ 487.146471][T10778] Bluetooth: hci1: command 0x0c1a tx timeout [ 487.152550][T10778] Bluetooth: hci0: command 0x2016 tx timeout [ 487.515392][T12028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1361'. [ 488.032461][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 488.187130][T12040] FAULT_INJECTION: forcing a failure. [ 488.187130][T12040] name failslab, interval 1, probability 0, space 0, times 0 [ 488.204253][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.1.1364 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.204298][T12040] Tainted: [L]=SOFTLOCKUP [ 488.204308][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.204325][T12040] Call Trace: [ 488.204335][T12040] [ 488.204345][T12040] dump_stack_lvl+0x100/0x190 [ 488.204395][T12040] should_fail_ex.cold+0x5/0xa [ 488.204429][T12040] should_failslab+0xc2/0x120 [ 488.204461][T12040] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 488.204504][T12040] ? security_inode_alloc+0x3b/0x2c0 [ 488.204600][T12040] ? lockdep_init_map_type+0x5c/0x250 [ 488.204645][T12040] security_inode_alloc+0x3b/0x2c0 [ 488.204675][T12040] inode_init_always_gfp+0xced/0x1040 [ 488.204712][T12040] alloc_inode+0x8e/0x250 [ 488.204750][T12040] new_inode+0x22/0x1c0 [ 488.204804][T12040] shmem_get_inode+0x212/0x1040 [ 488.204847][T12040] ? __pfx_shmem_get_inode+0x10/0x10 [ 488.204883][T12040] ? rcu_is_watching+0x12/0xc0 [ 488.204925][T12040] ? percpu_counter_add_batch+0xb9/0x230 [ 488.205012][T12040] __shmem_file_setup+0x3ac/0x490 [ 488.205053][T12040] ? __pfx___shmem_file_setup+0x10/0x10 [ 488.205100][T12040] ? vm_area_alloc+0x1f/0x160 [ 488.205143][T12040] shmem_zero_setup+0x96/0x1b0 [ 488.205191][T12040] __mmap_region+0x2198/0x29e0 [ 488.205241][T12040] ? __pfx___mmap_region+0x10/0x10 [ 488.205281][T12040] ? rcu_is_watching+0x12/0xc0 [ 488.205330][T12040] ? __pfx___resched_curr+0x10/0x10 [ 488.205370][T12040] ? __lock_acquire+0x4a5/0x2630 [ 488.205406][T12040] ? trace_pelt_se_tp+0x159/0x1b0 [ 488.205459][T12040] ? find_held_lock+0x2b/0x80 [ 488.205485][T12040] ? finish_task_switch.isra.0+0x200/0xb80 [ 488.205516][T12040] ? finish_task_switch.isra.0+0x200/0xb80 [ 488.205565][T12040] ? trace_sched_exit_tp+0x13a/0x180 [ 488.205599][T12040] ? __schedule+0x1000/0x6120 [ 488.205690][T12040] ? rcu_is_watching+0x12/0xc0 [ 488.205733][T12040] ? cap_capable+0x107/0x460 [ 488.205795][T12040] mmap_region+0x180/0x3e0 [ 488.205847][T12040] do_mmap+0xc63/0x12f0 [ 488.205887][T12040] ? __pfx_do_mmap+0x10/0x10 [ 488.205919][T12040] ? __pfx_down_write_killable+0x10/0x10 [ 488.205974][T12040] vm_mmap_pgoff+0x29e/0x470 [ 488.206015][T12040] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 488.206050][T12040] ? do_futex+0x192/0x350 [ 488.206088][T12040] ? __pfx_do_futex+0x10/0x10 [ 488.206122][T12040] ? __pfx_do_sys_openat2+0x10/0x10 [ 488.206168][T12040] ksys_mmap_pgoff+0xe1/0x650 [ 488.206200][T12040] ? __x64_sys_futex+0x34f/0x4d0 [ 488.206235][T12040] ? __x64_sys_futex+0x358/0x4d0 [ 488.206274][T12040] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 488.206304][T12040] ? xfd_validate_state+0x129/0x190 [ 488.206355][T12040] __x64_sys_mmap+0x125/0x190 [ 488.206405][T12040] do_syscall_64+0x106/0xf80 [ 488.206442][T12040] ? clear_bhb_loop+0x40/0x90 [ 488.206479][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.206508][T12040] RIP: 0033:0x7f01de19c799 [ 488.206533][T12040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.206560][T12040] RSP: 002b:00007f01df096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 488.206589][T12040] RAX: ffffffffffffffda RBX: 00007f01de415fa0 RCX: 00007f01de19c799 [ 488.206608][T12040] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 488.206626][T12040] RBP: 00007f01de232c99 R08: fffffffffffffffa R09: 0000000000008000 [ 488.206644][T12040] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 488.206661][T12040] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 488.206703][T12040] [ 488.571116][T12045] netlink: 302 bytes leftover after parsing attributes in process `syz.5.1365'. [ 488.652486][T12048] vhci_hcd: not connected 4 [ 488.881364][T12051] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1367'. [ 489.163482][T12059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 491.038368][T12094] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1378'. [ 491.506113][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1382'. [ 492.821437][ T30] audit: type=1804 audit(4294967345.705:7): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1387" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 493.068414][T12130] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1388'. [ 494.014696][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 494.830685][T12151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 495.990890][T10778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.001416][T10778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.014553][T10778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.027609][T10778] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.037693][T10778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 496.196296][T12164] FAULT_INJECTION: forcing a failure. [ 496.196296][T12164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.236885][T12164] CPU: 1 UID: 0 PID: 12164 Comm: syz.1.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.236932][T12164] Tainted: [L]=SOFTLOCKUP [ 496.236942][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.236959][T12164] Call Trace: [ 496.236969][T12164] [ 496.236980][T12164] dump_stack_lvl+0x100/0x190 [ 496.237028][T12164] should_fail_ex.cold+0x5/0xa [ 496.237063][T12164] _copy_from_user+0x2e/0xd0 [ 496.237096][T12164] aql_enable_write+0xb8/0x310 [ 496.237215][T12164] ? __pfx_aql_enable_write+0x10/0x10 [ 496.237255][T12164] short_proxy_write+0x133/0x1a0 [ 496.237369][T12164] vfs_write+0x2aa/0x1070 [ 496.237397][T12164] ? __pfx_short_proxy_write+0x10/0x10 [ 496.237442][T12164] ? __pfx_vfs_write+0x10/0x10 [ 496.237484][T12164] ? find_held_lock+0x2b/0x80 [ 496.237511][T12164] ? __fget_files+0x215/0x3d0 [ 496.237537][T12164] ? __fget_files+0x215/0x3d0 [ 496.237571][T12164] ? __fget_files+0x21f/0x3d0 [ 496.237610][T12164] __x64_sys_pwrite64+0x1eb/0x250 [ 496.237641][T12164] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 496.237682][T12164] do_syscall_64+0x106/0xf80 [ 496.237731][T12164] ? clear_bhb_loop+0x40/0x90 [ 496.237767][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.237798][T12164] RIP: 0033:0x7f01de19c799 [ 496.237823][T12164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.237850][T12164] RSP: 002b:00007f01df096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 496.237879][T12164] RAX: ffffffffffffffda RBX: 00007f01de415fa0 RCX: 00007f01de19c799 [ 496.237898][T12164] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 496.237914][T12164] RBP: 00007f01df096090 R08: 0000000000000000 R09: 0000000000000000 [ 496.237931][T12164] R10: 4200000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 496.237947][T12164] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 496.237986][T12164] [ 496.540150][T12159] chnl_net:caif_netlink_parms(): no params data found [ 496.849933][T12159] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.871912][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.896889][T12159] bridge_slave_0: entered allmulticast mode [ 496.919526][T12159] bridge_slave_0: entered promiscuous mode [ 497.035913][T12159] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.055337][T12159] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.070442][T12159] bridge_slave_1: entered allmulticast mode [ 497.090279][T12159] bridge_slave_1: entered promiscuous mode [ 497.162783][T12159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.193430][T12159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.437918][T12159] team0: Port device team_slave_0 added [ 497.460105][T12159] team0: Port device team_slave_1 added [ 497.539641][T12159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.555804][T12159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.614561][T12159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.648882][T12159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.655929][T12159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.787328][T12159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.929539][T12159] hsr_slave_0: entered promiscuous mode [ 497.939720][T12159] hsr_slave_1: entered promiscuous mode [ 497.957629][T12159] debugfs: 'hsr0' already exists in 'hsr' [ 497.966990][T12159] Cannot create hsr debugfs directory [ 498.106869][T10778] Bluetooth: hci6: command tx timeout [ 498.298448][T12192] FAULT_INJECTION: forcing a failure. [ 498.298448][T12192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.315895][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.1.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.315946][T12192] Tainted: [L]=SOFTLOCKUP [ 498.315956][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.315975][T12192] Call Trace: [ 498.315985][T12192] [ 498.315997][T12192] dump_stack_lvl+0x100/0x190 [ 498.316050][T12192] should_fail_ex.cold+0x5/0xa [ 498.316081][T12192] ? prepare_alloc_pages+0x16d/0x5f0 [ 498.316132][T12192] should_fail_alloc_page+0xeb/0x140 [ 498.316169][T12192] prepare_alloc_pages+0x1f0/0x5f0 [ 498.316201][T12192] ? rcu_is_watching+0x12/0xc0 [ 498.316248][T12192] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 498.316288][T12192] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 498.316331][T12192] ? __pfx_css_rstat_updated+0x10/0x10 [ 498.316402][T12192] ? find_held_lock+0x2b/0x80 [ 498.316432][T12192] ? rcu_read_unlock+0x17/0x60 [ 498.316462][T12192] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 498.316501][T12192] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 498.316542][T12192] ? page_counter_charge+0x1d2/0x240 [ 498.316578][T12192] ? rcu_is_watching+0x12/0xc0 [ 498.316629][T12192] ? trace_mm_page_alloc+0x17a/0x1d0 [ 498.316677][T12192] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.316725][T12192] ? policy_nodemask+0xed/0x4f0 [ 498.316756][T12192] alloc_pages_mpol+0x1fb/0x550 [ 498.316784][T12192] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 498.316810][T12192] ? do_raw_spin_lock+0x128/0x260 [ 498.316847][T12192] ? find_held_lock+0x2b/0x80 [ 498.316870][T12192] ? __pud_alloc+0x529/0x6e0 [ 498.316903][T12192] alloc_pages_noprof+0x131/0x390 [ 498.316935][T12192] __pmd_alloc+0x3b/0x950 [ 498.316965][T12192] ? __pud_alloc+0x52e/0x6e0 [ 498.316999][T12192] walk_to_pmd+0x3a3/0x4c0 [ 498.317032][T12192] get_locked_pte+0x25/0xc0 [ 498.317064][T12192] map_ldt_struct+0x3c1/0xa70 [ 498.317102][T12192] ? __pfx_map_ldt_struct+0x10/0x10 [ 498.317140][T12192] ? alloc_pages_noprof+0x233/0x390 [ 498.317175][T12192] write_ldt+0x6d3/0xd40 [ 498.317207][T12192] ? __pfx_write_ldt+0x10/0x10 [ 498.317234][T12192] ? xfd_validate_state+0x129/0x190 [ 498.317281][T12192] __x64_sys_modify_ldt+0xb1/0x170 [ 498.317308][T12192] do_syscall_64+0x106/0xf80 [ 498.317356][T12192] ? clear_bhb_loop+0x40/0x90 [ 498.317391][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.317421][T12192] RIP: 0033:0x7f01de19c799 [ 498.317446][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.317475][T12192] RSP: 002b:00007f01df096028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 498.317504][T12192] RAX: ffffffffffffffda RBX: 00007f01de415fa0 RCX: 00007f01de19c799 [ 498.317522][T12192] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 498.317538][T12192] RBP: 00007f01de232c99 R08: 0000000000000000 R09: 0000000000000000 [ 498.317555][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.317571][T12192] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 498.317609][T12192] [ 498.469107][T12159] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 498.662692][T12159] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.672233][T12192] FAULT_INJECTION: forcing a failure. [ 498.672233][T12192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.686222][T12192] CPU: 1 UID: 0 PID: 12192 Comm: syz.1.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.686273][T12192] Tainted: [L]=SOFTLOCKUP [ 498.686285][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.686303][T12192] Call Trace: [ 498.686314][T12192] [ 498.686325][T12192] dump_stack_lvl+0x100/0x190 [ 498.686377][T12192] should_fail_ex.cold+0x5/0xa [ 498.686406][T12192] ? prepare_alloc_pages+0x16d/0x5f0 [ 498.686446][T12192] should_fail_alloc_page+0xeb/0x140 [ 498.686481][T12192] prepare_alloc_pages+0x1f0/0x5f0 [ 498.686524][T12192] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 498.686579][T12192] ? reacquire_held_locks+0xce/0x1e0 [ 498.686622][T12192] ? folio_lock_anon_vma_read+0x348/0xe30 [ 498.686665][T12192] ? folio_lock_anon_vma_read+0x348/0xe30 [ 498.686707][T12192] ? __up_read+0x2c5/0x700 [ 498.686747][T12192] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 498.686786][T12192] ? __pfx___up_read+0x10/0x10 [ 498.686822][T12192] ? rmap_walk_anon+0x561/0x870 [ 498.686891][T12192] __folio_alloc_noprof+0x13/0x2f0 [ 498.686937][T12192] alloc_migration_target+0x1d7/0x6d0 [ 498.686973][T12192] migrate_pages_batch+0x4f2/0x4530 [ 498.687012][T12192] ? __pfx_alloc_migration_target+0x10/0x10 [ 498.687057][T12192] ? walk_pgd_range+0x1115/0x1eb0 [ 498.687101][T12192] ? __pfx_migrate_pages_batch+0x10/0x10 [ 498.687149][T12192] ? __pfx_remove_migration_pte+0x10/0x10 [ 498.687211][T12192] migrate_pages_sync+0x12c/0x880 [ 498.687250][T12192] ? __pfx_alloc_migration_target+0x10/0x10 [ 498.687297][T12192] ? __pfx_migrate_pages_sync+0x10/0x10 [ 498.687331][T12192] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 498.687377][T12192] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 498.687433][T12192] migrate_pages+0x1aae/0x28a0 [ 498.687478][T12192] ? __pfx_alloc_migration_target+0x10/0x10 [ 498.687524][T12192] ? __pfx_migrate_pages+0x10/0x10 [ 498.687564][T12192] ? queue_pages_range+0x11e/0x180 [ 498.687617][T12192] ? __up_read+0x2c5/0x700 [ 498.687663][T12192] ? __pfx___up_read+0x10/0x10 [ 498.687703][T12192] ? do_migrate_pages+0x451/0x740 [ 498.687733][T12192] ? do_migrate_pages+0x451/0x740 [ 498.687773][T12192] do_migrate_pages+0x488/0x740 [ 498.687817][T12192] ? __pfx_do_migrate_pages+0x10/0x10 [ 498.687857][T12192] ? rcu_is_watching+0x12/0xc0 [ 498.687903][T12192] ? cap_capable+0x107/0x460 [ 498.687948][T12192] ? get_task_mm+0xc2/0xf0 [ 498.687979][T12192] ? security_capable+0xbd/0x260 [ 498.688031][T12192] kernel_migrate_pages+0x560/0x700 [ 498.688065][T12192] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 498.688098][T12192] ? xfd_validate_state+0x129/0x190 [ 498.688151][T12192] __x64_sys_migrate_pages+0x96/0x100 [ 498.688193][T12192] ? lockdep_hardirqs_on+0x78/0x100 [ 498.688238][T12192] do_syscall_64+0x106/0xf80 [ 498.688280][T12192] ? clear_bhb_loop+0x40/0x90 [ 498.688318][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.688350][T12192] RIP: 0033:0x7f01de19c799 [ 498.688377][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.688406][T12192] RSP: 002b:00007f01df096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 498.688435][T12192] RAX: ffffffffffffffda RBX: 00007f01de415fa0 RCX: 00007f01de19c799 [ 498.688456][T12192] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 498.688474][T12192] RBP: 00007f01de232c99 R08: 0000000000000000 R09: 0000000000000000 [ 498.688493][T12192] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 498.688511][T12192] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 498.688552][T12192] [ 499.050248][T12159] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 499.167935][T12159] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 499.466694][T12159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.524362][T12159] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.558758][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.565990][T10786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.609770][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.616979][T10786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.035273][T12159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.187774][T10778] Bluetooth: hci6: command tx timeout [ 500.433943][T12220] FAULT_INJECTION: forcing a failure. [ 500.433943][T12220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.477244][T12220] CPU: 0 UID: 0 PID: 12220 Comm: syz.1.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.477287][T12220] Tainted: [L]=SOFTLOCKUP [ 500.477296][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.477310][T12220] Call Trace: [ 500.477319][T12220] [ 500.477329][T12220] dump_stack_lvl+0x100/0x190 [ 500.477375][T12220] should_fail_ex.cold+0x5/0xa [ 500.477408][T12220] _copy_to_user+0x32/0xd0 [ 500.477444][T12220] simple_read_from_buffer+0xcb/0x170 [ 500.477490][T12220] proc_fail_nth_read+0x1af/0x230 [ 500.477531][T12220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.477568][T12220] ? rw_verify_area+0xce/0x6d0 [ 500.477609][T12220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.477644][T12220] vfs_read+0x1e4/0xb30 [ 500.477693][T12220] ? __pfx_vfs_read+0x10/0x10 [ 500.477736][T12220] ? __fget_files+0x215/0x3d0 [ 500.477773][T12220] ? __fget_files+0x21f/0x3d0 [ 500.477813][T12220] ksys_read+0x12a/0x250 [ 500.477839][T12220] ? __pfx_ksys_read+0x10/0x10 [ 500.477878][T12220] do_syscall_64+0x106/0xf80 [ 500.477918][T12220] ? clear_bhb_loop+0x40/0x90 [ 500.477955][T12220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.477985][T12220] RIP: 0033:0x7f01de15cfce [ 500.478011][T12220] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 500.478038][T12220] RSP: 002b:00007f01df095fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.478067][T12220] RAX: ffffffffffffffda RBX: 00007f01df0966c0 RCX: 00007f01de15cfce [ 500.478086][T12220] RDX: 000000000000000f RSI: 00007f01df0960a0 RDI: 0000000000000005 [ 500.478104][T12220] RBP: 00007f01df096090 R08: 0000000000000000 R09: 0000000000000000 [ 500.478121][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.478137][T12220] R13: 00007f01de416038 R14: 00007f01de415fa0 R15: 00007ffe8dbcec58 [ 500.478178][T12220] [ 500.636393][T12159] veth0_vlan: entered promiscuous mode [ 500.773223][T12159] veth1_vlan: entered promiscuous mode [ 500.822345][T11510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 500.833449][T11510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 500.842938][T11510] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 500.853908][T11510] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 500.869532][T11510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 500.951019][T12159] veth0_macvtap: entered promiscuous mode [ 501.006910][T12159] veth1_macvtap: entered promiscuous mode [ 501.214002][T12159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.247791][T12159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.321149][T12182] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.365587][T12182] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.385383][T12182] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.486918][T12182] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.685319][T12221] chnl_net:caif_netlink_parms(): no params data found [ 501.873584][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.884207][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.072488][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.080193][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.087535][T12221] bridge_slave_0: entered allmulticast mode [ 502.100071][T12221] bridge_slave_0: entered promiscuous mode [ 502.110528][T11214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.122323][T11214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.155489][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.179818][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.187086][T12221] bridge_slave_1: entered allmulticast mode [ 502.209990][T12221] bridge_slave_1: entered promiscuous mode [ 502.269024][T10778] Bluetooth: hci6: command tx timeout [ 502.325091][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.356398][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.389317][T12182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.412130][T12182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.450678][T12246] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 502.464668][T12246] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 502.500928][T12159] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 502.501875][T12221] team0: Port device team_slave_0 added [ 502.554366][T12221] team0: Port device team_slave_1 added [ 502.732836][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.754087][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.788898][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.803756][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.826093][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.868820][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.909050][T10778] Bluetooth: hci7: command tx timeout [ 502.981878][T12221] hsr_slave_0: entered promiscuous mode [ 502.990853][T12221] hsr_slave_1: entered promiscuous mode [ 502.997729][T12221] debugfs: 'hsr0' already exists in 'hsr' [ 503.003915][T12221] Cannot create hsr debugfs directory [ 503.710975][T12221] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.740680][T12221] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 503.779393][T12221] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 503.845355][T12221] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 504.176371][T12221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.237040][T10786] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.283609][T12221] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.297409][T12265] delete_channel: no stack [ 504.329171][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.336460][T10858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.354153][T10778] Bluetooth: hci6: command tx timeout [ 504.379341][T10858] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.386616][T10858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.992436][T10778] Bluetooth: hci7: command tx timeout [ 505.082187][T12221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.278313][T12288] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 505.301429][T12288] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 505.706061][T12221] veth0_vlan: entered promiscuous mode [ 505.793641][T12221] veth1_vlan: entered promiscuous mode [ 505.940992][T12221] veth0_macvtap: entered promiscuous mode [ 505.964312][T12221] veth1_macvtap: entered promiscuous mode [ 506.045444][T12221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.077600][T12221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.093117][T12182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.144824][T12182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.146501][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1420'. [ 506.174696][T12182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.197995][T12182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.402700][T10858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.420577][T10858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.559668][T12182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.584436][T12182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.042863][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1422'. [ 507.071317][T10778] Bluetooth: hci7: command tx timeout [ 507.106734][T12296] kexec: Could not allocate control_code_buffer [ 507.737951][ T30] audit: type=1800 audit(4294967360.578:8): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1425" name="features" dev="configfs" ino=177802 res=0 errno=0 [ 507.938771][T12324] FAULT_INJECTION: forcing a failure. [ 507.938771][T12324] name failslab, interval 1, probability 0, space 0, times 0 [ 507.991473][T12324] CPU: 1 UID: 0 PID: 12324 Comm: syz.5.1426 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.991526][T12324] Tainted: [L]=SOFTLOCKUP [ 507.991536][T12324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.991554][T12324] Call Trace: [ 507.991565][T12324] [ 507.991578][T12324] dump_stack_lvl+0x100/0x190 [ 507.991628][T12324] should_fail_ex.cold+0x5/0xa [ 507.991665][T12324] should_failslab+0xc2/0x120 [ 507.991698][T12324] __kmalloc_cache_node_noprof+0x7d/0x770 [ 507.991747][T12324] ? __alloc_workqueue+0xf78/0x1880 [ 507.991783][T12324] ? lockdep_init_map_type+0x5c/0x250 [ 507.991831][T12324] __alloc_workqueue+0xf78/0x1880 [ 507.991875][T12324] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 507.991921][T12324] alloc_workqueue_noprof+0xd2/0x200 [ 507.991968][T12324] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 507.992018][T12324] ? __pfx___debug_object_init+0x10/0x10 [ 507.992165][T12324] nci_register_device+0x21e/0xb80 [ 507.992257][T12324] ? __pfx_nci_register_device+0x10/0x10 [ 507.992296][T12324] ? lockdep_init_map_type+0x5c/0x250 [ 507.992346][T12324] virtual_ncidev_open+0x141/0x220 [ 507.992426][T12324] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 507.992463][T12324] misc_open+0x26d/0x450 [ 507.992550][T12324] ? __pfx_misc_open+0x10/0x10 [ 507.992580][T12324] chrdev_open+0x234/0x6a0 [ 507.992609][T12324] ? __pfx_apparmor_file_open+0x10/0x10 [ 507.992655][T12324] ? __pfx_chrdev_open+0x10/0x10 [ 507.992687][T12324] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 507.992738][T12324] do_dentry_open+0x6d8/0x1660 [ 507.992770][T12324] ? __pfx_chrdev_open+0x10/0x10 [ 507.992812][T12324] vfs_open+0x82/0x3f0 [ 507.992853][T12324] path_openat+0x208c/0x31a0 [ 507.992898][T12324] ? __pfx_path_openat+0x10/0x10 [ 507.992955][T12324] do_file_open+0x20e/0x430 [ 507.992991][T12324] ? __pfx_do_file_open+0x10/0x10 [ 507.993054][T12324] ? alloc_fd+0x476/0x790 [ 507.993090][T12324] ? do_getname+0x191/0x390 [ 507.993133][T12324] do_sys_openat2+0x10d/0x1e0 [ 507.993173][T12324] ? __pfx_do_sys_openat2+0x10/0x10 [ 507.993213][T12324] ? ktime_get+0x1a7/0x300 [ 507.993241][T12324] ? find_held_lock+0x2b/0x80 [ 507.993281][T12324] __x64_sys_openat+0x12d/0x210 [ 507.993321][T12324] ? __pfx___x64_sys_openat+0x10/0x10 [ 507.993377][T12324] do_syscall_64+0x106/0xf80 [ 507.993420][T12324] ? clear_bhb_loop+0x40/0x90 [ 507.993456][T12324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.993488][T12324] RIP: 0033:0x7f563df9c799 [ 507.993514][T12324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.993542][T12324] RSP: 002b:00007f563ef25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 507.993573][T12324] RAX: ffffffffffffffda RBX: 00007f563e215fa0 RCX: 00007f563df9c799 [ 507.993594][T12324] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 507.993614][T12324] RBP: 00007f563e032c99 R08: 0000000000000000 R09: 0000000000000000 [ 507.993633][T12324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.993651][T12324] R13: 00007f563e216038 R14: 00007f563e215fa0 R15: 00007ffdebe4cc98 [ 507.993695][T12324] [ 509.154775][T10778] Bluetooth: hci7: command tx timeout [ 509.220869][T12339] zswap: compressor not available [ 510.627774][T12381] Invalid ELF header magic: != ELF [ 512.440922][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1442'. [ 513.736776][T12442] ubi3: attaching mtd1 [ 514.445679][T12454] binder: 12453:12454 ioctl 80086601 4 returned -22 [ 514.454382][T12454] FAULT_INJECTION: forcing a failure. [ 514.454382][T12454] name failslab, interval 1, probability 0, space 0, times 0 [ 514.537195][T12454] CPU: 0 UID: 0 PID: 12454 Comm: syz.5.1450 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.537229][T12454] Tainted: [L]=SOFTLOCKUP [ 514.537236][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.537247][T12454] Call Trace: [ 514.537253][T12454] [ 514.537260][T12454] dump_stack_lvl+0x100/0x190 [ 514.537292][T12454] should_fail_ex.cold+0x5/0xa [ 514.537313][T12454] should_failslab+0xc2/0x120 [ 514.537333][T12454] __kvmalloc_node_noprof+0xfa/0xa00 [ 514.537361][T12454] ? alloc_fdtable+0x17f/0x2d0 [ 514.537393][T12454] alloc_fdtable+0x17f/0x2d0 [ 514.537428][T12454] dup_fd+0x995/0xd10 [ 514.537449][T12454] ? apparmor_task_alloc+0x2c1/0x3b0 [ 514.537479][T12454] copy_process+0x268f/0x7a40 [ 514.537500][T12454] ? preempt_schedule_thunk+0x16/0x30 [ 514.537532][T12454] ? __pfx_copy_process+0x10/0x10 [ 514.537553][T12454] ? find_held_lock+0x2b/0x80 [ 514.537574][T12454] ? futex_private_hash_put+0x107/0x1c0 [ 514.537598][T12454] kernel_clone+0xfc/0x9a0 [ 514.537620][T12454] ? __pfx_kernel_clone+0x10/0x10 [ 514.537652][T12454] __do_sys_clone+0xd9/0x120 [ 514.537673][T12454] ? __pfx___do_sys_clone+0x10/0x10 [ 514.537694][T12454] ? __fget_files+0x21f/0x3d0 [ 514.537725][T12454] do_syscall_64+0x106/0xf80 [ 514.537750][T12454] ? clear_bhb_loop+0x40/0x90 [ 514.537772][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.537790][T12454] RIP: 0033:0x7f563df9c799 [ 514.537806][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.537823][T12454] RSP: 002b:00007f563ef24fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 514.537841][T12454] RAX: ffffffffffffffda RBX: 00007f563e215fa0 RCX: 00007f563df9c799 [ 514.537853][T12454] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 0000000000000011 [ 514.537863][T12454] RBP: 00007f563e032c99 R08: 0000000000000000 R09: 0000000000000000 [ 514.537873][T12454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 514.537883][T12454] R13: 00007f563e216038 R14: 00007f563e215fa0 R15: 00007ffdebe4cc98 [ 514.537905][T12454] [ 515.492863][T12471] random: crng reseeded on system resumption [ 515.662393][T12471] FAULT_INJECTION: forcing a failure. [ 515.662393][T12471] name failslab, interval 1, probability 0, space 0, times 0 [ 515.716700][T12471] CPU: 0 UID: 0 PID: 12471 Comm: syz.5.1455 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.716753][T12471] Tainted: [L]=SOFTLOCKUP [ 515.716764][T12471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.716783][T12471] Call Trace: [ 515.716793][T12471] [ 515.716805][T12471] dump_stack_lvl+0x100/0x190 [ 515.716863][T12471] should_fail_ex.cold+0x5/0xa [ 515.716899][T12471] should_failslab+0xc2/0x120 [ 515.716933][T12471] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 515.716977][T12471] ? __kernfs_new_node+0xd2/0x960 [ 515.717029][T12471] __kernfs_new_node+0xd2/0x960 [ 515.717075][T12471] ? __pfx___kernfs_new_node+0x10/0x10 [ 515.717126][T12471] ? find_held_lock+0x2b/0x80 [ 515.717155][T12471] ? kernfs_root+0xee/0x2a0 [ 515.717191][T12471] ? kernfs_root+0xee/0x2a0 [ 515.717241][T12471] kernfs_new_node+0x11b/0x1a0 [ 515.717290][T12471] __kernfs_create_file+0x53/0x350 [ 515.717328][T12471] sysfs_add_file_mode_ns+0x207/0x3c0 [ 515.717374][T12471] internal_create_group+0x593/0xf40 [ 515.717407][T12471] ? __pfx_internal_create_group+0x10/0x10 [ 515.717437][T12471] ? kernfs_create_link+0x1bd/0x240 [ 515.717461][T12471] internal_create_groups+0x9d/0x150 [ 515.717490][T12471] device_add+0x71a/0x1950 [ 515.717574][T12471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 515.717607][T12471] ? __pfx_device_add+0x10/0x10 [ 515.717628][T12471] ? lockdep_init_map_type+0x5c/0x250 [ 515.717652][T12471] ? __init_waitqueue_head+0xca/0x150 [ 515.717685][T12471] netdev_register_kobject+0x1a9/0x3d0 [ 515.717760][T12471] register_netdevice+0x12e0/0x2210 [ 515.717809][T12471] ? __pfx_register_netdevice+0x10/0x10 [ 515.717849][T12471] ? __pfx_loopback_net_init+0x10/0x10 [ 515.717907][T12471] register_netdev+0x34/0x50 [ 515.717933][T12471] loopback_net_init+0x7a/0x170 [ 515.717953][T12471] ? __pfx_loopback_net_init+0x10/0x10 [ 515.717970][T12471] ops_init+0x1e2/0x5f0 [ 515.717999][T12471] setup_net+0x118/0x3a0 [ 515.718027][T12471] ? __pfx_setup_net+0x10/0x10 [ 515.718056][T12471] ? lockdep_init_map_type+0x5c/0x250 [ 515.718081][T12471] ? mutex_init_lockep+0x110/0x150 [ 515.718109][T12471] copy_net_ns+0x46f/0x7c0 [ 515.718128][T12471] create_new_namespaces+0x3ea/0xac0 [ 515.718153][T12471] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 515.718175][T12471] ksys_unshare+0x473/0xad0 [ 515.718204][T12471] ? __pfx_ksys_unshare+0x10/0x10 [ 515.718235][T12471] __x64_sys_unshare+0x31/0x40 [ 515.718257][T12471] do_syscall_64+0x106/0xf80 [ 515.718281][T12471] ? clear_bhb_loop+0x40/0x90 [ 515.718304][T12471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.718323][T12471] RIP: 0033:0x7f563df9c799 [ 515.718338][T12471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.718355][T12471] RSP: 002b:00007f563ef25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 515.718373][T12471] RAX: ffffffffffffffda RBX: 00007f563e215fa0 RCX: 00007f563df9c799 [ 515.718385][T12471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 515.718397][T12471] RBP: 00007f563e032c99 R08: 0000000000000000 R09: 0000000000000000 [ 515.718408][T12471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.718418][T12471] R13: 00007f563e216038 R14: 00007f563e215fa0 R15: 00007ffdebe4cc98 [ 515.718442][T12471] [ 516.158606][T12475] x_tables: duplicate underflow at hook 4 [ 516.334677][T12477] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1457'. [ 516.786537][T12484] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1458'. [ 516.853405][T12487] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 516.982290][T12493] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1458'. [ 517.009107][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1458'. [ 519.726739][T12528] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1467'. [ 519.974568][T12534] FAULT_INJECTION: forcing a failure. [ 519.974568][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 520.001505][T12534] CPU: 0 UID: 0 PID: 12534 Comm: syz.5.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.001551][T12534] Tainted: [L]=SOFTLOCKUP [ 520.001561][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.001577][T12534] Call Trace: [ 520.001587][T12534] [ 520.001599][T12534] dump_stack_lvl+0x100/0x190 [ 520.001669][T12534] should_fail_ex.cold+0x5/0xa [ 520.001706][T12534] should_failslab+0xc2/0x120 [ 520.001739][T12534] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 520.001783][T12534] ? shmem_alloc_inode+0x25/0x50 [ 520.001820][T12534] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 520.001855][T12534] shmem_alloc_inode+0x25/0x50 [ 520.001887][T12534] alloc_inode+0x68/0x250 [ 520.001926][T12534] new_inode+0x22/0x1c0 [ 520.001962][T12534] ? trace_kmem_cache_alloc+0xf3/0x120 [ 520.001998][T12534] shmem_get_inode+0x212/0x1040 [ 520.002042][T12534] ? __pfx_shmem_get_inode+0x10/0x10 [ 520.002080][T12534] ? rcu_is_watching+0x12/0xc0 [ 520.002122][T12534] ? percpu_counter_add_batch+0xb9/0x230 [ 520.002171][T12534] __shmem_file_setup+0x3ac/0x490 [ 520.002213][T12534] ? __pfx___shmem_file_setup+0x10/0x10 [ 520.002261][T12534] ? vm_area_alloc+0x1f/0x160 [ 520.002314][T12534] shmem_zero_setup+0x96/0x1b0 [ 520.002364][T12534] __mmap_region+0x2198/0x29e0 [ 520.002412][T12534] ? process_measurement+0x2ec/0x2350 [ 520.002516][T12534] ? __pfx___mmap_region+0x10/0x10 [ 520.002555][T12534] ? process_measurement+0x1f4/0x2350 [ 520.002609][T12534] ? path_openat+0x208c/0x31a0 [ 520.002638][T12534] ? do_file_open+0x20e/0x430 [ 520.002666][T12534] ? do_sys_openat2+0x10d/0x1e0 [ 520.002701][T12534] ? __x64_sys_openat+0x12d/0x210 [ 520.002771][T12534] ? sched_clock+0x38/0x60 [ 520.002830][T12534] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 520.002865][T12534] ? rcu_is_watching+0x12/0xc0 [ 520.002960][T12534] ? rcu_is_watching+0x12/0xc0 [ 520.003004][T12534] ? cap_capable+0x107/0x460 [ 520.003058][T12534] mmap_region+0x180/0x3e0 [ 520.003109][T12534] do_mmap+0xc63/0x12f0 [ 520.003151][T12534] ? __pfx_do_mmap+0x10/0x10 [ 520.003184][T12534] ? __pfx_down_write_killable+0x10/0x10 [ 520.003242][T12534] vm_mmap_pgoff+0x29e/0x470 [ 520.003292][T12534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 520.003330][T12534] ? do_futex+0x192/0x350 [ 520.003370][T12534] ? __pfx_do_futex+0x10/0x10 [ 520.003416][T12534] ksys_mmap_pgoff+0xe1/0x650 [ 520.003447][T12534] ? __x64_sys_futex+0x34f/0x4d0 [ 520.003484][T12534] ? __x64_sys_futex+0x358/0x4d0 [ 520.003522][T12534] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 520.003555][T12534] ? xfd_validate_state+0x129/0x190 [ 520.003605][T12534] __x64_sys_mmap+0x125/0x190 [ 520.003654][T12534] do_syscall_64+0x106/0xf80 [ 520.003694][T12534] ? clear_bhb_loop+0x40/0x90 [ 520.003732][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.003762][T12534] RIP: 0033:0x7f563df9c799 [ 520.003783][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.003807][T12534] RSP: 002b:00007f563ef25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 520.003833][T12534] RAX: ffffffffffffffda RBX: 00007f563e215fa0 RCX: 00007f563df9c799 [ 520.003850][T12534] RDX: ffffffffffffffff RSI: 0000000000020009 RDI: 0000000000000000 [ 520.003866][T12534] RBP: 00007f563e032c99 R08: 0000000000000401 R09: 0000000000008000 [ 520.003881][T12534] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 520.003898][T12534] R13: 00007f563e216038 R14: 00007f563e215fa0 R15: 00007ffdebe4cc98 [ 520.003938][T12534] [ 520.453601][T12534] FAULT_INJECTION: forcing a failure. [ 520.453601][T12534] name fail_futex, interval 1, probability 0, space 0, times 0 [ 520.466924][T12534] CPU: 1 UID: 0 PID: 12534 Comm: syz.5.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.466971][T12534] Tainted: [L]=SOFTLOCKUP [ 520.466980][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.466998][T12534] Call Trace: [ 520.467009][T12534] [ 520.467021][T12534] dump_stack_lvl+0x100/0x190 [ 520.467071][T12534] should_fail_ex.cold+0x5/0xa [ 520.467099][T12534] ? rcu_is_watching+0x12/0xc0 [ 520.467147][T12534] get_futex_key+0x107c/0x1620 [ 520.467187][T12534] ? __pfx_get_futex_key+0x10/0x10 [ 520.467218][T12534] ? lock_acquire+0x1cf/0x380 [ 520.467268][T12534] futex_wake+0xea/0x530 [ 520.467316][T12534] ? __pfx_futex_wake+0x10/0x10 [ 520.467361][T12534] ? exit_mm_release+0x19/0x30 [ 520.467408][T12534] do_futex+0x32b/0x350 [ 520.467447][T12534] ? __pfx_do_futex+0x10/0x10 [ 520.467482][T12534] ? __might_fault+0xc5/0x140 [ 520.467533][T12534] mm_release+0x24a/0x2f0 [ 520.467562][T12534] do_exit+0x704/0x2b60 [ 520.467607][T12534] ? __pfx_do_exit+0x10/0x10 [ 520.467645][T12534] ? do_raw_spin_lock+0x128/0x260 [ 520.467687][T12534] ? find_held_lock+0x2b/0x80 [ 520.467714][T12534] ? get_signal+0x7e0/0x21e0 [ 520.467750][T12534] do_group_exit+0xd5/0x2a0 [ 520.467802][T12534] get_signal+0x1ec7/0x21e0 [ 520.467849][T12534] ? __pfx_get_signal+0x10/0x10 [ 520.467883][T12534] ? do_futex+0x192/0x350 [ 520.467925][T12534] arch_do_signal_or_restart+0x91/0x770 [ 520.467964][T12534] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 520.468011][T12534] ? __pfx___x64_sys_futex+0x10/0x10 [ 520.468059][T12534] exit_to_user_mode_loop+0x86/0x4a0 [ 520.468102][T12534] do_syscall_64+0x668/0xf80 [ 520.468142][T12534] ? clear_bhb_loop+0x40/0x90 [ 520.468181][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.468219][T12534] RIP: 0033:0x7f563df9c799 [ 520.468244][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.468271][T12534] RSP: 002b:00007f563ef250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 520.468299][T12534] RAX: fffffffffffffe00 RBX: 00007f563e215fa8 RCX: 00007f563df9c799 [ 520.468318][T12534] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f563e215fa8 [ 520.468335][T12534] RBP: 00007f563e215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 520.468353][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.468369][T12534] R13: 00007f563e216038 R14: 00007ffdebe4cbb0 R15: 00007ffdebe4cc98 [ 520.468408][T12534] [ 522.476408][T12555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1473'. [ 523.112856][T12559] process 'syz.5.1475' launched ':,' with NULL argv: empty string added [ 523.761775][T12568] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1478'. [ 524.834538][T11510] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 524.848883][T11510] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 524.858750][T11510] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 524.873225][T11510] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 524.882731][T11510] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 524.981922][T12582] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1482'. [ 525.721671][T12579] chnl_net:caif_netlink_parms(): no params data found [ 526.031528][T12599] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1487'. [ 526.061641][T12579] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.080697][T12579] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.118997][T12579] bridge_slave_0: entered allmulticast mode [ 526.173001][T12579] bridge_slave_0: entered promiscuous mode [ 526.183674][T12579] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.263359][T12579] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.301001][T12579] bridge_slave_1: entered allmulticast mode [ 526.313404][T12579] bridge_slave_1: entered promiscuous mode [ 526.524686][T12579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.560059][T12579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.648338][T12608] capability: warning: `syz.6.1490' uses 32-bit capabilities (legacy support in use) [ 526.692998][T12579] team0: Port device team_slave_0 added [ 526.728570][T12579] team0: Port device team_slave_1 added [ 526.922904][T11510] Bluetooth: hci8: command tx timeout [ 527.012098][T12579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.019112][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.119734][T12579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.143641][T12579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.150640][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.177646][T12579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.413529][T12579] hsr_slave_0: entered promiscuous mode [ 527.422675][T12579] hsr_slave_1: entered promiscuous mode [ 527.609781][T12579] debugfs: 'hsr0' already exists in 'hsr' [ 527.637824][T12579] Cannot create hsr debugfs directory [ 528.414658][T12632] binder: 12629:12632 ioctl c0306201 200000000000 returned -14 [ 528.488209][T12634] binder: 12629:12634 ioctl 127f 0 returned -22 [ 528.537131][T12632] Invalid ELF header magic: != ELF [ 528.835029][T12579] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 528.902898][T12579] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 528.990176][T12647] bridge_slave_1: left allmulticast mode [ 528.998789][T12647] bridge_slave_1: left promiscuous mode [ 529.012457][T11510] Bluetooth: hci8: command tx timeout [ 529.013162][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.148068][T12579] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 529.186138][T12579] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 529.766308][T12579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.901551][T12579] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.936460][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.943769][T12182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.959963][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.967341][T12182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.976968][T12669] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1503'. [ 530.424359][T12680] netlink: 29 bytes leftover after parsing attributes in process `syz.7.1505'. [ 530.490693][T11510] Bluetooth: hci7: unexpected event 0x02 length: 726 > 260 [ 530.810819][T12579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.949403][T12698] futex_wake_op: syz.5.1507 tries to shift op by -2048; fix this program [ 530.996765][T12698] futex_wake_op: syz.5.1507 tries to shift op by -2048; fix this program [ 531.086218][T11510] Bluetooth: hci8: command tx timeout [ 531.292313][T12579] veth0_vlan: entered promiscuous mode [ 531.322858][T12579] veth1_vlan: entered promiscuous mode [ 531.418443][T12579] veth0_macvtap: entered promiscuous mode [ 531.450196][T12579] veth1_macvtap: entered promiscuous mode [ 531.504207][T12579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.536970][T12579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.581236][T11227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.619914][T11227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.697651][T11227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.712590][T11227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.971977][T10803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.010210][T10803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.128158][T11227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.147319][T11227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.179071][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1511'. [ 532.227989][T12725] netlink: 'syz.6.1512': attribute type 1 has an invalid length. [ 532.255197][T12725] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1512'. [ 532.388834][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1513'. [ 532.698244][T11510] Bluetooth: hci8: Received unexpected HCI Event 0x00 [ 533.164643][T11510] Bluetooth: hci8: command tx timeout [ 533.347653][T12756] FAULT_INJECTION: forcing a failure. [ 533.347653][T12756] name failslab, interval 1, probability 0, space 0, times 0 [ 533.425459][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.8.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.425511][T12756] Tainted: [L]=SOFTLOCKUP [ 533.425522][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.425541][T12756] Call Trace: [ 533.425551][T12756] [ 533.425564][T12756] dump_stack_lvl+0x100/0x190 [ 533.425616][T12756] should_fail_ex.cold+0x5/0xa [ 533.425651][T12756] ? lsm_blob_alloc+0x68/0x90 [ 533.425694][T12756] should_failslab+0xc2/0x120 [ 533.425727][T12756] __kmalloc_noprof+0xe0/0x850 [ 533.425772][T12756] ? trace_kmem_cache_alloc+0xf3/0x120 [ 533.425812][T12756] lsm_blob_alloc+0x68/0x90 [ 533.425856][T12756] security_prepare_creds+0x2d/0x290 [ 533.425897][T12756] prepare_creds+0x5d6/0x950 [ 533.425958][T12756] copy_creds+0xa7/0xa50 [ 533.426011][T12756] copy_process+0x1087/0x7a40 [ 533.426046][T12756] ? futex_unqueue+0x133/0x2c0 [ 533.426102][T12756] ? __pfx_copy_process+0x10/0x10 [ 533.426146][T12756] ? _copy_from_user+0x59/0xd0 [ 533.426184][T12756] kernel_clone+0xfc/0x9a0 [ 533.426217][T12756] ? __pfx_kernel_clone+0x10/0x10 [ 533.426258][T12756] ? __pfx_futex_wait+0x10/0x10 [ 533.426310][T12756] __do_sys_clone3+0x214/0x290 [ 533.426346][T12756] ? __pfx___do_sys_clone3+0x10/0x10 [ 533.426427][T12756] do_syscall_64+0x106/0xf80 [ 533.426470][T12756] ? clear_bhb_loop+0x40/0x90 [ 533.426508][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.426539][T12756] RIP: 0033:0x7f018d39c799 [ 533.426564][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.426594][T12756] RSP: 002b:00007f018e19fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 533.426624][T12756] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f018d39c799 [ 533.426643][T12756] RDX: 00007f018e19ff10 RSI: 0000000000000058 RDI: 00007f018e19ff10 [ 533.426661][T12756] RBP: 00007f018d432c99 R08: 0000000000000000 R09: 0000000000000058 [ 533.426678][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.426694][T12756] R13: 00007f018d616038 R14: 00007f018d615fa0 R15: 00007ffd272b42d8 [ 533.426728][T12756] [ 533.732898][T12756] FAULT_INJECTION: forcing a failure. [ 533.732898][T12756] name failslab, interval 1, probability 0, space 0, times 0 [ 533.789365][T12756] CPU: 0 UID: 0 PID: 12756 Comm: syz.8.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.789419][T12756] Tainted: [L]=SOFTLOCKUP [ 533.789430][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.789447][T12756] Call Trace: [ 533.789457][T12756] [ 533.789468][T12756] dump_stack_lvl+0x100/0x190 [ 533.789520][T12756] should_fail_ex.cold+0x5/0xa [ 533.789558][T12756] should_failslab+0xc2/0x120 [ 533.789593][T12756] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 533.789637][T12756] ? __kernfs_new_node+0xd2/0x960 [ 533.789690][T12756] __kernfs_new_node+0xd2/0x960 [ 533.789744][T12756] ? __pfx___kernfs_new_node+0x10/0x10 [ 533.789798][T12756] ? find_held_lock+0x2b/0x80 [ 533.789827][T12756] ? kernfs_root+0xee/0x2a0 [ 533.789868][T12756] ? kernfs_root+0xee/0x2a0 [ 533.789918][T12756] kernfs_new_node+0x11b/0x1a0 [ 533.789985][T12756] __kernfs_create_file+0x53/0x350 [ 533.790026][T12756] sysfs_add_file_mode_ns+0x207/0x3c0 [ 533.790079][T12756] internal_create_group+0x593/0xf40 [ 533.790129][T12756] ? __pfx_internal_create_group+0x10/0x10 [ 533.790176][T12756] ? kernfs_create_link+0x1bd/0x240 [ 533.790218][T12756] internal_create_groups+0x9d/0x150 [ 533.790268][T12756] device_add+0xf5b/0x1950 [ 533.790310][T12756] ? __pfx_device_add+0x10/0x10 [ 533.790345][T12756] ? lockdep_init_map_type+0x5c/0x250 [ 533.790387][T12756] ? __init_waitqueue_head+0xca/0x150 [ 533.790443][T12756] netdev_register_kobject+0x1a9/0x3d0 [ 533.790498][T12756] register_netdevice+0x12e0/0x2210 [ 533.790553][T12756] ? __pfx_register_netdevice+0x10/0x10 [ 533.790612][T12756] ip6_mroute_setsockopt+0x683/0x36d0 [ 533.790712][T12756] ? lock_acquire+0x1cf/0x380 [ 533.790757][T12756] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 533.790793][T12756] ? perf_trace_sched_pi_setprio+0x640/0x750 [ 533.790830][T12756] ? lockdep_hardirqs_on+0x78/0x100 [ 533.790874][T12756] ? rcu_is_watching+0x12/0xc0 [ 533.790916][T12756] ? trace_sched_exit_tp+0x13a/0x180 [ 533.790951][T12756] ? __schedule+0x1000/0x6120 [ 533.790999][T12756] ? __lock_acquire+0x4a5/0x2630 [ 533.791066][T12756] ? do_ipv6_setsockopt+0x551/0x4400 [ 533.791179][T12756] do_ipv6_setsockopt+0x551/0x4400 [ 533.791234][T12756] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 533.791280][T12756] ? aa_label_sk_perm+0x194/0x5f0 [ 533.791347][T12756] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 533.791390][T12756] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 533.791428][T12756] ? __pfx_futex_wake_mark+0x10/0x10 [ 533.791479][T12756] ? find_held_lock+0x2b/0x80 [ 533.791500][T12756] ? futex_wake+0x456/0x530 [ 533.791551][T12756] ? __pfx___might_resched+0x10/0x10 [ 533.791595][T12756] ? __lock_acquire+0x4a5/0x2630 [ 533.791637][T12756] ? aa_sk_perm+0x309/0xaa0 [ 533.791676][T12756] ? ipv6_setsockopt+0xcb/0x170 [ 533.791720][T12756] ipv6_setsockopt+0xcb/0x170 [ 533.791768][T12756] rawv6_setsockopt+0xee/0x5a0 [ 533.791840][T12756] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 533.791886][T12756] ? aa_sock_opt_perm+0xfe/0x1b0 [ 533.791928][T12756] ? sock_common_setsockopt+0x2e/0xf0 [ 533.792010][T12756] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 533.792062][T12756] do_sock_setsockopt+0xf3/0x1d0 [ 533.792138][T12756] __sys_setsockopt+0x119/0x190 [ 533.792183][T12756] __x64_sys_setsockopt+0xbd/0x160 [ 533.792221][T12756] ? do_syscall_64+0x95/0xf80 [ 533.792258][T12756] ? lockdep_hardirqs_on+0x78/0x100 [ 533.792299][T12756] do_syscall_64+0x106/0xf80 [ 533.792340][T12756] ? clear_bhb_loop+0x40/0x90 [ 533.792378][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.792409][T12756] RIP: 0033:0x7f018d39c799 [ 533.792437][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.792466][T12756] RSP: 002b:00007f018e1a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 533.792497][T12756] RAX: ffffffffffffffda RBX: 00007f018d615fa0 RCX: 00007f018d39c799 [ 533.792518][T12756] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0400000000000003 [ 533.792537][T12756] RBP: 00007f018d432c99 R08: 0000000000000567 R09: 0000000000000000 [ 533.792557][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.792574][T12756] R13: 00007f018d616038 R14: 00007f018d615fa0 R15: 00007ffd272b42d8 [ 533.792616][T12756] [ 534.715328][T12782] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1522'. [ 535.118029][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1526'. [ 535.137370][T12801] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1526'. [ 535.374016][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1526'. [ 535.760427][T12819] syz.5.1530 uses obsolete (PF_INET,SOCK_PACKET) [ 536.572959][T12829] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1533'. [ 536.945236][T12840] bridge0: port 3(team0) entered blocking state [ 536.956087][T12840] bridge0: port 3(team0) entered disabled state [ 536.962705][T12840] team0: entered allmulticast mode [ 536.968347][T12840] team_slave_0: entered allmulticast mode [ 536.974363][T12840] team_slave_1: entered allmulticast mode [ 536.982449][T12840] team0: entered promiscuous mode [ 536.987579][T12840] team_slave_0: entered promiscuous mode [ 536.993483][T12840] team_slave_1: entered promiscuous mode [ 537.000932][T12840] bridge0: port 3(team0) entered blocking state [ 537.007367][T12840] bridge0: port 3(team0) entered forwarding state [ 537.669753][T11510] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 537.669801][T11510] Bluetooth: hci5: unexpected subevent 0x0e length: 725 > 15 [ 537.684886][T11510] Bluetooth: hci5: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 537.765107][T12846] netlink: 'syz.7.1537': attribute type 4 has an invalid length. [ 537.775703][T12846] netlink: 'syz.7.1537': attribute type 1 has an invalid length. [ 538.215938][T12858] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 538.622867][T12870] nbd: couldn't find a device at index 35644 [ 540.008691][T12892] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1548'. [ 540.227456][T12899] futex_wake_op: syz.8.1550 tries to shift op by -2048; fix this program [ 540.236212][T12899] futex_wake_op: syz.8.1550 tries to shift op by -2048; fix this program [ 540.247128][T12903] misc userio: No port type given on /dev/userio [ 540.602475][T12916] netlink: 'syz.8.1553': attribute type 1 has an invalid length. [ 541.019821][T12929] zram0: detected capacity change from 0 to 16 [ 541.116886][T12924] [U] /Eev/audio1 [ 541.120885][T12924] [U] F츱Z|GP)LnC:DubΧtUwUU3.O"4Y8@Z5`mb4*mlD)}K>f&9- [ 541.131875][T12924] [U] WwK E6?(I,k8D̙Wpu\U [ 541.138541][T12924] [U] [ 541.141241][T12924] [U] [ 541.144998][T12927] block2mtd: illegal erase size [ 541.217306][T12924] [U] [ 541.220092][T12924] [U] [ 541.222827][T12924] [U] [ 541.225565][T12924] [U] [ 541.246456][T12924] [U] [ 541.249244][T12924] [U] [ 541.251989][T12924] [U] [ 541.254735][T12924] [U] [ 541.308280][T12924] [U] [ 541.728349][T12937] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780014d0 pfn:0x78001 [ 541.813803][T12937] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 541.900619][T12937] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 541.953202][T12937] raw: ffff8880780014d0 0000000000000000 00000001ffffffff 0000000000000000 [ 542.038393][T12937] page dumped because: unmovable page [ 542.075034][T12937] page_owner tracks the page as allocated [ 542.169597][T12937] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6083, tgid 6082 (syz.0.27), ts 101071609293, free_ts 101051521665 [ 542.312071][T12937] post_alloc_hook+0x153/0x170 [ 542.316949][T12937] get_page_from_freelist+0x111d/0x3140 [ 542.365128][T12937] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 542.402160][T12937] alloc_pages_mpol+0x1fb/0x550 [ 542.458672][T12937] alloc_pages_noprof+0x131/0x390 [ 542.587969][T12937] brd_submit_bio+0x116a/0x20d0 [ 542.608624][T12937] __submit_bio+0x419/0x6c0 [ 542.613242][T12937] submit_bio_noacct_nocheck+0x74f/0xc10 [ 542.728918][T12937] submit_bio_noacct+0xd17/0x2010 [ 542.734051][T12937] blkdev_direct_IO+0x155c/0x1fb0 [ 542.787111][T12937] blkdev_write_iter+0x703/0xd70 [ 542.899694][T12937] vfs_write+0x6ac/0x1070 [ 542.904121][T12937] ksys_write+0x12a/0x250 [ 542.947735][T12937] do_syscall_64+0x106/0xf80 [ 543.001262][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.040646][T12937] page last free pid 15 tgid 15 stack trace: [ 543.085387][T12937] __free_frozen_pages+0x7e1/0x10d0 [ 543.122614][T12937] tlb_remove_table_rcu+0x2cf/0x380 [ 543.176603][T12937] rcu_core+0x5a2/0x10d0 [ 543.238935][T12937] handle_softirqs+0x1eb/0x9e0 [ 543.243796][T12937] run_ksoftirqd+0x38/0x60 [ 543.248274][T12937] smpboot_thread_fn+0x3d3/0xaa0 [ 543.259632][T12937] kthread+0x370/0x450 [ 543.263902][T12937] ret_from_fork+0x754/0xd80 [ 543.268828][T12937] ret_from_fork_asm+0x1a/0x30 [ 548.841947][T13006] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 548.897441][T10778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 548.907005][T10778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.918522][T10778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 548.931568][T10778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.941263][T10778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.678069][T13007] chnl_net:caif_netlink_parms(): no params data found [ 550.799545][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.807041][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.815333][T13007] bridge_slave_0: entered allmulticast mode [ 550.824189][T13007] bridge_slave_0: entered promiscuous mode [ 550.835271][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.842515][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.850304][T13007] bridge_slave_1: entered allmulticast mode [ 550.859436][T13007] bridge_slave_1: entered promiscuous mode [ 551.012943][T10778] Bluetooth: hci1: command tx timeout [ 551.168244][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.185298][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.426991][T13007] team0: Port device team_slave_0 added [ 551.437937][T13007] team0: Port device team_slave_1 added [ 551.517206][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.532411][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.565045][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.588863][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.599117][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.632633][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.777048][T13007] hsr_slave_0: entered promiscuous mode [ 551.795347][T13007] hsr_slave_1: entered promiscuous mode [ 551.814994][T13007] debugfs: 'hsr0' already exists in 'hsr' [ 551.820785][T13007] Cannot create hsr debugfs directory [ 552.211773][T13007] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 552.239734][T13007] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 552.258893][T13007] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 552.279543][T13007] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 552.482915][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.527584][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.547267][T10785] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.554598][T10785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.584569][T10785] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.591845][T10785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.007405][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.096647][T10778] Bluetooth: hci1: command tx timeout [ 553.546269][T13007] veth0_vlan: entered promiscuous mode [ 553.560370][T13007] veth1_vlan: entered promiscuous mode [ 553.618462][T13007] veth0_macvtap: entered promiscuous mode [ 553.647690][T13007] veth1_macvtap: entered promiscuous mode [ 553.693633][T13007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.722493][T13007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.756430][T10785] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.775718][T10785] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.823360][T10785] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.844633][T10785] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.990731][T10785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.009207][T10785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.062968][T10803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.071460][T10803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.175585][T10778] Bluetooth: hci1: command tx timeout [ 556.818473][T11510] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 556.829543][T11510] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 556.843829][T11510] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 556.855293][T11510] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 556.864041][T11510] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 557.048465][T13106] chnl_net:caif_netlink_parms(): no params data found [ 557.152111][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.159586][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.169493][T13106] bridge_slave_0: entered allmulticast mode [ 557.183806][T13106] bridge_slave_0: entered promiscuous mode [ 557.195109][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.202759][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.212427][T13106] bridge_slave_1: entered allmulticast mode [ 557.227863][T13106] bridge_slave_1: entered promiscuous mode [ 557.258277][T11510] Bluetooth: hci1: command tx timeout [ 557.314231][T13106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.337888][T13106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.409160][T13106] team0: Port device team_slave_0 added [ 557.427087][T13106] team0: Port device team_slave_1 added [ 557.476089][T13106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.490233][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.535069][T13106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.557631][T13106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.564652][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.606451][T13106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.808616][T13106] hsr_slave_0: entered promiscuous mode [ 558.815965][T13106] hsr_slave_1: entered promiscuous mode [ 558.824549][T13106] debugfs: 'hsr0' already exists in 'hsr' [ 558.831861][T13106] Cannot create hsr debugfs directory [ 558.940184][T11510] Bluetooth: hci9: command tx timeout [ 559.271161][T13106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.413271][T13106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.531052][T13106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.644250][T13106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.371866][T13106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 560.443246][T13106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 560.654223][T13106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 560.684438][T10778] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 560.694945][T10778] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 560.714375][T10778] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 560.733316][T10778] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 560.750729][T13106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 560.757906][T10778] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 561.017944][T10778] Bluetooth: hci9: command tx timeout [ 561.285397][T13149] chnl_net:caif_netlink_parms(): no params data found [ 561.305982][T13106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.378722][T13106] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.426067][T13149] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.433940][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.442283][T13149] bridge_slave_0: entered allmulticast mode [ 561.452537][T13149] bridge_slave_0: entered promiscuous mode [ 561.462435][T10785] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.469719][T10785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.486638][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.493868][T10786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.503897][T13149] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.513981][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.522098][T13149] bridge_slave_1: entered allmulticast mode [ 561.530467][T13149] bridge_slave_1: entered promiscuous mode [ 561.573826][T13149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.590720][T13149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.643377][T13149] team0: Port device team_slave_0 added [ 561.653891][T13149] team0: Port device team_slave_1 added [ 561.700864][T13149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.708015][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.734442][T13149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.748538][T13149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.755528][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.782142][T13149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.862486][T13149] hsr_slave_0: entered promiscuous mode [ 561.870998][T13149] hsr_slave_1: entered promiscuous mode [ 561.877520][T13149] debugfs: 'hsr0' already exists in 'hsr' [ 561.883852][T13149] Cannot create hsr debugfs directory [ 562.142494][T13149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.232086][T13149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.270364][T13106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.302122][T13149] bridge0: port 3(netdevsim1) entered disabled state [ 562.325540][T13149] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 562.335806][T13149] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 562.347392][T13149] bridge0: port 3(netdevsim1) entered disabled state [ 562.359460][T13149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.404579][T13106] veth0_vlan: entered promiscuous mode [ 562.432052][T13149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.454285][T13106] veth1_vlan: entered promiscuous mode [ 562.506202][T13106] veth0_macvtap: entered promiscuous mode [ 562.521650][T13106] veth1_macvtap: entered promiscuous mode [ 562.565082][T13106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.590535][T13106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.614266][T10786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.643275][T10786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.656824][T10786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.683833][T10786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.800509][T10803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.808818][T10803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.859383][T10778] Bluetooth: hci10: command tx timeout [ 562.862539][T13149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.877718][T13149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.894769][T13149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 562.907637][T13149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 562.921565][T10785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.933293][T10785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.099847][T10778] Bluetooth: hci9: command tx timeout [ 563.141225][T13149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.196450][T13149] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.237090][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.244362][T11227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.286921][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.294275][T11227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.346762][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.355207][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.359703][T13177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 563.548804][T13178] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 563.973551][T13149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.038782][T13149] veth0_vlan: entered promiscuous mode [ 564.101340][T13149] veth1_vlan: entered promiscuous mode [ 564.166777][T13149] veth0_macvtap: entered promiscuous mode [ 564.196185][T13149] veth1_macvtap: entered promiscuous mode [ 564.237174][T13149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.264525][T13149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.292786][T12182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.306131][T12182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.321306][T12182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.333415][T12182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.447760][T11214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.471852][T11214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.508766][T12182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.518414][T12182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.628967][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.634962][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.642316][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.647644][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.654898][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.660817][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.667857][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.674378][T13193] CIFS: VFS: Invalid SecurityFlags: [ 564.940392][T10778] Bluetooth: hci10: command tx timeout [ 565.181777][T10778] Bluetooth: hci9: command tx timeout [ 566.136204][T13221] HfR: entered promiscuous mode [ 566.167628][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 566.186826][T13221] HfR: left promiscuous mode [ 566.652793][T13224] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 567.021177][T10778] Bluetooth: hci10: command tx timeout [ 568.718553][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1606'. [ 568.731562][T13255] ipvlan0: entered promiscuous mode [ 568.738665][T13255] ipvlan0: entered allmulticast mode [ 568.744714][T13255] veth0_vlan: entered allmulticast mode [ 568.760380][T13255] FAULT_INJECTION: forcing a failure. [ 568.760380][T13255] name failslab, interval 1, probability 0, space 0, times 0 [ 568.774787][T13255] CPU: 1 UID: 0 PID: 13255 Comm: syz.2.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.774819][T13255] Tainted: [L]=SOFTLOCKUP [ 568.774825][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.774836][T13255] Call Trace: [ 568.774843][T13255] [ 568.774850][T13255] dump_stack_lvl+0x100/0x190 [ 568.774882][T13255] should_fail_ex.cold+0x5/0xa [ 568.774903][T13255] should_failslab+0xc2/0x120 [ 568.774923][T13255] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 568.774950][T13255] ? security_inode_alloc+0x3b/0x2c0 [ 568.774969][T13255] ? lockdep_init_map_type+0x5c/0x250 [ 568.775005][T13255] security_inode_alloc+0x3b/0x2c0 [ 568.775023][T13255] inode_init_always_gfp+0xced/0x1040 [ 568.775046][T13255] alloc_inode+0x8e/0x250 [ 568.775070][T13255] sock_alloc+0x44/0x280 [ 568.775097][T13255] ? security_socket_create+0x7f/0x250 [ 568.775126][T13255] __sock_create+0xc2/0x860 [ 568.775149][T13255] __sys_socket+0x14d/0x260 [ 568.775169][T13255] ? __pfx___sys_socket+0x10/0x10 [ 568.775194][T13255] __x64_sys_socket+0x72/0xb0 [ 568.775213][T13255] ? lockdep_hardirqs_on+0x78/0x100 [ 568.775241][T13255] do_syscall_64+0x106/0xf80 [ 568.775264][T13255] ? clear_bhb_loop+0x40/0x90 [ 568.775286][T13255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.775310][T13255] RIP: 0033:0x7f5ed4b9c799 [ 568.775335][T13255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.775363][T13255] RSP: 002b:00007f5ed5aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 568.775393][T13255] RAX: ffffffffffffffda RBX: 00007f5ed4e15fa0 RCX: 00007f5ed4b9c799 [ 568.775413][T13255] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 568.775426][T13255] RBP: 00007f5ed4c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 568.775437][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.775447][T13255] R13: 00007f5ed4e16038 R14: 00007f5ed4e15fa0 R15: 00007ffdf4bb4038 [ 568.775470][T13255] [ 568.775507][T13255] socket: no more sockets [ 569.112325][T10778] Bluetooth: hci10: command tx timeout [ 569.734556][T10778] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 569.751498][T10778] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 569.761515][T10778] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 569.770640][T10778] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 569.780299][T10778] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 570.268109][T13278] FAULT_INJECTION: forcing a failure. [ 570.268109][T13278] name fail_futex, interval 1, probability 0, space 0, times 0 [ 570.272065][T13269] chnl_net:caif_netlink_parms(): no params data found [ 570.296931][T13278] CPU: 1 UID: 0 PID: 13278 Comm: syz.3.1612 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.296978][T13278] Tainted: [L]=SOFTLOCKUP [ 570.296988][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 570.297005][T13278] Call Trace: [ 570.297015][T13278] [ 570.297026][T13278] dump_stack_lvl+0x100/0x190 [ 570.297075][T13278] should_fail_ex.cold+0x5/0xa [ 570.297110][T13278] get_futex_key+0x295/0x1620 [ 570.297152][T13278] ? __pfx_get_futex_key+0x10/0x10 [ 570.297183][T13278] ? lock_acquire+0x1cf/0x380 [ 570.297233][T13278] futex_wake+0xea/0x530 [ 570.297281][T13278] ? __pfx_futex_wake+0x10/0x10 [ 570.297325][T13278] ? exit_mm_release+0x19/0x30 [ 570.297372][T13278] do_futex+0x32b/0x350 [ 570.297430][T13278] ? __pfx_do_futex+0x10/0x10 [ 570.297465][T13278] ? __might_fault+0xc5/0x140 [ 570.297517][T13278] mm_release+0x24a/0x2f0 [ 570.297549][T13278] do_exit+0x704/0x2b60 [ 570.297592][T13278] ? __pfx_do_exit+0x10/0x10 [ 570.297629][T13278] ? do_raw_spin_lock+0x128/0x260 [ 570.297670][T13278] ? find_held_lock+0x2b/0x80 [ 570.297696][T13278] ? get_signal+0x7e0/0x21e0 [ 570.297730][T13278] do_group_exit+0xd5/0x2a0 [ 570.297773][T13278] get_signal+0x1ec7/0x21e0 [ 570.297814][T13278] ? __pfx_io_ringfd_unregister+0x10/0x10 [ 570.297933][T13278] ? __pfx_get_signal+0x10/0x10 [ 570.297965][T13278] ? do_futex+0x192/0x350 [ 570.298006][T13278] arch_do_signal_or_restart+0x91/0x770 [ 570.298043][T13278] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 570.298089][T13278] ? __pfx___x64_sys_futex+0x10/0x10 [ 570.298134][T13278] exit_to_user_mode_loop+0x86/0x4a0 [ 570.298175][T13278] do_syscall_64+0x668/0xf80 [ 570.298221][T13278] ? clear_bhb_loop+0x40/0x90 [ 570.298257][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.298286][T13278] RIP: 0033:0x7faa2999c799 [ 570.298311][T13278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.298338][T13278] RSP: 002b:00007faa2a91e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 570.298367][T13278] RAX: fffffffffffffe00 RBX: 00007faa29c15fa8 RCX: 00007faa2999c799 [ 570.298386][T13278] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa29c15fa8 [ 570.298403][T13278] RBP: 00007faa29c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 570.298433][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.298450][T13278] R13: 00007faa29c16038 R14: 00007ffd2144d0a0 R15: 00007ffd2144d188 [ 570.298489][T13278] [ 570.762697][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.769922][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.777426][T13269] bridge_slave_0: entered allmulticast mode [ 570.786014][T13269] bridge_slave_0: entered promiscuous mode [ 570.795422][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.802615][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.810095][T13269] bridge_slave_1: entered allmulticast mode [ 570.819028][T13269] bridge_slave_1: entered promiscuous mode [ 570.997540][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.028198][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.101437][T13301] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 571.158106][T13269] team0: Port device team_slave_0 added [ 571.178062][T13269] team0: Port device team_slave_1 added [ 571.306916][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.322986][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.383455][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.405710][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.423267][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.473773][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.614675][T13269] hsr_slave_0: entered promiscuous mode [ 571.654320][T13269] hsr_slave_1: entered promiscuous mode [ 571.661540][T13269] debugfs: 'hsr0' already exists in 'hsr' [ 571.713716][T13269] Cannot create hsr debugfs directory [ 571.823689][T11510] Bluetooth: hci11: command tx timeout [ 572.268005][T13269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.448050][T13269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.628543][T13269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.579838][T13269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.906532][T11510] Bluetooth: hci11: command tx timeout [ 574.084719][T13269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.102211][T13269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.148659][T13269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.177040][T13269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.932655][T13269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.220746][T13269] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.312050][T10778] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 575.330166][T10778] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 575.342712][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.349970][T10786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.368042][T10778] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 575.383149][T10778] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 575.396052][T10778] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 575.680880][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.688048][T10803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.986026][T10778] Bluetooth: hci11: command tx timeout [ 576.110433][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 576.508563][T13353] chnl_net:caif_netlink_parms(): no params data found [ 576.792642][T13269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.908455][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.922842][T13353] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.931701][T13353] bridge_slave_0: entered allmulticast mode [ 576.944105][T13353] bridge_slave_0: entered promiscuous mode [ 576.970753][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.986182][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.998750][T13353] bridge_slave_1: entered allmulticast mode [ 577.006591][T13353] bridge_slave_1: entered promiscuous mode [ 577.162096][T13353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.199444][T13353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.289540][T13353] team0: Port device team_slave_0 added [ 577.307492][T13353] team0: Port device team_slave_1 added [ 577.404488][T13353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.412721][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.507173][T10778] Bluetooth: hci12: command tx timeout [ 577.516345][T13353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.558938][T13353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.571305][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.636171][T13353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.918235][T13269] veth0_vlan: entered promiscuous mode [ 577.963230][T13353] hsr_slave_0: entered promiscuous mode [ 577.971232][T13353] hsr_slave_1: entered promiscuous mode [ 577.984762][T13353] debugfs: 'hsr0' already exists in 'hsr' [ 577.996564][T13353] Cannot create hsr debugfs directory [ 578.076202][T11510] Bluetooth: hci11: command tx timeout [ 578.101462][T13269] veth1_vlan: entered promiscuous mode [ 578.149841][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 578.360590][T13269] veth0_macvtap: entered promiscuous mode [ 578.533778][T13269] veth1_macvtap: entered promiscuous mode [ 578.778508][T13353] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.874313][T13269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.972577][T13269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.111736][T13353] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.153201][T10858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.167018][T10858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.188091][T10858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.208214][T10858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.292882][T13353] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.572971][T13353] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.591299][T10778] Bluetooth: hci12: command tx timeout [ 579.732697][T11214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.745571][T11214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.829987][T10858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.861186][T10858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.089959][T13353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 580.124598][T13353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 580.156473][T13353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 580.189688][T13353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 580.921447][T13353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.233504][T13451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1648'. [ 581.244694][T13353] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.282539][T13451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.310931][T13451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.326978][T13451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.338764][T13451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.407440][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.414875][T10858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.650294][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.657509][T12182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.674584][T10778] Bluetooth: hci12: command tx timeout [ 581.825287][T13353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.335930][T13353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.938558][T13466] kexec: Could not allocate control_code_buffer [ 583.070946][T13353] veth0_vlan: entered promiscuous mode [ 583.092009][T13353] veth1_vlan: entered promiscuous mode [ 583.187852][T13353] veth0_macvtap: entered promiscuous mode [ 583.216390][T13353] veth1_macvtap: entered promiscuous mode [ 583.266753][T13353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.301005][T13353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.334389][T10785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.373612][T10785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.396099][T12182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.419620][T12182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.727193][T12182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.756425][T11510] Bluetooth: hci12: command tx timeout [ 583.778965][T12182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.882577][T10803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.892721][T10803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.390789][T10778] Bluetooth: hci13: Entering manufacturer mode failed (-110) [ 585.420881][T13532] FAULT_INJECTION: forcing a failure. [ 585.420881][T13532] name failslab, interval 1, probability 0, space 0, times 0 [ 585.436838][T13532] CPU: 0 UID: 0 PID: 13532 Comm: syz.0.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.436883][T13532] Tainted: [L]=SOFTLOCKUP [ 585.436892][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.436907][T13532] Call Trace: [ 585.436916][T13532] [ 585.436926][T13532] dump_stack_lvl+0x100/0x190 [ 585.436978][T13532] should_fail_ex.cold+0x5/0xa [ 585.437012][T13532] should_failslab+0xc2/0x120 [ 585.437046][T13532] __kvmalloc_node_noprof+0xfa/0xa00 [ 585.437092][T13532] ? io_alloc_cache_init+0x38/0x170 [ 585.437197][T13532] ? lockdep_init_map_type+0x5c/0x250 [ 585.437241][T13532] io_alloc_cache_init+0x38/0x170 [ 585.437289][T13532] io_uring_setup.cold+0x3cd/0x1d79 [ 585.437331][T13532] ? ksys_write+0x190/0x250 [ 585.437361][T13532] ? __pfx_io_uring_setup+0x10/0x10 [ 585.437400][T13532] ? do_futex+0x192/0x350 [ 585.437441][T13532] ? __pfx_do_futex+0x10/0x10 [ 585.437494][T13532] ? xfd_validate_state+0x129/0x190 [ 585.437547][T13532] __x64_sys_io_uring_setup+0xc2/0x170 [ 585.437589][T13532] do_syscall_64+0x106/0xf80 [ 585.437631][T13532] ? clear_bhb_loop+0x40/0x90 [ 585.437666][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.437708][T13532] RIP: 0033:0x7fec0439c799 [ 585.437733][T13532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.437761][T13532] RSP: 002b:00007fec05262028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 585.437791][T13532] RAX: ffffffffffffffda RBX: 00007fec04615fa0 RCX: 00007fec0439c799 [ 585.437811][T13532] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 585.437829][T13532] RBP: 00007fec04432c99 R08: 0000000000000000 R09: 0000000000000000 [ 585.437848][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.437866][T13532] R13: 00007fec04616038 R14: 00007fec04615fa0 R15: 00007ffdc5720618 [ 585.437907][T13532] [ 586.347398][T13545] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 587.125499][T13553] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1668'. [ 590.559677][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 591.017315][T13611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1683'. [ 591.040723][T13611] veth1_vlan: entered allmulticast mode [ 592.793898][ T31] INFO: task kworker/u10:0:10773 blocked for more than 143 seconds. [ 592.801997][ T31] Tainted: G L syzkaller #0 [ 592.811025][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.820234][ T31] task:kworker/u10:0 state:D stack:27464 pid:10773 tgid:10773 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 592.832316][ T31] Workqueue: netns cleanup_net [ 592.837237][ T31] Call Trace: [ 592.840726][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 592.844035][ T31] __schedule+0xfee/0x6120 [ 592.849073][ T31] ? __lock_acquire+0x4a5/0x2630 [ 592.855223][ T31] ? __pfx___schedule+0x10/0x10 [ 592.860137][ T31] ? find_held_lock+0x2b/0x80 [ 592.864987][ T31] ? schedule+0x2bf/0x390 [ 592.869571][ T31] schedule+0xdd/0x390 [ 592.874287][ T31] schedule_timeout+0x1b2/0x280 [ 592.879210][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 592.884728][ T31] ? mark_held_locks+0x40/0x70 [ 592.889557][ T31] __wait_for_common+0x2e7/0x4c0 [ 592.894620][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 592.900056][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 592.905914][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.911181][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 592.917619][ T31] __flush_workqueue+0x3f7/0x1200 [ 592.922811][ T31] ? __lock_acquire+0x4a5/0x2630 [ 592.928973][ T31] ? __lock_acquire+0x4a5/0x2630 [ 592.934355][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 592.940065][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 592.946087][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 592.951732][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 592.960096][ T31] rds_tcp_listen_stop+0x104/0x160 [ 592.967779][ T31] rds_tcp_exit_net+0xe0/0x870 [ 592.973483][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 592.979528][ T31] ? __pfx___might_resched+0x10/0x10 [ 593.012811][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 593.054628][ T31] ops_undo_list+0x2ee/0xab0 [ 593.075017][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 593.088456][ T31] ? cleanup_net+0x332/0x920 [ 593.113480][ T31] ? idr_destroy+0x62/0x2e0 [ 593.121515][ T31] cleanup_net+0x499/0x920 [ 593.127323][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 593.134637][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.141773][ T31] process_one_work+0xa23/0x19a0 [ 593.148764][ T31] ? __pfx_process_one_work+0x10/0x10 [ 593.193778][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 593.199120][ T31] worker_thread+0x5ef/0xe50 [ 593.203784][ T31] ? kthread+0x13a/0x450 [ 593.223970][ T31] ? __pfx_worker_thread+0x10/0x10 [ 593.229171][ T31] kthread+0x370/0x450 [ 593.233293][ T31] ? __pfx_kthread+0x10/0x10 [ 593.238370][ T31] ret_from_fork+0x754/0xd80 [ 593.243207][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.250368][ T31] ? __switch_to+0x7b4/0x1120 [ 593.255371][ T31] ? __pfx_kthread+0x10/0x10 [ 593.260032][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.278059][ T31] [ 593.281381][ T31] INFO: task syz.2.1092:10852 blocked for more than 143 seconds. [ 593.289503][ T31] Tainted: G L syzkaller #0 [ 593.296310][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 593.312975][ T31] task:syz.2.1092 state:D stack:27560 pid:10852 tgid:10851 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 593.330498][ T31] Call Trace: [ 593.333815][ T31] [ 593.338121][ T31] __schedule+0xfee/0x6120 [ 593.342562][ T31] ? __lock_acquire+0x4a5/0x2630 [ 593.347859][ T31] ? __pfx___schedule+0x10/0x10 [ 593.352753][ T31] ? find_held_lock+0x2b/0x80 [ 593.358273][ T31] ? schedule+0x2bf/0x390 [ 593.362663][ T31] schedule+0xdd/0x390 [ 593.367894][ T31] schedule_timeout+0x1b2/0x280 [ 593.372773][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.378266][ T31] ? mark_held_locks+0x40/0x70 [ 593.383246][ T31] __wait_for_common+0x2e7/0x4c0 [ 593.388412][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.393834][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 593.400637][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.405979][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 593.411830][ T31] __flush_workqueue+0x3f7/0x1200 [ 593.417018][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 593.422633][ T31] ? release_sock+0x21/0x220 [ 593.428348][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 593.433758][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 593.440226][ T31] rds_tcp_listen_stop+0x104/0x160 [ 593.445778][ T31] rds_tcp_exit_net+0xe0/0x870 [ 593.450614][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 593.456137][ T31] ? __pfx___might_resched+0x10/0x10 [ 593.461496][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 593.467094][ T31] ops_undo_list+0x2ee/0xab0 [ 593.472804][ T31] ? kfree+0x1c0/0x6b0 [ 593.477159][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 593.482605][ T31] ? ops_init+0x2fa/0x5f0 [ 593.488403][ T31] setup_net+0x1fa/0x3a0 [ 593.492703][ T31] ? __pfx_setup_net+0x10/0x10 [ 593.497592][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 593.503125][ T31] ? mutex_init_lockep+0x110/0x150 [ 593.508366][ T31] copy_net_ns+0x46f/0x7c0 [ 593.512927][ T31] create_new_namespaces+0x3ea/0xac0 [ 593.521085][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 593.526928][ T31] ksys_unshare+0x473/0xad0 [ 593.531511][ T31] ? kfree+0x2ec/0x6b0 [ 593.535662][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.540576][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 593.548356][ T31] ? kcov_ioctl+0x16a/0x720 [ 593.552913][ T31] __x64_sys_unshare+0x31/0x40 [ 593.557866][ T31] do_syscall_64+0x106/0xf80 [ 593.562519][ T31] ? clear_bhb_loop+0x40/0x90 [ 593.567529][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.573468][ T31] RIP: 0033:0x7ff973f9c799 [ 593.578012][ T31] RSP: 002b:00007ff974f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 593.591558][ T31] RAX: ffffffffffffffda RBX: 00007ff974215fa0 RCX: 00007ff973f9c799 [ 593.599708][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 593.607955][ T31] RBP: 00007ff974032c99 R08: 0000000000000000 R09: 0000000000000000 [ 593.616040][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.624248][ T31] R13: 00007ff974216038 R14: 00007ff974215fa0 R15: 00007fff5cbb6f58 [ 593.632353][ T31] [ 593.635586][ T31] INFO: task syz.2.1092:10854 blocked for more than 144 seconds. [ 593.643364][ T31] Tainted: G L syzkaller #0 [ 593.649954][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 593.659114][ T31] task:syz.2.1092 state:D stack:28424 pid:10854 tgid:10851 ppid:5821 task_flags:0x400640 flags:0x00080002 [ 593.672140][ T31] Call Trace: [ 593.675683][ T31] [ 593.678853][ T31] __schedule+0xfee/0x6120 [ 593.684282][ T31] ? __lock_acquire+0x4a5/0x2630 [ 593.689449][ T31] ? __pfx___schedule+0x10/0x10 [ 593.694496][ T31] ? find_held_lock+0x2b/0x80 [ 593.700963][ T31] ? schedule+0x2bf/0x390 [ 593.714232][ T31] schedule+0xdd/0x390 [ 593.718375][ T31] schedule_timeout+0x1b2/0x280 [ 593.723276][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.744591][ T31] ? __wait_for_common+0x2da/0x4c0 [ 593.749792][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.774302][ T31] __wait_for_common+0x2e7/0x4c0 [ 593.779337][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.792539][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 593.804202][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 593.809662][ T31] wait_for_completion_state+0x1c/0x40 [ 593.834365][ T31] vfs_coredump+0x80d/0x5570 [ 593.839028][ T31] ? __lock_acquire+0x4a5/0x2630 [ 593.843984][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 593.874239][ T31] ? __lock_acquire+0x4a5/0x2630 [ 593.879263][ T31] ? __lock_acquire+0x4a5/0x2630 [ 593.894259][ T31] ? lock_acquire+0x1cf/0x380 [ 593.899046][ T31] ? lock_acquire+0x1cf/0x380 [ 593.903756][ T31] ? find_held_lock+0x2b/0x80 [ 593.922645][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 593.934263][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 593.939892][ T31] ? bpf_ksym_find+0x124/0x1c0 [ 593.947587][ T31] ? __kernel_text_address+0xd/0x30 [ 593.952852][ T31] ? unwind_get_return_address+0x59/0xa0 [ 593.959292][ T31] ? arch_stack_walk+0xa6/0xf0 [ 593.964445][ T31] ? __sigqueue_free+0xbe/0x2a0 [ 593.969383][ T31] ? stack_trace_save+0x8e/0xc0 [ 593.974415][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 593.979833][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 593.985467][ T31] ? __lock_acquire+0x4a5/0x2630 [ 593.990478][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.997401][ T31] ? proc_coredump_connector+0x2d3/0x4f0 [ 594.003201][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 594.009258][ T31] ? rcu_is_watching+0x12/0xc0 [ 594.014108][ T31] get_signal+0x1f2a/0x21e0 [ 594.018720][ T31] ? __pfx_get_signal+0x10/0x10 [ 594.023622][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 594.029529][ T31] ? force_sig_info_to_task+0x4d2/0x660 [ 594.035166][ T31] arch_do_signal_or_restart+0x91/0x770 [ 594.040781][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 594.047117][ T31] exit_to_user_mode_loop+0x86/0x4a0 [ 594.052451][ T31] do_syscall_64+0x668/0xf80 [ 594.057179][ T31] ? clear_bhb_loop+0x40/0x90 [ 594.061921][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.067973][ T31] RIP: 0033:0x7ff973f9c799 [ 594.072420][ T31] RSP: 002b:00007ff974f140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 594.093777][ T31] RAX: ffffffffffffffda RBX: 00007ff974216098 RCX: 00007ff973f9c799 [ 594.102015][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff97421609c [ 594.110170][ T31] RBP: 00007ff974216090 R08: 0000000000000000 R09: 0000000000000000 [ 594.118353][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.127653][ T31] R13: 00007ff974216128 R14: 00007fff5cbb6e70 R15: 00007fff5cbb6f58 [ 594.135774][ T31] [ 594.138869][ T31] INFO: task syz.3.1098:10881 blocked for more than 144 seconds. [ 594.146789][ T31] Tainted: G L syzkaller #0 [ 594.153324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.163367][ T31] task:syz.3.1098 state:D stack:27000 pid:10881 tgid:10876 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 594.175418][ T31] Call Trace: [ 594.178722][ T31] [ 594.181656][ T31] __schedule+0xfee/0x6120 [ 594.186180][ T31] ? __lock_acquire+0x4a5/0x2630 [ 594.191176][ T31] ? __pfx___schedule+0x10/0x10 [ 594.196176][ T31] ? find_held_lock+0x2b/0x80 [ 594.201042][ T31] ? schedule+0x2bf/0x390 [ 594.205506][ T31] schedule+0xdd/0x390 [ 594.209638][ T31] schedule_timeout+0x1b2/0x280 [ 594.214573][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 594.220009][ T31] ? mark_held_locks+0x40/0x70 [ 594.224883][ T31] __wait_for_common+0x2e7/0x4c0 [ 594.229948][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 594.235418][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 594.240938][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.246314][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 594.252182][ T31] __flush_workqueue+0x3f7/0x1200 [ 594.257320][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 594.262835][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 594.268598][ T31] ? release_sock+0x21/0x220 [ 594.273302][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 594.278879][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 594.284201][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 594.289748][ T31] rds_tcp_listen_stop+0x104/0x160 [ 594.294970][ T31] rds_tcp_exit_net+0xe0/0x870 [ 594.299745][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 594.305544][ T31] ? __pfx___might_resched+0x10/0x10 [ 594.310901][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 594.316836][ T31] ops_undo_list+0x2ee/0xab0 [ 594.321451][ T31] ? kfree+0x1c0/0x6b0 [ 594.325615][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 594.330782][ T31] ? ops_init+0x2fa/0x5f0 [ 594.335477][ T31] setup_net+0x1fa/0x3a0 [ 594.339774][ T31] ? __pfx_setup_net+0x10/0x10 [ 594.344804][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 594.350234][ T31] ? mutex_init_lockep+0x110/0x150 [ 594.355463][ T31] copy_net_ns+0x46f/0x7c0 [ 594.359922][ T31] create_new_namespaces+0x3ea/0xac0 [ 594.365313][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 594.371024][ T31] ksys_unshare+0x473/0xad0 [ 594.375676][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 594.380769][ T31] __x64_sys_unshare+0x31/0x40 [ 594.385687][ T31] do_syscall_64+0x106/0xf80 [ 594.390511][ T31] ? clear_bhb_loop+0x40/0x90 [ 594.395434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.401390][ T31] RIP: 0033:0x7f60db19c799 [ 594.406029][ T31] RSP: 002b:00007f60dbfbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 594.414649][ T31] RAX: ffffffffffffffda RBX: 00007f60db416090 RCX: 00007f60db19c799 [ 594.422717][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 594.430850][ T31] RBP: 00007f60db232c99 R08: 0000000000000000 R09: 0000000000000000 [ 594.438905][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.446976][ T31] R13: 00007f60db416128 R14: 00007f60db416090 R15: 00007ffc4ffb9238 [ 594.455074][ T31] [ 594.458457][ T31] [ 594.458457][ T31] Showing all locks held in the system: [ 594.470001][ T31] 1 lock held by khungtaskd/31: [ 594.475526][ T31] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 594.489811][ T31] 2 locks held by getty/7131: [ 594.494672][ T31] #0: ffff8880336180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 594.504667][ T31] #1: ffffc90003a172f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 594.515059][ T31] 3 locks held by kworker/u10:0/10773: [ 594.520554][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 594.531159][ T31] #1: ffffc9001935fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 594.541198][ T31] #2: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 594.550643][ T31] 1 lock held by syz.2.1092/10852: [ 594.557056][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.566783][ T31] 1 lock held by syz.3.1098/10881: [ 594.571930][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.581506][ T31] 1 lock held by syz.0.1331/11879: [ 594.586685][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.596304][ T31] 1 lock held by syz.4.1354/11992: [ 594.601432][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.611069][ T31] 1 lock held by syz.6.1517/12753: [ 594.616256][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.625762][ T31] 1 lock held by syz.8.1560/12952: [ 594.630898][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.640543][ T31] 1 lock held by syz.7.1562/12970: [ 594.645727][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.655953][ T31] 1 lock held by syz.9.1568/13066: [ 594.661089][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.670580][ T31] 1 lock held by syz.5.1587/13137: [ 594.675792][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.685336][ T31] 5 locks held by syz-executor/13353: [ 594.690824][ T31] #0: ffff8880a98f4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 594.700555][ T31] #1: ffff8880a98f40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 594.710457][ T31] #2: ffffffff908ac508 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 594.721206][ T31] #3: ffff8880649042f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 594.730734][ T31] #4: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 594.740914][ T31] 1 lock held by syz.4.1659/13520: [ 594.746193][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.755745][ T31] 1 lock held by syz.2.1667/13549: [ 594.760854][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.770357][ T31] 1 lock held by syz.0.1678/13586: [ 594.775569][ T31] #0: ffffffff905fb910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.785093][ T31] 3 locks held by syz.3.1686/13621: [ 594.790327][ T31] #0: ffff88806b650ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 594.801079][ T31] #1: ffff88806b6500c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 594.810858][ T31] #2: ffffffff908ac508 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 594.821477][ T31] [ 594.823969][ T31] ============================================= [ 594.823969][ T31] [ 594.841482][ T31] NMI backtrace for cpu 1 [ 594.841509][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 594.841550][ T31] Tainted: [L]=SOFTLOCKUP [ 594.841558][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.841572][ T31] Call Trace: [ 594.841580][ T31] [ 594.841590][ T31] dump_stack_lvl+0x100/0x190 [ 594.841638][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 594.841681][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 594.841723][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 594.841760][ T31] sys_info+0x141/0x190 [ 594.841803][ T31] watchdog+0xd25/0x1050 [ 594.841842][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.841871][ T31] ? __kthread_parkme+0x18c/0x230 [ 594.841908][ T31] ? kthread+0x13a/0x450 [ 594.841940][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.841964][ T31] kthread+0x370/0x450 [ 594.842000][ T31] ? __pfx_kthread+0x10/0x10 [ 594.842038][ T31] ret_from_fork+0x754/0xd80 [ 594.842081][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 594.842126][ T31] ? __switch_to+0x7b4/0x1120 [ 594.842156][ T31] ? __pfx_kthread+0x10/0x10 [ 594.842195][ T31] ret_from_fork_asm+0x1a/0x30 [ 594.842244][ T31] [ 594.842260][ T31] Sending NMI from CPU 1 to CPUs 0: [ 594.969037][ C0] NMI backtrace for cpu 0 [ 594.969060][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.969093][ C0] Tainted: [L]=SOFTLOCKUP [ 594.969101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.969115][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 594.969150][ C0] Code: 88 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 20 1e 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 594.969172][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 594.969191][ C0] RAX: 000000000033a83b RBX: ffffffff8e4975c0 RCX: ffffffff8b8d6c75 [ 594.969206][ C0] RDX: 0000000000000000 RSI: ffffffff8de7f6dc RDI: ffffffff8c1b0620 [ 594.969221][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 594.969235][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 594.969249][ C0] R13: 0000000000000000 R14: ffffffff90d9bd10 R15: 0000000000000000 [ 594.969264][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 594.969288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.969303][ C0] CR2: 0000562981c8aee8 CR3: 000000000e598000 CR4: 00000000003526f0 [ 594.969318][ C0] Call Trace: [ 594.969326][ C0] [ 594.969333][ C0] default_idle+0x9/0x10 [ 594.969366][ C0] default_idle_call+0x6c/0xb0 [ 594.969386][ C0] do_idle+0x43a/0x550 [ 594.969409][ C0] ? __pfx_do_idle+0x10/0x10 [ 594.969435][ C0] cpu_startup_entry+0x4f/0x60 [ 594.969456][ C0] rest_init+0x251/0x260 [ 594.969477][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 594.969658][ C0] start_kernel+0x47f/0x480 [ 594.969698][ C0] x86_64_start_reservations+0x24/0x30 [ 594.969721][ C0] x86_64_start_kernel+0x12b/0x130 [ 594.969743][ C0] common_startup_64+0x13e/0x148 [ 594.969776][ C0] [ 595.170743][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 595.177668][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 595.188400][ T31] Tainted: [L]=SOFTLOCKUP [ 595.192752][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.202827][ T31] Call Trace: [ 595.206121][ T31] [ 595.209065][ T31] dump_stack_lvl+0x100/0x190 [ 595.213775][ T31] vpanic+0x552/0x970 [ 595.218032][ T31] ? __pfx_vpanic+0x10/0x10 [ 595.222553][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 595.228756][ T31] panic+0xd1/0xe0 [ 595.232493][ T31] ? __pfx_panic+0x10/0x10 [ 595.236927][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 595.243188][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 595.249354][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 595.255524][ T31] ? watchdog.cold+0x198/0x1ca [ 595.260305][ T31] ? watchdog+0xd35/0x1050 [ 595.264749][ T31] watchdog.cold+0x1a9/0x1ca [ 595.269361][ T31] ? __pfx_watchdog+0x10/0x10 [ 595.274058][ T31] ? __kthread_parkme+0x18c/0x230 [ 595.279102][ T31] ? kthread+0x13a/0x450 [ 595.283366][ T31] ? __pfx_watchdog+0x10/0x10 [ 595.288051][ T31] kthread+0x370/0x450 [ 595.292149][ T31] ? __pfx_kthread+0x10/0x10 [ 595.296781][ T31] ret_from_fork+0x754/0xd80 [ 595.301423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 595.306566][ T31] ? __switch_to+0x7b4/0x1120 [ 595.311345][ T31] ? __pfx_kthread+0x10/0x10 [ 595.315974][ T31] ret_from_fork_asm+0x1a/0x30 [ 595.320773][ T31] [ 595.324122][ T31] Kernel Offset: disabled [ 595.328547][ T31] Rebooting in 86400 seconds..