last executing test programs: 2m48.38110119s ago: executing program 0 (id=547): mmap$auto(0x7, 0x7, 0xdf, 0x30, 0x69a5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x6, 0x5c}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000080)="8905d701d6d70bdffdf3c75e4a5644ad2b8ab9", 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x7, 0x100) 2m47.236468897s ago: executing program 0 (id=552): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x29bebcd2b5195a48, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x29bebcd2b5195a48, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) (async) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) (async) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_BLKDISCARD(r1, 0x1277, 0x0) 2m46.943479762s ago: executing program 0 (id=554): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone3(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x2, 0x0, 0xdf, 0x9b72, 0x2, 0xc000) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x300, 0x0) read$auto_tracing_entries_fops_trace(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000440)=""/82, 0x52) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m42.434092318s ago: executing program 0 (id=575): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2a, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0xffffff62, &(0x7f00000002c0)={&(0x7f0000000580)={0x28, r2, 0x1, 0x70b527, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xfffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x800) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 2m42.049520594s ago: executing program 0 (id=578): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) memfd_create$auto(0x0, 0xe) (async, rerun: 32) r0 = socket(0x2b, 0x1, 0x1) (rerun: 32) getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) (async, rerun: 32) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x24084005) (rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(r1, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000480)={0x5ffc2f43, 0x4, 0x8000, 0xf, 0x8, 0x6, 0x15e, 0x8, 0x5, 0xffffffff, 0x3fb, 0x4688, 0x0, 0x6, 0x7, 0xffffffff, 0xfffffffffffffffa, 0x8, 0x6, 0x6, 0x2cf2, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x5, 0xffffff53, 0x9, 0x3, 0x0, [0x2, 0xc5, 0x200, 0x0, 0x800, 0x15, 0x3, 0x200, 0x7, 0x8, 0x8000000000000001, 0x800, 0x6, 0x0, 0x5, 0x9, 0x8, 0x40, 0x87, 0x800, 0x3, 0x5, 0x1, 0x1f0b, 0x200, 0x1ff, 0x9, 0x0, 0x2, 0x7, 0x3, 0x1, 0x6, 0x100, 0x0, 0x1, 0x7, 0x2000000000000, 0xd5, 0x2, 0x7ff, 0x5, 0x8], "548d8ea698997f834de0f18213dd3b52214026ce4187935c0c77717f3e44f3f00f1a8f2d30b91d4e80e45ab184bba619e17ef29993af7cb9867ed24679cb4ef88c32af5dc2f73167ae"}, 0x9f, 0x7) (async) unshare$auto(0x40000080) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048004) (async) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 2m40.370107421s ago: executing program 0 (id=585): r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0x0, 0x4024009, 0x573, 0x17, r0, 0x8000) madvise$auto(0x7ffffffffffffffd, 0xffffffffffff0001, 0x40015) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) io_getevents$auto(0x409, 0xd9d, 0x8, 0x0, 0x0) utimensat$auto(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0xf65}, 0xfffffffd) 2m35.954811535s ago: executing program 2 (id=606): r0 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim4/ports/0/ipsec\x00', 0x88081, 0x0) mmap$auto(0x3, 0xe983, 0xde, 0xeb1, r0, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \b\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7040fcdbdf2504000000090803801400530000000000000000000000ffffe000000194aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef50410800a900ac1e0101cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708bc90649800400238009332b5864f563debdd9ec3e3927d5e8d91039045e5904ad911cd6569dbedf0973f426f205e678b2800c8959dc1b6e242f4facf2daec164e30e70330305c99908102927fce620445810a427c94e13d55524000ed6ce06a303d7e57126b7cb6c76c65cfdaa9df9f36865fd1d1507dcfa61a700327e949f870087feabf6d0524d5dcdd9a5869ced6caca5123a235b45191ed75b7de3c95f4ca14506077320da9c615d645a91499a35d104cebb63bdae3fb13b58408f4af917d7effdd0ab4ebebfd6cad5fd32603ead2f7447d29e8cad454e2958fae56041e8380cc453540bb39454ee00536802100b8801400fd00fc01000000000000000000000000000004006e800400858086000000b505298008004300", @ANYRES32=0x0, @ANYBLOB="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"], 0x820}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sync_file_range$auto(r3, 0x7, 0x80000000, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r4, 0x0, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = io_uring_setup$auto(0x1, 0x0) (async) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x1, 0x0, 0x8004) (async) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) (async) r7 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r7, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) (async) read$auto_ipsec_dbg_fops_ipsec(r4, &(0x7f0000000340)=""/179, 0xb3) (async) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000040)=0x3101) r8 = socket(0x10, 0x2, 0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = prctl$auto_PR_SET_MM_END_CODE(0x6, 0x2, 0xffffffffffffffff, 0x7, 0x7) (async) r11 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r9) sendmsg$auto_NFC_CMD_GET_SE(r10, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x5) (async) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r8, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r11, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60040000}, 0xe4c3d29e7a92783a) sendmsg$auto_NFC_CMD_DEV_UP(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="413e2cbd70007cf5cbe6717ab9e07e000e000100000008000300dd0000f607000100ab000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) 2m35.754812448s ago: executing program 2 (id=607): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x8006, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x1, 0x40084, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, [0x0, 0x0, 0x10000000000000, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x8, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x8000000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x1fe, 0x200c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m35.683562081s ago: executing program 2 (id=608): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r1, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) socket(0xa, 0x3, 0x3b) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x123201, 0x0) write$auto(r2, 0x0, 0x3) accept$auto(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x87d) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(r3, 0x0, 0xfffffff5, 0x7000000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r6 = socket(0x18, 0x3, 0x2) accept$auto(r6, 0x0, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f59333128", 0x13) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xd9bfc2, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/lo/accept_local\x00', 0x142000, 0x0) socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x10084) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(r7, 0x0, 0x10009a2, 0x8) 2m35.481685508s ago: executing program 2 (id=610): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mlockall$auto(0x7ff) r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) pread64$auto(r0, &(0x7f0000000040)='\'[\x00', 0x401, 0xff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip_mr_vif\x00', 0x40900, 0x0) pread64$auto(r1, 0x0, 0x594c, 0x9fffffffd) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f2, 0x4000015) r2 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x1000) io_uring_register$auto_IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)="954c0e816b63ccc83af0ad5f0acf79659b6a493d9a91f41d7c5ad6262d90ec4672dae979718691596d186d331adbb57863a540cc179ee6324885f569b23db88230dd00e49e4d33e560e7f6222b2d2201b6bf642650c911aa898722d145f893e540a8d3d109f461ee23c2b53ef85dc1af2673c3e1c27605", 0xf75) 2m35.2456941s ago: executing program 2 (id=611): waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x9, 0xffffffffffffff01, 0x6, 0x9b72, 0x2, 0x10000000008040) mmap$auto(0xfffffffffffffffe, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) pidfd_open$auto(0x1, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x7, @none, 0xbcbb, 0x1}, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) prctl$auto(0x650, 0x9, 0x0, 0x9, 0xfffffffffffffffc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) writev$auto(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r2, r1, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) bpf$auto(0x12, 0x0, 0x26) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) 2m35.009200764s ago: executing program 2 (id=615): socket(0x2, 0x3, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen$auto(r0, 0x4d) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) socket(0x2, 0x80802, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xa) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/166, 0xa6) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fd0001000700000008000300080000000000000000000000000000000000000008c43ec7eb5d3ae2deb2596aeed020f242d42cb171642b6a889e1ab937bd3f275953dc550d5cd70c392dfc406e641d13beb91c0a0c422dbda09c319e3d9413a5044b43f6133d87af99f8ead410cb9adc3a7006393ff245d21331b13237ff5a91dd2364c20dfb0fb3eedded7740cbd6bc7ce1d1afd42f5c31ad3729da92141a610000000000000000685a5b7097cad40074c0d03b8fba115d9106de8f85c9ef3f2aa189afa63871da502e"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r4 = prctl$auto(0x80, 0x6, 0x0, 0x27c, 0xffffffff) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x3, 0x100020009, 0x88, 0x4d76, r5, 0x8000) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x8001) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 2m25.301667801s ago: executing program 32 (id=585): r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0x0, 0x4024009, 0x573, 0x17, r0, 0x8000) madvise$auto(0x7ffffffffffffffd, 0xffffffffffff0001, 0x40015) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) io_getevents$auto(0x409, 0xd9d, 0x8, 0x0, 0x0) utimensat$auto(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0xf65}, 0xfffffffd) 2m19.872981568s ago: executing program 33 (id=615): socket(0x2, 0x3, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen$auto(r0, 0x4d) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) socket(0x2, 0x80802, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xa) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/166, 0xa6) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fd0001000700000008000300080000000000000000000000000000000000000008c43ec7eb5d3ae2deb2596aeed020f242d42cb171642b6a889e1ab937bd3f275953dc550d5cd70c392dfc406e641d13beb91c0a0c422dbda09c319e3d9413a5044b43f6133d87af99f8ead410cb9adc3a7006393ff245d21331b13237ff5a91dd2364c20dfb0fb3eedded7740cbd6bc7ce1d1afd42f5c31ad3729da92141a610000000000000000685a5b7097cad40074c0d03b8fba115d9106de8f85c9ef3f2aa189afa63871da502e"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r4 = prctl$auto(0x80, 0x6, 0x0, 0x27c, 0xffffffff) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x3, 0x100020009, 0x88, 0x4d76, r5, 0x8000) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x8001) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 2m12.72268031s ago: executing program 3 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x7, 0x0) r1 = socket(0x2a, 0x2, 0x6) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r2) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010) 2m12.478197664s ago: executing program 3 (id=689): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x470000000, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000040)={0x5, 0x8, 0x80000001, 0x1000, 0x4, 0x2}, 0x8001, 0x0, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x8009) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x80240, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0xffffffff, 0xbe, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x400006, 0x10, 0x64, 0x80000020, 0x1000, 0x4, 0x10000, 0x2, 0x8]}, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x2, 0x4}) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000001c0), r0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x1dc, r3, 0x100, 0x70bd2d, 0x80000, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0xac, 0x0, "c678399aa0bc8d358ef32acfaac7845dc3a076e148cac96cfe0d660a35dbf4380b88e6dfa34f0b8754becaf03bf079369abcb6312204054814f036276db4b0798561b5f19d41e9db657b81d40fbc8630b0abe30bd1768b05aecbf0ea82d23b1247bb8f213c77e202f141dc961ec6f79bfcbb7fe6960f6d47364621cd24824cf2d4495c8e1a585e918e302b7cbd5df9a88b7af668adc29b5c756e8bd62b9fcb2debaea4d3147cb455"}, @SMC_NLA_EID_TABLE_UNSPEC={0x103, 0x0, "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"}, @SMC_NLA_EID_TABLE_ENTRY={0x6, 0x1, '%/'}, @SMC_NLA_EID_TABLE_ENTRY={0xe, 0x1, '-(-/[#\\.-)'}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40004}, 0x4000024) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 2m10.13108306s ago: executing program 3 (id=692): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa8042, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc01, 0x1, 0x6d, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x570, 0x400}]}) close_range$auto(0x2, 0x8, 0x0) 2m9.097625248s ago: executing program 3 (id=694): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(r1, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(r1, 0x409, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8c42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = set_tid_address$auto(0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) r5 = setfsuid$auto(0xee00) setresuid$auto(r5, 0x0, r5) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000200)={{0x9, 0x0, 0xffffffffffffffff, 0x800, 0x10, 0xad15, 0x7}, &(0x7f0000000180)=0xf, &(0x7f00000003c0)=0x3, 0x3ff, 0x5, 0x200, 0x0, 0x65, 0x7, 0x2, 0x3, @inferred=r0, @inferred=r3}) fstat$auto(r4, &(0x7f0000000300)={0x0, 0xf07, 0xaf4, 0x9, r5, r6, 0x0, 0x0, 0x8000000000, 0x74786f25, 0x1, 0x7, 0x40, 0x2, 0x1, 0xa841, 0x100000000000}) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000080)={@raw=0x8, 0xfff, 0x50fa, 0xc, "802e41a0c415f060e955781ca310b7fb01c11e5c988c3eb4006ff3ac492bb1ce76676da7fb06c1c88f5c900c"}) r7 = semctl$auto_GETPID(0x19, 0x5a48, 0xb, 0x6) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) ioctl$auto(r4, 0x6, r4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000040)={{@raw=0xffffff7f, 0x8, 0x5, 0x4338, "0508ef5c02864dd5c35496fab129fe93e170b30016d0cf0a93b570d8ea6943760ea9119f58f5db6093defac0", @inferred=0xffffffffffffffff}, 0x10, 0x1, 0x3, @inferred=r7, @integer={0x7, 0x3fffc000000, 0x9}, "ece132c65533f6ae0f69aea0f58e0ec1fed8e73a2133901c005333801c23678a8922a550ace2a9c0c2c66c50c9048320382f8e2a87ac9e4a277621056af6f983"}) sendto$auto(0xffffffffffffffff, 0x0, 0x404, 0x0, &(0x7f0000000000)=@generic={0x22, "e2e18340cba8fe80000000003f00"}, 0x1d) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000280), 0xc02, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r8 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8905, 0x0) fcntl$auto_F_GETOWN_EX(r1, 0x10, 0x4) 2m7.655022558s ago: executing program 3 (id=698): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0xffffffffffffffff) fcntl$auto(r0, 0x10, 0x2) mmap$auto(0x0, 0x4020005, 0x6, 0xeb1, r0, 0x8000) sysfs$auto(0x2, 0x3f, 0x0) (async) sysfs$auto(0x2, 0x3f, 0x0) fsopen$auto(0x0, 0x1) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) (async) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) (async) write$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) 2m7.27833945s ago: executing program 3 (id=700): socket(0x2, 0x3, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen$auto(r0, 0x4d) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) socket(0x2, 0x80802, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xa) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/inflight\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000380)=""/166, 0xa6) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fd0001000700000008000300080000000000000000000000000000000000000008c43ec7eb5d3ae2deb2596aeed020f242d42cb171642b6a889e1ab937bd3f275953dc550d5cd70c392dfc406e641d13beb91c0a0c422dbda09c319e3d9413a5044b43f6133d87af99f8ead410cb9adc3a7006393ff245d21331b13237ff5a91dd2364c20dfb0fb3eedded7740cbd6bc7ce1d1afd42f5c31ad3729da92141a610000000000000000685a5b7097cad40074c0d03b8fba115d9106de8f85c9ef3f2aa189afa63871da502e"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) connect$auto(0x3, 0x0, 0x54) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x3, 0x100020009, 0x88, 0x4d76, r5, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x8001) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 2m2.408719442s ago: executing program 5 (id=720): r0 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait$auto(r1, &(0x7f0000000100)={0x5, 0x9}, 0x200, 0x0, &(0x7f0000000140)={0x5}, 0x8) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x7ff, 0x6, 0x448) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xe2) mmap$auto(0x5, 0x4020009, 0x6, 0xeb4, 0x401, 0xdb) ioctl$auto(0xffffffffffffffff, 0x90006441, 0xc35) r2 = getsid$auto(0x0) move_pages$auto(r2, 0x20007, 0x0, 0x0, 0x0, 0x3) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000040)=@prog_bind_map={r1, r0, 0x80000001}, 0xe) 2m0.501961347s ago: executing program 5 (id=725): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, r0, @relative_id=0x13, 0xe600}, 0xf) (async) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f00000000c0), 0x100000001}, 0x2000000000000003) 1m59.542790747s ago: executing program 5 (id=727): mmap$auto(0x4, 0x5ba9, 0x2, 0xebd, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="5da92abd00800000000000000000a1851f0d7385e0243154390acfe54ea127a7996ed8670da68d82d62cde299aa635132d1cab2b1dd4b13ed378bd46190eb053ff4d8b9e3a515d8463a79e1a5322e36583fce81de4eeb3c4dfba6398434d1f75963bcfe15e31faad91a2"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r2) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x44080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.9/usb28/power/active_duration\x00', 0x284042, 0x0) read$auto(r4, 0x0, 0x108) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x484946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r6, 0x0, 0x4) writev$auto(r5, &(0x7f0000000200)={0x0, 0x6}, 0x2) mmap$auto(0x0, 0x316, 0x3, 0xebf, 0xfffffffffffffffa, 0x10000000008000) r7 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x50402, 0x0) setsockopt$auto_SO_PREFER_BUSY_POLL(r7, 0x182, 0x45, 0x0, 0x5) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0x0, 0xfff, 0xffffffffffffffff, 0x8000) r9 = openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x102001, 0x0) pwrite64$auto(r9, 0x0, 0x2, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) 1m58.000673746s ago: executing program 5 (id=729): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000080)="d0288180cd7b5bd2c00672ca9d0def479c6d06a1b1cf1a1c8b7d892732ae7014600830c9123e6f54df42cf80b80da4eec2ad4ddc4407917e111355a973a194105bf0af2ee149c2137af4652e14e9156801e524457abd527ef98ad23f3b7e8761a0db232c3350689112e30cfdb266813c4bc2ec1db7cb2c7e4828389aa142e2", 0x5, &(0x7f0000000000)={&(0x7f0000000100)="0fa5fb07f0084fc0c30218a6eabd8987ca2c87561354ab8e3cf980845b809de4237ca960620c0e0d14d5f72ca69e7e4bc0ce1db8b1eec7431234c408d3cb147162f9d95e86605a69d9434e636fee48763068d6870974580b3c80c3ad7200316a92314240dc0cd8e71ed6ca38a301bade294c84b3961dfdbf40f7dac053a1fe51baadbc7fe57b1a05bf2d33ea0d633e2ecd7e9e16cdf80413fcff7a00150c8266a606d178319fefd156b5a8eebfa72c594a9b5d8f6e15c1bf0505e5d936357ccc14f77801ebe7b2", 0x8}, 0xb4c5, &(0x7f0000000200)="dda347b2d00c2a4709d6dee544e9e4f1d1a83bd38e74d0bc94eb3a2d281eac39b14800687bc12fe344d878a7a180ce", 0x3, 0xb}, 0x3ff}, 0x1, 0x5) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0xffffffffffffffff) 1m57.769498361s ago: executing program 5 (id=730): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000080)="8905d701d6d70bdffdf3c75e4a5644ad2b8ab9", 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x7, 0x100) 1m57.370057674s ago: executing program 5 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4044880) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video50\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = socket(0x23, 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r5, &(0x7f0000000300)='.o\xd3\xa49.\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\x01\xff\xff\xffp\x0e\xd4C\xdc\x84\v\xafz\xfd\r\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x9) ioctl$auto(r4, 0x89a2, 0x8) (async) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SAE_PASSWORD={0x4b, 0x115, "7a714108b1fe51d05a4dfcb5de5255d46dc8ac47389b6ce5c2d9886eecda153797d0f943ade93d767459ce5be26e2f29e776853b45160a9e04db69b464855b22c19cc13254aee7"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfea}]}, 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async, rerun: 32) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async, rerun: 32) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400400, 0x71, 0x12}, 0x18) utimensat$auto(r6, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0xc000000000000}, 0x180) (async) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0xa0102, 0x0) ioctl$auto_IOC_PR_RELEASE(r7, 0x401070ca, 0x0) (async) sendfile$auto(r7, r2, &(0x7f0000000040)=0x5, 0xdc8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) pkey_free$auto(0x6) (async) close_range$auto(0x2, 0xa, 0x0) 1m52.157623011s ago: executing program 34 (id=700): socket(0x2, 0x3, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen$auto(r0, 0x4d) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) socket(0x2, 0x80802, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xa) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/inflight\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000380)=""/166, 0xa6) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fd0001000700000008000300080000000000000000000000000000000000000008c43ec7eb5d3ae2deb2596aeed020f242d42cb171642b6a889e1ab937bd3f275953dc550d5cd70c392dfc406e641d13beb91c0a0c422dbda09c319e3d9413a5044b43f6133d87af99f8ead410cb9adc3a7006393ff245d21331b13237ff5a91dd2364c20dfb0fb3eedded7740cbd6bc7ce1d1afd42f5c31ad3729da92141a610000000000000000685a5b7097cad40074c0d03b8fba115d9106de8f85c9ef3f2aa189afa63871da502e"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) connect$auto(0x3, 0x0, 0x54) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x3, 0x100020009, 0x88, 0x4d76, r5, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x8001) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 1m41.7879587s ago: executing program 35 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4044880) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video50\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = socket(0x23, 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r5, &(0x7f0000000300)='.o\xd3\xa49.\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\x01\xff\xff\xffp\x0e\xd4C\xdc\x84\v\xafz\xfd\r\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x9) ioctl$auto(r4, 0x89a2, 0x8) (async) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SAE_PASSWORD={0x4b, 0x115, "7a714108b1fe51d05a4dfcb5de5255d46dc8ac47389b6ce5c2d9886eecda153797d0f943ade93d767459ce5be26e2f29e776853b45160a9e04db69b464855b22c19cc13254aee7"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfea}]}, 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async, rerun: 32) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async, rerun: 32) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400400, 0x71, 0x12}, 0x18) utimensat$auto(r6, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0xc000000000000}, 0x180) (async) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0xa0102, 0x0) ioctl$auto_IOC_PR_RELEASE(r7, 0x401070ca, 0x0) (async) sendfile$auto(r7, r2, &(0x7f0000000040)=0x5, 0xdc8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) pkey_free$auto(0x6) (async) close_range$auto(0x2, 0xa, 0x0) 1m24.076299486s ago: executing program 7 (id=793): unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xa3d9) mmap$auto(0x0, 0xfffffffffffffff5, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) ioctl$auto_FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x7) r1 = socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(r1, 0x0, 0x43, 0x0, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x3, 0xffffffffffffffff, {0x400, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x5, 0xff, 0x10000, 0x100000001, 0x7fff}) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) ioctl$auto_FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000080)="252bf8abe8") openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer2\x00', 0x82, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/uprobe_events\x00', 0x204042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, &(0x7f0000000240)="706f3aa0cc7c2ceda8d50bfc94be9fe6c22ffaf8303a", 0x16) socket(0x2, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x36}}, 0x6a) 1m22.543152027s ago: executing program 7 (id=796): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000100), 0x1ffffffff}, 0x6, 0x0) read$auto(r0, 0x0, 0x80) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)='\n') mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r2, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(r2, 0x0, 0x8001, 0x100, 0x0, 0xfffffffffffffffd) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b3e", 0x4) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(r3, 0x0, 0xda74) socket(0x15, 0x2, 0x1a6) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) shutdown$auto(0x200000003, 0x2) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0x24044034) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) 1m21.347186712s ago: executing program 7 (id=798): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon36\x00', 0x4082, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) (fail_nth: 1) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 1m20.377705625s ago: executing program 7 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000040)={0x1138, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xc}, @NL80211_ATTR_CSA_IES={0x1109, 0xb9, 0x0, 0x1, [@generic="adabae1943586853206f4633620675e195311059cd0926a61f11eff3ecd2ce2ee7fa51d0d34d0893c1ebdba49414e7e471e1612180a98dd396268ace3982a4ce6b3fe04469fd65da949d732b4fbe45a803ff49fabde70cf3a2d67aee0da893773b64f3846260142e5bdc7c4d03049b465275d5fcd36b525211c6711ce0a97d65fd0fbf5a53cf", @generic="3685a14056d5de9bea23486faf1eb815f5b1ba684d26252807bec4452aabcf6a4ffa368ccd7dc4692e567af96b6f6e2e02f33bfb66ff8076a1dfbbbb2dd05d46eb615e48c6d7f9", @generic="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", @nested={0x37, 0x68, 0x0, 0x1, [@generic="910c8c6d67eaec6e46b08c83295a3b41b027361a4fd39e4e256a0034afca7a0ea033", @nested={0x4, 0x11e}, @nested={0x4, 0xd5}, @generic="99cc221cd1904b044b"]}]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1138}}, 0x0) r1 = socketpair$auto(0x100, 0xad2, 0x9, &(0x7f0000001200)=0x8) readv$auto(r0, &(0x7f0000001280)={&(0x7f0000001240)="6fefee9e361a516c82e2af1da4279f1ff2a678fd4327f05515", 0x2}, 0x1) r2 = open(&(0x7f00000012c0)='./file0\x00', 0x220000, 0xa) r3 = getpgid$auto(0xffffffffffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001600)={0x4001000, &(0x7f0000001300), &(0x7f0000001340)=0x0, &(0x7f0000001380), {0x3}, &(0x7f00000013c0)=""/252, 0xfc, &(0x7f00000014c0)=""/159, &(0x7f0000001580)=[r3, r3, r3, r3, r3], 0x5, {r4}}, 0x58) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000016c0), r2) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000004640)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004600)={&(0x7f0000001700)={0x2ef8, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_PMKID={0x62, 0x55, "bbcec02700bf2be46f82ac1fd663097cd6f3e59256781da184f5aaa939d480cbc3a56bb12e2d3b74d8d24867c62d5911904b16fdbd44b36cadec456b01fecd94e5dfb2c0b4af65ce644fdc7c62459f1223bffb4532bdc22060f8a125e459"}, @NL80211_ATTR_TID_CONFIG={0x12d4, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x81}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xc}, @NL80211_TXRATE_GI={0x5, 0x4, 0x92}, @NL80211_TXRATE_LEGACY={0x21, 0x1, "977113bf4819d82040799bab827f32613222a9e3475de60748d07638b2"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, "1c0a51769354ab71"}, @NL80211_TXRATE_HT={0x23, 0x2, "746d6dc0a74eb0ae6db507679ad9338606cb25f984f21fc4e0088ef33c5b36"}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_TXRATE_VHT={0xde, 0x3, "b8d6800ba0d79f25b22f9cedf46ebc81bbd4b95440baced14fb954beceb67bedbb1a4635ea1352fce666b511f688fc29c3970944abf5efbb2d688dc329b4a71ed4ac36f811e639f35c8df511a800706afbe9306cf4ef4033a00988df8ac736d53b126e7f24d6b065bc2e98173ebb6a9d00c44fbe70cad30efdc27bbc29713be04b97fd32505b846a268d5e10b9753f4d7f4d79c8354bcb21b112092d71d70ab09cd598bce7cc12aefed9ad5783336c85679abfd87b5ab09070df62c07609e39bd3d2dca1153f76f4402c3e2f442a20ba9908aa6363f98d160ada"}, @NL80211_TXRATE_HT={0x1f, 0x2, "c04c11f6df26b18e77e8b41487a6bf6720c57051f2bfa4c1d99f67"}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xc}]}, {0x10a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x57}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1050, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, "e455ab164f3e0cf977a6850121c20704641d7fef98abdfc7c2f6962b5b5a46d96cd29cf182dc2e7a5cb765f4ef8db33c702bd5265620671dac8c"}, @NL80211_TXRATE_VHT={0x1004, 0x3, "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"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xb7}]}]}]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1b88, 0x131, 0x0, 0x1, [@NL80211_ATTR_PEER_MEASUREMENTS={0x1b7c, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1648, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xfb, 0x1, "b4c8f79932aaae1db8d9c482e232c5ec51475d346a4334542908f58f172b100894eddedc5fb47af22dfe2287dc799947c861c33c7a61feafbb79177e25053567d326ccbcf8472a79f1a26d7b74fd1630ce5f2118188398424eb08c9778099680db074a3ae0746916ba44c96e3df98c03a3a09bd8e7551c252236fecac3a02055018e8c6516980598f84ded2569e271cc9774ea4f355da6d80d7c8ff9caa068571398170904de9423b235339e743a4080fa7fefd5e826f80458ddd11b9eef1e6bf542cce2b67539211c9935a0e1f6bb75a9a05c4c4df62ff17253f1b85184ac184989acb33f9a8eaef8bc11cd2995250f6ddddb2cf3f657"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1450, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x12}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xbc1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x82}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffbd0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x72d1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x60}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x43}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xef}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe147}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x42}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "a9e9ecaf7e0f166a5bfac00db44c79271c1023f817732e321324c027b4ead2ab6b03752254b408e241831a24694920e138de4ca9d048bb4dd8521dcdb01d3b52c84b7d877484f13f53549bbe6dafebdf27b9f23d8a81821b039b155eb12b127b6900bcde7c28957131cd46c9c1cd1d7560923e9b33f062cb781b1f0c05623031c9"}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xbd, 0x1, "33cf910037aa156d17236b67bdee53abf988bf8b09e6e416d975605738ec8202aac7c64c21c8b472f3f17613e5bfda2244004f31957d4183ec8141a189a8d312b4f82155a41efd30a5d6dd212addfb73ce0c6933b62018363fa11609dff49466d4037b1dd6eea47e745aad6e3c837c5338860cf6658bdcc956f84c81cc5d2fe5eae535d9930787f94b3457cf1d1f832f7b7889a8ae53a099f94dc9725f12544da7395d208e9271a8ef56732bfcb49702568c03b8d2e214715f"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x530, 0x5, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa7, 0x1, "272e9c137bb96847b9327a7c01880ce77512a360593c2adfc6bcd80a0f5dbd6ba914cbb74afabcfdfbd486bb60ddc33dd5177026d9af5ccc524f2aecdd7571f453c8fda75aaec453a746eb4fe6b0018a737e5885ef5297a0ed03fb2fdf6ede72e076fbda530095315db13eb785e1efc64f481720c9325e3f23768416eb02166c7b118a9b41b2899fbf982253b1ed987162366bb3d3d040de48d920229b7bf678ffd5dc"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x99}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2e, 0x1, "c6bb6431f556be4f0861c220a0afad09ea4f1db2b8cbff176f9a4b410010cf1d89c35ef567c01d987e3a"}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x6c, 0x1, "7d9855cd4d87889a5fd5e4d0053c6249550330fe30a673c8dabe80487cb7eefaa6c45afb61888299ff6d5b43e275827277046bc02e7f1ff70aa6a251ce7fae7d03afcd8d84a7a80cb61d2c6770af68254a4102fc842f023645f601dd58939d0920da935e869cdaf5"}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x45, 0x1, "06ed6738bd308c52ade42021207d42c0fb90e22f06d2a1bb405efd541c9635d7686f71ec1de63c360c9909d76cc613606225f84ca6b53f47d33badd8828ac590cd"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x55, 0x1, "85fd49ba1a84f5c5d4d102c997e65f4dcab0468f1ec093db63c7e7b74b6de009c6e782c1c28f9496772e4664845cf444ab8d09e9ac25396d47e098fa7827efc249388c2e0af654ae2c439faee271414cfe"}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x44}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xbf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xbb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9d, 0x1, "fe5e0601c135a9bbf7719d8c92c5e0a2ee283aeaa6604573179168bbfe495e4ce57491a3f1e83385e1810068ab415093bc5490df8bbf00b5262bf780a66c43ab65ad6eb5534dbf3871775ed38a86b88a16ec82a798592373bf6e5e1f4ae5db1e2529c6b7616ba05d44e835d0e121f6ca299d00276a3e6ce384efb9867918cc37572a5e2ab30182ae6c3778d5fe082b7808ee06c863cb846509"}]}]}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x32b}]}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x81}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xb}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x10}]}, 0x2ef8}, 0x1, 0x0, 0x0, 0x48000}, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r2, 0x8, &(0x7f0000004680)='nl80211\x00', &(0x7f00000046c0)="106265d04abd", 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', &(0x7f0000004780)={0x585001, 0x100, 0x5}, 0x18) linkat$auto(r1, &(0x7f0000004700)='./file0\x00', r7, &(0x7f00000047c0)='./file0\x00', 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000004840), r1) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r8, &(0x7f0000004a80)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004880)={0x19c, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x188, 0x3, 0x0, 0x1, [@generic="ef035ede54dfac64b515fb0eb7b05e6263d79a385cf1f95226d5c2f77f872f4463c31805a82fa9db2cb3f070d9d1fed6bcf7f086bb5bf216e9e2433fd500ee5027162c996bb87facf04005d1627fdb6331e4a8d074f69323f2cf96126562a72466e26c0626da1c1334a0da7228c66906001d0f3459caf0d0d47755669f6efc79fe23ce75c296a3c413ea7b6dd7581a24634e5efa14b6203ad0b033e3956e6067890300cdc8cb5b3cfa8bb9b2707b75c1ff1a18574001aae50ca229cf2292b231a02923337e6b7384412e45ea435d0cdd518687d8e3cb4192489aed52d2e6b521f633f8097b017124d96a3314", @nested={0x98, 0xa9, 0x0, 0x1, [@typed={0x87, 0xa6, 0x0, 0x0, @binary="20eca34d46222fadaaa4372bcb1b01eca5298ad6d58618a8617ba87c6c04ac229b481197307b800bb0ebae7a26208967d7828663c7798eb74ad8193691326977193cd8bb8b3c130cb40ce040fd6b2dbd0a9b1b52f13297782898302f8c33dce6df50df4849f49c4f6bd885192dc673a9cbec9946ded6a482a21c4666e6a8b50dbf63cc"}, @typed={0x8, 0x119, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xd3}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r10 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x5020) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000004b00), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000005f00)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000004b40)={0x1354, r11, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x12bd, 0x75, 0x0, 0x1, [@nested={0x122e, 0x14f, 0x0, 0x1, [@typed={0x4, 0xc1}, @nested={0x4, 0x6c}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@multicast1}, @generic="7abdf0f52843c4f61e2ef154b26ad97b0450e920f5f2a74e2ea21d75e1cd7499661a4fa9e854fbf04ff77082e95a301ce9effbfe56e8ac74364fe08eef96b38018acd1419c1b711162570d48712936c1d095c8f0ba02577212f61764bc64adfd451e28da0654ff315767ab3453f89aee1f16172acfef49a9075154a7c4b483f2a98db489e18adcc331b491eb8ad753584d9b96d6156228a6c4b2c4bf12976075a8375445bdb83e043c8592a607c6a2c9a9facd34498fc0657f", @generic="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", @generic="3b1651d1a2316a086b3233b7691a76a5eab9d4383abcbb872bc395c40467c8332715d73d2a711c2ebb035bec2aa4c461572f84ee298ba697440df983841f63d6a8cf05ec24159c4aec4fd67e0d4cf2905d72ef13ba9117c26323e38d4421e852e751976dc2749fe65e8b9de0a6002d0f4e3ae1edfb85fc209d47465da80ddd12f557cf7334195c155e619329118febc9e7d946f625a72c49f06a87d83de7c93a106da1476ca7497bd8f72290e79837d983ea5d39d1506f0fff38190056b0578674d373190261f4636fcc667da88620e075277e610efafc68f8a0d87157a8da162ad7ff64ce662c1b4ea620e5414b", @generic="8ddf2dab111b6adbeb05bf32ed30240895f8fc70aceb63306c7dab10112ff6646b4c196ced6910a138d7c2b06e3f3edbb18f3a96a0e35e45e654be4c0fdfe2edc8161b3ef92c25e0f6a51cf06c4ac1bff37904be07bbe5f78b5908af4c9300d9b9ce03e65de0ad38e5ad1b", @nested={0x4, 0xda}, @nested={0x4, 0x13d}]}, @generic="1593b11031f9c69173e1f1d35bc144a01acb2c6987f6be2aad2416252f67054ce2e796ac4f04931c3c40cc9a422cb3361170dcd22cfb34fd9c2601d566eb4c8f3ea9a735efd51941ad3c9135ffc6078c32280bd38d58d73b59166fbc70f86ba130e045f46e5f5cbf6e90d231c8ca2ca9d1734ebba021fd55343c6f8acfb47094b30b6bdd1471ddf539", @generic]}, @NL80211_ATTR_KEY_DATA={0x17, 0x7, "e3819859c01660445ceeaf6bdeb54b60be88ce"}, @NL80211_ATTR_MAC={0x5c, 0x6, "9bfb944f501d932a853214c031c25765f1eb96d775d3f61ccb0a6d8bf0879c0aabe6d57bb6550e343cd50d245b0f575ccd100d0be399ac451a6f655f3bce172b8b703450664bdf6b9d1635d673b0298bf1621b3fc66f0fc5"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]}, 0x1354}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) write$auto(r2, &(0x7f0000005f40)='\x00', 0xfffffffffffffffb) r12 = prctl$auto_PR_SET_MM_ENV_START(0xa56a, 0xa, r5, 0x3, 0x2) mprotect$auto(0x9, 0x6, 0x7) r13 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000005fc0), r10) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r12, &(0x7f0000006100)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000060c0)={&(0x7f0000006000)={0xa0, r13, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@CIFS_GENL_ATTR_SWN_IP={0x84, 0x4, @l2tp6={0xa, 0x0, 0x1, @private2, 0x5}}, @CIFS_GENL_ATTR_SWN_REGISTRATION_ID={0x8, 0x1, 0x400}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4880) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000006140)={'pimreg1\x00', 0x0}) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006180)=@bpf_attr_3={0x8000, 0x6, 0x7fffffffffffffff, 0x6, 0x8001, 0x3, 0x9, 0x7c, 0x1, "0c5663836f455ed66e95f4063c94c3ae", r14, 0x3, r7, 0x8, 0x4, 0x5, 0x9, 0x2, 0x1, 0x5cc, @attach_prog_fd=r1, 0x15ca, 0x1, 0x1ff, 0x6, 0x7, r1, r8}, 0x8) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0xffffffffffffffff, r15, 0xe, 0x3) setsockopt$auto_SO_BSDCOMPAT(r12, 0x8, 0xe, &(0x7f0000006240)='nl80211\x00', 0x8) futimesat$auto(r10, &(0x7f0000006280)='./file0\x00', &(0x7f00000062c0)={0x7, 0x7c}) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m19.412548019s ago: executing program 7 (id=803): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/pages_to_scan\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYBLOB='&'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto_state_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x1800, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x420009, 0xe0, 0x13, 0x401, 0x8000) r2 = socket(0xa, 0x1, 0x84) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) getsockopt$auto(r2, 0x0, 0x481, 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setpriority$auto_PRIO_USER(0x2, 0x0, 0x5) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendfile$auto(0x3, r3, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) 1m16.634070142s ago: executing program 7 (id=806): setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c40), 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m4.914931872s ago: executing program 1 (id=832): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x6, 0x5c}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000080)="8905d701d6", 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x7, 0x100) 1m4.629702083s ago: executing program 1 (id=833): syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/0/effective_affinity_list\x00', 0x18000, 0x0) pread64$auto(r0, 0x0, 0x21, 0xe2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x29, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="85f65a9a"]}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$auto_OVS_METER_CMD_FEATURES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd2d, 0x400, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0xe}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0xffffffff, 0x9}}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @u32=0x8}, @typed={0xc, 0x157, 0x0, 0x0, @u64=0xfff}]}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x40}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x815) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) mmap$auto(0x0, 0x35, 0xdf, 0xebd, 0x401, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x30d042, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4068aea3, &(0x7f0000000080)={0x79}) fchmod$auto(r3, 0x7439) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/raw\x00', 0x60080, 0x0) socket(0x2, 0x3, 0x100) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m1.521534077s ago: executing program 36 (id=806): setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c40), 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m0.558585261s ago: executing program 1 (id=844): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x200000, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000080)={0x481, 0x2, 0x9, 0x60000000000, 0x4, 0x0}) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, r1) 59.654639306s ago: executing program 1 (id=846): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r2 = socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x845, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) fgetxattr$auto(r0, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', &(0x7f00000002c0)="00040ab13436735bdfdd177fdb547254ec001fc6ed98b08be3209651636844de98fe5c37b3880828a6646f14f419a04f9de48cc60007", 0x0) r4 = socket(0x1d, 0x3, 0x1) r5 = getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r5) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6}, @CTRL_ATTR_OP={0x8, 0xa, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) 56.785884629s ago: executing program 1 (id=854): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x8001) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0xe0800, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media10\x00', 0x70001, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) pwrite64$auto(r1, &(0x7f00000002c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x300000, 0x8) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd) ioctl$auto(r0, 0xc0205648, r0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000240)='nfsd\x00', 0x10400, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mkdir$auto(&(0x7f0000000140)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0xc) 56.29046453s ago: executing program 1 (id=855): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7d, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) (async) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x40000086) (async) unshare$auto(0x40000086) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22342, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22342, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0) (async) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0) write$auto(r2, &(0x7f0000000400), 0x100000a3d9) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r3, &(0x7f00000003c0)=0x4, 0x0, 0x0) (async) wait4$auto(r3, &(0x7f00000003c0)=0x4, 0x0, 0x0) ptrace$auto_PTRACE_SETFPREGS(0xf, r3, 0x137, 0x2) (async) ptrace$auto_PTRACE_SETFPREGS(0xf, r3, 0x137, 0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0x80c0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0x80c0) setpriority$auto(0x2, 0x0, 0x80000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xec8, 0xdf, 0x100000000009b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0003, 0x15) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/syz_tun\x00', 0x1cb422, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) 41.143266756s ago: executing program 37 (id=855): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7d, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) (async) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x40000086) (async) unshare$auto(0x40000086) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22342, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22342, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0) (async) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0) write$auto(r2, &(0x7f0000000400), 0x100000a3d9) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r3, &(0x7f00000003c0)=0x4, 0x0, 0x0) (async) wait4$auto(r3, &(0x7f00000003c0)=0x4, 0x0, 0x0) ptrace$auto_PTRACE_SETFPREGS(0xf, r3, 0x137, 0x2) (async) ptrace$auto_PTRACE_SETFPREGS(0xf, r3, 0x137, 0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0x80c0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0x80c0) setpriority$auto(0x2, 0x0, 0x80000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xec8, 0xdf, 0x100000000009b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0003, 0x15) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/syz_tun\x00', 0x1cb422, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) 23.112524338s ago: executing program 4 (id=908): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) accept4$auto(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none, 0x9}, 0x0, 0x243) ptrace$auto(0xc, 0x0, 0x0, 0x4053) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x20000084) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x20000084) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000040)={0x9f, 0x0, 0x1}}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x103241, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x0, 0x948b, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0xf08f, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x0, 0x948b, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0xf08f, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3da) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x7, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x2, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x0, 0xd, 0x1]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x7, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x2, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x0, 0xd, 0x1]}, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x2, 0x13) r3 = socket(0x10, 0x2, 0x4000008) close_range$auto(r3, 0x8, 0x0) (async) close_range$auto(r3, 0x8, 0x0) 21.698884173s ago: executing program 4 (id=911): fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8004) unshare$auto(0x40000080) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x40e00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x7c5f80, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x6, 0x9b73, 0xffffffffffffffff, 0x6) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x10040) 20.373448074s ago: executing program 4 (id=916): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x11, 0x80003, 0x300) r2 = socket(0xa, 0x3, 0x6) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r2, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) r4 = open(0x0, 0x261c2, 0x84) sched_getattr$auto(r3, &(0x7f0000000100)={0x3, 0x3fe, 0x3, 0x3, 0x2b, 0xfff, 0x7, 0x7fffffffffffffff, 0xcd, 0xa1}, 0x3112, 0x7) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) 20.002940154s ago: executing program 4 (id=917): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8200) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 19.389164968s ago: executing program 4 (id=918): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) write$auto(r1, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e00fee1", @ANYRES16=0x0, @ANYBLOB="90022dbd7000fedbdf2501000000080001000200000004000500080009"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fd, 0x0) 16.835841585s ago: executing program 4 (id=923): unshare$auto(0x40000080) r0 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1e8, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0x1d3, 0x13, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x4, 0xdd}, @generic='G\\g\x00']}, @nested={0x80, 0xef, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @u32=0xbd7}, @generic="701f9b88366767806dbf0739885035604b97bfb4a83079f90ef4a569153ad671ed1521bfbe66b7d85527cd112133c52cbd9f29e622737811c9a185c59c4c81c50990b351ed3c335721c22ff56e928d8b5db6e84f8791763252cd85f23eec9c407d8222b3256bcf74dbc7ea5637e0c6bd72a21538"]}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x8, 0x0, 0x0, @uid}, @typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x9, 0x0, 0x0, @pid}, @generic="fb85582762d4505514e15547850f73e4265c7cf139bfcaa027ef2a7ea8cb3341375ab67093ec3dadbbee843ba8393af5983ff16bd1596b7e50428a1621c4a1d3a7cf3e1369e4aff81fd25b549cff440763efd81e4ece2452a1077230d9740555bb362330d8fde54633da7cf714bd1d6b6e99579c2265f0dbc2a1f5a2c51c8f57c2c43a5740d17de4415af7048f179d8766408720b06ca0a4", @typed={0x8, 0xf8, 0x0, 0x0, @uid}, @generic="9db5fd85dbe95cefe36ace4c5ec5cd84b7e8e99cb27568c257ea8a70312c7d06b9a3e2c251d27d43dc257ca34cf074b3c7294ebd6fc44c70f028ff81b37053b808869429914f7133e909086e5a2a06b844d9939a0c2bce328cf1e04274c063"]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="04000000", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) prctl$auto(0x1, 0x8, r6, 0x3a, 0x1) 8.078677835s ago: executing program 6 (id=939): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(r1, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x37, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfecc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)) sendfile$auto(r3, r2, 0x0, 0x7) socket(0xa, 0x5, 0x0) fcntl$auto_F_SETOWN_EX(r2, 0xf, 0x9) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0x5, 0x8) io_uring_setup$auto(0xf, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0x2) 7.582631559s ago: executing program 8 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1e, 0x0, 0x0) r2 = epoll_create1$auto(0x8) mmap$auto(0x240, 0x2, 0x3, 0x8000000000000011, r2, 0x2) 6.383099959s ago: executing program 6 (id=942): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x80, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x0, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) nanosleep$auto(&(0x7f00000001c0)={0xfffffffffffffffe, 0x5}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x6, 0x5c}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000080)="8905d701d6", 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x7, 0x100) 6.066204136s ago: executing program 6 (id=943): unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x14) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, 0x0, 0x4) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) lseek$auto(0x3, 0x20000, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xb, 0x0, 0x1d, 0xb}, 0x800009}, 0x203, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x841) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10003, 0x1ff, 0x5185}, 0x3ff) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$auto_TIOCMSET2(r2, 0x5418, &(0x7f00000001c0)="6ab1") 5.722962723s ago: executing program 8 (id=944): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64) r0 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) (rerun: 64) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, 0x0) (async) ioctl$auto_BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000040)={0x7ff, "e79426712a81cef6d50b4a72985f12b5", 0xea3, 0x1000, "e7d516bd396c01341e1497f6a78c67ec", '\x00', "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"}) r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x306, 0x8000040006) (async) ptrace$auto_PTRACE_LISTEN(0x4208, r2, 0x3c, 0x8) (async) ioctl$auto_BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 4.466692184s ago: executing program 8 (id=946): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) pivot_root$auto(&(0x7f0000000080)='..M\x11ho\xbd\xc4\xcbS\xd8\xef\xeb\x12H\xaa\x8c\x00\xce\xccCO\xfe\x05\x9b+\x16\x03\xc1a@\x178\xe5\xd1<\xe6\x90j\xda\x93\x04\x15\x80i\x1e\xdc\xd5\xc0/\xaf\xd2Q\x04\xfc\x18\bP\xa1\xa0.\x9c\xe4f%\x8a\x81q~\x06X\xaa\xd6;\xbe\xec\x95\x15`1-Sw\xba\xd8\tb\xd9\x9d\xf61B\x90\x1b\xcb\xda\xbf\xce\xaf\t\x041)V\r\xcc\xf5\xeb\xda', &(0x7f0000000100)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3\xca\xffQ\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) bpf$auto(0x8000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="012527bd7000fb0c0eec4c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r4, 0x7eff) r5 = socketpair$auto(0x4, 0x1000, 0xa14a, &(0x7f0000000040)=0x4) close_range$auto(r5, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) mount$auto(&(0x7f0000000080)='wlan1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='*(^\'+\\(/\x00', 0xc, &(0x7f0000000180)="9279639d6201e163e873b9016aa5040be532c5a72220c430a4e8244b8fbffeb8db31e5e990baca007d17946b8e1d7c65ec2ff46313baaa4fcf7d70d3a80b9a9466901444bc37385c454091506eff5c8269cbe7c7a399fb15aef6dec4d32c9b4ac963b8d7643a1280e9e85d4fcadf6ef3") getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) unshare$auto(0x1) 4.201080535s ago: executing program 9 (id=947): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) (async) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/7:8/read_ahead_kb\x00', 0x82942, 0x0) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x6) socket(0x23, 0x5, 0x0) (async) r0 = socket(0x23, 0x5, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250200000008002700040000000a001800aa"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) (async) r1 = bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x658a, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x4008}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000340)=@link_update={r1, @new_prog_fd=r4, 0x4, @old_map_fd}, 0x1ff) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x2000000, 0x9}, 0x2}, 0x3, 0x0) (async) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x2000000, 0x9}, 0x2}, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="df36b153", @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaa", @ANYRES32=r3, @ANYBLOB="0600060005000000"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 3.872033329s ago: executing program 9 (id=948): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(r0, 0x0) ioctl$auto(r0, 0x4b66, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 3.619941625s ago: executing program 9 (id=949): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop11\x00', 0x0, 0x0) mmap$auto(0xce80, 0x2000001, 0x4000000000de, 0x10, r0, 0x1) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x10, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r3, 0x0, 0x18) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002c, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0x40) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) 3.427083321s ago: executing program 6 (id=950): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readv$auto(0x3, 0x0, 0x1) 3.311842317s ago: executing program 8 (id=951): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) fcntl$auto_F_GETOWN(r0, 0x9, 0x1) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000000c0)=@query={@target_fd=r1, 0xffc, 0x83, 0x80, 0x6, @prog_cnt=0x8, 0x0, 0x8000000000000000, 0x8, 0xfffffffffffeffff, 0x100}, 0x5) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x82081, 0x0) write$auto(r3, 0x0, 0x808010) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='\'#}#\'^\x00', &(0x7f0000000040)="edd5326a25bafbada5257480332aa5daf940f8e589724a848c82d1a937ba13c7f7f703e6a410b7674b59b9cb529979b6", 0x0) io_uring_setup$auto(0x6, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CQM(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000001300)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "308ba5e870bed0a43dce27b2bbdde3385da8cb73934764dbb462b48c5ea875cdbaaee06f"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x48884) socket(0xa, 0x2, 0x0) 2.869238567s ago: executing program 8 (id=952): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) read$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f0000001340)=""/48, 0x30) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_hda_intel/parameters/align_buffer_size\x00', 0xc0481, 0x0) write$auto(r2, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x6d, 0x2, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) copy_file_range$auto(0xffffffffffffffff, 0x0, r5, 0x0, 0xffffffffffffffff, 0x8) futimesat$auto(0xffffffffffffffff, &(0x7f0000001240)=':,\x00', &(0x7f0000001280)={0xa, 0x1000}) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/numa/demotion_enabled\x00', 0x40000, 0x0) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)=@link_detach={r6}, 0x5) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r7, 0x0, 0x7) 2.708678573s ago: executing program 9 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) set_mempolicy$auto(0xe, &(0x7f0000000000)=0x8, 0x9) 2.48488839s ago: executing program 6 (id=954): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRES32=r0, @ANYBLOB="aa98caec5932e41b5a7c8b6d7e226c91b5abe9280a92c03d7fc689390697bfac61429fc9243ee4d20e9c169b3fb490895d63c2964119ad1dc2dc038811096955ef0a9a78d3baf0fc17607880865e59dec466b623f14c1b5cac2e77a0e5de04d20a4b29e055aeaebb372caa4f091e608890dbd6f9521a6de8a73933fbafbc475625af788bad7bbfe3dbbdf20f523d183caf40889ae254021ef9154a8b02c5703477e3fe8e4354ed0d8cf407fff0baccaceec2247c", @ANYRES32=r3, @ANYBLOB="0c0002800800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) socket(0x2, 0x3, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183142, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x6, 0x81}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) ioctl$auto_UI_SET_EVBIT(r5, 0x40045564, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp6\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0xffffffdfffffffff, 0xe986, 0x3, 0xeb1, r6, 0x8000) swapon$auto(0x0, 0x200001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0xe2, 0x9b72, 0x2, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x100, 0x0) 2.394607993s ago: executing program 9 (id=955): mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/take_snapshot\x00', 0xa0002, 0x0) socket(0x14, 0x5, 0x0) fsmount$auto(r1, 0x7fffffff, 0x5) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) statmount$auto(0x0, 0x0, 0x7, 0x281) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x155) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x100, 0x80000000}, 0x4) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) readv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000040)="42179114990331142a2dd87cb1e4085f7eeedef060f99650d3bd03195fd3e27baa4d2679a4c090411e7ab728057d29d33ee1f9eb6d1926b8d1de457a9d03e125663ab42dd6b9fad4437399a2d58b41", 0x4}, 0x4) r4 = io_uring_setup$auto(0x3ff, 0x0) r5 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) r6 = prctl$auto_SIGCONT(0x7, 0x12, 0x0, 0x5, 0x1) fcntl$auto_F_OFD_SETLKW(r6, 0x26, 0x0) read$auto_vga_arb_device_fops_vgaarb(r5, 0x0, 0x0) mmap$auto(0x0, 0x800400b, 0x2000000329, 0x2000000010012, r4, 0x8000) ioctl$auto(0x3, 0x8983, 0x38) 1.6284547s ago: executing program 38 (id=923): unshare$auto(0x40000080) r0 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1e8, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0x1d3, 0x13, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x4, 0xdd}, @generic='G\\g\x00']}, @nested={0x80, 0xef, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @u32=0xbd7}, @generic="701f9b88366767806dbf0739885035604b97bfb4a83079f90ef4a569153ad671ed1521bfbe66b7d85527cd112133c52cbd9f29e622737811c9a185c59c4c81c50990b351ed3c335721c22ff56e928d8b5db6e84f8791763252cd85f23eec9c407d8222b3256bcf74dbc7ea5637e0c6bd72a21538"]}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x8, 0x0, 0x0, @uid}, @typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x9, 0x0, 0x0, @pid}, @generic="fb85582762d4505514e15547850f73e4265c7cf139bfcaa027ef2a7ea8cb3341375ab67093ec3dadbbee843ba8393af5983ff16bd1596b7e50428a1621c4a1d3a7cf3e1369e4aff81fd25b549cff440763efd81e4ece2452a1077230d9740555bb362330d8fde54633da7cf714bd1d6b6e99579c2265f0dbc2a1f5a2c51c8f57c2c43a5740d17de4415af7048f179d8766408720b06ca0a4", @typed={0x8, 0xf8, 0x0, 0x0, @uid}, @generic="9db5fd85dbe95cefe36ace4c5ec5cd84b7e8e99cb27568c257ea8a70312c7d06b9a3e2c251d27d43dc257ca34cf074b3c7294ebd6fc44c70f028ff81b37053b808869429914f7133e909086e5a2a06b844d9939a0c2bce328cf1e04274c063"]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="04000000", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) prctl$auto(0x1, 0x8, r6, 0x3a, 0x1) 1.609603767s ago: executing program 9 (id=957): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x40) fanotify_init$auto(0x65, 0x2) socket$nl_generic(0x10, 0x3, 0x10) capget$auto(0x0, 0xfffffffffffffffe) io_uring_setup$auto(0x5210, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8001af85, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram4/trace/act_mask\x00', 0x98f80, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}, 0x8000003) write$auto(0x3, 0x0, 0x5c8) mlock$auto(0xfff, 0xde7f) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) futex$auto(0x0, 0x1c37, 0x20088, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(0x0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xe, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x13b, 0x4, 0x4, 0xfffffffffffffffc, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigtimedwait$auto(&(0x7f00000000c0), &(0x7f0000000100)={@_si_pad}, &(0x7f0000000180)={0x6286, 0xaf}, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1.378621742s ago: executing program 8 (id=958): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) close$auto(r1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={@raw=0x9fd, 0x9, &(0x7f00000001c0)=0xfffffffffffffffa, 0x4, 0x2, 0x6, "06652b19bf85626a795114bb619c748271ad5cef9b79a37ee0d6f56e"}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) getdents$auto(r3, 0x0, 0x400018) sendfile$auto(r0, 0x3, 0x0, 0xffffffff) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 0s ago: executing program 6 (id=959): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3a, 0x400000000000001, 0x0, 0x1, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x8600, 0x8, 0x7, 0x0, 0x7f1, 0x8, 0x8, {0x10003ff, 0x7}, 0xfffffffffffffffc, 0xa8, 0x100000001, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000400007, 0x1, 0x90, 0xfffffff5}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x6982c2, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) write$auto(r1, 0x0, 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="00020000", @ANYRES16=r5, @ANYBLOB="010031bd7000fddbdf250c000000643e84a4e33e67fda61052c6cdf6cf31ea11f49d1381753ea391fb05215c0a51ceac265599640f2b84b292537f941f9fe5"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x103002, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) kernel console output (not intermixed with test programs): gine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.465627][ T6119] Call Trace: [ 107.465634][ T6119] [ 107.465641][ T6119] dump_stack_lvl+0x100/0x190 [ 107.465672][ T6119] should_fail_ex.cold+0x5/0xa [ 107.465693][ T6119] ? security_inode_init_security+0x113/0x370 [ 107.465715][ T6119] should_failslab+0xc2/0x120 [ 107.465733][ T6119] __kmalloc_noprof+0xe0/0x850 [ 107.465763][ T6119] security_inode_init_security+0x113/0x370 [ 107.465786][ T6119] ? __pfx_shmem_initxattrs+0x10/0x10 [ 107.465807][ T6119] ? __pfx_security_inode_init_security+0x10/0x10 [ 107.465832][ T6119] ? make_vfsgid+0xf1/0x140 [ 107.465858][ T6119] shmem_mknod+0x2bf/0x470 [ 107.465881][ T6119] ? __pfx_shmem_mknod+0x10/0x10 [ 107.465910][ T6119] vfs_create+0x301/0x6c0 [ 107.465937][ T6119] filename_mknodat+0x2de/0x7f0 [ 107.465958][ T6119] ? __pfx_filename_mknodat+0x10/0x10 [ 107.465976][ T6119] ? strncpy_from_user+0x19d/0x2d0 [ 107.466005][ T6119] ? do_getname+0x191/0x390 [ 107.466028][ T6119] __x64_sys_mknod+0x8f/0xc0 [ 107.466055][ T6119] do_syscall_64+0x106/0xf80 [ 107.466075][ T6119] ? clear_bhb_loop+0x40/0x90 [ 107.466098][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.466116][ T6119] RIP: 0033:0x7f245e79c629 [ 107.466132][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.466149][ T6119] RSP: 002b:00007f245f6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 107.466167][ T6119] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 107.466179][ T6119] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 107.466189][ T6119] RBP: 00007f245e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 107.466199][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.466209][ T6119] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 107.466233][ T6119] [ 108.314690][ T6132] random: crng reseeded on system resumption [ 110.607532][ T29] audit: type=1800 audit(4294967328.179:5): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.51" name="dbroot" dev="configfs" ino=9574 res=0 errno=0 [ 111.606191][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 112.883703][ T6166] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 113.149823][ T6192] input: f as /devices/virtual/input/input5 [ 114.392093][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.650502][ T6205] Invalid ELF header magic: != ELF [ 115.634416][ T6218] FAULT_INJECTION: forcing a failure. [ 115.634416][ T6218] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.647818][ T6218] CPU: 0 UID: 0 PID: 6218 Comm: syz.2.64 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.647848][ T6218] Tainted: [L]=SOFTLOCKUP [ 115.647855][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.647866][ T6218] Call Trace: [ 115.647871][ T6218] [ 115.647879][ T6218] dump_stack_lvl+0x100/0x190 [ 115.647909][ T6218] should_fail_ex.cold+0x5/0xa [ 115.647929][ T6218] get_futex_key+0x1d2/0x1620 [ 115.647954][ T6218] ? __pfx_get_futex_key+0x10/0x10 [ 115.647979][ T6218] ? find_held_lock+0x2b/0x80 [ 115.647996][ T6218] ? futex_unqueue+0x133/0x2c0 [ 115.648019][ T6218] ? futex_unqueue+0x133/0x2c0 [ 115.648049][ T6218] futex_wait_requeue_pi+0x1f5/0x870 [ 115.648087][ T6218] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 115.648118][ T6218] ? __pfx___futex_wait+0x10/0x10 [ 115.648144][ T6218] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 115.648162][ T6218] ? lockdep_hardirqs_on+0x78/0x100 [ 115.648200][ T6218] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.648240][ T6218] do_futex+0x24f/0x350 [ 115.648272][ T6218] ? __pfx_do_futex+0x10/0x10 [ 115.648301][ T6218] __x64_sys_futex+0x34f/0x4d0 [ 115.648325][ T6218] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 115.648343][ T6218] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.648376][ T6218] do_syscall_64+0x106/0xf80 [ 115.648395][ T6218] ? clear_bhb_loop+0x40/0x90 [ 115.648417][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.648437][ T6218] RIP: 0033:0x7f45b319c629 [ 115.648454][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.648470][ T6218] RSP: 002b:00007f45b3fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.648488][ T6218] RAX: ffffffffffffffda RBX: 00007f45b3415fa0 RCX: 00007f45b319c629 [ 115.648499][ T6218] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 115.648509][ T6218] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 00000000fffffffa [ 115.648520][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.648530][ T6218] R13: 00007f45b3416038 R14: 00007f45b3415fa0 R15: 00007ffef7ad4398 [ 115.648552][ T6218] [ 115.892523][ T6228] FAULT_INJECTION: forcing a failure. [ 115.892523][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 116.097542][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.0.62 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.097587][ T6228] Tainted: [L]=SOFTLOCKUP [ 116.097594][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.097605][ T6228] Call Trace: [ 116.097612][ T6228] [ 116.097619][ T6228] dump_stack_lvl+0x100/0x190 [ 116.097651][ T6228] should_fail_ex.cold+0x5/0xa [ 116.097671][ T6228] ? constrain_params_by_rules+0x175/0xcc0 [ 116.097690][ T6228] should_failslab+0xc2/0x120 [ 116.097707][ T6228] __kmalloc_noprof+0xe0/0x850 [ 116.097733][ T6228] ? lockdep_hardirqs_on+0x78/0x100 [ 116.097757][ T6228] constrain_params_by_rules+0x175/0xcc0 [ 116.097786][ T6228] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 116.097809][ T6228] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 116.097841][ T6228] snd_pcm_hw_refine+0x7e7/0xad0 [ 116.097864][ T6228] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 116.097886][ T6228] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 116.097908][ T6228] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 116.097937][ T6228] snd_pcm_hw_param_first+0x2b0/0x680 [ 116.097970][ T6228] ? trace_hw_mask_param+0x84/0x240 [ 116.097998][ T6228] snd_pcm_hw_params+0x496/0x1cb0 [ 116.098021][ T6228] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 116.098044][ T6228] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 116.098075][ T6228] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 116.098108][ T6228] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 116.098129][ T6228] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 116.098171][ T6228] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 116.098202][ T6228] ? __pfx___mutex_lock+0x10/0x10 [ 116.098237][ T6228] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 116.098267][ T6228] snd_pcm_oss_sync+0x265/0x840 [ 116.098304][ T6228] snd_pcm_oss_release+0x238/0x300 [ 116.098331][ T6228] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 116.098360][ T6228] __fput+0x3ff/0xb40 [ 116.098385][ T6228] task_work_run+0x150/0x240 [ 116.098411][ T6228] ? __pfx_task_work_run+0x10/0x10 [ 116.098444][ T6228] exit_to_user_mode_loop+0x100/0x4a0 [ 116.098477][ T6228] do_syscall_64+0x668/0xf80 [ 116.098496][ T6228] ? clear_bhb_loop+0x40/0x90 [ 116.098518][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.098537][ T6228] RIP: 0033:0x7f406c59c629 [ 116.098557][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.098573][ T6228] RSP: 002b:00007f406d423028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 116.098591][ T6228] RAX: 0000000000000000 RBX: 00007f406c816090 RCX: 00007f406c59c629 [ 116.098602][ T6228] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 116.098612][ T6228] RBP: 00007f406c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.098622][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.098632][ T6228] R13: 00007f406c816128 R14: 00007f406c816090 R15: 00007ffec823caa8 [ 116.098655][ T6228] [ 116.842147][ T5824] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 116.859313][ T6234] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.895250][ T6234] FAULT_INJECTION: forcing a failure. [ 116.895250][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 116.942321][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.3.66 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.942372][ T6234] Tainted: [L]=SOFTLOCKUP [ 116.942383][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.942400][ T6234] Call Trace: [ 116.942411][ T6234] [ 116.942422][ T6234] dump_stack_lvl+0x100/0x190 [ 116.942472][ T6234] should_fail_ex.cold+0x5/0xa [ 116.942508][ T6234] should_failslab+0xc2/0x120 [ 116.942538][ T6234] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 116.942579][ T6234] ? alloc_empty_file+0x55/0x1c0 [ 116.942615][ T6234] alloc_empty_file+0x55/0x1c0 [ 116.942643][ T6234] alloc_file_pseudo+0x13a/0x230 [ 116.942672][ T6234] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 116.942699][ T6234] ? alloc_fd+0x476/0x790 [ 116.942740][ T6234] sock_alloc_file+0x50/0x210 [ 116.942770][ T6234] __sys_socket+0x1c0/0x260 [ 116.942803][ T6234] ? __pfx___sys_socket+0x10/0x10 [ 116.942846][ T6234] __x64_sys_socket+0x72/0xb0 [ 116.942884][ T6234] ? lockdep_hardirqs_on+0x78/0x100 [ 116.942910][ T6234] do_syscall_64+0x106/0xf80 [ 116.942934][ T6234] ? clear_bhb_loop+0x40/0x90 [ 116.942962][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.942986][ T6234] RIP: 0033:0x7fdf4279c629 [ 116.943006][ T6234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.943036][ T6234] RSP: 002b:00007fdf43684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.943061][ T6234] RAX: ffffffffffffffda RBX: 00007fdf42a16090 RCX: 00007fdf4279c629 [ 116.943076][ T6234] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 116.943090][ T6234] RBP: 00007fdf42832b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.943104][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.943118][ T6234] R13: 00007fdf42a16128 R14: 00007fdf42a16090 R15: 00007fff3bcd20c8 [ 116.943150][ T6234] [ 117.515251][ T6232] smpboot: CPU 1 is now offline [ 117.729683][ T6229] Invalid ELF header magic: != ELF [ 118.348850][ T6243] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.408100][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 120.558169][ T6269] netlink: 302 bytes leftover after parsing attributes in process `syz.3.74'. [ 121.174676][ T6278] zswap: compressor not available [ 121.387212][ T6286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.430775][ T6286] __vm_enough_memory: pid: 6286, comm: syz.2.78, bytes: 4398046511104 not enough memory for the allocation [ 121.531887][ T6288] usb usb36: usbfs: process 6288 (syz.1.79) did not claim interface 0 before use [ 123.092176][ T6302] syz.2.82 (6302) used greatest stack depth: 19672 bytes left [ 124.484719][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 124.640895][ T6328] netlink: 'syz.2.85': attribute type 15 has an invalid length. [ 124.651765][ T5824] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 124.684595][ T6328] netlink: 'syz.2.85': attribute type 16 has an invalid length. [ 124.714863][ T6328] netlink: 194 bytes leftover after parsing attributes in process `syz.2.85'. [ 124.760683][ T6329] FAULT_INJECTION: forcing a failure. [ 124.760683][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 124.804113][ T6326] netlink: 302 bytes leftover after parsing attributes in process `syz.3.84'. [ 124.822495][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.2.85 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.822527][ T6329] Tainted: [L]=SOFTLOCKUP [ 124.822534][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.822544][ T6329] Call Trace: [ 124.822551][ T6329] [ 124.822558][ T6329] dump_stack_lvl+0x100/0x190 [ 124.822591][ T6329] should_fail_ex.cold+0x5/0xa [ 124.822612][ T6329] ? sk_prot_alloc+0x10b/0x2a0 [ 124.822634][ T6329] should_failslab+0xc2/0x120 [ 124.822652][ T6329] __kmalloc_noprof+0xe0/0x850 [ 124.822676][ T6329] ? security_inode_alloc+0xcf/0x2c0 [ 124.822706][ T6329] sk_prot_alloc+0x10b/0x2a0 [ 124.822732][ T6329] sk_alloc+0x36/0xe80 [ 124.822750][ T6329] __netlink_create+0x5e/0x2c0 [ 124.822770][ T6329] __netlink_kernel_create+0xed/0x750 [ 124.822794][ T6329] ? __pfx___netlink_kernel_create+0x10/0x10 [ 124.822824][ T6329] uevent_net_init+0xf8/0x330 [ 124.822850][ T6329] ? __pfx_uevent_net_init+0x10/0x10 [ 124.822876][ T6329] ? __pfx_uevent_net_rcv+0x10/0x10 [ 124.822902][ T6329] ? __kmalloc_noprof+0x320/0x850 [ 124.822936][ T6329] ? __pfx_uevent_net_init+0x10/0x10 [ 124.822960][ T6329] ops_init+0x1e2/0x5f0 [ 124.822984][ T6329] setup_net+0x118/0x3a0 [ 124.823006][ T6329] ? __pfx_setup_net+0x10/0x10 [ 124.823025][ T6329] ? lockdep_init_map_type+0x5c/0x250 [ 124.823058][ T6329] ? mutex_init_lockep+0x110/0x150 [ 124.823086][ T6329] copy_net_ns+0x46f/0x7c0 [ 124.823112][ T6329] create_new_namespaces+0x3ea/0xac0 [ 124.823136][ T6329] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 124.823158][ T6329] ksys_unshare+0x455/0xab0 [ 124.823183][ T6329] ? __pfx_ksys_unshare+0x10/0x10 [ 124.823215][ T6329] __x64_sys_unshare+0x31/0x40 [ 124.823237][ T6329] do_syscall_64+0x106/0xf80 [ 124.823255][ T6329] ? clear_bhb_loop+0x40/0x90 [ 124.823278][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.823296][ T6329] RIP: 0033:0x7f45b319c629 [ 124.823311][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.823327][ T6329] RSP: 002b:00007f45b3fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.823345][ T6329] RAX: ffffffffffffffda RBX: 00007f45b3416090 RCX: 00007f45b319c629 [ 124.823356][ T6329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 124.823366][ T6329] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.823376][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.823386][ T6329] R13: 00007f45b3416128 R14: 00007f45b3416090 R15: 00007ffef7ad4398 [ 124.823410][ T6329] [ 124.827137][ T6329] kobject_uevent: unable to create netlink socket! [ 126.883189][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 126.980068][ T6374] netlink: 302 bytes leftover after parsing attributes in process `syz.2.94'. [ 127.219374][ T6378] FAULT_INJECTION: forcing a failure. [ 127.219374][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 127.320715][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.2.95 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.320746][ T6378] Tainted: [L]=SOFTLOCKUP [ 127.320752][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.320763][ T6378] Call Trace: [ 127.320768][ T6378] [ 127.320776][ T6378] dump_stack_lvl+0x100/0x190 [ 127.320807][ T6378] should_fail_ex.cold+0x5/0xa [ 127.320828][ T6378] should_failslab+0xc2/0x120 [ 127.320846][ T6378] __kmalloc_cache_noprof+0x7a/0x6f0 [ 127.320868][ T6378] ? kvm_dev_ioctl+0xa8d/0x1a50 [ 127.320892][ T6378] kvm_dev_ioctl+0xa8d/0x1a50 [ 127.320916][ T6378] ? find_held_lock+0x2b/0x80 [ 127.320933][ T6378] ? __fget_files+0x215/0x3d0 [ 127.320960][ T6378] ? hook_file_ioctl_common+0x146/0x410 [ 127.320989][ T6378] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 127.321020][ T6378] ? __fget_files+0x21f/0x3d0 [ 127.321051][ T6378] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 127.321072][ T6378] __x64_sys_ioctl+0x18e/0x210 [ 127.321099][ T6378] do_syscall_64+0x106/0xf80 [ 127.321119][ T6378] ? clear_bhb_loop+0x40/0x90 [ 127.321142][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.321160][ T6378] RIP: 0033:0x7f45b319c629 [ 127.321175][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.321193][ T6378] RSP: 002b:00007f45b3fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.321216][ T6378] RAX: ffffffffffffffda RBX: 00007f45b3416090 RCX: 00007f45b319c629 [ 127.321228][ T6378] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 127.321238][ T6378] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.321248][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.321258][ T6378] R13: 00007f45b3416128 R14: 00007f45b3416090 R15: 00007ffef7ad4398 [ 127.321281][ T6378] [ 128.229366][ T6392] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 128.506811][ T6396] nvme_fcloop: unknown parameter or missing value '7' [ 130.285351][ T6433] mmap: syz.2.105 (6433) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.742749][ T6441] can: request_module (can-proto-0) failed. [ 131.340845][ T6455] deleting an unspecified loop device is not supported. [ 132.510984][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 132.593195][ T6482] netlink: 346 bytes leftover after parsing attributes in process `syz.1.112'. [ 132.642903][ T6485] team0 (unregistering): Port device team_slave_0 removed [ 132.667335][ T6485] team0 (unregistering): Port device team_slave_1 removed [ 133.141155][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141236][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.329539][ T6505] Format for adding new port is "id [perm_addr]" (uint MAC). [ 133.368832][ T5824] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 133.462766][ T6509] openvswitch: netlink: Multiple metadata blocks provided [ 135.070319][ T6555] netlink: 302 bytes leftover after parsing attributes in process `syz.3.124'. syzkaller syzkaller login: [ 138.160660][ T6639] netlink: 302 bytes leftover after parsing attributes in process `syz.1.134'. [ 138.622296][ T6650] futex_wake_op: syz.1.142 tries to shift op by -2048; fix this program [ 138.673231][ T6651] futex_wake_op: syz.1.142 tries to shift op by -2048; fix this program [ 138.833061][ T6650] futex_wake_op: syz.1.142 tries to shift op by -2048; fix this program [ 138.884782][ T6651] futex_wake_op: syz.1.142 tries to shift op by -2048; fix this program [ 140.704707][ T6698] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 140.761660][ T6698] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 140.827350][ T6698] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 140.891146][ T6698] page_type: f5(slab) [ 140.912200][ T6698] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 140.966886][ T6698] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 141.014920][ T6698] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 141.087258][ T6698] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 141.152214][ T6698] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 141.202881][ T6698] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 141.270164][ T6698] page dumped because: unmovable page [ 141.280505][ T6698] page_owner tracks the page as allocated [ 141.335928][ T6698] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5191, tgid 5191 (udevd), ts 53196470649, free_ts 28335198381 [ 141.458081][ T6698] post_alloc_hook+0x153/0x170 [ 141.492711][ T6698] get_page_from_freelist+0x111d/0x3140 [ 141.498325][ T6698] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 141.534874][ T6698] new_slab+0xa6/0x6d0 [ 141.554447][ T6698] refill_objects+0x26b/0x400 [ 141.570578][ T6698] __pcs_replace_empty_main+0x19f/0x600 [ 141.612912][ T6698] __kmalloc_cache_noprof+0x493/0x6f0 [ 141.618832][ T6698] uevent_show+0x166/0x3a0 [ 141.650307][ T6698] dev_attr_show+0x52/0xa0 [ 141.670307][ T6698] sysfs_kf_seq_show+0x217/0x3a0 [ 141.695656][ T6698] seq_read_iter+0x32f/0x1270 [ 141.712739][ T6698] kernfs_fop_read_iter+0x46c/0x610 [ 141.728151][ T6698] vfs_read+0x825/0xb30 [ 141.743622][ T6698] ksys_read+0x12a/0x250 [ 141.763155][ T6698] do_syscall_64+0x106/0xf80 [ 141.778128][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.804996][ T6698] page last free pid 1 tgid 1 stack trace: [ 141.822974][ T6698] __free_frozen_pages+0x7e1/0x10d0 [ 141.839609][ T6698] free_contig_range+0xde/0x1d0 [ 141.860096][ T6698] destroy_args+0xa8/0x7a0 [ 141.879823][ T6698] debug_vm_pgtable+0x1b66/0x34c0 [ 141.897899][ T6698] do_one_initcall+0x11d/0x760 [ 141.912770][ T6698] kernel_init_freeable+0x6e5/0x7a0 [ 141.933838][ T6698] kernel_init+0x1f/0x1e0 [ 141.947207][ T6698] ret_from_fork+0x754/0xd80 [ 141.962200][ T6698] ret_from_fork_asm+0x1a/0x30 [ 142.035348][ T6725] netlink: 334 bytes leftover after parsing attributes in process `syz.2.152'. [ 144.330788][ T5824] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 144.340426][ T5824] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 145.722442][ T6811] openvswitch: netlink: Message has 92 unknown bytes. [ 146.414730][ T6826] input: 9%vJ,6/rk [ 146.414730][ T6826] ltx b6>94Y#z as /devices/virtual/input/input6 [ 148.204449][ T6865] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 149.570159][ T6885] zswap: compressor not available [ 150.197434][ T29] audit: type=1107 audit(4294968390.744:6): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 151.611230][ T6915] vivid-007: ================= START STATUS ================= [ 151.757656][ T6915] vivid-007: Generate PTS: true [ 151.840803][ T6915] vivid-007: Generate SCR: true [ 151.938424][ T6915] tpg source WxH: 320x240 (Y'CbCr) [ 152.006144][ T6915] tpg field: 1 [ 152.089465][ T6915] tpg crop: (0,0)/320x240 [ 152.214608][ T6915] tpg compose: (0,0)/320x240 [ 152.233698][ T6915] tpg colorspace: 8 [ 152.314428][ T6915] tpg transfer function: 0/0 [ 152.414350][ T6915] tpg Y'CbCr encoding: 0/0 [ 152.554368][ T6915] tpg quantization: 0/0 [ 152.594866][ T6915] tpg RGB range: 0/2 [ 152.722326][ T6915] vivid-007: ================== END STATUS ================== [ 153.556398][ T6965] zswap: compressor not available [ 160.625690][ T7082] aoe: invalid device specification [ 163.748011][ T7133] netlink: 338 bytes leftover after parsing attributes in process `syz.1.228'. [ 165.180974][ T7124] Process accounting resumed [ 165.517720][ T7175] random: crng reseeded on system resumption [ 166.451333][ T7195] netlink: 338 bytes leftover after parsing attributes in process `syz.0.240'. [ 168.772635][ T7238] netlink: 338 bytes leftover after parsing attributes in process `syz.3.252'. [ 170.872425][ T7272] netlink: 338 bytes leftover after parsing attributes in process `syz.2.262'. [ 172.267791][ T7312] netlink: 338 bytes leftover after parsing attributes in process `syz.3.274'. [ 174.391791][ T7346] zswap: compressor not available [ 174.957712][ T7368] FAULT_INJECTION: forcing a failure. [ 174.957712][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 175.027971][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.028008][ T7368] Tainted: [L]=SOFTLOCKUP [ 175.028015][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.028025][ T7368] Call Trace: [ 175.028031][ T7368] [ 175.028038][ T7368] dump_stack_lvl+0x100/0x190 [ 175.028069][ T7368] should_fail_ex.cold+0x5/0xa [ 175.028090][ T7368] should_failslab+0xc2/0x120 [ 175.028109][ T7368] __kmalloc_cache_noprof+0x7a/0x6f0 [ 175.028131][ T7368] ? alloc_tty_struct+0x96/0x8c0 [ 175.028159][ T7368] alloc_tty_struct+0x96/0x8c0 [ 175.028193][ T7368] ? __pfx_alloc_tty_struct+0x10/0x10 [ 175.028223][ T7368] pty_common_install+0x1c7/0xb30 [ 175.028243][ T7368] ? __pfx_pty_unix98_install+0x10/0x10 [ 175.028263][ T7368] tty_init_dev.part.0+0x9e/0x470 [ 175.028289][ T7368] tty_init_dev+0x60/0x80 [ 175.028313][ T7368] ptmx_open+0x15e/0x3c0 [ 175.028341][ T7368] ? __pfx_ptmx_open+0x10/0x10 [ 175.028370][ T7368] chrdev_open+0x234/0x6a0 [ 175.028386][ T7368] ? __pfx_apparmor_file_open+0x10/0x10 [ 175.028412][ T7368] ? __pfx_chrdev_open+0x10/0x10 [ 175.028430][ T7368] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 175.028464][ T7368] do_dentry_open+0x6d8/0x1660 [ 175.028492][ T7368] ? __pfx_chrdev_open+0x10/0x10 [ 175.028514][ T7368] vfs_open+0x82/0x3f0 [ 175.028538][ T7368] path_openat+0x208c/0x31a0 [ 175.028563][ T7368] ? __pfx_path_openat+0x10/0x10 [ 175.028589][ T7368] do_file_open+0x20e/0x430 [ 175.028609][ T7368] ? __pfx_do_file_open+0x10/0x10 [ 175.028643][ T7368] ? alloc_fd+0x476/0x790 [ 175.028673][ T7368] ? do_getname+0x191/0x390 [ 175.028695][ T7368] do_sys_openat2+0x10d/0x1e0 [ 175.028718][ T7368] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.028753][ T7368] __x64_sys_openat+0x12d/0x210 [ 175.028776][ T7368] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.028808][ T7368] do_syscall_64+0x106/0xf80 [ 175.028827][ T7368] ? clear_bhb_loop+0x40/0x90 [ 175.028849][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.028867][ T7368] RIP: 0033:0x7f45b319c629 [ 175.028883][ T7368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.028899][ T7368] RSP: 002b:00007f45b3fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.028917][ T7368] RAX: ffffffffffffffda RBX: 00007f45b3415fa0 RCX: 00007f45b319c629 [ 175.028929][ T7368] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 175.028940][ T7368] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.028950][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.028961][ T7368] R13: 00007f45b3416038 R14: 00007f45b3415fa0 R15: 00007ffef7ad4398 [ 175.028985][ T7368] [ 176.034467][ T7387] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.0), cmd(12) [ 176.076760][ T7391] zswap: compressor not available [ 176.458226][ T7400] ======================================================= [ 176.458226][ T7400] WARNING: The mand mount option has been deprecated and [ 176.458226][ T7400] and is ignored by this kernel. Remove the mand [ 176.458226][ T7400] option from the mount to silence this warning. [ 176.458226][ T7400] ======================================================= [ 176.884796][ T7406] zswap: compressor not available [ 177.537043][ T7431] cgroup: fork rejected by pids controller in /syz1 [ 178.332606][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 178.401688][ T7529] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 178.478998][ T7529] netlink: 13 bytes leftover after parsing attributes in process `syz.3.301'. [ 178.628590][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.299'. [ 178.766445][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.299'. [ 180.577206][ T7604] zswap: compressor not available [ 180.886585][ T7617] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 181.608965][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 181.903914][ T7628] binder: 7626:7628 ioctl c018620c 0 returned -22 [ 183.523408][ T7680] netlink: 342 bytes leftover after parsing attributes in process `syz.2.315'. [ 184.821505][ T7706] zswap: compressor not available [ 186.305614][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 187.350385][ T7772] netlink: 338 bytes leftover after parsing attributes in process `syz.2.330'. [ 187.663157][ T7774] zswap: compressor not available [ 189.703264][ T7814] NFSD: Failed to start, no listeners configured. [ 191.295166][ T7849] netlink: 338 bytes leftover after parsing attributes in process `syz.2.346'. [ 191.990646][ T7875] FAULT_INJECTION: forcing a failure. [ 191.990646][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 192.054477][ T7864] zswap: compressor not available [ 192.060360][ T7875] CPU: 0 UID: 0 PID: 7875 Comm: syz.2.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.060390][ T7875] Tainted: [L]=SOFTLOCKUP [ 192.060397][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.060407][ T7875] Call Trace: [ 192.060422][ T7875] [ 192.060429][ T7875] dump_stack_lvl+0x100/0x190 [ 192.060460][ T7875] should_fail_ex.cold+0x5/0xa [ 192.060481][ T7875] should_failslab+0xc2/0x120 [ 192.060499][ T7875] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 192.060524][ T7875] ? do_getname+0x35/0x390 [ 192.060548][ T7875] do_getname+0x35/0x390 [ 192.060571][ T7875] do_sys_openat2+0xc5/0x1e0 [ 192.060594][ T7875] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.060617][ T7875] ? find_held_lock+0x2b/0x80 [ 192.060639][ T7875] __x64_sys_openat+0x12d/0x210 [ 192.060662][ T7875] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.060693][ T7875] do_syscall_64+0x106/0xf80 [ 192.060712][ T7875] ? clear_bhb_loop+0x40/0x90 [ 192.060733][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.060752][ T7875] RIP: 0033:0x7f45b319c629 [ 192.060767][ T7875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.060783][ T7875] RSP: 002b:00007f45b3fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.060801][ T7875] RAX: ffffffffffffffda RBX: 00007f45b3415fa0 RCX: 00007f45b319c629 [ 192.060812][ T7875] RDX: 0000000000000102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 192.060823][ T7875] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.060833][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.060843][ T7875] R13: 00007f45b3416038 R14: 00007f45b3415fa0 R15: 00007ffef7ad4398 [ 192.060865][ T7875] [ 192.968045][ T7884] NFSD: Failed to start, no listeners configured. [ 193.594151][ T7892] random: crng reseeded on system resumption [ 194.194088][ T7899] netlink: 338 bytes leftover after parsing attributes in process `syz.0.357'. [ 194.532174][ T7908] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 194.618283][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.625066][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.273180][ T7920] futex_wake_op: syz.2.364 tries to shift op by -2048; fix this program [ 195.337033][ T7926] 0x000000000001-0x000000040001 : "" [ 195.367281][ T7926] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 195.451086][ T7926] ftl_cs: FTL header corrupt! [ 195.471995][ T7918] Process accounting paused [ 195.575079][ T7927] 0x000000000001-0x000000040001 : "" [ 195.613128][ T7927] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 195.699646][ T7927] ftl_cs: FTL header corrupt! [ 197.313536][ T7980] netlink: 342 bytes leftover after parsing attributes in process `syz.3.373'. [ 197.325409][ T7969] FAULT_INJECTION: forcing a failure. [ 197.325409][ T7969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 197.398774][ T7980] netlink: 302 bytes leftover after parsing attributes in process `syz.3.373'. [ 197.524737][ T7969] CPU: 0 UID: 0 PID: 7969 Comm: syz.0.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.524769][ T7969] Tainted: [L]=SOFTLOCKUP [ 197.524776][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.524786][ T7969] Call Trace: [ 197.524793][ T7969] [ 197.524800][ T7969] dump_stack_lvl+0x100/0x190 [ 197.524832][ T7969] should_fail_ex.cold+0x5/0xa [ 197.524854][ T7969] _copy_from_user+0x2e/0xd0 [ 197.524930][ T7969] get_timespec64+0x8b/0x1b0 [ 197.524951][ T7969] ? __pfx_get_timespec64+0x10/0x10 [ 197.524973][ T7969] ? __pfx_do_futex+0x10/0x10 [ 197.524998][ T7969] do_pselect.constprop.0+0xc8/0x270 [ 197.525030][ T7969] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 197.525057][ T7969] ? __x64_sys_futex+0x358/0x4d0 [ 197.525083][ T7969] ? xfd_validate_state+0x129/0x190 [ 197.525112][ T7969] __x64_sys_pselect6+0x149/0x1c0 [ 197.525143][ T7969] do_syscall_64+0x106/0xf80 [ 197.525162][ T7969] ? clear_bhb_loop+0x40/0x90 [ 197.525184][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.525203][ T7969] RIP: 0033:0x7f406c59c629 [ 197.525218][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.525234][ T7969] RSP: 002b:00007f406d402028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 197.525253][ T7969] RAX: ffffffffffffffda RBX: 00007f406c816180 RCX: 00007f406c59c629 [ 197.525268][ T7969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000007ff [ 197.525279][ T7969] RBP: 00007f406c632b39 R08: 0000200000000040 R09: 0000000000000000 [ 197.525290][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.525300][ T7969] R13: 00007f406c816218 R14: 00007f406c816180 R15: 00007ffec823caa8 [ 197.525322][ T7969] [ 197.760200][ T7983] Invalid ELF header magic: != ELF [ 198.116138][ T7991] Invalid ELF header magic: != ELF [ 199.434482][ T8014] usbip-vudc usbip-vudc.0: gadget not bound [ 200.670727][ T51] Bluetooth: hci2: ACL packet too small [ 200.916445][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 202.946859][ T8077] netlink: 338 bytes leftover after parsing attributes in process `syz.2.396'. [ 203.261832][ T8079] netlink: 202 bytes leftover after parsing attributes in process `syz.2.397'. [ 203.560336][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 203.689329][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 204.934409][ T8114] netlink: 338 bytes leftover after parsing attributes in process `syz.1.405'. [ 205.199810][ T8126] nfs: Unknown parameter 'BlY 7wEɮHs[' [ 205.944787][ T8133] NFSD: Failed to start, no listeners configured. [ 206.571092][ T8156] kAFS: Invalid Command on /proc/fs/afs/cells file [ 206.926478][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 206.933607][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 207.370792][ T8172] netlink: 302 bytes leftover after parsing attributes in process `syz.0.419'. [ 207.401162][ T8163] lo: entered allmulticast mode [ 207.893886][ T8164] lo: left allmulticast mode [ 209.818388][ T8222] netlink: 302 bytes leftover after parsing attributes in process `syz.3.428'. [ 211.282449][ T8251] delete_channel: no stack [ 211.942309][ T8260] netlink: 302 bytes leftover after parsing attributes in process `syz.2.438'. [ 212.045690][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 212.051913][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 212.993150][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 213.114309][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 213.161905][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.279895][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.105681][ T8307] netlink: 338 bytes leftover after parsing attributes in process `syz.0.448'. [ 215.795339][ T8334] zswap: compressor not available [ 215.819617][ T8346] netlink: 342 bytes leftover after parsing attributes in process `syz.0.457'. [ 215.889321][ T8348] netlink: 330 bytes leftover after parsing attributes in process `syz.2.456'. [ 216.009890][ T8343] ovs_: entered promiscuous mode [ 216.132452][ T8352] netlink: 338 bytes leftover after parsing attributes in process `syz.1.458'. [ 216.587442][ T8358] zswap: compressor not available [ 217.876066][ T8391] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 218.396279][ T8396] netlink: 338 bytes leftover after parsing attributes in process `syz.1.468'. [ 218.613587][ T8398] FAULT_INJECTION: forcing a failure. [ 218.613587][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 218.801893][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: syz.2.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.801924][ T8398] Tainted: [L]=SOFTLOCKUP [ 218.801930][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.801940][ T8398] Call Trace: [ 218.801947][ T8398] [ 218.801953][ T8398] dump_stack_lvl+0x100/0x190 [ 218.801986][ T8398] should_fail_ex.cold+0x5/0xa [ 218.802007][ T8398] should_failslab+0xc2/0x120 [ 218.802025][ T8398] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 218.802052][ T8398] ? __d_alloc+0x34/0xa80 [ 218.802070][ T8398] ? lockdep_init_map_type+0x5c/0x250 [ 218.802098][ T8398] __d_alloc+0x34/0xa80 [ 218.802118][ T8398] d_alloc_pseudo+0x1c/0xc0 [ 218.802150][ T8398] alloc_file_pseudo+0xcf/0x230 [ 218.802173][ T8398] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 218.802195][ T8398] ? alloc_fd+0x476/0x790 [ 218.802228][ T8398] sock_alloc_file+0x50/0x210 [ 218.802251][ T8398] __sys_socket+0x1c0/0x260 [ 218.802279][ T8398] ? __pfx___sys_socket+0x10/0x10 [ 218.802313][ T8398] __x64_sys_socket+0x72/0xb0 [ 218.802340][ T8398] ? lockdep_hardirqs_on+0x78/0x100 [ 218.802360][ T8398] do_syscall_64+0x106/0xf80 [ 218.802379][ T8398] ? clear_bhb_loop+0x40/0x90 [ 218.802402][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.802420][ T8398] RIP: 0033:0x7f45b319c629 [ 218.802435][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.802453][ T8398] RSP: 002b:00007f45b3fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 218.802471][ T8398] RAX: ffffffffffffffda RBX: 00007f45b3415fa0 RCX: 00007f45b319c629 [ 218.802482][ T8398] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 218.802493][ T8398] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 218.802503][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.802513][ T8398] R13: 00007f45b3416038 R14: 00007f45b3415fa0 R15: 00007ffef7ad4398 [ 218.802536][ T8398] [ 219.263239][ T8410] netlink: 326 bytes leftover after parsing attributes in process `syz.0.471'. [ 219.924331][ T8415] zswap: compressor not available [ 222.067312][ T8444] netlink: 338 bytes leftover after parsing attributes in process `syz.1.479'. [ 225.087143][ T8484] netlink: 338 bytes leftover after parsing attributes in process `syz.0.489'. [ 225.585997][ T8490] Process accounting resumed [ 225.813547][ T8494] FAULT_INJECTION: forcing a failure. [ 225.813547][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 225.930182][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.0.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.930214][ T8494] Tainted: [L]=SOFTLOCKUP [ 225.930220][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.930230][ T8494] Call Trace: [ 225.930236][ T8494] [ 225.930244][ T8494] dump_stack_lvl+0x100/0x190 [ 225.930274][ T8494] should_fail_ex.cold+0x5/0xa [ 225.930295][ T8494] should_failslab+0xc2/0x120 [ 225.930314][ T8494] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 225.930340][ T8494] ? __kernfs_new_node+0xd2/0x960 [ 225.930369][ T8494] __kernfs_new_node+0xd2/0x960 [ 225.930395][ T8494] ? __pfx___kernfs_new_node+0x10/0x10 [ 225.930425][ T8494] ? find_held_lock+0x2b/0x80 [ 225.930441][ T8494] ? kernfs_root+0xee/0x2a0 [ 225.930463][ T8494] ? kernfs_root+0xee/0x2a0 [ 225.930492][ T8494] kernfs_new_node+0x11b/0x1a0 [ 225.930523][ T8494] __kernfs_create_file+0x53/0x350 [ 225.930545][ T8494] sysfs_add_file_mode_ns+0x207/0x3c0 [ 225.930575][ T8494] internal_create_group+0x593/0xf40 [ 225.930604][ T8494] ? kobject_init_and_add+0x129/0x180 [ 225.930629][ T8494] ? __pfx_internal_create_group+0x10/0x10 [ 225.930653][ T8494] ? __pfx_kobject_init_and_add+0x10/0x10 [ 225.930676][ T8494] ? ops_init+0x1e2/0x5f0 [ 225.930698][ T8494] ? ksys_unshare+0x455/0xab0 [ 225.930718][ T8494] ? __x64_sys_unshare+0x31/0x40 [ 225.930739][ T8494] ? do_syscall_64+0x106/0xf80 [ 225.930758][ T8494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.930781][ T8494] internal_create_groups+0x9d/0x150 [ 225.930808][ T8494] net_rx_queue_update_kobjects+0xc7/0x760 [ 225.930836][ T8494] ? kset_register+0x1bb/0x290 [ 225.930862][ T8494] netdev_register_kobject+0x290/0x3d0 [ 225.930889][ T8494] register_netdevice+0x12e0/0x2210 [ 225.930923][ T8494] ? __pfx_register_netdevice+0x10/0x10 [ 225.930951][ T8494] __ip_tunnel_create+0x52b/0x670 [ 225.930974][ T8494] ? __pfx___ip_tunnel_create+0x10/0x10 [ 225.930994][ T8494] ? net_generic+0xea/0x2a0 [ 225.931021][ T8494] ip_tunnel_init_net+0x230/0x780 [ 225.931046][ T8494] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 225.931074][ T8494] ? __kmalloc_noprof+0x320/0x850 [ 225.931103][ T8494] ? __pfx_ipip_init_net+0x10/0x10 [ 225.931126][ T8494] ops_init+0x1e2/0x5f0 [ 225.931149][ T8494] setup_net+0x118/0x3a0 [ 225.931171][ T8494] ? __pfx_setup_net+0x10/0x10 [ 225.931190][ T8494] ? lockdep_init_map_type+0x5c/0x250 [ 225.931214][ T8494] ? mutex_init_lockep+0x110/0x150 [ 225.931242][ T8494] copy_net_ns+0x46f/0x7c0 [ 225.931267][ T8494] create_new_namespaces+0x3ea/0xac0 [ 225.931292][ T8494] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 225.931313][ T8494] ksys_unshare+0x455/0xab0 [ 225.931336][ T8494] ? __pfx_ksys_unshare+0x10/0x10 [ 225.931367][ T8494] __x64_sys_unshare+0x31/0x40 [ 225.931389][ T8494] do_syscall_64+0x106/0xf80 [ 225.931408][ T8494] ? clear_bhb_loop+0x40/0x90 [ 225.931429][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.931448][ T8494] RIP: 0033:0x7f406c59c629 [ 225.931464][ T8494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.931481][ T8494] RSP: 002b:00007f406d444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 225.931499][ T8494] RAX: ffffffffffffffda RBX: 00007f406c815fa0 RCX: 00007f406c59c629 [ 225.931510][ T8494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 225.931521][ T8494] RBP: 00007f406c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 225.931531][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.931541][ T8494] R13: 00007f406c816038 R14: 00007f406c815fa0 R15: 00007ffec823caa8 [ 225.931564][ T8494] [ 228.066689][ T8496] netlink: 146 bytes leftover after parsing attributes in process `syz.0.491'. [ 230.756964][ T8551] netlink: 'syz.2.506': attribute type 11 has an invalid length. [ 231.792593][ T8560] zswap: compressor not available [ 232.218746][ T8564] zswap: compressor 000 not available [ 232.679337][ T5824] Bluetooth: hci3: unknown advertising packet type: 0xea [ 233.633230][ T8586] netlink: 342 bytes leftover after parsing attributes in process `syz.0.513'. [ 234.386454][ T8596] bridge0: port 3(ipvlan0) entered blocking state [ 234.396656][ T8596] bridge0: port 3(ipvlan0) entered disabled state [ 234.434069][ T8596] ipvlan0: entered allmulticast mode [ 234.463975][ T8596] veth0_vlan: entered allmulticast mode [ 234.506669][ T8596] ipvlan0: left allmulticast mode [ 234.511778][ T8596] veth0_vlan: left allmulticast mode [ 235.439005][ T8612] zswap: compressor not available [ 237.050387][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 237.696535][ T8667] netlink: 338 bytes leftover after parsing attributes in process `syz.0.532'. [ 238.977380][ T8701] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 239.252012][ T8711] netlink: 338 bytes leftover after parsing attributes in process `syz.0.543'. [ 239.451179][ T8716] FAULT_INJECTION: forcing a failure. [ 239.451179][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 239.498625][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.1.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.498657][ T8716] Tainted: [L]=SOFTLOCKUP [ 239.498664][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.498674][ T8716] Call Trace: [ 239.498681][ T8716] [ 239.498688][ T8716] dump_stack_lvl+0x100/0x190 [ 239.498720][ T8716] should_fail_ex.cold+0x5/0xa [ 239.498742][ T8716] should_failslab+0xc2/0x120 [ 239.498760][ T8716] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 239.498786][ T8716] ? security_file_alloc+0x34/0x2c0 [ 239.498817][ T8716] ? trace_kmem_cache_alloc+0xf3/0x120 [ 239.498839][ T8716] security_file_alloc+0x34/0x2c0 [ 239.498869][ T8716] init_file+0x95/0x480 [ 239.498889][ T8716] alloc_empty_file+0x73/0x1c0 [ 239.498910][ T8716] path_openat+0xe8/0x31a0 [ 239.498926][ T8716] ? kasan_save_stack+0x3f/0x50 [ 239.498951][ T8716] ? kasan_save_stack+0x30/0x50 [ 239.498976][ T8716] ? kasan_save_track+0x14/0x30 [ 239.499001][ T8716] ? __kasan_slab_alloc+0x89/0x90 [ 239.499028][ T8716] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 239.499059][ T8716] ? do_getname+0x35/0x390 [ 239.499078][ T8716] ? do_sys_openat2+0xc5/0x1e0 [ 239.499100][ T8716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.499122][ T8716] ? __pfx_path_openat+0x10/0x10 [ 239.499146][ T8716] do_file_open+0x20e/0x430 [ 239.499165][ T8716] ? __pfx_do_file_open+0x10/0x10 [ 239.499197][ T8716] ? alloc_fd+0x476/0x790 [ 239.499227][ T8716] ? do_getname+0x191/0x390 [ 239.499250][ T8716] do_sys_openat2+0x10d/0x1e0 [ 239.499272][ T8716] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.499303][ T8716] __x64_sys_openat+0x12d/0x210 [ 239.499326][ T8716] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.499357][ T8716] do_syscall_64+0x106/0xf80 [ 239.499377][ T8716] ? clear_bhb_loop+0x40/0x90 [ 239.499399][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.499418][ T8716] RIP: 0033:0x7f245e79c629 [ 239.499433][ T8716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.499450][ T8716] RSP: 002b:00007f245f6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.499467][ T8716] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 239.499479][ T8716] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 239.499491][ T8716] RBP: 00007f245e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 239.499501][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.499512][ T8716] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 239.499535][ T8716] [ 240.758888][ T8731] zswap: compressor not available [ 240.986070][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.055941][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.727249][ T29] audit: type=1800 audit(4294967300.960:7): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.556" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 242.423563][ T8781] zswap: compressor 000 not available [ 242.798240][ T8791] zswap: compressor not available [ 242.899257][ T8798] FAULT_INJECTION: forcing a failure. [ 242.899257][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 242.963391][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.3.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.963423][ T8798] Tainted: [L]=SOFTLOCKUP [ 242.963429][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.963439][ T8798] Call Trace: [ 242.963445][ T8798] [ 242.963452][ T8798] dump_stack_lvl+0x100/0x190 [ 242.963485][ T8798] should_fail_ex.cold+0x5/0xa [ 242.963507][ T8798] should_failslab+0xc2/0x120 [ 242.963525][ T8798] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 242.963552][ T8798] ? __d_alloc+0x34/0xa80 [ 242.963575][ T8798] __d_alloc+0x34/0xa80 [ 242.963596][ T8798] d_alloc_pseudo+0x1c/0xc0 [ 242.963620][ T8798] alloc_file_pseudo+0xcf/0x230 [ 242.963643][ T8798] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 242.963672][ T8798] __shmem_file_setup+0x221/0x490 [ 242.963696][ T8798] ? __pfx___shmem_file_setup+0x10/0x10 [ 242.963724][ T8798] ? vm_area_alloc+0x1f/0x160 [ 242.963750][ T8798] shmem_zero_setup+0x96/0x1b0 [ 242.963779][ T8798] __mmap_region+0x2198/0x29e0 [ 242.963809][ T8798] ? __pfx___mmap_region+0x10/0x10 [ 242.963852][ T8798] ? __lock_acquire+0x4a5/0x2630 [ 242.963877][ T8798] ? set_next_entity+0x11b/0x9c0 [ 242.963908][ T8798] ? __lock_acquire+0x4a5/0x2630 [ 242.963930][ T8798] ? find_held_lock+0x2b/0x80 [ 242.963955][ T8798] ? find_held_lock+0x2b/0x80 [ 242.963971][ T8798] ? finish_task_switch.isra.0+0x200/0xb80 [ 242.963991][ T8798] ? finish_task_switch.isra.0+0x200/0xb80 [ 242.964018][ T8798] ? trace_sched_exit_tp+0x13a/0x180 [ 242.964040][ T8798] ? __schedule+0x1000/0x60e0 [ 242.964085][ T8798] ? rcu_is_watching+0x12/0xc0 [ 242.964113][ T8798] ? cap_capable+0x107/0x460 [ 242.964141][ T8798] mmap_region+0x180/0x3e0 [ 242.964171][ T8798] do_mmap+0xc63/0x12f0 [ 242.964194][ T8798] ? __pfx_do_mmap+0x10/0x10 [ 242.964213][ T8798] ? __pfx_down_write_killable+0x10/0x10 [ 242.964241][ T8798] vm_mmap_pgoff+0x29e/0x470 [ 242.964264][ T8798] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 242.964285][ T8798] ? do_futex+0x192/0x350 [ 242.964308][ T8798] ? __pfx_do_futex+0x10/0x10 [ 242.964336][ T8798] ksys_mmap_pgoff+0xe1/0x650 [ 242.964353][ T8798] ? __x64_sys_futex+0x34f/0x4d0 [ 242.964376][ T8798] ? __x64_sys_futex+0x358/0x4d0 [ 242.964401][ T8798] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 242.964418][ T8798] ? xfd_validate_state+0x129/0x190 [ 242.964449][ T8798] __x64_sys_mmap+0x125/0x190 [ 242.964478][ T8798] do_syscall_64+0x106/0xf80 [ 242.964497][ T8798] ? clear_bhb_loop+0x40/0x90 [ 242.964520][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.964539][ T8798] RIP: 0033:0x7fdf4279c629 [ 242.964554][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.964571][ T8798] RSP: 002b:00007fdf436a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 242.964589][ T8798] RAX: ffffffffffffffda RBX: 00007fdf42a15fa0 RCX: 00007fdf4279c629 [ 242.964600][ T8798] RDX: 0000000000000007 RSI: 0000000000000008 RDI: 0000000000000000 [ 242.964610][ T8798] RBP: 00007fdf42832b39 R08: fffffffffffffffa R09: 0000000000008000 [ 242.964621][ T8798] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 242.964632][ T8798] R13: 00007fdf42a16038 R14: 00007fdf42a15fa0 R15: 00007fff3bcd20c8 [ 242.964654][ T8798] [ 243.688832][ T8802] bridge0: port 3(batadv0) entered blocking state [ 243.727569][ T8802] bridge0: port 3(batadv0) entered disabled state [ 243.765362][ T8802] batadv0: entered allmulticast mode [ 243.816512][ T8802] batadv0: entered promiscuous mode [ 243.822349][ T8802] bridge0: port 3(batadv0) entered blocking state [ 243.829182][ T8802] bridge0: port 3(batadv0) entered forwarding state [ 243.951204][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 243.960726][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 244.671910][ T8817] zswap: compressor not available [ 245.807480][ T8841] netlink: 338 bytes leftover after parsing attributes in process `syz.1.574'. [ 246.550968][ T8856] zswap: compressor not available [ 247.523547][ T8882] nfs: Unknown parameter 'm?LH>「^eko}* ' [ 247.843131][ T8899] netlink: 338 bytes leftover after parsing attributes in process `syz.2.584'. [ 248.268373][ T8915] netlink: 342 bytes leftover after parsing attributes in process `syz.2.587'. [ 248.402538][ T8907] zswap: compressor not available [ 248.541782][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 250.207926][ T8947] netlink: 338 bytes leftover after parsing attributes in process `syz.3.596'. [ 250.296077][ T8950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.830392][ T8901] NFSD: Failed to start, no listeners configured. [ 250.975334][ T8965] zswap: compressor not available [ 252.110945][ T8978] zswap: compressor not available [ 252.141300][ T8998] netlink: 25 bytes leftover after parsing attributes in process `syz.3.604'. [ 252.407402][ T9007] netlink: 338 bytes leftover after parsing attributes in process `syz.2.607'. [ 252.820746][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'. [ 256.045928][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.054147][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.612386][ T9086] netlink: 338 bytes leftover after parsing attributes in process `syz.1.628'. [ 258.060135][ T9111] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 258.072418][ T9111] netlink: 'syz.3.634': attribute type 5 has an invalid length. [ 258.092466][ T9111] netlink: 10 bytes leftover after parsing attributes in process `syz.3.634'. [ 258.557157][ T9127] FAULT_INJECTION: forcing a failure. [ 258.557157][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 258.591346][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.1.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.591378][ T9127] Tainted: [L]=SOFTLOCKUP [ 258.591385][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.591395][ T9127] Call Trace: [ 258.591401][ T9127] [ 258.591409][ T9127] dump_stack_lvl+0x100/0x190 [ 258.591441][ T9127] should_fail_ex.cold+0x5/0xa [ 258.591463][ T9127] should_failslab+0xc2/0x120 [ 258.591481][ T9127] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 258.591509][ T9127] ? parse_pred+0x2d4/0x3070 [ 258.591540][ T9127] kmemdup_nul+0x49/0xd0 [ 258.591569][ T9127] parse_pred+0x2d4/0x3070 [ 258.591600][ T9127] ? __pfx_parse_pred+0x10/0x10 [ 258.591634][ T9127] ? rcu_is_watching+0x12/0xc0 [ 258.591662][ T9127] ? trace_kmalloc+0x101/0x130 [ 258.591681][ T9127] ? __kmalloc_noprof+0x320/0x850 [ 258.591711][ T9127] process_preds+0x6a6/0x1d90 [ 258.591746][ T9127] ? create_filter_start.constprop.0+0x134/0x310 [ 258.591777][ T9127] create_filter+0x140/0x210 [ 258.591804][ T9127] ? __pfx_create_filter+0x10/0x10 [ 258.591840][ T9127] ? find_held_lock+0x2b/0x80 [ 258.591860][ T9127] apply_event_filter+0x220/0x500 [ 258.591888][ T9127] ? __pfx_apply_event_filter+0x10/0x10 [ 258.591923][ T9127] event_filter_write+0x16d/0x290 [ 258.591945][ T9127] vfs_write+0x2aa/0x1070 [ 258.591973][ T9127] ? __pfx_event_filter_write+0x10/0x10 [ 258.591996][ T9127] ? __pfx_vfs_write+0x10/0x10 [ 258.592023][ T9127] ? __fget_files+0x215/0x3d0 [ 258.592055][ T9127] ? __fget_files+0x21f/0x3d0 [ 258.592090][ T9127] ksys_write+0x12a/0x250 [ 258.592116][ T9127] ? __pfx_ksys_write+0x10/0x10 [ 258.592151][ T9127] do_syscall_64+0x106/0xf80 [ 258.592171][ T9127] ? clear_bhb_loop+0x40/0x90 [ 258.592193][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.592212][ T9127] RIP: 0033:0x7f245e79c629 [ 258.592227][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.592244][ T9127] RSP: 002b:00007f245f6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.592263][ T9127] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 258.592274][ T9127] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.592285][ T9127] RBP: 00007f245e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.592296][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.592306][ T9127] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 258.592330][ T9127] [ 259.331055][ T9127] FAULT_INJECTION: forcing a failure. [ 259.331055][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 259.349342][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.1.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.349373][ T9127] Tainted: [L]=SOFTLOCKUP [ 259.349379][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.349389][ T9127] Call Trace: [ 259.349396][ T9127] [ 259.349403][ T9127] dump_stack_lvl+0x100/0x190 [ 259.349435][ T9127] should_fail_ex.cold+0x5/0xa [ 259.349456][ T9127] should_failslab+0xc2/0x120 [ 259.349475][ T9127] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 259.349502][ T9127] ? prepare_creds+0x2c/0x950 [ 259.349528][ T9127] ? get_random_u64+0x575/0x7c0 [ 259.349558][ T9127] prepare_creds+0x2c/0x950 [ 259.349586][ T9127] copy_creds+0xa7/0xa50 [ 259.349615][ T9127] copy_process+0x1029/0x7a10 [ 259.349637][ T9127] ? __pfx___futex_wait+0x10/0x10 [ 259.349672][ T9127] ? __pfx_copy_process+0x10/0x10 [ 259.349702][ T9127] kernel_clone+0xfc/0x9a0 [ 259.349722][ T9127] ? __pfx_futex_wait+0x10/0x10 [ 259.349760][ T9127] ? __pfx_kernel_clone+0x10/0x10 [ 259.349793][ T9127] __do_sys_clone+0xd9/0x120 [ 259.349814][ T9127] ? __pfx___do_sys_clone+0x10/0x10 [ 259.349853][ T9127] do_syscall_64+0x106/0xf80 [ 259.349873][ T9127] ? clear_bhb_loop+0x40/0x90 [ 259.349896][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.349914][ T9127] RIP: 0033:0x7f245e79c629 [ 259.349929][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.349946][ T9127] RSP: 002b:00007f245f6bdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 259.349964][ T9127] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 259.349975][ T9127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 259.349986][ T9127] RBP: 00007f245e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.349996][ T9127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.350007][ T9127] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 259.350029][ T9127] [ 260.194818][ T9142] zswap: compressor not available [ 260.487527][ T9148] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 261.252652][ T9157] FAULT_INJECTION: forcing a failure. [ 261.252652][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 261.284873][ T9157] CPU: 0 UID: 0 PID: 9157 Comm: syz.1.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.284903][ T9157] Tainted: [L]=SOFTLOCKUP [ 261.284910][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.284920][ T9157] Call Trace: [ 261.284926][ T9157] [ 261.284933][ T9157] dump_stack_lvl+0x100/0x190 [ 261.284964][ T9157] should_fail_ex.cold+0x5/0xa [ 261.284985][ T9157] ? tomoyo_encode2+0xfb/0x3c0 [ 261.285002][ T9157] should_failslab+0xc2/0x120 [ 261.285020][ T9157] __kmalloc_noprof+0xe0/0x850 [ 261.285046][ T9157] ? d_absolute_path+0x136/0x1b0 [ 261.285073][ T9157] tomoyo_encode2+0xfb/0x3c0 [ 261.285099][ T9157] tomoyo_encode+0x29/0x50 [ 261.285120][ T9157] tomoyo_realpath_from_path+0x18c/0x690 [ 261.285147][ T9157] tomoyo_path_number_perm+0x23c/0x580 [ 261.285175][ T9157] ? tomoyo_path_number_perm+0x22e/0x580 [ 261.285204][ T9157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.285256][ T9157] ? find_held_lock+0x2b/0x80 [ 261.285272][ T9157] ? __fget_files+0x215/0x3d0 [ 261.285299][ T9157] ? hook_file_ioctl_common+0x146/0x410 [ 261.285332][ T9157] ? __fget_files+0x21f/0x3d0 [ 261.285365][ T9157] security_file_ioctl+0xd3/0x230 [ 261.285394][ T9157] __x64_sys_ioctl+0xb7/0x210 [ 261.285421][ T9157] do_syscall_64+0x106/0xf80 [ 261.285441][ T9157] ? clear_bhb_loop+0x40/0x90 [ 261.285463][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.285482][ T9157] RIP: 0033:0x7f245e79c629 [ 261.285497][ T9157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.285514][ T9157] RSP: 002b:00007f245f6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.285532][ T9157] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 261.285543][ T9157] RDX: ffffffffffffffff RSI: 0000000000004c81 RDI: 0000000000000003 [ 261.285554][ T9157] RBP: 00007f245f6be090 R08: 0000000000000000 R09: 0000000000000000 [ 261.285565][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.285575][ T9157] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 261.285598][ T9157] [ 261.285615][ T9157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.761898][ T9167] netlink: 338 bytes leftover after parsing attributes in process `syz.1.648'. [ 262.886637][ T5826] Process accounting paused [ 262.936652][ T9181] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 263.016400][ T9181] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 263.079554][ T9181] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 263.498104][ T9189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.508190][ T9189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.516410][ T9189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.526094][ T9189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.533750][ T9189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.349099][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 264.522308][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.560751][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.578198][ T9188] bridge_slave_0: entered allmulticast mode [ 264.596041][ T9188] bridge_slave_0: entered promiscuous mode [ 264.615319][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.638897][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.649856][ T9188] bridge_slave_1: entered allmulticast mode [ 264.659330][ T9188] bridge_slave_1: entered promiscuous mode [ 264.700420][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.712282][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.746297][ T9188] team0: Port device team_slave_0 added [ 264.757955][ T9188] team0: Port device team_slave_1 added [ 264.787665][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.794884][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.823633][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.837001][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.844540][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.874817][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.919492][ T9188] hsr_slave_0: entered promiscuous mode [ 264.926896][ T9188] hsr_slave_1: entered promiscuous mode [ 264.935396][ T9188] debugfs: 'hsr0' already exists in 'hsr' [ 264.941449][ T9188] Cannot create hsr debugfs directory [ 265.157378][ T9188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.189605][ T9188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.214116][ T9188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.235220][ T9188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.318469][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.325708][ T9188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.333389][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.340592][ T9188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.397696][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.405875][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.563483][ T9189] Bluetooth: hci4: command tx timeout [ 265.596209][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.648922][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.677333][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.684641][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.799636][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.806948][ T9044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.936285][ T9188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.079337][ T9238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 266.462473][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.700211][ T9248] FAULT_INJECTION: forcing a failure. [ 266.700211][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 266.783198][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.1.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.783230][ T9248] Tainted: [L]=SOFTLOCKUP [ 266.783236][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.783247][ T9248] Call Trace: [ 266.783253][ T9248] [ 266.783260][ T9248] dump_stack_lvl+0x100/0x190 [ 266.783291][ T9248] should_fail_ex.cold+0x5/0xa [ 266.783312][ T9248] should_failslab+0xc2/0x120 [ 266.783330][ T9248] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 266.783356][ T9248] ? posix_lock_inode+0x427/0x2440 [ 266.783384][ T9248] ? locks_get_lock_context+0x34f/0x640 [ 266.783412][ T9248] posix_lock_inode+0x427/0x2440 [ 266.783450][ T9248] ? __pfx_posix_lock_inode+0x10/0x10 [ 266.783485][ T9248] vfs_lock_file+0xfb/0x150 [ 266.783515][ T9248] fcntl_setlk+0x782/0xe40 [ 266.783535][ T9248] ? __pfx_fcntl_setlk+0x10/0x10 [ 266.783562][ T9248] ? rep_movs_alternative+0x30/0x90 [ 266.783591][ T9248] do_fcntl+0xf39/0x1670 [ 266.783614][ T9248] ? __pfx_do_fcntl+0x10/0x10 [ 266.783633][ T9248] ? __fget_files+0x215/0x3d0 [ 266.783667][ T9248] ? tomoyo_file_fcntl+0x6c/0xc0 [ 266.783693][ T9248] __x64_sys_fcntl+0x163/0x200 [ 266.783717][ T9248] do_syscall_64+0x106/0xf80 [ 266.783745][ T9248] ? clear_bhb_loop+0x40/0x90 [ 266.783768][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.783787][ T9248] RIP: 0033:0x7f245e79c629 [ 266.783803][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.783820][ T9248] RSP: 002b:00007f245f6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 266.783838][ T9248] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 266.783849][ T9248] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000006 [ 266.783860][ T9248] RBP: 00007f245e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 266.783870][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.783880][ T9248] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 266.783903][ T9248] [ 267.290569][ T9188] veth0_vlan: entered promiscuous mode [ 267.321475][ T9188] veth1_vlan: entered promiscuous mode [ 267.377877][ T9188] veth0_macvtap: entered promiscuous mode [ 267.471621][ T9188] veth1_macvtap: entered promiscuous mode [ 267.610464][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.644406][ T9189] Bluetooth: hci4: command tx timeout [ 267.665611][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.734464][ T9049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.759775][ T9049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.815540][ T9049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.843213][ T9049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.001933][ T9196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.035446][ T9196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.093511][ T9196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.112456][ T9196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.625030][ T9269] zswap: compressor not available [ 268.690189][ T9051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.700063][ T9051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.711158][ T9051] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.721073][ T9051] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.731770][ T9051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.682809][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 269.723590][ T9051] Bluetooth: hci4: command tx timeout [ 270.038033][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.067395][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.096698][ T9279] bridge_slave_0: entered allmulticast mode [ 270.118122][ T9279] bridge_slave_0: entered promiscuous mode [ 270.150776][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.213054][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.257458][ T9279] bridge_slave_1: entered allmulticast mode [ 270.265860][ T9298] futex_wake_op: syz.4.669 tries to shift op by -2048; fix this program [ 270.286544][ T9279] bridge_slave_1: entered promiscuous mode [ 270.313003][ T9299] futex_wake_op: syz.4.669 tries to shift op by -2048; fix this program [ 270.341488][ T9299] futex_wake_op: syz.4.669 tries to shift op by -2048; fix this program [ 270.386130][ T9298] futex_wake_op: syz.4.669 tries to shift op by -2048; fix this program [ 270.403617][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.446277][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.603908][ T9279] team0: Port device team_slave_0 added [ 270.646216][ T9279] team0: Port device team_slave_1 added [ 270.765627][ T9051] Bluetooth: hci5: command tx timeout [ 270.785216][ T9311] capability: warning: `syz.1.672' uses 32-bit capabilities (legacy support in use) [ 270.805527][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.831505][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.958495][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.975369][ T9319] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 271.020922][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.058166][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.187463][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.422268][ T9279] hsr_slave_0: entered promiscuous mode [ 271.461969][ T9279] hsr_slave_1: entered promiscuous mode [ 271.495226][ T9279] debugfs: 'hsr0' already exists in 'hsr' [ 271.527795][ T9279] Cannot create hsr debugfs directory [ 271.803165][ T9051] Bluetooth: hci4: command tx timeout [ 272.087238][ T9331] zswap: compressor not available [ 272.274629][ T9338] random: crng reseeded on system resumption [ 272.333273][ T9339] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 272.843375][ T9051] Bluetooth: hci5: command tx timeout [ 272.876065][ T9279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.937332][ T9279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.005535][ T9279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.462746][ T9279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.664023][ T9359] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 274.089768][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.199393][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.294925][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.302053][ T9064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.377840][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.385013][ T9064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.555712][ T9385] futex_wake_op: syz.3.685 tries to shift op by -2048; fix this program [ 274.604951][ T9385] futex_wake_op: syz.3.685 tries to shift op by -2048; fix this program [ 274.651269][ T9387] 0x000000000001-0x000000020000 : "" [ 274.700334][ T9387] ftl_cs: FTL header corrupt! [ 274.923284][ T9051] Bluetooth: hci5: command tx timeout [ 275.621792][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.002984][ T9051] Bluetooth: hci5: command tx timeout [ 277.022158][ T9279] veth0_vlan: entered promiscuous mode [ 277.114767][ T9279] veth1_vlan: entered promiscuous mode [ 277.521644][ T9279] veth0_macvtap: entered promiscuous mode [ 277.608698][ T9279] veth1_macvtap: entered promiscuous mode [ 277.701462][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.805779][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.949156][ T9064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.042364][ T9064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.187077][ T9064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.242370][ T9064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.955239][ T9196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.002687][ T9196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.299438][ T9196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.344151][ T9196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.149716][ T9478] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 281.830575][ T9505] zswap: compressor not available [ 283.562567][ T29] audit: type=1800 audit(4294967342.792:8): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.709" name="trace_pipe" dev="tracefs" ino=3609 res=0 errno=0 [ 284.019868][ T9545] zswap: compressor not available [ 284.549180][ T9573] netlink: 338 bytes leftover after parsing attributes in process `syz.4.716'. [ 285.511538][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 285.586792][ T9584] netlink: 'syz.5.718': attribute type 33 has an invalid length. [ 286.021834][ T9051] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 287.290557][ T9595] Invalid ELF header magic: != ELF [ 287.304386][ T9606] zswap: compressor not available [ 288.800022][ T9372] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 288.812490][ T9620] ksmbd: Unknown IPC event: 14, ignore. [ 291.662408][ T9641] zswap: compressor not available [ 292.603211][ T9647] FAULT_INJECTION: forcing a failure. [ 292.603211][ T9647] name failslab, interval 1, probability 0, space 0, times 0 [ 292.662263][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.4.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.662294][ T9647] Tainted: [L]=SOFTLOCKUP [ 292.662301][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.662311][ T9647] Call Trace: [ 292.662318][ T9647] [ 292.662325][ T9647] dump_stack_lvl+0x100/0x190 [ 292.662356][ T9647] should_fail_ex.cold+0x5/0xa [ 292.662378][ T9647] should_failslab+0xc2/0x120 [ 292.662395][ T9647] __kmalloc_cache_noprof+0x7a/0x6f0 [ 292.662417][ T9647] ? system_heap_allocate+0xeb/0x1170 [ 292.662446][ T9647] system_heap_allocate+0xeb/0x1170 [ 292.662471][ T9647] ? irqentry_exit+0x180/0x670 [ 292.662491][ T9647] ? lockdep_hardirqs_on+0x78/0x100 [ 292.662513][ T9647] ? __pfx_system_heap_allocate+0x10/0x10 [ 292.662544][ T9647] ? rep_movs_alternative+0x4a/0x90 [ 292.662573][ T9647] dma_heap_ioctl+0x37f/0x5e0 [ 292.662598][ T9647] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 292.662619][ T9647] ? __x64_sys_close_range+0x2d9/0x5d0 [ 292.662645][ T9647] ? xfd_validate_state+0x129/0x190 [ 292.662672][ T9647] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 292.662696][ T9647] __x64_sys_ioctl+0x18e/0x210 [ 292.662722][ T9647] do_syscall_64+0x106/0xf80 [ 292.662741][ T9647] ? clear_bhb_loop+0x40/0x90 [ 292.662763][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.662782][ T9647] RIP: 0033:0x7fabab19c629 [ 292.662803][ T9647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.662819][ T9647] RSP: 002b:00007fabac0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.662837][ T9647] RAX: ffffffffffffffda RBX: 00007fabab415fa0 RCX: 00007fabab19c629 [ 292.662848][ T9647] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 292.662859][ T9647] RBP: 00007fabab232b39 R08: 0000000000000000 R09: 0000000000000000 [ 292.662869][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.662879][ T9647] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffe4ffdba38 [ 292.662901][ T9647] [ 293.141558][ T9654] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 296.347924][ T9682] netlink: 186 bytes leftover after parsing attributes in process `syz.4.740'. [ 296.584724][ T9051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.595465][ T9051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.605709][ T9051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.614236][ T9051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.621901][ T9051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.367168][ T9688] chnl_net:caif_netlink_parms(): no params data found [ 297.802344][ T9699] zswap: compressor not available [ 297.844850][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.865145][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.872365][ T9688] bridge_slave_0: entered allmulticast mode [ 297.944187][ T9688] bridge_slave_0: entered promiscuous mode [ 297.980233][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.020866][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.054770][ T9688] bridge_slave_1: entered allmulticast mode [ 298.084512][ T9688] bridge_slave_1: entered promiscuous mode [ 298.245018][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.312128][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.549182][ T9688] team0: Port device team_slave_0 added [ 298.587424][ T9688] team0: Port device team_slave_1 added [ 298.683341][ T9189] Bluetooth: hci6: command tx timeout [ 298.717643][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.747524][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.866066][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.930608][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.983112][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.160301][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.175547][ T9719] syz.4.745 (9719): /proc/9718/oom_adj is deprecated, please use /proc/9718/oom_score_adj instead. [ 299.678981][ T29] audit: type=1806 audit(4294967358.912:9): xattr="." res=0 [ 299.824736][ T9688] hsr_slave_0: entered promiscuous mode [ 299.856066][ T9688] hsr_slave_1: entered promiscuous mode [ 299.898939][ T9688] debugfs: 'hsr0' already exists in 'hsr' [ 299.928851][ T9688] Cannot create hsr debugfs directory [ 300.763090][ T9189] Bluetooth: hci6: command tx timeout [ 300.887459][ T9737] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 300.992678][ T9688] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.055893][ T9688] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 301.118516][ T9688] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 301.249453][ T9688] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.680140][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.798604][ T9688] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.890276][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.897630][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.968220][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.975578][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.501271][ T9749] zswap: compressor not available [ 302.847196][ T9189] Bluetooth: hci6: command tx timeout [ 302.965350][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.484639][ T9765] binder: BINDER_SET_CONTEXT_MGR already set [ 303.491056][ T9765] binder: 9764:9765 ioctl 4018620d 9 returned -16 [ 304.107165][ T9688] veth0_vlan: entered promiscuous mode [ 304.181328][ T9688] veth1_vlan: entered promiscuous mode [ 304.336837][ T9688] veth0_macvtap: entered promiscuous mode [ 304.411545][ T9688] veth1_macvtap: entered promiscuous mode [ 304.733182][ T9784] syz.1.756 (9784): attempted to duplicate a private mapping with mremap. This is not supported. [ 304.761607][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.808016][ T9784] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.819647][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.923010][ T9189] Bluetooth: hci6: command tx timeout [ 305.228197][ T9044] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.272965][ T9044] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.403296][ T9044] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.454412][ T9044] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.833089][ T9064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.893706][ T9064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.005791][ T9050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.026637][ T9050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.007085][ T9051] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.018457][ T9051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.026970][ T9051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.034982][ T9051] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.054108][ T9051] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.345266][ T9810] ubi0: attaching mtd0 [ 307.444101][ T9810] ubi0: scanning is finished [ 307.448734][ T9810] ubi0: empty MTD device detected [ 308.461882][ T9805] chnl_net:caif_netlink_parms(): no params data found [ 308.479619][ T9810] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 309.023177][ T9820] random: crng reseeded on system resumption [ 309.087690][ T9051] Bluetooth: hci7: command tx timeout [ 309.574516][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.581863][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.655269][ T9805] bridge_slave_0: entered allmulticast mode [ 309.662684][ T9805] bridge_slave_0: entered promiscuous mode [ 309.776505][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.846586][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.901838][ T9805] bridge_slave_1: entered allmulticast mode [ 309.971519][ T9805] bridge_slave_1: entered promiscuous mode [ 309.980317][ T9827] netlink: 'syz.4.763': attribute type 2 has an invalid length. [ 310.196744][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.278499][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.771487][ T9805] team0: Port device team_slave_0 added [ 310.861253][ T9805] team0: Port device team_slave_1 added [ 311.163142][ T9051] Bluetooth: hci7: command tx timeout [ 311.178324][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.214443][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.333138][ T9051] Bluetooth: hci6: unexpected event 0x33 length: 124 > 10 [ 311.371531][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.533159][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.575767][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.740501][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.837896][ T9842] netlink: 338 bytes leftover after parsing attributes in process `syz.1.767'. [ 312.104958][ T9805] hsr_slave_0: entered promiscuous mode [ 312.149018][ T9805] hsr_slave_1: entered promiscuous mode [ 312.204244][ T9805] debugfs: 'hsr0' already exists in 'hsr' [ 312.270404][ T9805] Cannot create hsr debugfs directory [ 313.031296][ T9865] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 313.180376][ T9865] netlink: 230 bytes leftover after parsing attributes in process `syz.4.770'. [ 313.243459][ T9051] Bluetooth: hci7: command tx timeout [ 313.371021][ T9865] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 314.301545][ T9805] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 314.407433][ T9805] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 314.721019][ T9805] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.890177][ T9805] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.324405][ T9051] Bluetooth: hci7: command tx timeout [ 315.628661][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.736454][ T9805] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.866683][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.873973][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.010597][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.018017][ T9044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.272060][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.491433][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.499768][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.774713][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 318.949793][ T9938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.037731][ T9941] nbd: must specify a size in bytes for the device [ 319.057842][ T9938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.269211][ T9938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.339738][ T9938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.738127][ T9805] veth0_vlan: entered promiscuous mode [ 319.848605][ T9805] veth1_vlan: entered promiscuous mode [ 320.034800][ T9805] veth0_macvtap: entered promiscuous mode [ 320.104572][ T9805] veth1_macvtap: entered promiscuous mode [ 320.191405][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.290731][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.440167][ T9049] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.513333][ T9049] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.579524][ T9049] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.632955][ T9049] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.898349][ T9957] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 321.183383][ T9959] zswap: compressor not available [ 321.398899][ T9064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.464110][ T9064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.778268][ T9049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.833069][ T9049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.899115][ T9977] Invalid ELF header magic: != ELF [ 324.852633][ T9993] vivid-007: ================= START STATUS ================= [ 324.982585][ T9993] vivid-007: Enable Output Cropping: true [ 325.233692][ T9993] vivid-007: Enable Output Composing: true [ 325.239840][ T9993] vivid-007: Enable Output Scaler: true [ 325.553337][ T9993] vivid-007: Tx RGB Quantization Range: Automatic [ 325.763122][ T9993] vivid-007: Transmit Mode: HDMI [ 325.768119][ T9993] vivid-007: Hotplug Present: 0x00000000 [ 326.073125][ T9993] vivid-007: RxSense Present: 0x00000000 [ 326.078922][ T9993] vivid-007: EDID Present: 0x00000000 [ 326.383561][ T9993] vivid-007: ================== END STATUS ================== [ 327.033543][T10028] FAULT_INJECTION: forcing a failure. [ 327.033543][T10028] name failslab, interval 1, probability 0, space 0, times 0 [ 327.130058][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.7.798 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.130089][T10028] Tainted: [L]=SOFTLOCKUP [ 327.130096][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.130106][T10028] Call Trace: [ 327.130113][T10028] [ 327.130120][T10028] dump_stack_lvl+0x100/0x190 [ 327.130153][T10028] should_fail_ex.cold+0x5/0xa [ 327.130175][T10028] should_failslab+0xc2/0x120 [ 327.130193][T10028] __kmalloc_cache_noprof+0x7a/0x6f0 [ 327.130215][T10028] ? alloc_pipe_info+0x10e/0x590 [ 327.130232][T10028] ? find_held_lock+0x2b/0x80 [ 327.130252][T10028] alloc_pipe_info+0x10e/0x590 [ 327.130271][T10028] splice_direct_to_actor+0x78f/0xa30 [ 327.130303][T10028] ? __lock_acquire+0x4a5/0x2630 [ 327.130324][T10028] ? __pfx_direct_splice_actor+0x10/0x10 [ 327.130355][T10028] ? __pfx_aa_file_perm+0x10/0x10 [ 327.130377][T10028] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 327.130413][T10028] do_splice_direct+0x174/0x240 [ 327.130443][T10028] ? __pfx_do_splice_direct+0x10/0x10 [ 327.130473][T10028] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 327.130505][T10028] ? rw_verify_area+0xce/0x6d0 [ 327.130532][T10028] do_sendfile+0xadc/0xe20 [ 327.130564][T10028] ? __pfx_do_sendfile+0x10/0x10 [ 327.130591][T10028] ? __fget_files+0x21f/0x3d0 [ 327.130625][T10028] __x64_sys_sendfile64+0x1d8/0x220 [ 327.130644][T10028] ? ksys_write+0x1ac/0x250 [ 327.130671][T10028] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 327.130707][T10028] do_syscall_64+0x106/0xf80 [ 327.130727][T10028] ? clear_bhb_loop+0x40/0x90 [ 327.130749][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.130768][T10028] RIP: 0033:0x7fbe7ff9c629 [ 327.130784][T10028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.130800][T10028] RSP: 002b:00007fbe80ed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.130818][T10028] RAX: ffffffffffffffda RBX: 00007fbe80215fa0 RCX: 00007fbe7ff9c629 [ 327.130830][T10028] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 327.130840][T10028] RBP: 00007fbe80ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 327.130850][T10028] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 327.130860][T10028] R13: 00007fbe80216038 R14: 00007fbe80215fa0 R15: 00007ffe5238d628 [ 327.130883][T10028] [ 328.116474][T10042] QAT: Device 0 not found [ 328.793413][T10037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.913799][T10037] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 329.153922][T10037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.225895][T10037] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.794328][T10037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.890733][T10037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 330.182273][T10037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 330.381149][T10037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.461604][T10037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 330.525555][T10037] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.578848][T10037] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.641293][T10037] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.687042][ T9051] Bluetooth: hci0: command 0x0406 tx timeout [ 330.703651][T10037] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 330.742688][T10037] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 330.815290][T10037] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 330.829402][T10037] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 330.896383][T10037] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 330.929921][T10037] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 330.995564][T10037] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 331.053297][T10037] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 331.095649][T10037] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 331.163132][ T9051] Bluetooth: hci1: command 0x0406 tx timeout [ 331.187485][T10037] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 331.802912][ T9051] Bluetooth: hci2: command 0x0406 tx timeout [ 332.442881][ T9051] Bluetooth: hci3: command 0x0406 tx timeout [ 332.524288][ T9051] Bluetooth: hci4: command 0x0c1a tx timeout [ 332.762916][ T9051] Bluetooth: hci5: command 0x0c1a tx timeout [ 332.769074][ T9189] Bluetooth: hci0: command 0x0406 tx timeout [ 332.926146][ T9051] Bluetooth: hci6: command 0x0c1a tx timeout [ 333.086114][ T9051] Bluetooth: hci7: command 0x0c1a tx timeout [ 333.243333][ T9051] Bluetooth: hci1: command 0x0406 tx timeout [ 333.882990][ T9051] Bluetooth: hci2: command 0x0406 tx timeout [ 334.524088][ T9051] Bluetooth: hci3: command 0x0406 tx timeout [ 334.603769][ T9051] Bluetooth: hci4: command 0x0c1a tx timeout [ 334.843080][ T9051] Bluetooth: hci5: command 0x0c1a tx timeout [ 335.005682][ T9051] Bluetooth: hci6: command 0x0c1a tx timeout [ 335.166585][ T9051] Bluetooth: hci7: command 0x0c1a tx timeout [ 335.229727][T10093] netlink: 338 bytes leftover after parsing attributes in process `syz.1.814'. [ 335.944162][T10110] __vm_enough_memory: pid: 10110, comm: syz.6.817, bytes: 4398046511104 not enough memory for the allocation [ 335.966321][ T9051] Bluetooth: hci2: command 0x0406 tx timeout [ 336.453612][T10116] blktrace: Concurrent blktraces are not allowed on loop2 [ 336.686959][ T9051] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.923448][ T9051] Bluetooth: hci5: command 0x0c1a tx timeout [ 337.083519][ T9051] Bluetooth: hci6: command 0x0c1a tx timeout [ 337.244739][ T9051] Bluetooth: hci7: command 0x0c1a tx timeout [ 339.002875][ T9051] Bluetooth: hci5: command 0x0c1a tx timeout [ 339.604522][T10159] usb usb36: usbfs: process 10159 (syz.6.823) did not claim interface 0 before use [ 339.796041][ T9051] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 340.764025][T10173] FAULT_INJECTION: forcing a failure. [ 340.764025][T10173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.873378][T10173] CPU: 0 UID: 0 PID: 10173 Comm: syz.1.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.873409][T10173] Tainted: [L]=SOFTLOCKUP [ 340.873416][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.873426][T10173] Call Trace: [ 340.873432][T10173] [ 340.873439][T10173] dump_stack_lvl+0x100/0x190 [ 340.873471][T10173] should_fail_ex.cold+0x5/0xa [ 340.873492][T10173] _copy_from_user+0x2e/0xd0 [ 340.873521][T10173] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 340.873561][T10173] snd_rawmidi_write+0x2dc/0xc60 [ 340.873584][T10173] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 340.873603][T10173] ? __pfx_default_wake_function+0x10/0x10 [ 340.873623][T10173] ? bpf_lsm_file_permission+0x9/0x10 [ 340.873650][T10173] ? security_file_permission+0x76/0x210 [ 340.873681][T10173] ? rw_verify_area+0xce/0x6d0 [ 340.873709][T10173] vfs_write+0x2aa/0x1070 [ 340.873737][T10173] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 340.873756][T10173] ? __pfx_vfs_write+0x10/0x10 [ 340.873783][T10173] ? find_held_lock+0x2b/0x80 [ 340.873799][T10173] ? __fget_files+0x215/0x3d0 [ 340.873826][T10173] ? __fget_files+0x215/0x3d0 [ 340.873857][T10173] ? __fget_files+0x21f/0x3d0 [ 340.873899][T10173] ksys_write+0x1f8/0x250 [ 340.873927][T10173] ? __pfx_ksys_write+0x10/0x10 [ 340.873961][T10173] do_syscall_64+0x106/0xf80 [ 340.873981][T10173] ? clear_bhb_loop+0x40/0x90 [ 340.874004][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.874023][T10173] RIP: 0033:0x7f245e79c629 [ 340.874038][T10173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.874055][T10173] RSP: 002b:00007f245f6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.874073][T10173] RAX: ffffffffffffffda RBX: 00007f245ea15fa0 RCX: 00007f245e79c629 [ 340.874084][T10173] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000008 [ 340.874095][T10173] RBP: 00007f245e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 340.874106][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.874116][T10173] R13: 00007f245ea16038 R14: 00007f245ea15fa0 R15: 00007ffebbbec038 [ 340.874138][T10173] [ 342.001720][T10184] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 342.763438][ T9051] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 345.356794][T10211] futex_wake_op: syz.4.836 tries to shift op by -1; fix this program [ 347.248525][T10231] futex_wake_op: syz.4.842 tries to shift op by -2048; fix this program [ 347.377465][ T9189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.395747][ T9189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.408403][ T9189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.417224][ T9189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.425131][ T9189] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.532899][T10231] futex_wake_op: syz.4.842 tries to shift op by -2048; fix this program [ 347.605168][T10232] vivid-007: ================= START STATUS ================= [ 347.815889][T10232] vivid-007: Generate PTS: true [ 347.820856][T10232] vivid-007: Generate SCR: true [ 347.945447][T10232] tpg source WxH: 320x240 (Y'CbCr) [ 347.950687][T10232] tpg field: 1 [ 348.107559][T10232] tpg crop: (0,0)/320x240 [ 348.112022][T10232] tpg compose: (0,0)/320x240 [ 348.193030][T10232] tpg colorspace: 8 [ 348.196970][T10232] tpg transfer function: 0/0 [ 348.201610][T10232] tpg Y'CbCr encoding: 0/0 [ 348.448372][T10233] chnl_net:caif_netlink_parms(): no params data found [ 348.479951][T10232] tpg quantization: 0/0 [ 348.507587][T10232] tpg RGB range: 0/2 [ 348.511516][T10232] vivid-007: ================== END STATUS ================== [ 349.291850][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.360648][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.418667][T10233] bridge_slave_0: entered allmulticast mode [ 349.483688][ T9189] Bluetooth: hci7: command tx timeout [ 349.524210][T10233] bridge_slave_0: entered promiscuous mode [ 349.628173][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.678198][T10233] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.739228][T10233] bridge_slave_1: entered allmulticast mode [ 349.823081][T10233] bridge_slave_1: entered promiscuous mode [ 350.145904][T10233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.267985][T10233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.390958][T10288] FAULT_INJECTION: forcing a failure. [ 350.390958][T10288] name failslab, interval 1, probability 0, space 0, times 0 [ 350.483611][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.4.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.483645][T10288] Tainted: [L]=SOFTLOCKUP [ 350.483652][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.483671][T10288] Call Trace: [ 350.483678][T10288] [ 350.483686][T10288] dump_stack_lvl+0x100/0x190 [ 350.483718][T10288] should_fail_ex.cold+0x5/0xa [ 350.483741][T10288] ? __alloc_empty_sheaf+0x35/0x50 [ 350.483763][T10288] should_failslab+0xc2/0x120 [ 350.483781][T10288] __kmalloc_noprof+0xe0/0x850 [ 350.483805][T10288] ? lockdep_init_map_type+0x5c/0x250 [ 350.483835][T10288] __alloc_empty_sheaf+0x35/0x50 [ 350.483857][T10288] do_kmem_cache_create+0x49e/0x540 [ 350.483891][T10288] __kmem_cache_create_args+0x386/0x420 [ 350.483918][T10288] mon_text_open+0x333/0x510 [ 350.483943][T10288] ? __pfx_mon_text_open+0x10/0x10 [ 350.483969][T10288] ? __pfx_mon_text_ctor+0x10/0x10 [ 350.483992][T10288] ? find_held_lock+0x2b/0x80 [ 350.484008][T10288] ? __pfx_apparmor_file_open+0x10/0x10 [ 350.484032][T10288] ? lockdown_is_locked_down+0x3d/0x140 [ 350.484054][T10288] ? bpf_lsm_locked_down+0x9/0x10 [ 350.484074][T10288] ? __pfx_mon_text_open+0x10/0x10 [ 350.484097][T10288] full_proxy_open_regular+0x1b6/0x370 [ 350.484123][T10288] do_dentry_open+0x6d8/0x1660 [ 350.484152][T10288] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 350.484181][T10288] vfs_open+0x82/0x3f0 [ 350.484205][T10288] path_openat+0x208c/0x31a0 [ 350.484231][T10288] ? __pfx_path_openat+0x10/0x10 [ 350.484257][T10288] do_file_open+0x20e/0x430 [ 350.484276][T10288] ? __pfx_do_file_open+0x10/0x10 [ 350.484310][T10288] ? alloc_fd+0x476/0x790 [ 350.484340][T10288] ? do_getname+0x191/0x390 [ 350.484364][T10288] do_sys_openat2+0x10d/0x1e0 [ 350.484386][T10288] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.484417][T10288] __x64_sys_openat+0x12d/0x210 [ 350.484440][T10288] ? __pfx___x64_sys_openat+0x10/0x10 [ 350.484473][T10288] do_syscall_64+0x106/0xf80 [ 350.484492][T10288] ? clear_bhb_loop+0x40/0x90 [ 350.484514][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.484533][T10288] RIP: 0033:0x7fabab19c629 [ 350.484553][T10288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.484571][T10288] RSP: 002b:00007fabac0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.484589][T10288] RAX: ffffffffffffffda RBX: 00007fabab415fa0 RCX: 00007fabab19c629 [ 350.484600][T10288] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 350.484612][T10288] RBP: 00007fabab232b39 R08: 0000000000000000 R09: 0000000000000000 [ 350.484622][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.484633][T10288] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffe4ffdba38 [ 350.484663][T10288] [ 350.484911][T10288] __kmem_cache_create_args(mon_text_ffff88805ab31400) failed with error -12 [ 350.836740][T10233] team0: Port device team_slave_0 added [ 350.885454][T10233] team0: Port device team_slave_1 added [ 351.008282][T10233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.031588][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.113719][T10233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.161446][T10233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.171390][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.282838][T10233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.355595][T10296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 351.454952][T10233] hsr_slave_0: entered promiscuous mode [ 351.470734][T10233] hsr_slave_1: entered promiscuous mode [ 351.493550][T10233] debugfs: 'hsr0' already exists in 'hsr' [ 351.525022][T10233] Cannot create hsr debugfs directory [ 351.643185][ T9189] Bluetooth: hci7: command tx timeout [ 352.665327][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.4.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.665368][T10288] Tainted: [L]=SOFTLOCKUP [ 352.665376][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.665386][T10288] Call Trace: [ 352.665392][T10288] [ 352.665400][T10288] dump_stack_lvl+0x100/0x190 [ 352.665431][T10288] __kmem_cache_create_args.cold+0x33/0x6e [ 352.665459][T10288] mon_text_open+0x333/0x510 [ 352.665485][T10288] ? __pfx_mon_text_open+0x10/0x10 [ 352.665511][T10288] ? __pfx_mon_text_ctor+0x10/0x10 [ 352.665535][T10288] ? find_held_lock+0x2b/0x80 [ 352.665552][T10288] ? __pfx_apparmor_file_open+0x10/0x10 [ 352.665578][T10288] ? lockdown_is_locked_down+0x3d/0x140 [ 352.665600][T10288] ? bpf_lsm_locked_down+0x9/0x10 [ 352.665621][T10288] ? __pfx_mon_text_open+0x10/0x10 [ 352.665650][T10288] full_proxy_open_regular+0x1b6/0x370 [ 352.665677][T10288] do_dentry_open+0x6d8/0x1660 [ 352.665706][T10288] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 352.665736][T10288] vfs_open+0x82/0x3f0 [ 352.665760][T10288] path_openat+0x208c/0x31a0 [ 352.665786][T10288] ? __pfx_path_openat+0x10/0x10 [ 352.665812][T10288] do_file_open+0x20e/0x430 [ 352.665831][T10288] ? __pfx_do_file_open+0x10/0x10 [ 352.665866][T10288] ? alloc_fd+0x476/0x790 [ 352.665898][T10288] ? do_getname+0x191/0x390 [ 352.665921][T10288] do_sys_openat2+0x10d/0x1e0 [ 352.665944][T10288] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.665976][T10288] __x64_sys_openat+0x12d/0x210 [ 352.666001][T10288] ? __pfx___x64_sys_openat+0x10/0x10 [ 352.666033][T10288] do_syscall_64+0x106/0xf80 [ 352.666053][T10288] ? clear_bhb_loop+0x40/0x90 [ 352.666076][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.666095][T10288] RIP: 0033:0x7fabab19c629 [ 352.666110][T10288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.666128][T10288] RSP: 002b:00007fabac0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.666146][T10288] RAX: ffffffffffffffda RBX: 00007fabab415fa0 RCX: 00007fabab19c629 [ 352.666158][T10288] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 352.666169][T10288] RBP: 00007fabab232b39 R08: 0000000000000000 R09: 0000000000000000 [ 352.666180][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.666191][T10288] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffe4ffdba38 [ 352.666215][T10288] [ 353.116320][T10233] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 353.215759][T10233] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 353.278883][T10233] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 353.357209][T10233] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 353.737517][ T9189] Bluetooth: hci7: command tx timeout [ 354.012193][T10233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.134298][T10233] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.531086][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.538439][ T9372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.590309][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 354.625069][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.632304][ T9372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.706181][T10326] netlink: 334 bytes leftover after parsing attributes in process `syz.4.857'. [ 355.713923][T10333] bridge0: port 3(team0) entered blocking state [ 355.720934][T10333] bridge0: port 3(team0) entered disabled state [ 355.807563][ T9189] Bluetooth: hci7: command tx timeout [ 355.857247][T10333] team0: entered allmulticast mode [ 355.862417][T10333] team_slave_0: entered allmulticast mode [ 355.925265][T10333] team_slave_1: entered allmulticast mode [ 356.009549][T10333] team0: entered promiscuous mode [ 356.120294][T10333] team_slave_0: entered promiscuous mode [ 356.169684][T10333] team_slave_1: entered promiscuous mode [ 356.194186][T10333] bridge0: port 3(team0) entered blocking state [ 356.200554][T10333] bridge0: port 3(team0) entered forwarding state [ 356.373362][T10233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.028176][T10347] sg_read: process 113 (syz.6.860) changed security contexts after opening file descriptor, this is not allowed. [ 358.170726][T10233] veth0_vlan: entered promiscuous mode [ 358.877351][T10233] veth1_vlan: entered promiscuous mode [ 359.041779][T10233] veth0_macvtap: entered promiscuous mode [ 359.158815][T10233] veth1_macvtap: entered promiscuous mode [ 359.189683][T10368] zswap: compressor not available [ 359.253819][T10233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.312543][T10233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.456240][ T9155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.492583][ T9155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.617947][ T9155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.652027][ T9155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.958439][ T9155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.008504][ T9155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.321620][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.355492][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.486486][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 364.423753][T10423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.463419][T10423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.483065][T10423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.506721][T10423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.546945][T10423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.567963][T10423] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 364.614919][T10423] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 364.642096][T10423] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 364.681201][T10423] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 364.737792][T10423] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 365.722952][ T9189] Bluetooth: hci0: command 0x0406 tx timeout [ 365.885053][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.876'. [ 366.450667][ T9189] Bluetooth: hci1: command 0x0406 tx timeout [ 366.523343][ T9189] Bluetooth: hci3: command 0x0406 tx timeout [ 366.529388][ T9189] Bluetooth: hci2: command 0x0406 tx timeout [ 366.604183][ T9189] Bluetooth: hci5: command 0x0c1a tx timeout [ 366.610218][ T9189] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.686319][ T9189] Bluetooth: hci7: command 0x0c1a tx timeout [ 366.692398][ T9051] Bluetooth: hci6: command 0x0c1a tx timeout [ 367.144868][T10449] FAULT_INJECTION: forcing a failure. [ 367.144868][T10449] name failslab, interval 1, probability 0, space 0, times 0 [ 367.420959][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.6.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.420991][T10449] Tainted: [L]=SOFTLOCKUP [ 367.420998][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.421010][T10449] Call Trace: [ 367.421016][T10449] [ 367.421023][T10449] dump_stack_lvl+0x100/0x190 [ 367.421056][T10449] should_fail_ex.cold+0x5/0xa [ 367.421077][T10449] ? __register_sysctl_table+0xac/0x1650 [ 367.421104][T10449] should_failslab+0xc2/0x120 [ 367.421123][T10449] __kmalloc_noprof+0xe0/0x850 [ 367.421153][T10449] __register_sysctl_table+0xac/0x1650 [ 367.421181][T10449] ? is_module_address+0x5f/0xf0 [ 367.421208][T10449] ? __pfx___register_sysctl_table+0x10/0x10 [ 367.421235][T10449] ? is_module_address+0x69/0xf0 [ 367.421257][T10449] ? register_net_sysctl_sz+0x222/0x430 [ 367.421282][T10449] ? __asan_memcpy+0x3c/0x60 [ 367.421308][T10449] sctp_sysctl_net_register+0x15e/0x200 [ 367.421331][T10449] ? __pfx_sctp_defaults_init+0x10/0x10 [ 367.421351][T10449] sctp_defaults_init+0x6d2/0xd90 [ 367.421372][T10449] ? __pfx_sctp_defaults_init+0x10/0x10 [ 367.421393][T10449] ops_init+0x1e2/0x5f0 [ 367.421418][T10449] setup_net+0x118/0x3a0 [ 367.421440][T10449] ? __pfx_setup_net+0x10/0x10 [ 367.421459][T10449] ? lockdep_init_map_type+0x5c/0x250 [ 367.421484][T10449] ? mutex_init_lockep+0x110/0x150 [ 367.421511][T10449] copy_net_ns+0x46f/0x7c0 [ 367.421537][T10449] create_new_namespaces+0x3ea/0xac0 [ 367.421561][T10449] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 367.421583][T10449] ksys_unshare+0x455/0xab0 [ 367.421607][T10449] ? __pfx_ksys_unshare+0x10/0x10 [ 367.421638][T10449] __x64_sys_unshare+0x31/0x40 [ 367.421660][T10449] do_syscall_64+0x106/0xf80 [ 367.421680][T10449] ? clear_bhb_loop+0x40/0x90 [ 367.421702][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.421721][T10449] RIP: 0033:0x7f885839c629 [ 367.421737][T10449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.421754][T10449] RSP: 002b:00007f88565ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 367.421772][T10449] RAX: ffffffffffffffda RBX: 00007f8858615fa0 RCX: 00007f885839c629 [ 367.421784][T10449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 367.421795][T10449] RBP: 00007f8858432b39 R08: 0000000000000000 R09: 0000000000000000 [ 367.421805][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.421815][T10449] R13: 00007f8858616038 R14: 00007f8858615fa0 R15: 00007ffdb4108668 [ 367.421846][T10449] [ 368.211117][T10470] netlink: 28 bytes leftover after parsing attributes in process `syz.8.880'. [ 368.252576][ T9051] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 368.323539][ T9051] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 368.424126][T10461] zswap: compressor not available [ 368.467026][ T9051] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 368.653075][ T9051] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 368.703307][ T9051] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 368.770214][ T9051] Bluetooth: hci7: command 0x0c1a tx timeout [ 368.868675][T10470] bond0: (slave bond_slave_1): Releasing backup interface [ 369.719929][ C0] sd 0:0:1:0: [sda] tag#2876 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 369.730599][ C0] sd 0:0:1:0: [sda] tag#2876 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 370.317236][T10460] chnl_net:caif_netlink_parms(): no params data found [ 370.842962][ T9045] Bluetooth: hci8: command tx timeout [ 370.849182][ T9045] Bluetooth: hci7: command 0x0c1a tx timeout [ 371.109687][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.142490][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.213043][T10460] bridge_slave_0: entered allmulticast mode [ 371.262998][T10460] bridge_slave_0: entered promiscuous mode [ 371.298489][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.344580][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.384477][T10460] bridge_slave_1: entered allmulticast mode [ 371.426897][T10460] bridge_slave_1: entered promiscuous mode [ 371.659488][T10460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.728305][T10460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.060259][T10460] team0: Port device team_slave_0 added [ 372.112340][T10460] team0: Port device team_slave_1 added [ 372.386557][T10460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.425651][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.612878][T10460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.693050][T10460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.747222][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.918379][T10460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.929539][ T9045] Bluetooth: hci8: command tx timeout [ 373.576138][T10517] usb usb2: usbfs: process 10517 (syz.6.887) did not claim interface 4 before use [ 374.068740][T10460] hsr_slave_0: entered promiscuous mode [ 374.134433][T10460] hsr_slave_1: entered promiscuous mode [ 374.140556][T10460] debugfs: 'hsr0' already exists in 'hsr' [ 374.217592][T10460] Cannot create hsr debugfs directory [ 375.002921][ T9045] Bluetooth: hci8: command tx timeout [ 377.048143][T10460] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 377.083220][T10537] Bluetooth: hci8: command tx timeout [ 377.138535][T10460] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 377.426157][T10460] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 377.537007][T10460] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 378.043552][ T9045] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 378.203008][ T9051] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 378.335631][T10460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.491731][T10460] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.540778][T10553] random: crng reseeded on system resumption [ 378.572404][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.579801][ T9044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.685721][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.692923][ T9044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.946351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.953221][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.829762][T10460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.475727][T10460] veth0_vlan: entered promiscuous mode [ 381.609365][T10460] veth1_vlan: entered promiscuous mode [ 381.695865][T10593] binder: 10589:10593 ioctl 541d 200000000080 returned -22 [ 381.801368][T10460] veth0_macvtap: entered promiscuous mode [ 381.875939][T10460] veth1_macvtap: entered promiscuous mode [ 381.980641][T10460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.069284][T10460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.210819][ T9049] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.262873][ T9049] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.599590][ T9049] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.667732][ T9049] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.367063][ T9050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.435342][ T9050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.815021][ T9050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.850782][ T9050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.794367][T10666] futex_wake_op: syz.8.914 tries to shift op by -1; fix this program [ 389.769922][T10687] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 390.201878][T10682] netlink: 98 bytes leftover after parsing attributes in process `syz.4.918'. [ 395.848757][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.930'. [ 396.804348][T10748] netlink: 342 bytes leftover after parsing attributes in process `syz.8.933'. [ 397.181700][T10745] zram: Added device: zram1 [ 397.997296][T10760] netlink: 330 bytes leftover after parsing attributes in process `syz.6.931'. [ 398.178222][T10760] &?: renamed from ip6tnl0 (while UP) [ 400.185994][T10777] netlink: 'syz.8.938': attribute type 16 has an invalid length. [ 400.286178][T10777] netlink: 306 bytes leftover after parsing attributes in process `syz.8.938'. [ 400.738973][T10789] FAULT_INJECTION: forcing a failure. [ 400.738973][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.836521][T10789] CPU: 0 UID: 0 PID: 10789 Comm: syz.8.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.836555][T10789] Tainted: [L]=SOFTLOCKUP [ 400.836561][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.836572][T10789] Call Trace: [ 400.836579][T10789] [ 400.836586][T10789] dump_stack_lvl+0x100/0x190 [ 400.836627][T10789] should_fail_ex.cold+0x5/0xa [ 400.836649][T10789] _copy_from_iter+0x1f4/0x1690 [ 400.836681][T10789] ? __asan_memset+0x23/0x50 [ 400.836705][T10789] ? __pfx__copy_from_iter+0x10/0x10 [ 400.836733][T10789] ? __pfx___alloc_skb+0x10/0x10 [ 400.836761][T10789] netlink_sendmsg+0x808/0xda0 [ 400.836788][T10789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.836814][T10789] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 400.836842][T10789] __sys_sendto+0x4aa/0x520 [ 400.836861][T10789] ? __pfx___sys_sendto+0x10/0x10 [ 400.836885][T10789] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 400.836915][T10789] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 400.836960][T10789] __x64_sys_sendto+0xe0/0x1c0 [ 400.836977][T10789] ? do_syscall_64+0x95/0xf80 [ 400.836996][T10789] ? lockdep_hardirqs_on+0x78/0x100 [ 400.837016][T10789] do_syscall_64+0x106/0xf80 [ 400.837034][T10789] ? clear_bhb_loop+0x40/0x90 [ 400.837057][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.837076][T10789] RIP: 0033:0x7f1fbc55cece [ 400.837091][T10789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.837109][T10789] RSP: 002b:00007f1fbd51ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 400.837127][T10789] RAX: ffffffffffffffda RBX: 00007f1fbd51e6c0 RCX: 00007f1fbc55cece [ 400.837139][T10789] RDX: 0000000000000020 RSI: 00007f1fbd51d000 RDI: 0000000000000003 [ 400.837149][T10789] RBP: 0000000000000000 R08: 00007f1fbd51cf04 R09: 000000000000000c [ 400.837160][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 400.837172][T10789] R13: 00007f1fbd51cf58 R14: 00007f1fbd51d000 R15: 0000000000000000 [ 400.837195][T10789] [ 404.787825][T10827] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.060972][ T29] audit: type=1804 audit(4294967464.292:10): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.950" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 405.093345][T10834] bonding: no command found in bonding_masters - use +ifname or -ifname [ 405.521077][T10839] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 406.384953][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.954'. [ 406.465174][T10839] PCI: Can't parse resource_alignment parameter: B [ 406.538144][T10846] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 407.169712][ T9045] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 407.181283][ T9045] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 407.189454][ T9045] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 407.199587][ T9045] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 407.207464][ T9045] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 408.122370][T10862] chnl_net:caif_netlink_parms(): no params data found [ 408.363463][ T30] INFO: task syz.0.585:8902 blocked for more than 143 seconds. [ 408.371170][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.455115][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.545200][ T30] task:syz.0.585 state:D stack:28304 pid:8902 tgid:8900 ppid:5826 task_flags:0x400740 flags:0x00080002 [ 408.626007][ T30] Call Trace: [ 408.629326][ T30] [ 408.632321][ T30] __schedule+0xfee/0x60e0 [ 408.729998][ T30] ? __lock_acquire+0x4a5/0x2630 [ 408.753236][ T30] ? __pfx___schedule+0x10/0x10 [ 408.758420][ T30] ? find_held_lock+0x2b/0x80 [ 408.853310][ T30] ? schedule+0x2bf/0x390 [ 408.857725][ T30] schedule+0xdd/0x390 [ 408.862432][ T30] schedule_timeout+0x1b2/0x280 [ 408.993019][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 409.023163][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.030361][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.084127][ T30] ? __wait_for_common+0x2da/0x4c0 [ 409.185134][ T30] ? rcu_is_watching+0x12/0xc0 [ 409.189961][ T30] __wait_for_common+0x2e7/0x4c0 [ 409.236065][T10862] bridge_slave_0: entered allmulticast mode [ 409.244262][ T9045] Bluetooth: hci9: command tx timeout [ 409.284562][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 409.290083][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 409.319642][T10862] bridge_slave_0: entered promiscuous mode [ 409.375003][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 409.380433][ T30] wait_for_completion_state+0x1c/0x40 [ 409.463269][ T30] vfs_coredump+0x80d/0x5570 [ 409.467926][ T30] ? __lock_acquire+0x4a5/0x2630 [ 409.472965][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 409.557532][ T30] ? __lock_acquire+0x4a5/0x2630 [ 409.562530][ T30] ? lock_acquire+0x1cf/0x380 [ 409.611894][ T30] ? lock_acquire+0x1cf/0x380 [ 409.656320][ T30] ? find_held_lock+0x2b/0x80 [ 409.661226][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 409.712980][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 409.737372][ T30] ? bpf_ksym_find+0x124/0x1c0 [ 409.742184][ T30] ? __kernel_text_address+0xd/0x30 [ 409.805524][ T30] ? unwind_get_return_address+0x59/0xa0 [ 409.811208][ T30] ? arch_stack_walk+0xa6/0xf0 [ 409.855959][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 409.860872][ T30] ? stack_trace_save+0x8e/0xc0 [ 409.913524][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 409.935472][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 409.941065][ T30] ? __lock_acquire+0x4a5/0x2630 [ 409.985631][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.991884][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 410.032105][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 410.054729][ T30] ? rcu_is_watching+0x12/0xc0 [ 410.083128][ T30] get_signal+0x1f2a/0x21e0 [ 410.100819][ T30] ? __pfx_get_signal+0x10/0x10 [ 410.115201][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 410.138574][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 410.156640][ T30] arch_do_signal_or_restart+0x91/0x770 [ 410.180820][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.200036][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 410.221289][ T30] do_syscall_64+0x668/0xf80 [ 410.248893][ T30] ? clear_bhb_loop+0x40/0x90 [ 410.263208][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.286978][ T30] RIP: 0033:0x7f406c59c629 [ 410.291633][ T30] RSP: 002b:00007f406d4230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.330183][ T30] RAX: ffffffffffffffda RBX: 00007f406c816098 RCX: 00007f406c59c629 [ 410.353701][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f406c81609c [ 410.361801][ T30] RBP: 00007f406c816090 R08: 0000000000000000 R09: 0000000000000000 [ 410.413274][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.437400][ T30] R13: 00007f406c816128 R14: 00007ffec823c9c0 R15: 00007ffec823caa8 [ 410.465278][ T30] [ 410.491644][ T30] INFO: task syz.2.615:9031 blocked for more than 145 seconds. [ 410.684042][ T30] Tainted: G L syzkaller #0 [ 410.690748][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.803965][ T30] task:syz.2.615 state:D stack:27464 pid:9031 tgid:9027 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 410.898735][ T30] Call Trace: [ 410.902162][ T30] [ 410.945452][ T30] __schedule+0xfee/0x60e0 [ 410.950051][ T30] ? __lock_acquire+0x4a5/0x2630 [ 411.034408][ T30] ? __pfx___schedule+0x10/0x10 [ 411.039304][ T30] ? find_held_lock+0x2b/0x80 [ 411.108561][ T30] ? schedule+0x2bf/0x390 [ 411.112939][ T30] schedule+0xdd/0x390 [ 411.174116][ T30] schedule_preempt_disabled+0x13/0x30 [ 411.204201][ T30] __mutex_lock+0xc9a/0x1b90 [ 411.208838][ T30] ? rcu_is_watching+0x12/0xc0 [ 411.213711][ T30] ? trace_kmalloc+0x101/0x130 [ 411.324438][ T9045] Bluetooth: hci9: command tx timeout [ 411.330220][ T30] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 411.405089][ T30] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 411.412438][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 411.495339][ T30] ? kmalloc_reserve+0xf9/0x350 [ 411.500365][ T30] ? skb_put+0x138/0x180 [ 411.544656][ T30] ? __nlmsg_put+0x152/0x1c0 [ 411.549375][ T30] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 411.606760][ T30] nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 411.612628][ T30] ? kfree_skbmem+0x19a/0x210 [ 411.640726][ T30] ? kmem_cache_free+0x124/0x6a0 [ 411.654496][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 411.686646][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 411.692274][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.724149][ T30] ? genl_get_cmd+0x3ef/0x720 [ 411.739527][ T30] ? __dev_queue_xmit+0x7fd/0x4750 [ 411.754638][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 411.775526][ T30] genl_rcv_msg+0x560/0x800 [ 411.780114][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.815850][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 411.822329][ T30] netlink_rcv_skb+0x159/0x420 [ 411.851009][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.886247][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.891694][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 411.912417][ T30] genl_rcv+0x28/0x40 [ 411.924683][ T30] netlink_unicast+0x5aa/0x870 [ 411.929491][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 411.959213][ T30] netlink_sendmsg+0x8b0/0xda0 [ 411.964054][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.993944][ T30] ? __import_iovec+0x1d2/0x640 [ 412.015630][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 412.021456][ T30] ____sys_sendmsg+0xa54/0xc30 [ 412.048810][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.054297][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 412.094594][ T30] ___sys_sendmsg+0x190/0x1e0 [ 412.099441][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.134695][ T30] __sys_sendmsg+0x170/0x220 [ 412.139396][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.165990][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 412.185597][ T30] do_syscall_64+0x106/0xf80 [ 412.190229][ T30] ? clear_bhb_loop+0x40/0x90 [ 412.217102][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.223045][ T30] RIP: 0033:0x7f45b319c629 [ 412.255044][ T30] RSP: 002b:00007f45b3f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.263491][ T30] RAX: ffffffffffffffda RBX: 00007f45b3416180 RCX: 00007f45b319c629 [ 412.307551][ T30] RDX: 0000000020000014 RSI: 0000200000000b80 RDI: 000000000000000b [ 412.350892][ T30] RBP: 00007f45b3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 412.377629][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.402064][ T30] R13: 00007f45b3416218 R14: 00007f45b3416180 R15: 00007ffef7ad4398 [ 412.427211][ T30] [ 412.545119][ T30] [ 412.545119][ T30] Showing all locks held in the system: [ 412.574963][ T30] 1 lock held by khungtaskd/30: [ 412.614950][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 412.660462][ T30] 2 locks held by syz-executor/5822: [ 412.687073][ T30] #0: ffff888041f360e0 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 412.721560][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 412.760344][ T30] 2 locks held by getty/6617: [ 412.780774][ T30] #0: ffff88803737b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 412.811458][ T30] #1: ffffc9000341b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 412.841537][ T30] 2 locks held by syz.0.585/8901: [ 412.870390][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.905844][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 412.936026][ T30] 2 locks held by syz.2.615/9031: [ 412.941087][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.980286][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 413.016136][ T30] 2 locks held by kworker/u10:1/9049: [ 413.021600][ T30] 2 locks held by syz-executor/9188: [ 413.052306][ T30] #0: ffff8880203b40e0 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 413.089492][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 413.126398][ T30] 2 locks held by syz.3.700/9502: [ 413.131636][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.172242][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 413.213156][ T30] 2 locks held by syz.5.731/9634: [ 413.227210][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.256097][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 413.286313][ T30] 2 locks held by syz.7.806/10064: [ 413.291481][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.342043][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 413.370205][ T30] 1 lock held by syz-executor/10233: [ 413.385758][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 413.394780][ T30] 5 locks held by syz.9.957/10866: [ 413.408844][ T9045] Bluetooth: hci9: command tx timeout [ 413.435519][ T30] #0: ffff88805ac0cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 413.464493][ T30] #1: ffff88805ac0c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 413.491512][ T30] #2: ffffffff908a9f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 413.555848][ T30] #3: ffff88806a0c92f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 413.577367][ T30] #4: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 413.617383][ T30] 3 locks held by syz-executor/10862: [ 413.622794][ T30] #0: ffff888032968ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 413.655700][ T30] #1: ffff8880329680c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 413.683758][ T30] #2: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 413.717597][ T30] 2 locks held by syz.6.959/10872: [ 413.722748][ T30] #0: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 413.761840][ T30] #1: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 413.792480][ T30] [ 413.794833][ T30] ============================================= [ 413.794833][ T30] [ 413.995847][ T30] NMI backtrace for cpu 0 [ 413.995868][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 413.995895][ T30] Tainted: [L]=SOFTLOCKUP [ 413.995901][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.995912][ T30] Call Trace: [ 413.995918][ T30] [ 413.995925][ T30] dump_stack_lvl+0x100/0x190 [ 413.995957][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 413.995987][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 413.996016][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 413.996046][ T30] sys_info+0x141/0x190 [ 413.996069][ T30] watchdog+0xd25/0x1050 [ 413.996091][ T30] ? __pfx_watchdog+0x10/0x10 [ 413.996109][ T30] ? __kthread_parkme+0x18c/0x230 [ 413.996131][ T30] ? kthread+0x13a/0x450 [ 413.996154][ T30] ? __pfx_watchdog+0x10/0x10 [ 413.996169][ T30] kthread+0x370/0x450 [ 413.996191][ T30] ? __pfx_kthread+0x10/0x10 [ 413.996216][ T30] ret_from_fork+0x754/0xd80 [ 413.996243][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 413.996272][ T30] ? __switch_to+0x7b4/0x1120 [ 413.996292][ T30] ? __pfx_kthread+0x10/0x10 [ 413.996317][ T30] ret_from_fork_asm+0x1a/0x30 [ 413.996346][ T30] [ 414.420462][ T9049] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.530891][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 414.537790][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 414.548478][ T30] Tainted: [L]=SOFTLOCKUP [ 414.552826][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.562876][ T30] Call Trace: [ 414.566149][ T30] [ 414.569191][ T30] dump_stack_lvl+0x100/0x190 [ 414.573881][ T30] vpanic+0x552/0x970 [ 414.577865][ T30] ? __pfx_vpanic+0x10/0x10 [ 414.582368][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 414.588537][ T30] panic+0xd1/0xe0 [ 414.592273][ T30] ? __pfx_panic+0x10/0x10 [ 414.596717][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 414.602900][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 414.609078][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 414.615238][ T30] ? watchdog.cold+0x198/0x1ca [ 414.620003][ T30] ? watchdog+0xd35/0x1050 [ 414.624418][ T30] watchdog.cold+0x1a9/0x1ca [ 414.629032][ T30] ? __pfx_watchdog+0x10/0x10 [ 414.633727][ T30] ? __kthread_parkme+0x18c/0x230 [ 414.638841][ T30] ? kthread+0x13a/0x450 [ 414.643208][ T30] ? __pfx_watchdog+0x10/0x10 [ 414.647993][ T30] kthread+0x370/0x450 [ 414.652079][ T30] ? __pfx_kthread+0x10/0x10 [ 414.656681][ T30] ret_from_fork+0x754/0xd80 [ 414.661291][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 414.666422][ T30] ? __switch_to+0x7b4/0x1120 [ 414.671108][ T30] ? __pfx_kthread+0x10/0x10 [ 414.675759][ T30] ret_from_fork_asm+0x1a/0x30 [ 414.680753][ T30] [ 414.683833][ T30] Kernel Offset: disabled [ 414.688263][ T30] Rebooting in 86400 seconds..