last executing test programs: 2m23.466534235s ago: executing program 2 (id=2487): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x8924, 0x0) 2m23.358373393s ago: executing program 2 (id=2488): r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'}) read$auto_tracing_stats_fops_trace(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0xfedf) 2m23.236945646s ago: executing program 2 (id=2490): mmap$auto(0x0, 0x2000d, 0x4000000200de, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) 2m23.13770927s ago: executing program 2 (id=2491): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0) read$auto(r0, &(0x7f0000000000)='!\x00', 0x10001) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x1, "000bfffffe00", "010000dd", "0400", "00000001", ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "0084ff240300"]}) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000000000)={0x8, 0x10002, "0200000000000000"}, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r3, 0xc0401289, 0x0) madvise$auto(0x7, 0xffffffffffffffff, 0xc2) madvise$auto(0x7fffffff, 0x0, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x7, 0x2) futex_wake$auto(0x0, 0x4, 0x1, 0x9) rseq$auto(&(0x7f0000000180)={0x7a, 0x7, 0x9, 0x8, 0x8, 0x7, "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"}, 0x5, 0x0, 0x1000) semget$auto(0x7f, 0x80000001, 0xb) mincore$auto(0x1000, 0x4000000, 0x0) 2m21.883480548s ago: executing program 2 (id=2494): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = io_uring_setup$auto(0x8000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c00000040b149a4a9dffd5b4fbd1dc2982e4d5757cdff2155cc7107ef3e0e1b50093b7fcf9a4da86db732bf60b43466348e738f52a2d98a88b91343febb172a9e5ffcc9176d74efa46116f53fbc031471f1cf993fcd7cc632", @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r5) write$auto(r4, &(0x7f00000002c0)='0T\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x2) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x129800, 0x0) 2m20.900750653s ago: executing program 2 (id=2495): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="720100", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 2m15.452303767s ago: executing program 32 (id=2469): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 2m5.789830429s ago: executing program 33 (id=2495): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="720100", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 2m4.464928234s ago: executing program 4 (id=2554): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = io_uring_setup$auto(0x8000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c00000040b149a4a9dffd5b4fbd1dc2982e4d5757cdff2155cc7107ef3e0e1b50093b7fcf9a4da86db732bf60b43466348e738f52a2d98a88b91343febb172a9e5ffcc9176d74efa46116f53fbc031471f1cf993fcd7cc632", @ANYRES16=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r5) write$auto(r4, &(0x7f00000002c0)='0T\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x2) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x129800, 0x0) 2m0.602957s ago: executing program 4 (id=2560): socket(0x2d, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) shutdown$auto(r2, 0x7) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 1m58.355953241s ago: executing program 4 (id=2563): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = io_uring_setup$auto(0x8000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c00000040b149a4a9dffd5b4fbd1dc2982e4d5757cdff2155cc7107ef3e0e1b50093b7fcf9a4da86db732bf60b43466348e738f52a2d98a88b91343febb172a9e5ffcc9176d74efa46116f53fbc031471f1cf993fcd7cc632", @ANYRES16=0x0, @ANYBLOB="08022cbd7000fbdbdf250c000000670002800c005c00010000000000000093f72c739389d0e04c4dbc30345846339af8c938f2b2b4a22e499c546b"], 0x7c}, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r5) write$auto(r4, &(0x7f00000002c0)='0T\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x2) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x129800, 0x0) 1m57.903858586s ago: executing program 3 (id=2567): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x11, 0x0, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x181, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa8135493b25428718974aeec4d6da187534e9", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x7) 1m57.232222697s ago: executing program 4 (id=2568): r0 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, r0, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xa, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x3, 0x6, 0x6, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x33e, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0x27, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x43, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x48001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) connect$auto(r2, 0x0, 0x3e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x6302}, 0x5}, 0x3, 0x9e) 1m56.429275354s ago: executing program 4 (id=2572): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) socket(0x0, 0x6, 0x8000010a) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) write$auto_fops_u32_ro_(r0, &(0x7f0000000340)="94a41b209e6c5b7129366690078107967414885026d57de7480d4fb9d07ffd27684d264fe71cd1b16add3e8e35349360441319de1828b9d89d92c52c81ce6a333509ae957ff6a041eb3aae5c6291013031250b218b60c0baeb8f6fc02e15566a03655edd535fbf76ded6497c4366473061ebea3066c21813a69ad85e97297601a699c13287b2c44e7c42b985230cd83d89f9932e2ac902d4572b880a93231b5603d5569b4ead8f6c960fe0576c396cf844ae2e4b9cfd1f842e9e38365fb12681eb870bde", 0xc4) ioctl$auto(r1, 0x80046f45, 0x38) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq2/flags\x00', 0xe8202, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) r3 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0xc, 0x3, 0x4}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) write$auto(r2, &(0x7f0000000100)='9\x00;T\x16\b\x06\x00\n\x00\xecQ\xb4\xa2;\xfbj\x98\x05?\xe6\xf8i\x03\b\xfaP\x88\xaf\xae\xf1[c\xab\xdc\xe2\\\x98o\x0e\xf6\xe4\xcci>>\xf5\xf0w\xfc\xfb6h\x1c98\':Y<\xd4\xe9^\xcb.\x93\xcaQ\xdb\"P\xc0\xd8`\xbbqP\xb8\xc5\xd7\x18\xa1\xc4\xdf\xbe\xdb\x14\x18Y\xcb\x7f\xf4', 0x40000012) unshare$auto(0x8000000) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) msync$auto(0x1ffff000, 0x18000000a000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x3, 0x0) bpf$auto(0x4, &(0x7f0000000080)=@enable_stats={0x3}, 0x5) 1m56.372676351s ago: executing program 3 (id=2573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x4000, 0x0, 0x4000001}, 0x4008004) 1m56.116205098s ago: executing program 3 (id=2574): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x10, 0x2, 0x0) setresgid$auto(0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0xe, 0xfffffff8) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r1, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x21) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e", 0x11) close_range$auto(0x2, 0x8, 0x0) 1m55.779689798s ago: executing program 4 (id=2575): r0 = pipe$auto(&(0x7f0000000000)) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)="b07f975101f1f3439736f9e7d099888dae0431b8acce71b046c07c546c297df4d0cd2c9dbd4e4ca246cf6c9af54a3e8e3d81ca0a2046418f678de30f1348eb4b86e832142345b35df490a339a0c79e013270", 0x4, &(0x7f0000000280)="351cb159de036cd99e9d220031bc2449ef7567a3716ef21179d6ec6236c0c33472d3df8cffafc6575477de95d39a802283ce6f3ff6329e2a87ff70cd875d1463ab57d11eaed49765e6a05cf3375b6b7ce58b99b99097447b7aff8a848c424445133fb33a93c11ecec34b8249774da7cda195d618660d9972e881278baeeb018ff617d1c23c44c3238f707db847f4a9fd509fa0873102c2df6a2f6e3754c0a0", &(0x7f0000000340)=0x3ff}) mmap$auto(0x0, 0x400006, 0x4, 0x9b72, 0x2, 0xfffffffffffffff8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x8, 0x8007, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x1000000], {0x6, 0x6, 0x8c48, 0x29f, 0x6, 0x7f, 0x0, 0x5, 0x1}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b860a, 0x4, 0x8000c, 0x100000000}}) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) clone$auto(0x20008ffb, 0x80000000bc2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x400) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0xfffffffffffffc00, 0x1, 0x80, 0xe]}, 0x0) shutdown$auto(0x200000003, 0x2) sendfile$auto(r1, r0, &(0x7f00000003c0)=0x1, 0x3f84) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x800, 0x6, 0x2, 0x1000009, r1, 0x8401, 0xfffffffffffffff7}, 0x6f3) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000180)='/dev/etherd/revalidate\x00', 0x129541, 0x0) write$auto(0x3, 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x1, 0x4) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)) socket(0x26, 0x4, 0x8a1d) unshare$auto(0x40000080) fsconfig$auto_SHMEM_HUGE_FORCE(r3, 0x321d, &(0x7f0000000400)='o\xfb', &(0x7f00000004c0)="8a1b76dd633559c08243e90fc62dcd3f251ea1e3025e5a839964dcd3d2da4b76402478ae8d0a62d8fb5f3eea7564a0781abd6976b32fc3ce1478a90ad31bbf97d798a90c084946d4adb7d65956c05b6be55bcfbe7c000e1d161ea177bcb49fd1fed001cd899efa50739d74f804b61f63cd611a408647cf42a68230479238ccfbfff95f1777914cc061ac124cd1503616a9078a4c4413f5e1dc19bbbee7dd8ad4ad74850607635364a196e6d5452cc9", 0xfffffffffffffffe) r5 = open(&(0x7f0000000000)='./file0\x00', 0x327901, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') rename$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x401) memfd_create$auto(&(0x7f0000000040)='\xc4--sjC)\xd2\xca\xf4y\xe4\xa3j\x11\xeaY\xb6`Jb', 0x4) 1m54.039853065s ago: executing program 3 (id=2578): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x149180, 0x0) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) 1m53.916155379s ago: executing program 3 (id=2579): openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x319200, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) close_range$auto(0x0, 0x5, 0x0) write$auto(0x6, 0x0, 0x100000001) 1m53.616559353s ago: executing program 3 (id=2580): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 1m50.831195381s ago: executing program 0 (id=2589): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r1 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x2, 0x0, 0x28) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0xc, 0x0) r4 = socket(0xa, 0x2, 0x88) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_map_fd=r2, 0x4, @old_prog_fd=r1}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@info={r4, 0xea, 0xa}, 0x9) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r5 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8905, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) pread64$auto(r0, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x8b6) 1m50.292992678s ago: executing program 0 (id=2592): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$auto(r0, 0x0, 0x7, 0x82) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) socket(0xa, 0x2, 0x73) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x232843, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/2u\x00', 0x200700, 0x0) 1m49.784009215s ago: executing program 0 (id=2593): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0281, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, r0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x200040f0}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = timerfd_create$auto(0x9, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) truncate$auto(0x0, 0x60e) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESOCT=r3, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) socket(0x10, 0x2, 0x0) ioctl$auto_SIOCSIFHWADDR2(r2, 0x8924, &(0x7f0000000080)="52e4d69e97c71c5ed1c1ecd591bd7202fce9a34066dfea15ae8276db103fd7f5882e48503fd3d6a133fd0c515414cf5d683d7987ca721d3eb75e9ef528eef2fa9e87c2d01ecf919d174c1645fa0cd915ed6485a8b7ab4a9e9e76052c2063") openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000010) socket(0x29, 0x2, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/gretap0/addr_gen_mode\x00', 0x46483, 0x0) write$auto(r4, &(0x7f0000000000)='[-%\x00', 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x3ff, 0x4}, 0x1, 0x0, 0x0, 0x8) 1m48.837633535s ago: executing program 0 (id=2597): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x80bc0, 0x0) socket(0x2c, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20044000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x400c080) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2, 0x2091d2, 0x3, 0x0, 0xa, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) futex_wake$auto(0x0, 0x5, 0x4, 0xa) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r3, 0x0) socket(0x11, 0x80003, 0x300) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(r4, 0x0, 0x8587) preadv$auto(0x3, &(0x7f00000000c0)={0x0, 0x3}, 0x3, 0x2, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio18/power/runtime_suspended_time\x00', 0x20400, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) 1m48.692470784s ago: executing program 0 (id=2599): mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) writev$auto(0x3, 0x0, 0x6) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, 0x0, 0x0, 0x2) read$auto(r0, 0x0, 0x80000000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xa}, 0x1) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) setsockopt$auto_SO_PASSSEC(r0, 0xffffffe3, 0x22, 0x0, 0x10001) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) fsopen$auto(0x0, 0x1) 1m47.791555266s ago: executing program 0 (id=2600): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 1m40.683790138s ago: executing program 34 (id=2575): r0 = pipe$auto(&(0x7f0000000000)) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)="b07f975101f1f3439736f9e7d099888dae0431b8acce71b046c07c546c297df4d0cd2c9dbd4e4ca246cf6c9af54a3e8e3d81ca0a2046418f678de30f1348eb4b86e832142345b35df490a339a0c79e013270", 0x4, &(0x7f0000000280)="351cb159de036cd99e9d220031bc2449ef7567a3716ef21179d6ec6236c0c33472d3df8cffafc6575477de95d39a802283ce6f3ff6329e2a87ff70cd875d1463ab57d11eaed49765e6a05cf3375b6b7ce58b99b99097447b7aff8a848c424445133fb33a93c11ecec34b8249774da7cda195d618660d9972e881278baeeb018ff617d1c23c44c3238f707db847f4a9fd509fa0873102c2df6a2f6e3754c0a0", &(0x7f0000000340)=0x3ff}) mmap$auto(0x0, 0x400006, 0x4, 0x9b72, 0x2, 0xfffffffffffffff8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x8, 0x8007, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x1000000], {0x6, 0x6, 0x8c48, 0x29f, 0x6, 0x7f, 0x0, 0x5, 0x1}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b860a, 0x4, 0x8000c, 0x100000000}}) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) clone$auto(0x20008ffb, 0x80000000bc2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x400) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0xfffffffffffffc00, 0x1, 0x80, 0xe]}, 0x0) shutdown$auto(0x200000003, 0x2) sendfile$auto(r1, r0, &(0x7f00000003c0)=0x1, 0x3f84) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x800, 0x6, 0x2, 0x1000009, r1, 0x8401, 0xfffffffffffffff7}, 0x6f3) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000180)='/dev/etherd/revalidate\x00', 0x129541, 0x0) write$auto(0x3, 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x1, 0x4) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)) socket(0x26, 0x4, 0x8a1d) unshare$auto(0x40000080) fsconfig$auto_SHMEM_HUGE_FORCE(r3, 0x321d, &(0x7f0000000400)='o\xfb', &(0x7f00000004c0)="8a1b76dd633559c08243e90fc62dcd3f251ea1e3025e5a839964dcd3d2da4b76402478ae8d0a62d8fb5f3eea7564a0781abd6976b32fc3ce1478a90ad31bbf97d798a90c084946d4adb7d65956c05b6be55bcfbe7c000e1d161ea177bcb49fd1fed001cd899efa50739d74f804b61f63cd611a408647cf42a68230479238ccfbfff95f1777914cc061ac124cd1503616a9078a4c4413f5e1dc19bbbee7dd8ad4ad74850607635364a196e6d5452cc9", 0xfffffffffffffffe) r5 = open(&(0x7f0000000000)='./file0\x00', 0x327901, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') rename$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x401) memfd_create$auto(&(0x7f0000000040)='\xc4--sjC)\xd2\xca\xf4y\xe4\xa3j\x11\xeaY\xb6`Jb', 0x4) 1m38.16835998s ago: executing program 35 (id=2580): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 1m32.922951067s ago: executing program 36 (id=2600): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, 0x0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x21, 0x2, 0xa) getsockopt$auto(r3, 0x110, 0xff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(0x3, 0x0, 0x1) 1m0.202462193s ago: executing program 5 (id=2748): mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) writev$auto(0x3, 0x0, 0x6) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, 0x0, 0x0, 0x2) read$auto(r0, 0x0, 0x80000000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xa}, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 59.154866555s ago: executing program 5 (id=2751): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x10, 0x2, 0x0) setresgid$auto(0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0xe, 0xfffffff8) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r1, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x3f) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e", 0x11) close_range$auto(0x2, 0x8, 0x0) 58.047625648s ago: executing program 5 (id=2752): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001840)={{&(0x7f0000000140)="33f5743768d0e086b3db3efdb407b734589ed4f5e4ff2f29c38baf59a0d41bd89fe59cd9151f00621df4a1b89fff5644d5904c08ab6f6fdc55adc4cd5f3a9da69f455bcc3da444f66d4cfa4b894cef271c3890c4fb865ff22be82a5244948679e258e1cbf16844af", 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="76c46b86aa4ec69438f34764a28c49980cd0a3d4aa267eb35c0b86a9a58857f7c66d462dd6dca413a090b8f3ab809d358ea9d7714fd3df83558832624685d2c7e31038a65d021b"}, 0x5, &(0x7f0000000840)="91f708e00f7a20ceb71e4ca4a4909cd8315daefb55b8a7bcabd305d544fc541ff8e645bec0747128f33a69141a89e0720dd2564082650a3b94bfe03a4e2110ed7696c8c315167ff798a94c8f0f920576f5ec77aa26746e84009dee07c30bb172cfe7c98d00fb1f0d3502f607c2b8d4ced786151194a14eb8f4a709e8658af4a714c77e5656bae2c810cebc4b0fe4b4ba154617ddec62f1908f609c9d5901fcdfca0f371abf84ae5ed6c0cef7022901d7ad2f893050165b4c01b06a459d8fd327bf789999f4076531591c76e798d603254916b2df579c5019d33b7cc22ab70a5f049d0512da8118df01ecbecba2b60e42c239a6c9e9cbda36c439437d12b206101e6d33cf20b4c73d41daef905b486bafa4661b8334466b052a7204a4c5fe2723c59b7a64673f019ee095f2ca6a6f5e3e1202acab688501c305b982a087bab93cbc652aac7fd0a4bb6f033fafe08361ecf47e01bcaf98d46099346a016330f58e704a66a773361594c628b93a8abc0fef2ba3916cec25e489b743571ae3ffb19edbbbe3033658f2b5f7c11463059ecf3426d87d6c34e835b9d2c42409b442da28f17e17f764a03e2f8d446854d1b1a0d1d4ae0e664482105db87794eacfa20e9db0c34e89926d0afc04a0b0c08a731f1f306be808764ab42affb957138d371b5ff286bbf7d6c5e94a655d876cea46ef9a23ff2464050669423246804444840eef0db4a2ea78436cd5d8fd5348c488767196c9bcfa6458a80ea1e367392868190e834e8d99379051f2afd0fb5c9b8b6b6d519c781f7708cfb9928b158ffff81935af62d58b2ebd0e33264b3f55686acaf1e21967465321ff756c4282957f172af3e3fc5e1036d0668c7ee5d90f92ff0827ec1e46bc601af2c167cbfefe37dfdc08d6706252e15d4dd8c4205872a4c372bf7131fc656841938675d7fc6284168b45cbee9c9283b4dfcd631f53349cbab9cf1469283d6bd2243ecc7b4b2b5f83246fb89e3c0e6163904660ae7e57a3a470e624c5d5e32be126fea30e89154b7e1b33e7aec13ec35812c5f8bb0566f841f131a50964a75ac75578ab01fae16de626baa95b1ae3e9b3653f03013d836e465cbc1f97e5f200d48f6d854343f1d798b036ea2f62b101ca8a022b17cbff102b8d6324352ee53687a9252d2c932513a5eb700b56ae53a090e8d1a65056b8460d3adb6e552bbf5709f4d26c69c851076e7ae95f16e988fb1a5e404f5bd2deddebc6cf59fe809357a2d691fe838a9e0db922cdc36782adfb61b8d3565a95686e951eee0a821ccad7e221529246c1df2c5e002e249cdd7b360dfc038ab487dce6e6027fc3ccab4b2a57147901cd21b6649248291a7b109b738066eb6785b6d6e86e724f134a0a283446ec4789b8c9625655434ba207c80b3b1d971ec0b8718eb41ab2410c641bf526f811e58a1dc5b9a9d269e3afbc00c84898f6e3bd1355cc930db7fa69b7c15e66f9111db798ec0c267de40c7f6d2178600bd0940d3503cd64f7b7e0a1d238d8fbb6f489bb822a58362c8b7feadf2d05ab1fd20e83b4987d6c02400f702fbbb35909d21a1726959b3d55fd47901040a402c3decccfc0b28dda7ee011b21c104de1a328ff24b794fa46f7f94a1de697b724a9948661f9df252a792774693b86fab5cb1b4b5e6cea956187cace50df0e4b88e516479ed19c294af74fe3488ce2309c358269450c4907f410d9e57c22dde11c91e3935fdadcb3b66cb93548603771b66641ceb66583edb5c57748bf759ceb85811eb068e12a6e25c814b47c9e6d314dcea40cf6bc1bf6a43f5f7d2fa8f79fa906c67504de51617362a17e4cd7fa6c9a6cd6c25e083fb450b77d7098a5c623c1f74071cc36ef8fb1966308d154514c59870a73a2964b4f4c7f2b9f8f6211fb300e7ced45c0e8229a285d30884f8787cd01987d107d95066492bdea6a8a13a467be49d51b54aa04e199111cdf750341789231640f13b189258ab4ca4114cd11176ba55317efb6a526d35b1e804cccce3ecdcfc1b2f51ff3cb15ea32ca178f278a9d9cc19bb52430a29c6339237c9e65547cb882b16723a398c5e0aff93114dd4afa76d2c517eb27f2badf33e3fcb63483f222e216e979ea6dd93a7c9cca0d33d36e3998284ccef182d3b381cbdc4074cea6d4b1f729c157cc26f738515a19a33e4ad22ec17d9901dda6bf234adaf422f6be80c7422595b6f3bc8cbbfa5d736eed01573d4815de2723c20690baa3cdfa6aae3ec929969845e4f4e2050f9a608c69f0a5ca2c1425ff69ffc03703ab5738f442f3060a0a7a92f5040c0ced8918cf1fc4e45591654a28141c8d26a22ce9799e78db016d0761d181c5a5918a00ed644c49263e9913e01681dd6b559d79edc9c80cf461d54248edd1b15345fead5277ed10dc52764b728cf50c245a6286cbe9315cb7b4e831506286a0e4f34a6421a1293349884363f4fe2278d693cc0a7ff58173fa9b895a12311fec04fd1a7bb4dade187883dcf60fa363944da3b822c5c2feeeb9980412e12f794da10460d928c85ae4ee738293530b4f1c093fc4348ab5d9c1b3173b0b848d12b68c3b4627bc10b3da52dfa21fd94b22adf1d41c32ce29d42fcf0ea2cc0294ec9a0bc606568f537c895fa6ab5404be0ef9a85fa37cccad5b0efd9b87470bca3fc97df0e0fb4a013ebab7f8e45c6bedf4968358e4e7f6b33cf587435dd01a9ae0918c25cb684fab70dee9a8375d971268e5cd77e6db4c47ec57bdc9d5e5622d96ac7cfab7ae751ed744f93922be64e3162ee2dc9486341f78858eeccf0c51d71eb2f68fe5762b32a77a32d309933532fb97bcc3694ea599335a97599bf5ed1a89d64318a89a1c976127c7118b40ff38057b0a854ae649f3a7add92b78fce9dbb94dc718bb47494f609bb0554e294384cbdc86c581ff3e7c4512679fdaa537ebd030cc0370d911d5b04f93782f26337748f2e97038fc5c4003d5bd69c91c0a46245c298d9f2965a2980ec7f85a71be8567a01bd6a346cb5dfa513a57d06dacd1e40531fab9bd1f0bf82e3cbe192049e871feecc7cbd51d40c0be82fa1e79125fa981527db65855e3b49333cf583cf83e5ce72246c99963ba5aafa8133ecfa27c074aebdc124768b6379121e9ddfbe4cc2c56e480a50fe66960cb4a04439c505ae7223bcf65ad5554e35cdb1f521a3565f3abd998bbcef0c9ab837ca0db6a64b7f7a12947c356b2f2e35a99316d7c0b6ef7f42ce0919563e4a355899c54d32ed0ea58c009329c5d370484ff5076eb88dfe7dea8299f87307aac184f98879e8cc924b0cfd029a2a068b08f9aaa03cfa35964a7c3980df0ce9348abeb1cd2415753634cf004ececd63a587b599a5fd8c06dda7200e1b064ec649152a7cc0a3ca037d209a57cafcb0f2541e8c4bcea2378fbeeee45f62e4373f8ccab4578ca9eae5b9ffd3a32ef88e5d01b129e2519f7c5350c9b556eb084812a1283a2d69b5ad0e5d868ad289d58ece043b9565467428db175b0a98f59dff4c4c4352da931e8c52495aa47c47bf011252418c32f60af8a45f16a7b20b75c6091496a9f38f06db415f77fd1a4010b7961a8942bb3fd737dcc9dc4190f220f9e9e49a0236f16d0a9a11a73eee48e07b33b289d8fac5bb8b745fecd34558f66bbd5bd9271cf5cc7c2a792dd6d8da0cab9d8f5deec582bbcd08861e173391ecf3cd3c247e8359ff0e92d2fa8bf6c3229872fba0fbd765dd17a5cce6ed23aea36e07ee731a6d29649b47abba18bbc29fab34cff41a7f5f64ec16c1459ce267cee485437a9889f62210f482bbaf2b5cf401924485f23759efd15f64e896e732f4bc8e8a5d97b6742243dea923528f59815271938da7bfc475ae03885f43e506e68b5e7317d1026c1131472b7a7aa634c79eaecf201f346ca7ad13623827113999831d1e4a612e1a8730e34c643e831780c3f14257d39f775e8ab10fc19c69a3d64c5d31051a76982a0ef851688a12c568bc6d6306b8a016afb9cd6f8fef494f47571140773a1d349ac139e67399c9a02e5bb9e3298b2c4e9912db5536b76295c9093655c717fc7c38f74c82a8a283690d1c21f2d5c7956b1ab5ee1215c885101960e2b8543ac11498ba165b58e7704d7476de402e7811dbd1e289b5864cb2a435a745f644fd92e948218e51de42af8c91d57f8e4d2548b6e067b74efef53ffa59ed361cf337cf5b7f65078433e8d5a6005852064ff73db400292185c9317d859847ab86cdfa78639e891b2412b71ee1c7e8df7d0f539fb4a390f0260fc9dd8a6c072b698377abde478d670345db5619b7f684ce482cc2cd96da81acf1cb298b6f9375298c753d55246cd8479aa4163f22a44088d67a50fac10526435c018fb0b4b4f8b0b5d14bbea2f1f328040c36f84059a952dcba20182d3f20409e35954f662770409d1d1a2319da6253524107734d6f13cf987257d3a415b118d439a4b462e700bc051cb90265b4d785510401758b5d236c815ef08ca00d09f32e9e4076b921d2a7674b7dee580c6bb79c6f16bf4fd336a3e51a805eb650a79c7901d49c805f01940cd08f47b5833aa1caf5b86292dce8d718ca9d9c631531ee61579779040836d520bd10924f47c4db9e84f41d20dd17af913d59dd5fa55a60c1052eddd64d2c5a059949c1d59823bbd52b16c18c0e4bb16bbad18bbf96f24f9a2d1e4ac63680e255fea0e5016583b50f8114baedd136f2d13c49b30327e5378b8fbb0cca81276859e8e6723c183090bdf236474f638418dffa3de36bb6643b5f1535c07b5d77e3c40ac4a749107b848f214d26136779c8243c9468addaea23ffbbf4ddcf9aa018da1f1a81e29c6729a2e70f1d60d04a0764a52358bc331457749a4348dc9cad9a969e838b4dd9f38d9cf83e7ed26314fc22938a16f12361926efef4efc88628fdcbe186c955f2d3404f0c7ad1a8a251e76b923ba9fd9395506a5005d1c375853d11e9df364689708ad5e1950befe248655d4298f284c90d5b28512929c476d36c9d342691fede0728a36091b0a345cb797f4e403a298cd722a1152570aeb21b3ee92b1640f0b72b26386fc31ea3284cd0d983a2b11e22eb4ce68d06bcf29967f4fd49afe84c1e5bf7ee9a6172e599fe26cbf99d8a132c3e305a8b8ca24e7acd07907bd88570c2b9aa06a53eedc7002bb01086c86b81dacd6d5fa8bcbcb98880f64d6181b8c5861274d805fb2782102376933b09eb8708efc33b22a7c3d26980ffe8b053c65abf6b1853ab8293a275ef7a44c6a6b0ca6e1a91b3323794a642b3a2094cb693f15386b3d36672324edc45c17013b53aef071ba789f3b0edb8b95e57041494a15ec528e6547bd5813ef6e2068c12668f43507c9f2926685e3dc299bfa0cb20e0fee070a9ba4f10790cfb2ac8772d92ece2967a803a77fd121fb4e9d84a0e8605bd643ea2186977c85d8799340986b7895632a58c8dcfd8d716ea0d6d8dfa25e1f8d30e89c1daaa378a0a3909324716ff8d967f1cfd1d7847b011f403b005bb732236d8136b715d08a09a2c38c26207881c631253c724f0052447e281beb17bd9c1058fccee7453aa9df08b5232871484e0aabdae048312b5a8a9787d6f79ad35f3b7999db56179f727667250ea26a3bf8cbeeaba3d997c0df11a69b375197dffc145f299b300584afc101ad7ee9da5646edb87767fd84431dceef52fd08a95a7d74630be9e891121be02c0c2fc277d50e4632c9d70a7b4a22ddc8188951fada45946de199757953ab142becc433ad212146072ef98bf2ed8ff25f8e6a9fde6e8dfb5e6c98ca549a", 0x6, 0x8}, 0x7}, 0x7, 0x6) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 57.840044505s ago: executing program 5 (id=2753): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = io_uring_setup$auto(0x8000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c00000040b149a4a9dffd5b4fbd1dc2982e4d5757cdff2155cc7107ef3e0e1b50093b7fcf9a4da86db732bf60b43466348e738f52a2d98a88b91343febb172a9e5ffcc9176d74efa46116f53fbc031471f1cf993fcd7cc632", @ANYBLOB="08022cbd7000fbdbdf250c000000670002800c005c00010000000000000093f72c739389d0e04c4dbc30345846339af8c938f2b2b4a22e499c546b4ff7473b65ed1600200c687e2f335dc7112461ab9fb02b2e59d0f88a7194325bae7b3d32aa85cadeabfe4e07ea327e45abf44387daeacf60f4f500"], 0x7c}, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r5) write$auto(r4, &(0x7f00000002c0)='0T\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x2) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x129800, 0x0) 56.850973795s ago: executing program 5 (id=2756): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x2, 0x6) socket(0xa, 0x2, 0x73) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/2u\x00', 0x200700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x8924, 0x0) 56.578907515s ago: executing program 5 (id=2758): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, 0x0) r0 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r0, 0x15, 0x0, 0x9) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) r2 = socket(0x2c, 0x1, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sysfs$auto(0x5, 0x5b, 0xfffffffffffffffd) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x9, 0x9, 0x0) socket(0x1d, 0x3, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 41.457339696s ago: executing program 37 (id=2758): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, 0x0) r0 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r0, 0x15, 0x0, 0x9) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) r2 = socket(0x2c, 0x1, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sysfs$auto(0x5, 0x5b, 0xfffffffffffffffd) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x9, 0x9, 0x0) socket(0x1d, 0x3, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 31.174896111s ago: executing program 7 (id=2851): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x6, 0x0, 0x7, 0xa) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0x1000000000000b4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x4}, 0x9}, 0x7, 0x6, 0x0) 30.08667534s ago: executing program 7 (id=2857): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$auto(r0, 0x0, 0x7, 0x82) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) socket(0xa, 0x2, 0x73) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/2u\x00', 0x200700, 0x0) 29.859204696s ago: executing program 9 (id=2859): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$auto(r0, 0x0, 0x7, 0x82) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) socket(0xa, 0x2, 0x73) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x232843, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/2u\x00', 0x200700, 0x0) 29.301801416s ago: executing program 7 (id=2861): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x5d3, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x1100000f0) 29.148013428s ago: executing program 7 (id=2862): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) pwrite64$auto(0xc8, 0x0, 0xe, 0x103) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) madvise$auto(0x43, 0x3, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(r0, r2, 0x0, 0x400000000002) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d529b3b", 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100, 0x100, 0x7, 0x18, r3, 0xfffffffffffffffe) r4 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_setup$auto(0x1, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 25.542800409s ago: executing program 9 (id=2873): socket(0x2d, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 23.9206295s ago: executing program 9 (id=2877): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r1 = io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffd) read$auto(0x3, 0x0, 0x80) connect$auto(r1, &(0x7f00000018c0)=@rc={0x1f, @any, 0x6a}, 0x55) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) readv$auto(r0, &(0x7f0000000000)={0x0, 0x6}, 0x8) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23.702271953s ago: executing program 9 (id=2878): io_uring_setup$auto(0x2, &(0x7f0000000100)={0xfffffa85, 0x81, 0x7, 0xc, 0x4, 0x9e, 0xffffffffffffffff, [0x6, 0x80000000, 0x7], {0x6, 0x2, 0x81, 0x7, 0x5, 0xfb, 0x1000, 0x80000000}, {0x8, 0x101, 0x9, 0x4, 0x4, 0x7, 0x339, 0xdfff0000, 0x2}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x8, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x0, 0x10013, 0x7, 0x2, r0, 0x20000000000803, 0x2000000000000003}, 0x6f0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd10/sched/read1_fifo_list\x00', 0x141100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket(0x2, 0x80000, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/i8042/serio1/input/input3/capabilities/rel\x00', 0x733441, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.7/usb8/8-0:1.0/uevent\x00', 0x8000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x800, 0x1) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "000000a3cecbbcb66633c200"}, 0x6a) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r3, r3, 0x0, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r5, 0x501, 0x703d2b, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0xffffffffffffffab}, @MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x24}}, 0x80) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x98, 0x9, 0x0, 0x1, [@typed={0x64, 0xbc, 0x0, 0x0, @binary="d836f4e15787ad2af618562c0f7f0d268041029349f7e1ec63e129374b0dfec3be66cc0e0776e0a0389c659945555e02717ae00ba1a6ed04fcc4afe0c0db3bd65b7880c0865655fe30955073002ac50fa8c03bf4f197dab13c955b6762f1536b"}, @nested={0x1c, 0x14e, 0x0, 0x1, [@typed={0xc, 0xf9, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x75}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0xb4, 0x0, 0x0, @pid}, @nested={0xc, 0x8c, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48000}, 0x44001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 18.777284887s ago: executing program 6 (id=2897): socket(0x2d, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) shutdown$auto(0xffffffffffffffff, 0x7) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) 17.85083587s ago: executing program 6 (id=2899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x700, 0x0, 0x1}, 0x0) 17.763637709s ago: executing program 6 (id=2900): socket(0x2d, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 16.782412886s ago: executing program 6 (id=2903): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$auto(r0, 0x0, 0x7, 0x82) read$auto(0xffffffffffffffff, 0x0, 0x39b8) socket(0xa, 0x2, 0x73) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/2u\x00', 0x200700, 0x0) 16.283303542s ago: executing program 6 (id=2904): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x100102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d8000000a8e4c9b6c5cea87e10242bf4832668bf3c9ba1e6eeb079dbffc594d56d095dc51a2437f69472dd69f70ad0f4bf08216622b2df5636108e1b3ec528d45805ad334e2b5c7462b2bd262d9cd15e5014c0adc9c66482925d8908c27f0094febfb8f2d0e737f4ec0b4edfb7d36121d90063225464bb8888d083167cfbd3906ea54ab741", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf250f000000aee7002c81ea103d3e4d9544b2a127350d543fc1e0bb23cd85c0b1afa09cef73aab1d20f84c511ed4abba8cfbc8b2453022c1579375269a7fd644dd95b5fe0185af05a686f185410712c2957005cf513e7e66663c4829751a11dbe300ccfe4bf665dd9f86435283342dd209d834383f61c399dd55896dd040ac038475bb6c22facb859267488e32838413ba78e4217e2c9d4a8487d5d828a13cbb5661cc28aeea6bf9abf40e442ad9d84d43817625e673057de58336b31ba4e5540f302e0164c4ba41b00"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x100) select$auto(0xa, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x3, 0x10015f4da0e, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xb, 0x20002, 0x2]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_setup$auto(0x1, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 15.160336133s ago: executing program 6 (id=2908): mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xb2}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4044850) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) 12.562256095s ago: executing program 38 (id=2867): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x10a001, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x6, 0xfae, 0xffffffff, 0x400000015, r0, 0x5) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x0) pipe$auto(&(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x80, 0x10001, 0x5, 0x0, 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x10000476, 0x0}) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000100)='-\x00', 0xfdef) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_clone(0x1200000, &(0x7f0000000200)="4c1537d06b14123fb2677fbf62ed124de5174e411cf9ab4f32", 0x19, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="58a6881e65c44a67163f71d4b1a912e0e430f4f4c6a359b43f09d056a1feb291ef4ff5a7fdbefb0f5c1ed542f980042f732b14fb76e38911f7b8ba86a622b52198dd0e") sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000018c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="04003e80f4caa8eec28069bb60f8a9033e68c6341903090e0a080863a728355109599e778536a584fb294284818ff669ebeea9108282341ebe015abc5d3b87d5bb06dd802f4447dfd6fe9092cf2c8740981e1d78e02bc77b35ec3d5babfe787b7d9ef6058981055615ed253be6547038ef4cf30a00000008006a00ffff00000800010000ff0f000500d500000000000800230100000000"], 0xfc8}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) 8.539568871s ago: executing program 39 (id=2878): io_uring_setup$auto(0x2, &(0x7f0000000100)={0xfffffa85, 0x81, 0x7, 0xc, 0x4, 0x9e, 0xffffffffffffffff, [0x6, 0x80000000, 0x7], {0x6, 0x2, 0x81, 0x7, 0x5, 0xfb, 0x1000, 0x80000000}, {0x8, 0x101, 0x9, 0x4, 0x4, 0x7, 0x339, 0xdfff0000, 0x2}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x8, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x0, 0x10013, 0x7, 0x2, r0, 0x20000000000803, 0x2000000000000003}, 0x6f0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd10/sched/read1_fifo_list\x00', 0x141100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket(0x2, 0x80000, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/i8042/serio1/input/input3/capabilities/rel\x00', 0x733441, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.7/usb8/8-0:1.0/uevent\x00', 0x8000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x800, 0x1) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "000000a3cecbbcb66633c200"}, 0x6a) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r3, r3, 0x0, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r5, 0x501, 0x703d2b, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0xffffffffffffffab}, @MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x24}}, 0x80) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x98, 0x9, 0x0, 0x1, [@typed={0x64, 0xbc, 0x0, 0x0, @binary="d836f4e15787ad2af618562c0f7f0d268041029349f7e1ec63e129374b0dfec3be66cc0e0776e0a0389c659945555e02717ae00ba1a6ed04fcc4afe0c0db3bd65b7880c0865655fe30955073002ac50fa8c03bf4f197dab13c955b6762f1536b"}, @nested={0x1c, 0x14e, 0x0, 0x1, [@typed={0xc, 0xf9, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x75}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0xb4, 0x0, 0x0, @pid}, @nested={0xc, 0x8c, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48000}, 0x44001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.934735921s ago: executing program 8 (id=2925): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xfce8, 0x200, 0x3, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x8000005, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) 4.561576464s ago: executing program 8 (id=2927): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0281, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x1ac}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0xa140, 0x0) r3 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=@info={r0, 0x4, 0x5}, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x29, 0x2, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x121200, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) close_range$auto(0x2, 0xffffffffffffffff, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) socket(0x10, 0x2, 0x0) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000140)="52e4d69e97c71c5ed1c1ecd591bd7202fce9a34066dfea15ae8276db103fd7f5882e48503fd3d6a133fd0c515414cf5d683d7987ca721d3eb75e9ef528eef2fa9e87c2d01ecf919d174c1645fa0cd915ed6485a8b7ab4a9e9e76052c2063") openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0x3dd40000, 0x7, 0x418c000000000000, 0x8001e, r1, 0x7ffd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x2) madvise$auto(0x0, 0x200007, 0x3) mmap$auto(0xfffffffffbfffffc, 0x4020009, 0x4, 0x11, r3, 0x552ac26f) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="421eb915d190ef6d4302000000a82a01002dbd7000fbdbdf2501000000040007800c0002000400000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a23e8230", @ANYRES16=r6, @ANYBLOB="02002dbd7000fddbdf25020000000c0004002203000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040001) socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 4.527673294s ago: executing program 1 (id=2928): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$auto(r0, 0x0, 0x7, 0x82) read$auto(0xffffffffffffffff, 0x0, 0x39b8) socket(0xa, 0x2, 0x73) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/2u\x00', 0x200700, 0x0) 3.826494726s ago: executing program 8 (id=2929): r0 = socket(0x11, 0x3, 0x9) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, [0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7000, 0x800]}, 0xc, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x9b, 0x14, &(0x7f00000005c0)='/dev/mapper/control\x00', &(0x7f0000000640)=0x4) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x2, &(0x7f0000000380)="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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_ENABLE_SE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004c) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="280127bd7000fbdbdf251200200005000b00f8000800180014002f6465762f6d617070654a8900006e74726f6c00080001000101000008000100feffffff"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8844) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) getpid() unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getpid() sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0xa, 0x0, 0x4) 3.572475763s ago: executing program 1 (id=2930): r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r0, 0x0, 0x400000, 0xc) 3.393619459s ago: executing program 1 (id=2931): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x3, 0x10000, 0x8) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmmsg$auto(r0, 0x0, 0x4, 0x4008) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000000, 0xe903, 0x5f, 0x11, 0xffffffffffffffff, 0x8000) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 3.004525721s ago: executing program 8 (id=2932): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)="03", 0x1) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x700081, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x4000001ff, 0xffffffffffffffff, 0x13, 0x3) ioctl$auto(0xc8, 0x8924, 0x8) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r3, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r4) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r4) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002080)={0x20, r5, 0x503, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) getdents$auto(r6, 0x0, 0x18) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\tD\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000ffdbdf25060000000c0008000400000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x18000}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/default_smp_affinity\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f00000000c0)=""/5, 0x5) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) 2.694856717s ago: executing program 1 (id=2933): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='&&\x00', 0x7fffffff) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2.478800819s ago: executing program 8 (id=2934): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = getpid() r1 = syz_open_procfs$namespace(r0, 0x0) fchdir$auto(r1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) 2.058411887s ago: executing program 8 (id=2935): socket(0x2d, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) shutdown$auto(r1, 0x7) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 1.778335867s ago: executing program 1 (id=2936): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x10, 0x2, 0x0) setresgid$auto(0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0xe, 0xfffffff8) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r1, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x1004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e", 0x11) close_range$auto(0x2, 0x8, 0x0) 282.714126ms ago: executing program 1 (id=2937): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0xb4d3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptycd\x00', 0xe0301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000840)="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", 0x78e) mmap$auto(0x0, 0x200000001, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0800310001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x1, 0xfd5, 0x12, 0xffffffffffffffff, 0x0) mmap$auto(0xfffffffffffffffc, 0x2000a, 0x0, 0xebf, 0x401, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, 0xffffffffffffffff, 0x308000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x6c00, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x4380c0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x89\x00\x00\x00\x00\x00\x00\x00', 0x81) write$auto(r8, &(0x7f00000000c0)='\xc4\xb1\xae\xf2/\xa3F\x91/aud', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x10001, 0x0, 0x3, 0x0, 0x7, 0x2}, 0xed7138c}, 0x2, 0x29) 0s ago: executing program 40 (id=2908): mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xb2}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4044850) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) kernel console output (not intermixed with test programs): tered promiscuous mode [ 691.609039][T16393] debugfs: 'hsr0' already exists in 'hsr' [ 691.635962][T16393] Cannot create hsr debugfs directory [ 691.967513][T16080] Bluetooth: hci2: command tx timeout [ 692.083612][T16393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 692.131101][T16393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 692.179153][T16393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 692.232623][T16393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.433687][T16393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.503312][T16393] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.555255][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.562421][T16045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.598560][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.605674][T16045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.134880][T16393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.625645][T16393] veth0_vlan: entered promiscuous mode [ 693.660257][T16393] veth1_vlan: entered promiscuous mode [ 693.740037][T16393] veth0_macvtap: entered promiscuous mode [ 693.776721][T16393] veth1_macvtap: entered promiscuous mode [ 693.813976][T16393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.875386][T16393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.917746][T16044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.938188][T16044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.002223][T16044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.036253][T16044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.049113][T16080] Bluetooth: hci2: command tx timeout [ 694.093901][T16445] zswap: compressor not available [ 694.252780][T16044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.272988][T16044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.391104][T16044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.416333][T16044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.871524][T16454] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 695.763770][T16468] FAULT_INJECTION: forcing a failure. [ 695.763770][T16468] name failslab, interval 1, probability 0, space 0, times 0 [ 695.793661][T16468] CPU: 0 UID: 0 PID: 16468 Comm: syz.0.2539 Tainted: G I L syzkaller #0 PREEMPT(full) [ 695.793687][T16468] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 695.793694][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 695.793702][T16468] Call Trace: [ 695.793708][T16468] [ 695.793714][T16468] dump_stack_lvl+0x100/0x190 [ 695.793741][T16468] should_fail_ex.cold+0x5/0xa [ 695.793759][T16468] should_failslab+0xc2/0x120 [ 695.793777][T16468] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 695.793800][T16468] ? do_getname+0x35/0x390 [ 695.793819][T16468] ? find_held_lock+0x2b/0x80 [ 695.793837][T16468] do_getname+0x35/0x390 [ 695.793858][T16468] do_sys_openat2+0xc5/0x1e0 [ 695.793879][T16468] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.793898][T16468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.793918][T16468] ? __fget_files+0x21f/0x3d0 [ 695.793937][T16468] __x64_sys_openat+0x12d/0x210 [ 695.793956][T16468] ? fput+0x79/0x100 [ 695.793973][T16468] ? __pfx___x64_sys_openat+0x10/0x10 [ 695.793993][T16468] ? ksys_write+0x1ac/0x250 [ 695.794014][T16468] do_syscall_64+0x106/0xf80 [ 695.794029][T16468] ? clear_bhb_loop+0x40/0x90 [ 695.794047][T16468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.794063][T16468] RIP: 0033:0x7f23edb9c819 [ 695.794076][T16468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.794090][T16468] RSP: 002b:00007f23eeac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.794105][T16468] RAX: ffffffffffffffda RBX: 00007f23ede15fa0 RCX: 00007f23edb9c819 [ 695.794115][T16468] RDX: 0000000000688140 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 695.794124][T16468] RBP: 00007f23eeac6090 R08: 0000000000000000 R09: 0000000000000000 [ 695.794133][T16468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.794142][T16468] R13: 00007f23ede16038 R14: 00007f23ede15fa0 R15: 00007ffeaafd6a18 [ 695.794161][T16468] [ 696.226385][T16080] Bluetooth: hci2: command tx timeout [ 698.066810][T16508] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 698.286994][T16080] Bluetooth: hci2: command tx timeout [ 699.651377][T16041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.667213][T16041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.674954][T16041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 699.683184][T16041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 699.692725][T16041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 700.376727][T16529] chnl_net:caif_netlink_parms(): no params data found [ 700.610219][T16529] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.650752][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.672963][T16529] bridge_slave_0: entered allmulticast mode [ 700.711928][T16529] bridge_slave_0: entered promiscuous mode [ 700.741212][T16529] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.771250][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.811111][T16529] bridge_slave_1: entered allmulticast mode [ 700.850406][T16529] bridge_slave_1: entered promiscuous mode [ 700.991295][T16529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.007773][T16553] FAULT_INJECTION: forcing a failure. [ 701.007773][T16553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.040692][T16529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.136376][T16553] CPU: 0 UID: 0 PID: 16553 Comm: syz.0.2555 Tainted: G I L syzkaller #0 PREEMPT(full) [ 701.136404][T16553] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 701.136412][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 701.136421][T16553] Call Trace: [ 701.136427][T16553] [ 701.136433][T16553] dump_stack_lvl+0x100/0x190 [ 701.136461][T16553] should_fail_ex.cold+0x5/0xa [ 701.136478][T16553] ? prepare_alloc_pages+0x16d/0x5f0 [ 701.136498][T16553] should_fail_alloc_page+0xeb/0x140 [ 701.136516][T16553] prepare_alloc_pages+0x1f0/0x5f0 [ 701.136537][T16553] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 701.136565][T16553] ? kasan_save_stack+0x3f/0x50 [ 701.136578][T16553] ? kasan_save_stack+0x30/0x50 [ 701.136591][T16553] ? kasan_save_track+0x14/0x30 [ 701.136604][T16553] ? __kasan_slab_alloc+0x89/0x90 [ 701.136618][T16553] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 701.136640][T16553] ? ptlock_alloc+0x1f/0x70 [ 701.136658][T16553] ? pte_alloc_one+0x82/0x3d0 [ 701.136674][T16553] ? __pte_alloc+0x6d/0x3e0 [ 701.136688][T16553] ? get_locked_pte+0xa1/0xc0 [ 701.136705][T16553] ? insert_page+0xcc/0x220 [ 701.136721][T16553] ? vm_insert_page+0x2c0/0x400 [ 701.136738][T16553] ? __mmap_region+0x1503/0x2a50 [ 701.136759][T16553] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.136786][T16553] ? __lock_acquire+0x4a5/0x2630 [ 701.136809][T16553] ? lock_acquire+0x1cf/0x380 [ 701.136828][T16553] ? find_held_lock+0x2b/0x80 [ 701.136842][T16553] ? page_table_check_set+0x49a/0xa10 [ 701.136858][T16553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 701.136875][T16553] ? policy_nodemask+0xed/0x4f0 [ 701.136893][T16553] alloc_pages_mpol+0x1fb/0x550 [ 701.136910][T16553] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 701.136925][T16553] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 701.136942][T16553] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 701.136962][T16553] alloc_pages_noprof+0x136/0x390 [ 701.136979][T16553] pte_alloc_one+0x1c/0x3d0 [ 701.136996][T16553] __pte_alloc+0x6d/0x3e0 [ 701.137012][T16553] ? __pfx___pte_alloc+0x10/0x10 [ 701.137028][T16553] ? find_held_lock+0x2b/0x80 [ 701.137042][T16553] ? find_held_lock+0x2b/0x80 [ 701.137056][T16553] ? walk_to_pmd+0x302/0x4c0 [ 701.137083][T16553] get_locked_pte+0xa1/0xc0 [ 701.137103][T16553] insert_page+0xcc/0x220 [ 701.137122][T16553] ? __pfx_insert_page+0x10/0x10 [ 701.137140][T16553] ? __pfx_down_read_trylock+0x10/0x10 [ 701.137167][T16553] vm_insert_page+0x2c0/0x400 [ 701.137187][T16553] kcov_mmap+0xca/0x130 [ 701.137203][T16553] __mmap_region+0x1503/0x2a50 [ 701.137228][T16553] ? __pfx___mmap_region+0x10/0x10 [ 701.137252][T16553] ? find_held_lock+0x2b/0x80 [ 701.137266][T16553] ? ima_match_policy+0x8c4/0x2350 [ 701.137285][T16553] ? ima_match_policy+0x8c4/0x2350 [ 701.137319][T16553] ? find_held_lock+0x2b/0x80 [ 701.137333][T16553] ? process_measurement+0x4c8/0x2350 [ 701.137348][T16553] ? process_measurement+0x4c8/0x2350 [ 701.137370][T16553] ? process_measurement+0x1f4/0x2350 [ 701.137416][T16553] mmap_region+0x30a/0x3e0 [ 701.137441][T16553] do_mmap+0xc63/0x12f0 [ 701.137462][T16553] ? __pfx_do_mmap+0x10/0x10 [ 701.137479][T16553] ? __pfx_down_write_killable+0x10/0x10 [ 701.137502][T16553] vm_mmap_pgoff+0x29e/0x470 [ 701.137523][T16553] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 701.137540][T16553] ? __fget_files+0x215/0x3d0 [ 701.137559][T16553] ? __fget_files+0x21f/0x3d0 [ 701.137577][T16553] ksys_mmap_pgoff+0x3c8/0x650 [ 701.137593][T16553] ? __x64_sys_futex+0x34f/0x4d0 [ 701.137612][T16553] ? __x64_sys_futex+0x358/0x4d0 [ 701.137631][T16553] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 701.137649][T16553] ? xfd_validate_state+0x129/0x190 [ 701.137673][T16553] __x64_sys_mmap+0x125/0x190 [ 701.137697][T16553] do_syscall_64+0x106/0xf80 [ 701.137713][T16553] ? clear_bhb_loop+0x40/0x90 [ 701.137731][T16553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.137746][T16553] RIP: 0033:0x7f23edb9c819 [ 701.137760][T16553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.137775][T16553] RSP: 002b:00007f23eeac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 701.137790][T16553] RAX: ffffffffffffffda RBX: 00007f23ede15fa0 RCX: 00007f23edb9c819 [ 701.137801][T16553] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000409000 [ 701.137810][T16553] RBP: 00007f23edc32c91 R08: 00000000000000dd R09: 0000000000000000 [ 701.137819][T16553] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 701.137829][T16553] R13: 00007f23ede16038 R14: 00007f23ede15fa0 R15: 00007ffeaafd6a18 [ 701.137849][T16553] [ 701.996104][T16529] team0: Port device team_slave_0 added [ 702.003593][T16529] team0: Port device team_slave_1 added [ 702.024729][T16529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.031728][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.058071][T16529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.071638][T16529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.078624][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.116236][T16529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.166675][T16041] Bluetooth: hci5: command tx timeout [ 702.827240][T16529] hsr_slave_0: entered promiscuous mode [ 702.849141][T16529] hsr_slave_1: entered promiscuous mode [ 702.881489][T16529] debugfs: 'hsr0' already exists in 'hsr' [ 702.907371][T16529] Cannot create hsr debugfs directory [ 703.587556][T16529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 703.615991][T16568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2558'. [ 703.637319][T16529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 703.715128][T16529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 703.747453][T16529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 704.049784][T16529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.128201][T16529] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.167918][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.175012][T16044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.215196][T16041] Bluetooth: hci5: command tx timeout [ 704.278277][T16035] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.285383][T16035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.867300][T16582] zswap: compressor not available [ 704.922637][T16529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.187929][T16592] FAULT_INJECTION: forcing a failure. [ 705.187929][T16592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.276309][T16592] CPU: 0 UID: 0 PID: 16592 Comm: syz.0.2561 Tainted: G I L syzkaller #0 PREEMPT(full) [ 705.276337][T16592] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 705.276347][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 705.276357][T16592] Call Trace: [ 705.276362][T16592] [ 705.276369][T16592] dump_stack_lvl+0x100/0x190 [ 705.276396][T16592] should_fail_ex.cold+0x5/0xa [ 705.276415][T16592] _copy_to_user+0x32/0xd0 [ 705.276436][T16592] simple_read_from_buffer+0xcb/0x170 [ 705.276462][T16592] proc_fail_nth_read+0x1af/0x230 [ 705.276482][T16592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.276503][T16592] ? rw_verify_area+0xce/0x6d0 [ 705.276525][T16592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.276543][T16592] vfs_read+0x1e4/0xb30 [ 705.276559][T16592] ? __pfx_tty_ioctl+0x10/0x10 [ 705.276574][T16592] ? __pfx_vfs_read+0x10/0x10 [ 705.276592][T16592] ? fd_install+0x24f/0x580 [ 705.276606][T16592] ? hook_file_ioctl_common+0x146/0x410 [ 705.276630][T16592] ksys_read+0x12a/0x250 [ 705.276644][T16592] ? __pfx_ksys_read+0x10/0x10 [ 705.276658][T16592] ? __pfx_tty_ioctl+0x10/0x10 [ 705.276676][T16592] do_syscall_64+0x106/0xf80 [ 705.276692][T16592] ? clear_bhb_loop+0x40/0x90 [ 705.276710][T16592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.276729][T16592] RIP: 0033:0x7f23edb5d04e [ 705.276742][T16592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.276756][T16592] RSP: 002b:00007f23eeac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 705.276771][T16592] RAX: ffffffffffffffda RBX: 00007f23eeac66c0 RCX: 00007f23edb5d04e [ 705.276781][T16592] RDX: 000000000000000f RSI: 00007f23eeac60a0 RDI: 0000000000000003 [ 705.276790][T16592] RBP: 00007f23eeac6090 R08: 0000000000000000 R09: 0000000000000000 [ 705.276799][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.276807][T16592] R13: 00007f23ede16038 R14: 00007f23ede15fa0 R15: 00007ffeaafd6a18 [ 705.276826][T16592] [ 706.313061][T16041] Bluetooth: hci5: command tx timeout [ 706.470094][T16529] veth0_vlan: entered promiscuous mode [ 706.646553][T16529] veth1_vlan: entered promiscuous mode [ 706.781938][T16529] veth0_macvtap: entered promiscuous mode [ 706.838064][T16529] veth1_macvtap: entered promiscuous mode [ 706.974280][T16529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.050801][T16529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.116859][T16054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.131838][T16054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.207465][T16054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.280128][T16054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.551079][T16045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.602933][T16045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.744011][T16054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.800564][T16054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.994100][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2568'. [ 708.079112][T16625] bridge_slave_1: left allmulticast mode [ 708.084776][T16625] bridge_slave_1: left promiscuous mode [ 708.153409][T16625] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.197552][T16625] bridge_slave_0: left allmulticast mode [ 708.250496][T16625] bridge_slave_0: left promiscuous mode [ 708.293631][T16625] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.366573][T16041] Bluetooth: hci5: command tx timeout [ 708.956854][T16635] zswap: compressor not available [ 710.426971][T16660] FAULT_INJECTION: forcing a failure. [ 710.426971][T16660] name fail_futex, interval 1, probability 0, space 0, times 0 [ 710.542268][T16660] CPU: 0 UID: 0 PID: 16660 Comm: syz.5.2576 Tainted: G I L syzkaller #0 PREEMPT(full) [ 710.542301][T16660] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 710.542308][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.542318][T16660] Call Trace: [ 710.542324][T16660] [ 710.542330][T16660] dump_stack_lvl+0x100/0x190 [ 710.542358][T16660] should_fail_ex.cold+0x5/0xa [ 710.542377][T16660] get_futex_key+0x1d2/0x1620 [ 710.542399][T16660] ? __pfx_get_futex_key+0x10/0x10 [ 710.542420][T16660] ? __fput+0x68a/0xb40 [ 710.542441][T16660] futex_wait_setup+0x83/0x510 [ 710.542469][T16660] __futex_wait+0x19f/0x300 [ 710.542493][T16660] ? __pfx___futex_wait+0x10/0x10 [ 710.542518][T16660] ? __pfx_futex_wake_mark+0x10/0x10 [ 710.542543][T16660] ? futex_hash+0x2c5/0x380 [ 710.542566][T16660] futex_wait+0xed/0x380 [ 710.542588][T16660] ? __pfx_futex_wait+0x10/0x10 [ 710.542620][T16660] do_futex+0x1ef/0x350 [ 710.542639][T16660] ? __pfx_do_futex+0x10/0x10 [ 710.542659][T16660] ? __pfx___might_resched+0x10/0x10 [ 710.542680][T16660] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 710.542707][T16660] __x64_sys_futex+0x34f/0x4d0 [ 710.542728][T16660] ? __pfx___x64_sys_futex+0x10/0x10 [ 710.542755][T16660] do_syscall_64+0x106/0xf80 [ 710.542771][T16660] ? clear_bhb_loop+0x40/0x90 [ 710.542789][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.542805][T16660] RIP: 0033:0x7fcad479c819 [ 710.542818][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.542833][T16660] RSP: 002b:00007fcad56960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.542848][T16660] RAX: ffffffffffffffda RBX: 00007fcad4a15fa8 RCX: 00007fcad479c819 [ 710.542858][T16660] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcad4a15fa8 [ 710.542868][T16660] RBP: 00007fcad4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 710.542877][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.542886][T16660] R13: 00007fcad4a16038 R14: 00007ffc1a3ffb00 R15: 00007ffc1a3ffbe8 [ 710.542906][T16660] [ 712.344321][T16687] can: request_module (can-proto-3) failed. [ 713.406501][T16041] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 713.827445][T16707] zswap: compressor not available [ 716.472479][T16753] FAULT_INJECTION: forcing a failure. [ 716.472479][T16753] name failslab, interval 1, probability 0, space 0, times 0 [ 716.506607][T16753] CPU: 0 UID: 0 PID: 16753 Comm: syz.0.2599 Tainted: G I L syzkaller #0 PREEMPT(full) [ 716.506635][T16753] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 716.506642][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.506651][T16753] Call Trace: [ 716.506657][T16753] [ 716.506664][T16753] dump_stack_lvl+0x100/0x190 [ 716.506696][T16753] should_fail_ex.cold+0x5/0xa [ 716.506713][T16753] ? tomoyo_supervisor+0x65d/0x1340 [ 716.506728][T16753] should_failslab+0xc2/0x120 [ 716.506745][T16753] __kmalloc_noprof+0xe0/0x850 [ 716.506784][T16753] tomoyo_supervisor+0x65d/0x1340 [ 716.506804][T16753] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 716.506831][T16753] ? tomoyo_check_path_acl+0x141/0x210 [ 716.506852][T16753] ? tomoyo_check_acl+0x1f7/0x410 [ 716.506871][T16753] tomoyo_path_permission+0x270/0x3b0 [ 716.506892][T16753] tomoyo_check_open_permission+0x34d/0x3c0 [ 716.506912][T16753] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 716.506949][T16753] ? do_raw_spin_lock+0x128/0x260 [ 716.506972][T16753] ? path_get+0x61/0x80 [ 716.506991][T16753] tomoyo_file_open+0x6b/0x90 [ 716.507006][T16753] security_file_open+0xb5/0x1e0 [ 716.507027][T16753] do_dentry_open+0x5aa/0x1660 [ 716.507044][T16753] ? security_inode_permission+0xbf/0x250 [ 716.507066][T16753] vfs_open+0x82/0x3f0 [ 716.507087][T16753] path_openat+0x208c/0x31a0 [ 716.507109][T16753] ? __pfx_path_openat+0x10/0x10 [ 716.507132][T16753] do_file_open+0x20e/0x430 [ 716.507150][T16753] ? __pfx_do_file_open+0x10/0x10 [ 716.507179][T16753] ? alloc_fd+0x476/0x790 [ 716.507197][T16753] ? do_getname+0x191/0x390 [ 716.507217][T16753] do_sys_openat2+0x10d/0x1e0 [ 716.507237][T16753] ? __pfx_do_sys_openat2+0x10/0x10 [ 716.507264][T16753] __x64_sys_openat+0x12d/0x210 [ 716.507285][T16753] ? __pfx___x64_sys_openat+0x10/0x10 [ 716.507312][T16753] do_syscall_64+0x106/0xf80 [ 716.507328][T16753] ? clear_bhb_loop+0x40/0x90 [ 716.507346][T16753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.507362][T16753] RIP: 0033:0x7f23edb9c819 [ 716.507376][T16753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.507391][T16753] RSP: 002b:00007f23eeac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.507406][T16753] RAX: ffffffffffffffda RBX: 00007f23ede15fa0 RCX: 00007f23edb9c819 [ 716.507416][T16753] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 716.507425][T16753] RBP: 00007f23edc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 716.507435][T16753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.507444][T16753] R13: 00007f23ede16038 R14: 00007f23ede15fa0 R15: 00007ffeaafd6a18 [ 716.507464][T16753] [ 717.082844][T16753] FAULT_INJECTION: forcing a failure. [ 717.082844][T16753] name failslab, interval 1, probability 0, space 0, times 0 [ 717.097040][T16753] CPU: 0 UID: 0 PID: 16753 Comm: syz.0.2599 Tainted: G I L syzkaller #0 PREEMPT(full) [ 717.097067][T16753] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 717.097074][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.097083][T16753] Call Trace: [ 717.097090][T16753] [ 717.097096][T16753] dump_stack_lvl+0x100/0x190 [ 717.097123][T16753] should_fail_ex.cold+0x5/0xa [ 717.097142][T16753] should_failslab+0xc2/0x120 [ 717.097160][T16753] __kmalloc_cache_noprof+0x7a/0x6f0 [ 717.097180][T16753] ? call_usermodehelper_setup+0xaf/0x360 [ 717.097206][T16753] ? __pfx_free_modprobe_argv+0x10/0x10 [ 717.097228][T16753] call_usermodehelper_setup+0xaf/0x360 [ 717.097253][T16753] __request_module+0x3c7/0x6c0 [ 717.097274][T16753] ? __pfx___request_module+0x10/0x10 [ 717.097301][T16753] ? __get_fs_type+0x12c/0x170 [ 717.097318][T16753] ? __get_fs_type+0x12c/0x170 [ 717.097342][T16753] get_fs_type+0xd7/0x190 [ 717.097360][T16753] __x64_sys_fsopen+0xca/0x220 [ 717.097381][T16753] do_syscall_64+0x106/0xf80 [ 717.097397][T16753] ? clear_bhb_loop+0x40/0x90 [ 717.097415][T16753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.097430][T16753] RIP: 0033:0x7f23edb9c819 [ 717.097444][T16753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.097458][T16753] RSP: 002b:00007f23eeac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 717.097473][T16753] RAX: ffffffffffffffda RBX: 00007f23ede15fa0 RCX: 00007f23edb9c819 [ 717.097483][T16753] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 717.097492][T16753] RBP: 00007f23edc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 717.097501][T16753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.097510][T16753] R13: 00007f23ede16038 R14: 00007f23ede15fa0 R15: 00007ffeaafd6a18 [ 717.097530][T16753] [ 718.265958][T16761] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2601'. [ 718.638917][T16772] FAULT_INJECTION: forcing a failure. [ 718.638917][T16772] name failslab, interval 1, probability 0, space 0, times 0 [ 718.672368][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.5.2603 Tainted: G I L syzkaller #0 PREEMPT(full) [ 718.672398][T16772] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 718.672405][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.672416][T16772] Call Trace: [ 718.672421][T16772] [ 718.672428][T16772] dump_stack_lvl+0x100/0x190 [ 718.672455][T16772] should_fail_ex.cold+0x5/0xa [ 718.672475][T16772] should_failslab+0xc2/0x120 [ 718.672493][T16772] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 718.672516][T16772] ? __d_alloc+0x34/0xa80 [ 718.672538][T16772] __d_alloc+0x34/0xa80 [ 718.672557][T16772] d_alloc_pseudo+0x1c/0xc0 [ 718.672578][T16772] alloc_file_pseudo+0xcf/0x230 [ 718.672606][T16772] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 718.672632][T16772] __shmem_file_setup+0x221/0x490 [ 718.672654][T16772] ? __pfx___shmem_file_setup+0x10/0x10 [ 718.672679][T16772] ? vm_area_alloc+0x1f/0x160 [ 718.672702][T16772] shmem_zero_setup+0x96/0x1b0 [ 718.672717][T16772] __mmap_region+0x21f6/0x2a50 [ 718.672743][T16772] ? __pfx___mmap_region+0x10/0x10 [ 718.672766][T16772] ? __lock_acquire+0x4a5/0x2630 [ 718.672787][T16772] ? set_next_entity+0x11e/0x9c0 [ 718.672812][T16772] ? __lock_acquire+0x4a5/0x2630 [ 718.672830][T16772] ? find_held_lock+0x2b/0x80 [ 718.672852][T16772] ? find_held_lock+0x2b/0x80 [ 718.672866][T16772] ? finish_task_switch.isra.0+0x200/0xb80 [ 718.672883][T16772] ? finish_task_switch.isra.0+0x200/0xb80 [ 718.672906][T16772] ? trace_sched_exit_tp+0x13a/0x180 [ 718.672924][T16772] ? __schedule+0x1000/0x6120 [ 718.672962][T16772] ? rcu_is_watching+0x12/0xc0 [ 718.672991][T16772] ? cap_capable+0x107/0x460 [ 718.673011][T16772] mmap_region+0x180/0x3e0 [ 718.673037][T16772] do_mmap+0xc63/0x12f0 [ 718.673057][T16772] ? __pfx_do_mmap+0x10/0x10 [ 718.673075][T16772] ? __pfx_down_write_killable+0x10/0x10 [ 718.673097][T16772] vm_mmap_pgoff+0x29e/0x470 [ 718.673118][T16772] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 718.673137][T16772] ? do_futex+0x192/0x350 [ 718.673158][T16772] ? __pfx_do_futex+0x10/0x10 [ 718.673180][T16772] ksys_mmap_pgoff+0xe1/0x650 [ 718.673197][T16772] ? __x64_sys_futex+0x34f/0x4d0 [ 718.673215][T16772] ? __x64_sys_futex+0x358/0x4d0 [ 718.673235][T16772] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 718.673252][T16772] ? xfd_validate_state+0x129/0x190 [ 718.673277][T16772] __x64_sys_mmap+0x125/0x190 [ 718.673300][T16772] do_syscall_64+0x106/0xf80 [ 718.673316][T16772] ? clear_bhb_loop+0x40/0x90 [ 718.673334][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.673349][T16772] RIP: 0033:0x7fcad479c819 [ 718.673363][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.673377][T16772] RSP: 002b:00007fcad5696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 718.673392][T16772] RAX: ffffffffffffffda RBX: 00007fcad4a15fa0 RCX: 00007fcad479c819 [ 718.673403][T16772] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 718.673413][T16772] RBP: 00007fcad4832c91 R08: 0000000000000401 R09: 0000000000008000 [ 718.673422][T16772] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 718.673431][T16772] R13: 00007fcad4a16038 R14: 00007fcad4a15fa0 R15: 00007ffc1a3ffbe8 [ 718.673452][T16772] [ 720.105778][T16780] random: crng reseeded on system resumption [ 720.132460][T16779] netlink: 'syz.5.2606': attribute type 11 has an invalid length. [ 720.140927][T16779] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 720.149891][T16779] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2606'. [ 720.221347][T16782] netlink: 'syz.5.2607': attribute type 2 has an invalid length. [ 720.229499][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 721.754149][T16797] FAULT_INJECTION: forcing a failure. [ 721.754149][T16797] name failslab, interval 1, probability 0, space 0, times 0 [ 721.768048][T16797] CPU: 0 UID: 0 PID: 16797 Comm: syz.5.2612 Tainted: G I L syzkaller #0 PREEMPT(full) [ 721.768077][T16797] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 721.768084][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 721.768094][T16797] Call Trace: [ 721.768100][T16797] [ 721.768106][T16797] dump_stack_lvl+0x100/0x190 [ 721.768134][T16797] should_fail_ex.cold+0x5/0xa [ 721.768152][T16797] ? __pfx_proc_fill_super+0x10/0x10 [ 721.768168][T16797] should_failslab+0xc2/0x120 [ 721.768185][T16797] ? __pfx_proc_fill_super+0x10/0x10 [ 721.768200][T16797] __kmalloc_cache_noprof+0x7a/0x6f0 [ 721.768221][T16797] ? proc_fill_super+0x7b/0x730 [ 721.768235][T16797] ? shrinker_register+0x1db/0x240 [ 721.768252][T16797] ? __pfx_proc_fill_super+0x10/0x10 [ 721.768267][T16797] proc_fill_super+0x7b/0x730 [ 721.768283][T16797] ? __pfx_proc_fill_super+0x10/0x10 [ 721.768297][T16797] get_tree_nodev+0xdd/0x190 [ 721.768312][T16797] vfs_get_tree+0x92/0x320 [ 721.768342][T16797] vfs_cmd_create+0xd7/0x2a0 [ 721.768363][T16797] __do_sys_fsconfig+0x55a/0xcb0 [ 721.768386][T16797] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 721.768416][T16797] do_syscall_64+0x106/0xf80 [ 721.768432][T16797] ? clear_bhb_loop+0x40/0x90 [ 721.768450][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.768466][T16797] RIP: 0033:0x7fcad479c819 [ 721.768480][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.768494][T16797] RSP: 002b:00007fcad5696028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 721.768509][T16797] RAX: ffffffffffffffda RBX: 00007fcad4a15fa0 RCX: 00007fcad479c819 [ 721.768519][T16797] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 721.768528][T16797] RBP: 00007fcad4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 721.768536][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.768545][T16797] R13: 00007fcad4a16038 R14: 00007fcad4a15fa0 R15: 00007ffc1a3ffbe8 [ 721.768565][T16797] [ 721.770014][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2612'. [ 722.052765][T16799] FAULT_INJECTION: forcing a failure. [ 722.052765][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 722.066067][T16799] CPU: 0 UID: 0 PID: 16799 Comm: syz.5.2613 Tainted: G I L syzkaller #0 PREEMPT(full) [ 722.066095][T16799] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 722.066102][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 722.066111][T16799] Call Trace: [ 722.066118][T16799] [ 722.066124][T16799] dump_stack_lvl+0x100/0x190 [ 722.066156][T16799] should_fail_ex.cold+0x5/0xa [ 722.066176][T16799] should_failslab+0xc2/0x120 [ 722.066194][T16799] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 722.066217][T16799] ? vm_area_alloc+0x1f/0x160 [ 722.066237][T16799] ? vma_merge_new_range+0x38b/0xa30 [ 722.066257][T16799] ? __pfx___sanitizer_cov_trace_const_cmp2+0x10/0x10 [ 722.066277][T16799] vm_area_alloc+0x1f/0x160 [ 722.066297][T16799] __mmap_region+0x118c/0x2a50 [ 722.066329][T16799] ? __pfx___mmap_region+0x10/0x10 [ 722.066356][T16799] ? set_next_entity+0x11e/0x9c0 [ 722.066383][T16799] ? __lock_acquire+0x4a5/0x2630 [ 722.066411][T16799] ? find_held_lock+0x2b/0x80 [ 722.066425][T16799] ? finish_task_switch.isra.0+0x200/0xb80 [ 722.066442][T16799] ? finish_task_switch.isra.0+0x200/0xb80 [ 722.066466][T16799] ? trace_sched_exit_tp+0x13a/0x180 [ 722.066484][T16799] ? __schedule+0x1000/0x6120 [ 722.066521][T16799] ? rcu_is_watching+0x12/0xc0 [ 722.066544][T16799] ? cap_capable+0x107/0x460 [ 722.066563][T16799] mmap_region+0x180/0x3e0 [ 722.066589][T16799] do_mmap+0xc63/0x12f0 [ 722.066610][T16799] ? __pfx_do_mmap+0x10/0x10 [ 722.066628][T16799] ? __pfx_down_write_killable+0x10/0x10 [ 722.066650][T16799] vm_mmap_pgoff+0x29e/0x470 [ 722.066672][T16799] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 722.066691][T16799] ? do_futex+0x192/0x350 [ 722.066711][T16799] ? __pfx_do_futex+0x10/0x10 [ 722.066730][T16799] ? fd_install+0x223/0x580 [ 722.066747][T16799] ksys_mmap_pgoff+0xe1/0x650 [ 722.066764][T16799] ? __x64_sys_futex+0x34f/0x4d0 [ 722.066782][T16799] ? __x64_sys_futex+0x358/0x4d0 [ 722.066802][T16799] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 722.066819][T16799] ? xfd_validate_state+0x129/0x190 [ 722.066844][T16799] __x64_sys_mmap+0x125/0x190 [ 722.066867][T16799] do_syscall_64+0x106/0xf80 [ 722.066883][T16799] ? clear_bhb_loop+0x40/0x90 [ 722.066901][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.066916][T16799] RIP: 0033:0x7fcad479c819 [ 722.066930][T16799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.066944][T16799] RSP: 002b:00007fcad5696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 722.066959][T16799] RAX: ffffffffffffffda RBX: 00007fcad4a15fa0 RCX: 00007fcad479c819 [ 722.066970][T16799] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 722.066980][T16799] RBP: 00007fcad4832c91 R08: 0000000000000002 R09: 0000000800008000 [ 722.066990][T16799] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 722.066999][T16799] R13: 00007fcad4a16038 R14: 00007fcad4a15fa0 R15: 00007ffc1a3ffbe8 [ 722.067018][T16799] [ 724.531102][T16080] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 724.542405][T16080] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 724.550425][T16080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 724.561749][T16080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 724.569916][T16080] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 724.610974][T16817] FAULT_INJECTION: forcing a failure. [ 724.610974][T16817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 724.670936][T16817] CPU: 0 UID: 0 PID: 16817 Comm: syz.5.2619 Tainted: G I L syzkaller #0 PREEMPT(full) [ 724.670963][T16817] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 724.670970][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 724.670980][T16817] Call Trace: [ 724.670986][T16817] [ 724.670992][T16817] dump_stack_lvl+0x100/0x190 [ 724.671020][T16817] should_fail_ex.cold+0x5/0xa [ 724.671038][T16817] get_futex_key+0x1d2/0x1620 [ 724.671059][T16817] ? __pfx_get_futex_key+0x10/0x10 [ 724.671081][T16817] ? __fput+0x68a/0xb40 [ 724.671108][T16817] futex_wait_setup+0x83/0x510 [ 724.671137][T16817] __futex_wait+0x19f/0x300 [ 724.671162][T16817] ? __pfx___futex_wait+0x10/0x10 [ 724.671188][T16817] ? __pfx_futex_wake_mark+0x10/0x10 [ 724.671213][T16817] ? futex_hash+0x2c5/0x380 [ 724.671236][T16817] futex_wait+0xed/0x380 [ 724.671259][T16817] ? __pfx_futex_wait+0x10/0x10 [ 724.671291][T16817] do_futex+0x1ef/0x350 [ 724.671310][T16817] ? __pfx_do_futex+0x10/0x10 [ 724.671330][T16817] ? __pfx___might_resched+0x10/0x10 [ 724.671352][T16817] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 724.671378][T16817] __x64_sys_futex+0x34f/0x4d0 [ 724.671401][T16817] ? __pfx___x64_sys_futex+0x10/0x10 [ 724.671427][T16817] do_syscall_64+0x106/0xf80 [ 724.671444][T16817] ? clear_bhb_loop+0x40/0x90 [ 724.671462][T16817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.671477][T16817] RIP: 0033:0x7fcad479c819 [ 724.671490][T16817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.671505][T16817] RSP: 002b:00007fcad56960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 724.671520][T16817] RAX: ffffffffffffffda RBX: 00007fcad4a15fa8 RCX: 00007fcad479c819 [ 724.671530][T16817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcad4a15fa8 [ 724.671542][T16817] RBP: 00007fcad4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 724.671551][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.671560][T16817] R13: 00007fcad4a16038 R14: 00007ffc1a3ffb00 R15: 00007ffc1a3ffbe8 [ 724.671578][T16817] [ 724.983019][T16818] chnl_net:caif_netlink_parms(): no params data found [ 725.062388][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.069545][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.077198][T16818] bridge_slave_0: entered allmulticast mode [ 725.084165][T16818] bridge_slave_0: entered promiscuous mode [ 725.091913][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.099725][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.106919][T16818] bridge_slave_1: entered allmulticast mode [ 725.115809][T16818] bridge_slave_1: entered promiscuous mode [ 725.158031][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.192702][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.269429][T16818] team0: Port device team_slave_0 added [ 725.287539][T16818] team0: Port device team_slave_1 added [ 725.359380][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.372074][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.427331][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.487540][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.494496][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.586655][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.667552][T16818] hsr_slave_0: entered promiscuous mode [ 725.683537][T16818] hsr_slave_1: entered promiscuous mode [ 725.696852][T16818] debugfs: 'hsr0' already exists in 'hsr' [ 725.706300][T16818] Cannot create hsr debugfs directory [ 725.801208][T16834] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 725.927327][T16818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 725.940185][T16818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 725.950319][T16818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 725.992316][T16818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 726.142143][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.175054][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.215871][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.223000][T16037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.254889][T16037] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.262019][T16037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.586880][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.606384][T16041] Bluetooth: hci6: command tx timeout [ 726.925161][T16818] veth0_vlan: entered promiscuous mode [ 726.977234][T16818] veth1_vlan: entered promiscuous mode [ 727.057090][T16818] veth0_macvtap: entered promiscuous mode [ 727.090129][T16818] veth1_macvtap: entered promiscuous mode [ 727.128530][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.167309][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.192098][T16080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 727.202477][T16080] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 727.210388][T16080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.218177][T16080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.230446][T16080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 727.302622][T16037] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.317754][T16037] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.380283][T16037] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.396253][T16037] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.553893][T16044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.585828][T16044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.676351][T16037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.684179][T16037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.841777][T16861] chnl_net:caif_netlink_parms(): no params data found [ 728.020674][T16861] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.033655][T16861] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.056534][T16861] bridge_slave_0: entered allmulticast mode [ 728.077806][T16861] bridge_slave_0: entered promiscuous mode [ 728.093646][T16861] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.111154][T16861] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.130412][T16861] bridge_slave_1: entered allmulticast mode [ 728.147404][T16861] bridge_slave_1: entered promiscuous mode [ 728.198148][T16861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.228448][T16861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.308165][T16861] team0: Port device team_slave_0 added [ 728.328303][T16861] team0: Port device team_slave_1 added [ 728.380398][T16861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.401185][T16861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.440107][T16867] can: request_module (can-proto-3) failed. [ 728.468124][T16861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.525280][T16861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.540110][T16861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.614932][T16861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.686669][T16041] Bluetooth: hci6: command tx timeout [ 728.709553][T16861] hsr_slave_0: entered promiscuous mode [ 728.736611][T16861] hsr_slave_1: entered promiscuous mode [ 728.742667][T16861] debugfs: 'hsr0' already exists in 'hsr' [ 728.755260][T16861] Cannot create hsr debugfs directory [ 729.070620][T16861] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 729.105975][T16861] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 729.128836][T16861] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 729.152145][T16861] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 729.248933][T16041] Bluetooth: hci7: command tx timeout [ 729.317344][T16861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.352381][T16861] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.374650][T16035] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.381800][T16035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.424971][T16035] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.432092][T16035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.502905][T16861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.558943][T16861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.571509][T16080] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 729.645952][T16886] FAULT_INJECTION: forcing a failure. [ 729.645952][T16886] name failslab, interval 1, probability 0, space 0, times 0 [ 729.696535][T16886] CPU: 0 UID: 0 PID: 16886 Comm: syz.6.2626 Tainted: G I L syzkaller #0 PREEMPT(full) [ 729.696563][T16886] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 729.696570][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.696579][T16886] Call Trace: [ 729.696585][T16886] [ 729.696592][T16886] dump_stack_lvl+0x100/0x190 [ 729.696620][T16886] should_fail_ex.cold+0x5/0xa [ 729.696639][T16886] ? tomoyo_supervisor+0x65d/0x1340 [ 729.696653][T16886] should_failslab+0xc2/0x120 [ 729.696671][T16886] __kmalloc_noprof+0xe0/0x850 [ 729.696707][T16886] tomoyo_supervisor+0x65d/0x1340 [ 729.696725][T16886] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 729.696753][T16886] ? tomoyo_check_path_acl+0x141/0x210 [ 729.696773][T16886] ? tomoyo_check_acl+0x1f7/0x410 [ 729.696791][T16886] tomoyo_path_permission+0x270/0x3b0 [ 729.696811][T16886] tomoyo_check_open_permission+0x34d/0x3c0 [ 729.696831][T16886] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 729.696868][T16886] ? do_raw_spin_lock+0x128/0x260 [ 729.696892][T16886] ? path_get+0x61/0x80 [ 729.696911][T16886] tomoyo_file_open+0x6b/0x90 [ 729.696926][T16886] security_file_open+0xb5/0x1e0 [ 729.696947][T16886] do_dentry_open+0x5aa/0x1660 [ 729.696964][T16886] ? security_inode_permission+0xbf/0x250 [ 729.696986][T16886] vfs_open+0x82/0x3f0 [ 729.697007][T16886] path_openat+0x208c/0x31a0 [ 729.697030][T16886] ? __pfx_path_openat+0x10/0x10 [ 729.697053][T16886] do_file_open+0x20e/0x430 [ 729.697070][T16886] ? __pfx_do_file_open+0x10/0x10 [ 729.697100][T16886] ? alloc_fd+0x476/0x790 [ 729.697117][T16886] ? do_getname+0x191/0x390 [ 729.697138][T16886] do_sys_openat2+0x10d/0x1e0 [ 729.697158][T16886] ? __pfx_do_sys_openat2+0x10/0x10 [ 729.697184][T16886] __x64_sys_openat+0x12d/0x210 [ 729.697205][T16886] ? __pfx___x64_sys_openat+0x10/0x10 [ 729.697232][T16886] do_syscall_64+0x106/0xf80 [ 729.697248][T16886] ? clear_bhb_loop+0x40/0x90 [ 729.697266][T16886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.697282][T16886] RIP: 0033:0x7ff66939c819 [ 729.697296][T16886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.697310][T16886] RSP: 002b:00007ff66a1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 729.697324][T16886] RAX: ffffffffffffffda RBX: 00007ff669615fa0 RCX: 00007ff66939c819 [ 729.697335][T16886] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 729.697344][T16886] RBP: 00007ff669432c91 R08: 0000000000000000 R09: 0000000000000000 [ 729.697353][T16886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.697362][T16886] R13: 00007ff669616038 R14: 00007ff669615fa0 R15: 00007ffd02e03158 [ 729.697382][T16886] [ 730.459470][T16892] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 730.663415][T16861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.782114][T16080] Bluetooth: hci6: command tx timeout [ 731.203182][T16861] veth0_vlan: entered promiscuous mode [ 731.272787][T16861] veth1_vlan: entered promiscuous mode [ 731.326674][T16080] Bluetooth: hci7: command tx timeout [ 731.403439][T16861] veth0_macvtap: entered promiscuous mode [ 731.460740][T16861] veth1_macvtap: entered promiscuous mode [ 731.548470][T16861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.594863][T16861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.634274][T16044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.659522][T16044] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.745627][T16044] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.772769][T16044] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.016581][T16035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.048628][T16035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.261787][T16035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.285705][T16035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.483650][T16041] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 732.495389][T16041] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 732.503955][T16041] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 732.511783][T16041] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 732.519296][T16041] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 732.847663][T16041] Bluetooth: hci6: command tx timeout [ 733.118448][T16925] chnl_net:caif_netlink_parms(): no params data found [ 733.408344][T16041] Bluetooth: hci7: command tx timeout [ 733.475103][T16925] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.545339][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.576462][T16925] bridge_slave_0: entered allmulticast mode [ 733.617707][T16925] bridge_slave_0: entered promiscuous mode [ 733.626137][T16925] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.626286][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.626422][T16925] bridge_slave_1: entered allmulticast mode [ 733.627476][T16925] bridge_slave_1: entered promiscuous mode [ 733.715209][T16925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.735073][T16925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.837089][T16925] team0: Port device team_slave_0 added [ 733.855598][T16925] team0: Port device team_slave_1 added [ 733.940226][T16925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.940242][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.940261][T16925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.944074][T16925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.944087][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.944122][T16925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.145740][T16925] hsr_slave_0: entered promiscuous mode [ 734.147670][T16925] hsr_slave_1: entered promiscuous mode [ 734.151749][T16925] debugfs: 'hsr0' already exists in 'hsr' [ 734.151767][T16925] Cannot create hsr debugfs directory [ 734.574555][T16949] zswap: compressor not available [ 734.610744][T16041] Bluetooth: hci8: command tx timeout [ 734.820508][T16925] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.874644][T16925] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.918683][T16925] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.993116][T16925] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 735.490205][T16041] Bluetooth: hci7: command tx timeout [ 735.812146][T16925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.951195][T16925] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.055285][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.062412][T16044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.074553][T16978] zswap: compressor not available [ 736.109296][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.116465][T16044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.235492][T16925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.303219][T16925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.686451][T16041] Bluetooth: hci8: command tx timeout [ 736.939337][T16925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.454355][T17000] zswap: compressor not available [ 737.681251][T16925] veth0_vlan: entered promiscuous mode [ 737.752714][T16925] veth1_vlan: entered promiscuous mode [ 738.084620][T16925] veth0_macvtap: entered promiscuous mode [ 738.211963][T16925] veth1_macvtap: entered promiscuous mode [ 738.288777][T16925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.352572][T16925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.411644][T16035] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.449007][T16035] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.492123][T16035] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.563282][T16035] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.766388][T16041] Bluetooth: hci8: command tx timeout [ 738.819101][T16045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.862752][T16045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.967421][T16035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.018487][T16035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.114932][T17041] zswap: compressor not available [ 740.840981][T17050] zswap: compressor not available [ 740.849391][T16041] Bluetooth: hci8: command tx timeout [ 742.054970][T17073] FAULT_INJECTION: forcing a failure. [ 742.054970][T17073] name failslab, interval 1, probability 0, space 0, times 0 [ 742.095366][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.7.2657 Tainted: G I L syzkaller #0 PREEMPT(full) [ 742.095396][T17073] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 742.095403][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.095412][T17073] Call Trace: [ 742.095418][T17073] [ 742.095425][T17073] dump_stack_lvl+0x100/0x190 [ 742.095453][T17073] should_fail_ex.cold+0x5/0xa [ 742.095472][T17073] should_failslab+0xc2/0x120 [ 742.095490][T17073] __kmalloc_cache_noprof+0x7a/0x6f0 [ 742.095510][T17073] ? qrtr_tun_open+0x47/0x220 [ 742.095532][T17073] ? __pfx_qrtr_tun_open+0x10/0x10 [ 742.095553][T17073] qrtr_tun_open+0x47/0x220 [ 742.095572][T17073] ? __pfx_qrtr_tun_open+0x10/0x10 [ 742.095592][T17073] misc_open+0x26d/0x450 [ 742.095612][T17073] ? __pfx_misc_open+0x10/0x10 [ 742.095631][T17073] chrdev_open+0x234/0x6a0 [ 742.095654][T17073] ? __pfx_apparmor_file_open+0x10/0x10 [ 742.095673][T17073] ? __pfx_chrdev_open+0x10/0x10 [ 742.095691][T17073] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 742.095712][T17073] do_dentry_open+0x6d8/0x1660 [ 742.095729][T17073] ? __pfx_chrdev_open+0x10/0x10 [ 742.095750][T17073] vfs_open+0x82/0x3f0 [ 742.095771][T17073] path_openat+0x208c/0x31a0 [ 742.095794][T17073] ? __pfx_path_openat+0x10/0x10 [ 742.095817][T17073] do_file_open+0x20e/0x430 [ 742.095835][T17073] ? __pfx_do_file_open+0x10/0x10 [ 742.095864][T17073] ? alloc_fd+0x476/0x790 [ 742.095882][T17073] ? do_getname+0x191/0x390 [ 742.095903][T17073] do_sys_openat2+0x10d/0x1e0 [ 742.095923][T17073] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.095949][T17073] __x64_sys_openat+0x12d/0x210 [ 742.095970][T17073] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.095998][T17073] do_syscall_64+0x106/0xf80 [ 742.096013][T17073] ? clear_bhb_loop+0x40/0x90 [ 742.096031][T17073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.096046][T17073] RIP: 0033:0x7f5aaff9c819 [ 742.096060][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.096074][T17073] RSP: 002b:00007f5ab0f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.096089][T17073] RAX: ffffffffffffffda RBX: 00007f5ab0215fa0 RCX: 00007f5aaff9c819 [ 742.096099][T17073] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 742.096109][T17073] RBP: 00007f5ab0032c91 R08: 0000000000000000 R09: 0000000000000000 [ 742.096119][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.096127][T17073] R13: 00007f5ab0216038 R14: 00007f5ab0215fa0 R15: 00007ffe108b5068 [ 742.096151][T17073] [ 743.595131][T17092] FAULT_INJECTION: forcing a failure. [ 743.595131][T17092] name failslab, interval 1, probability 0, space 0, times 0 [ 743.667096][T17092] CPU: 0 UID: 0 PID: 17092 Comm: syz.7.2660 Tainted: G I L syzkaller #0 PREEMPT(full) [ 743.667125][T17092] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 743.667132][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 743.667141][T17092] Call Trace: [ 743.667147][T17092] [ 743.667154][T17092] dump_stack_lvl+0x100/0x190 [ 743.667181][T17092] should_fail_ex.cold+0x5/0xa [ 743.667199][T17092] ? tomoyo_supervisor+0x65d/0x1340 [ 743.667214][T17092] should_failslab+0xc2/0x120 [ 743.667232][T17092] __kmalloc_noprof+0xe0/0x850 [ 743.667259][T17092] tomoyo_supervisor+0x65d/0x1340 [ 743.667277][T17092] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 743.667304][T17092] ? tomoyo_check_path_acl+0x141/0x210 [ 743.667322][T17092] ? tomoyo_check_acl+0x1f7/0x410 [ 743.667341][T17092] tomoyo_path_permission+0x270/0x3b0 [ 743.667361][T17092] tomoyo_check_open_permission+0x34d/0x3c0 [ 743.667381][T17092] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 743.667418][T17092] ? do_raw_spin_lock+0x128/0x260 [ 743.667441][T17092] ? path_get+0x61/0x80 [ 743.667460][T17092] tomoyo_file_open+0x6b/0x90 [ 743.667476][T17092] security_file_open+0xb5/0x1e0 [ 743.667497][T17092] do_dentry_open+0x5aa/0x1660 [ 743.667522][T17092] ? security_inode_permission+0xbf/0x250 [ 743.667545][T17092] vfs_open+0x82/0x3f0 [ 743.667567][T17092] path_openat+0x208c/0x31a0 [ 743.667591][T17092] ? __pfx_path_openat+0x10/0x10 [ 743.667613][T17092] do_file_open+0x20e/0x430 [ 743.667631][T17092] ? __pfx_do_file_open+0x10/0x10 [ 743.667660][T17092] ? alloc_fd+0x476/0x790 [ 743.667677][T17092] ? do_getname+0x191/0x390 [ 743.667698][T17092] do_sys_openat2+0x10d/0x1e0 [ 743.667718][T17092] ? __pfx_do_sys_openat2+0x10/0x10 [ 743.667745][T17092] __x64_sys_openat+0x12d/0x210 [ 743.667766][T17092] ? __pfx___x64_sys_openat+0x10/0x10 [ 743.667793][T17092] do_syscall_64+0x106/0xf80 [ 743.667809][T17092] ? clear_bhb_loop+0x40/0x90 [ 743.667826][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.667842][T17092] RIP: 0033:0x7f5aaff9c819 [ 743.667855][T17092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.667870][T17092] RSP: 002b:00007f5ab0f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 743.667885][T17092] RAX: ffffffffffffffda RBX: 00007f5ab0215fa0 RCX: 00007f5aaff9c819 [ 743.667895][T17092] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 743.667905][T17092] RBP: 00007f5ab0032c91 R08: 0000000000000000 R09: 0000000000000000 [ 743.667914][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.667923][T17092] R13: 00007f5ab0216038 R14: 00007f5ab0215fa0 R15: 00007ffe108b5068 [ 743.667943][T17092] [ 744.790941][T17102] zswap: compressor not available [ 747.172718][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.179264][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.552413][T17167] FAULT_INJECTION: forcing a failure. [ 748.552413][T17167] name fail_futex, interval 1, probability 0, space 0, times 0 [ 748.620483][T17167] CPU: 0 UID: 0 PID: 17167 Comm: syz.6.2675 Tainted: G I L syzkaller #0 PREEMPT(full) [ 748.620514][T17167] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 748.620521][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 748.620531][T17167] Call Trace: [ 748.620537][T17167] [ 748.620543][T17167] dump_stack_lvl+0x100/0x190 [ 748.620571][T17167] should_fail_ex.cold+0x5/0xa [ 748.620590][T17167] get_futex_key+0x1d2/0x1620 [ 748.620611][T17167] ? __pfx_get_futex_key+0x10/0x10 [ 748.620632][T17167] ? __fput+0x68a/0xb40 [ 748.620654][T17167] futex_wait_setup+0x83/0x510 [ 748.620682][T17167] __futex_wait+0x19f/0x300 [ 748.620706][T17167] ? __pfx___futex_wait+0x10/0x10 [ 748.620731][T17167] ? __pfx_futex_wake_mark+0x10/0x10 [ 748.620756][T17167] ? futex_hash+0x2c5/0x380 [ 748.620779][T17167] futex_wait+0xed/0x380 [ 748.620802][T17167] ? __pfx_futex_wait+0x10/0x10 [ 748.620834][T17167] do_futex+0x1ef/0x350 [ 748.620853][T17167] ? __pfx_do_futex+0x10/0x10 [ 748.620873][T17167] ? __pfx___might_resched+0x10/0x10 [ 748.620894][T17167] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 748.620921][T17167] __x64_sys_futex+0x34f/0x4d0 [ 748.620943][T17167] ? __pfx___x64_sys_futex+0x10/0x10 [ 748.620970][T17167] do_syscall_64+0x106/0xf80 [ 748.620986][T17167] ? clear_bhb_loop+0x40/0x90 [ 748.621004][T17167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.621020][T17167] RIP: 0033:0x7ff66939c819 [ 748.621033][T17167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.621048][T17167] RSP: 002b:00007ff66a1bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 748.621063][T17167] RAX: ffffffffffffffda RBX: 00007ff669615fa8 RCX: 00007ff66939c819 [ 748.621074][T17167] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff669615fa8 [ 748.621083][T17167] RBP: 00007ff669615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 748.621092][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.621100][T17167] R13: 00007ff669616038 R14: 00007ffd02e03070 R15: 00007ffd02e03158 [ 748.621119][T17167] [ 750.440593][T17192] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 751.392964][T17218] FAULT_INJECTION: forcing a failure. [ 751.392964][T17218] name fail_futex, interval 1, probability 0, space 0, times 0 [ 751.532260][T17218] CPU: 0 UID: 0 PID: 17218 Comm: syz.7.2688 Tainted: G I L syzkaller #0 PREEMPT(full) [ 751.532289][T17218] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 751.532296][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.532306][T17218] Call Trace: [ 751.532312][T17218] [ 751.532318][T17218] dump_stack_lvl+0x100/0x190 [ 751.532348][T17218] should_fail_ex.cold+0x5/0xa [ 751.532367][T17218] get_futex_key+0x1d2/0x1620 [ 751.532388][T17218] ? __pfx_get_futex_key+0x10/0x10 [ 751.532409][T17218] ? __fput+0x68a/0xb40 [ 751.532430][T17218] futex_wait_setup+0x83/0x510 [ 751.532458][T17218] __futex_wait+0x19f/0x300 [ 751.532482][T17218] ? __pfx___futex_wait+0x10/0x10 [ 751.532508][T17218] ? __pfx_futex_wake_mark+0x10/0x10 [ 751.532532][T17218] ? futex_hash+0x2c5/0x380 [ 751.532555][T17218] futex_wait+0xed/0x380 [ 751.532577][T17218] ? __pfx_futex_wait+0x10/0x10 [ 751.532609][T17218] do_futex+0x1ef/0x350 [ 751.532629][T17218] ? __pfx_do_futex+0x10/0x10 [ 751.532648][T17218] ? __pfx___might_resched+0x10/0x10 [ 751.532670][T17218] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 751.532696][T17218] __x64_sys_futex+0x34f/0x4d0 [ 751.532718][T17218] ? __pfx___x64_sys_futex+0x10/0x10 [ 751.532745][T17218] do_syscall_64+0x106/0xf80 [ 751.532761][T17218] ? clear_bhb_loop+0x40/0x90 [ 751.532779][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.532794][T17218] RIP: 0033:0x7f5aaff9c819 [ 751.532808][T17218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.532823][T17218] RSP: 002b:00007f5ab0f350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 751.532838][T17218] RAX: ffffffffffffffda RBX: 00007f5ab0215fa8 RCX: 00007f5aaff9c819 [ 751.532848][T17218] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ab0215fa8 [ 751.532864][T17218] RBP: 00007f5ab0215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 751.532874][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.532883][T17218] R13: 00007f5ab0216038 R14: 00007ffe108b4f80 R15: 00007ffe108b5068 [ 751.532903][T17218] [ 751.921192][T17231] FAULT_INJECTION: forcing a failure. [ 751.921192][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 751.934592][T17231] CPU: 0 UID: 0 PID: 17231 Comm: syz.8.2691 Tainted: G I L syzkaller #0 PREEMPT(full) [ 751.934619][T17231] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 751.934626][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.934637][T17231] Call Trace: [ 751.934642][T17231] [ 751.934649][T17231] dump_stack_lvl+0x100/0x190 [ 751.934677][T17231] should_fail_ex.cold+0x5/0xa [ 751.934695][T17231] should_failslab+0xc2/0x120 [ 751.934713][T17231] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 751.934736][T17231] ? ptlock_alloc+0x1f/0x70 [ 751.934760][T17231] ptlock_alloc+0x1f/0x70 [ 751.934781][T17231] pte_alloc_one+0x82/0x3d0 [ 751.934798][T17231] __pte_alloc+0x6d/0x3e0 [ 751.934814][T17231] ? __pfx___pte_alloc+0x10/0x10 [ 751.934844][T17231] ? find_held_lock+0x2b/0x80 [ 751.934860][T17231] ? find_held_lock+0x2b/0x80 [ 751.934873][T17231] ? walk_to_pmd+0x302/0x4c0 [ 751.934893][T17231] get_locked_pte+0xa1/0xc0 [ 751.934913][T17231] insert_page+0xcc/0x220 [ 751.934932][T17231] ? __pfx_insert_page+0x10/0x10 [ 751.934949][T17231] ? __pfx_down_read_trylock+0x10/0x10 [ 751.934975][T17231] vm_insert_page+0x2c0/0x400 [ 751.934996][T17231] kcov_mmap+0xca/0x130 [ 751.935011][T17231] __mmap_region+0x1503/0x2a50 [ 751.935037][T17231] ? __pfx___mmap_region+0x10/0x10 [ 751.935061][T17231] ? ima_match_policy+0x8c4/0x2350 [ 751.935097][T17231] ? find_held_lock+0x2b/0x80 [ 751.935111][T17231] ? process_measurement+0x4c8/0x2350 [ 751.935126][T17231] ? process_measurement+0x4c8/0x2350 [ 751.935148][T17231] ? process_measurement+0x1f4/0x2350 [ 751.935193][T17231] mmap_region+0x30a/0x3e0 [ 751.935219][T17231] do_mmap+0xc63/0x12f0 [ 751.935239][T17231] ? __pfx_do_mmap+0x10/0x10 [ 751.935256][T17231] ? __pfx_down_write_killable+0x10/0x10 [ 751.935279][T17231] vm_mmap_pgoff+0x29e/0x470 [ 751.935300][T17231] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 751.935316][T17231] ? __fget_files+0x215/0x3d0 [ 751.935335][T17231] ? __fget_files+0x21f/0x3d0 [ 751.935354][T17231] ksys_mmap_pgoff+0x3c8/0x650 [ 751.935371][T17231] ? __x64_sys_futex+0x34f/0x4d0 [ 751.935389][T17231] ? __x64_sys_futex+0x358/0x4d0 [ 751.935409][T17231] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 751.935426][T17231] ? xfd_validate_state+0x129/0x190 [ 751.935451][T17231] __x64_sys_mmap+0x125/0x190 [ 751.935474][T17231] do_syscall_64+0x106/0xf80 [ 751.935489][T17231] ? clear_bhb_loop+0x40/0x90 [ 751.935507][T17231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.935522][T17231] RIP: 0033:0x7ff01d79c819 [ 751.935536][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.935551][T17231] RSP: 002b:00007ff01e5df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 751.935565][T17231] RAX: ffffffffffffffda RBX: 00007ff01da15fa0 RCX: 00007ff01d79c819 [ 751.935575][T17231] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000009000 [ 751.935584][T17231] RBP: 00007ff01d832c91 R08: 00000000000000dd R09: 0000000000000000 [ 751.935593][T17231] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 751.935603][T17231] R13: 00007ff01da16038 R14: 00007ff01da15fa0 R15: 00007fff372879b8 [ 751.935623][T17231] [ 752.783709][T17249] FAULT_INJECTION: forcing a failure. [ 752.783709][T17249] name fail_futex, interval 1, probability 0, space 0, times 0 [ 752.836331][T17249] CPU: 0 UID: 0 PID: 17249 Comm: syz.6.2695 Tainted: G I L syzkaller #0 PREEMPT(full) [ 752.836359][T17249] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 752.836365][T17249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.836374][T17249] Call Trace: [ 752.836380][T17249] [ 752.836386][T17249] dump_stack_lvl+0x100/0x190 [ 752.836413][T17249] should_fail_ex.cold+0x5/0xa [ 752.836432][T17249] get_futex_key+0x295/0x1620 [ 752.836453][T17249] ? __pfx_get_futex_key+0x10/0x10 [ 752.836470][T17249] ? lock_acquire+0x1cf/0x380 [ 752.836496][T17249] futex_wake+0xea/0x530 [ 752.836520][T17249] ? __pfx_futex_wake+0x10/0x10 [ 752.836543][T17249] ? exit_mm_release+0x19/0x30 [ 752.836567][T17249] do_futex+0x32b/0x350 [ 752.836587][T17249] ? __pfx_do_futex+0x10/0x10 [ 752.836605][T17249] ? __might_fault+0xc5/0x140 [ 752.836632][T17249] mm_release+0x24a/0x2f0 [ 752.836648][T17249] do_exit+0x704/0x2b60 [ 752.836671][T17249] ? __pfx_do_exit+0x10/0x10 [ 752.836690][T17249] ? do_raw_spin_lock+0x128/0x260 [ 752.836711][T17249] ? find_held_lock+0x2b/0x80 [ 752.836726][T17249] ? get_signal+0x7e0/0x21e0 [ 752.836745][T17249] do_group_exit+0xd5/0x2a0 [ 752.836772][T17249] get_signal+0x1ec7/0x21e0 [ 752.836795][T17249] ? __pfx_get_signal+0x10/0x10 [ 752.836812][T17249] ? do_futex+0x192/0x350 [ 752.836834][T17249] arch_do_signal_or_restart+0x91/0x770 [ 752.836854][T17249] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 752.836878][T17249] ? __pfx___x64_sys_futex+0x10/0x10 [ 752.836902][T17249] exit_to_user_mode_loop+0x86/0x4a0 [ 752.836925][T17249] do_syscall_64+0x668/0xf80 [ 752.836942][T17249] ? clear_bhb_loop+0x40/0x90 [ 752.836960][T17249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.836976][T17249] RIP: 0033:0x7ff66939c819 [ 752.836989][T17249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.837003][T17249] RSP: 002b:00007ff66a1bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 752.837019][T17249] RAX: fffffffffffffe00 RBX: 00007ff669615fa8 RCX: 00007ff66939c819 [ 752.837029][T17249] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff669615fa8 [ 752.837038][T17249] RBP: 00007ff669615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 752.837047][T17249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.837055][T17249] R13: 00007ff669616038 R14: 00007ffd02e03070 R15: 00007ffd02e03158 [ 752.837074][T17249] [ 753.850834][T17263] FAULT_INJECTION: forcing a failure. [ 753.850834][T17263] name fail_futex, interval 1, probability 0, space 0, times 0 [ 753.956076][T17263] CPU: 0 UID: 0 PID: 17263 Comm: syz.7.2699 Tainted: G I L syzkaller #0 PREEMPT(full) [ 753.956107][T17263] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 753.956114][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 753.956123][T17263] Call Trace: [ 753.956129][T17263] [ 753.956140][T17263] dump_stack_lvl+0x100/0x190 [ 753.956169][T17263] should_fail_ex.cold+0x5/0xa [ 753.956187][T17263] get_futex_key+0x1d2/0x1620 [ 753.956208][T17263] ? __pfx_get_futex_key+0x10/0x10 [ 753.956229][T17263] ? __fput+0x68a/0xb40 [ 753.956251][T17263] futex_wait_setup+0x83/0x510 [ 753.956277][T17263] __futex_wait+0x19f/0x300 [ 753.956302][T17263] ? __pfx___futex_wait+0x10/0x10 [ 753.956332][T17263] ? __pfx_futex_wake_mark+0x10/0x10 [ 753.956358][T17263] ? futex_hash+0x2c5/0x380 [ 753.956385][T17263] futex_wait+0xed/0x380 [ 753.956407][T17263] ? __pfx_futex_wait+0x10/0x10 [ 753.956439][T17263] do_futex+0x1ef/0x350 [ 753.956459][T17263] ? __pfx_do_futex+0x10/0x10 [ 753.956479][T17263] ? __pfx___might_resched+0x10/0x10 [ 753.956500][T17263] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 753.956527][T17263] __x64_sys_futex+0x34f/0x4d0 [ 753.956548][T17263] ? __pfx___x64_sys_futex+0x10/0x10 [ 753.956575][T17263] do_syscall_64+0x106/0xf80 [ 753.956590][T17263] ? clear_bhb_loop+0x40/0x90 [ 753.956608][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.956623][T17263] RIP: 0033:0x7f5aaff9c819 [ 753.956637][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.956651][T17263] RSP: 002b:00007f5ab0f350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 753.956666][T17263] RAX: ffffffffffffffda RBX: 00007f5ab0215fa8 RCX: 00007f5aaff9c819 [ 753.956676][T17263] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ab0215fa8 [ 753.956685][T17263] RBP: 00007f5ab0215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 753.956694][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.956713][T17263] R13: 00007f5ab0216038 R14: 00007ffe108b4f80 R15: 00007ffe108b5068 [ 753.956733][T17263] [ 754.327004][T17272] NFSD: Failed to start, no listeners configured. [ 755.638581][T17295] zswap: compressor not available [ 757.128601][T17325] zswap: compressor not available [ 758.336662][T17346] FAULT_INJECTION: forcing a failure. [ 758.336662][T17346] name fail_futex, interval 1, probability 0, space 0, times 0 [ 758.463495][T17346] CPU: 0 UID: 0 PID: 17346 Comm: syz.5.2718 Tainted: G I L syzkaller #0 PREEMPT(full) [ 758.463525][T17346] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 758.463533][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 758.463542][T17346] Call Trace: [ 758.463547][T17346] [ 758.463554][T17346] dump_stack_lvl+0x100/0x190 [ 758.463582][T17346] should_fail_ex.cold+0x5/0xa [ 758.463601][T17346] get_futex_key+0x1d2/0x1620 [ 758.463624][T17346] ? __pfx_get_futex_key+0x10/0x10 [ 758.463645][T17346] ? __fput+0x68a/0xb40 [ 758.463666][T17346] futex_wait_setup+0x83/0x510 [ 758.463693][T17346] __futex_wait+0x19f/0x300 [ 758.463717][T17346] ? __pfx___futex_wait+0x10/0x10 [ 758.463742][T17346] ? __pfx_futex_wake_mark+0x10/0x10 [ 758.463767][T17346] ? futex_hash+0x2c5/0x380 [ 758.463790][T17346] futex_wait+0xed/0x380 [ 758.463812][T17346] ? __pfx_futex_wait+0x10/0x10 [ 758.463844][T17346] do_futex+0x1ef/0x350 [ 758.463864][T17346] ? __pfx_do_futex+0x10/0x10 [ 758.463883][T17346] ? __pfx___might_resched+0x10/0x10 [ 758.463905][T17346] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 758.463931][T17346] __x64_sys_futex+0x34f/0x4d0 [ 758.463953][T17346] ? __pfx___x64_sys_futex+0x10/0x10 [ 758.463979][T17346] do_syscall_64+0x106/0xf80 [ 758.463996][T17346] ? clear_bhb_loop+0x40/0x90 [ 758.464013][T17346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.464029][T17346] RIP: 0033:0x7fcad479c819 [ 758.464043][T17346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.464058][T17346] RSP: 002b:00007fcad56960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 758.464073][T17346] RAX: ffffffffffffffda RBX: 00007fcad4a15fa8 RCX: 00007fcad479c819 [ 758.464083][T17346] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcad4a15fa8 [ 758.464092][T17346] RBP: 00007fcad4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 758.464101][T17346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.464110][T17346] R13: 00007fcad4a16038 R14: 00007ffc1a3ffb00 R15: 00007ffc1a3ffbe8 [ 758.464129][T17346] [ 759.103350][T17355] FAULT_INJECTION: forcing a failure. [ 759.103350][T17355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 759.154742][T17355] CPU: 0 UID: 0 PID: 17355 Comm: syz.7.2720 Tainted: G I L syzkaller #0 PREEMPT(full) [ 759.154771][T17355] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 759.154778][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 759.154787][T17355] Call Trace: [ 759.154794][T17355] [ 759.154800][T17355] dump_stack_lvl+0x100/0x190 [ 759.154828][T17355] should_fail_ex.cold+0x5/0xa [ 759.154844][T17355] ? prepare_alloc_pages+0x16d/0x5f0 [ 759.154864][T17355] should_fail_alloc_page+0xeb/0x140 [ 759.154882][T17355] prepare_alloc_pages+0x1f0/0x5f0 [ 759.154905][T17355] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 759.154928][T17355] ? stack_trace_save+0x8e/0xc0 [ 759.154944][T17355] ? __pfx_stack_trace_save+0x10/0x10 [ 759.154960][T17355] ? stack_depot_save_flags+0x27/0x9d0 [ 759.154980][T17355] ? stack_trace_save+0x8e/0xc0 [ 759.154997][T17355] ? kasan_save_stack+0x3f/0x50 [ 759.155011][T17355] ? kasan_save_stack+0x30/0x50 [ 759.155023][T17355] ? kasan_save_track+0x14/0x30 [ 759.155036][T17355] ? __kasan_slab_alloc+0x89/0x90 [ 759.155050][T17355] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 759.155075][T17355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 759.155097][T17355] ? insert_page+0xcc/0x220 [ 759.155113][T17355] ? vm_insert_page+0x2c0/0x400 [ 759.155130][T17355] ? kcov_mmap+0xca/0x130 [ 759.155144][T17355] ? mmap_region+0x30a/0x3e0 [ 759.155165][T17355] ? vm_mmap_pgoff+0x29e/0x470 [ 759.155181][T17355] ? ksys_mmap_pgoff+0x3c8/0x650 [ 759.155196][T17355] ? __x64_sys_mmap+0x125/0x190 [ 759.155217][T17355] ? do_syscall_64+0x106/0xf80 [ 759.155240][T17355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.155265][T17355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.155282][T17355] ? policy_nodemask+0xed/0x4f0 [ 759.155301][T17355] alloc_pages_mpol+0x1fb/0x550 [ 759.155318][T17355] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 759.155337][T17355] ? do_raw_spin_lock+0x128/0x260 [ 759.155362][T17355] alloc_pages_noprof+0x136/0x390 [ 759.155379][T17355] pte_alloc_one+0x1c/0x3d0 [ 759.155397][T17355] __pte_alloc+0x6d/0x3e0 [ 759.155413][T17355] ? __pfx___pte_alloc+0x10/0x10 [ 759.155431][T17355] ? walk_to_pmd+0x302/0x4c0 [ 759.155450][T17355] get_locked_pte+0xa1/0xc0 [ 759.155469][T17355] insert_page+0xcc/0x220 [ 759.155488][T17355] ? __pfx_insert_page+0x10/0x10 [ 759.155505][T17355] ? __pfx_down_read_trylock+0x10/0x10 [ 759.155532][T17355] vm_insert_page+0x2c0/0x400 [ 759.155552][T17355] kcov_mmap+0xca/0x130 [ 759.155568][T17355] __mmap_region+0x1503/0x2a50 [ 759.155593][T17355] ? __pfx___mmap_region+0x10/0x10 [ 759.155616][T17355] ? find_held_lock+0x2b/0x80 [ 759.155630][T17355] ? ima_match_policy+0x8c4/0x2350 [ 759.155649][T17355] ? ima_match_policy+0x8c4/0x2350 [ 759.155683][T17355] ? find_held_lock+0x2b/0x80 [ 759.155698][T17355] ? process_measurement+0x4c8/0x2350 [ 759.155712][T17355] ? process_measurement+0x4c8/0x2350 [ 759.155734][T17355] ? process_measurement+0x1f4/0x2350 [ 759.155779][T17355] mmap_region+0x30a/0x3e0 [ 759.155805][T17355] do_mmap+0xc63/0x12f0 [ 759.155825][T17355] ? __pfx_do_mmap+0x10/0x10 [ 759.155843][T17355] ? __pfx_down_write_killable+0x10/0x10 [ 759.155866][T17355] vm_mmap_pgoff+0x29e/0x470 [ 759.155886][T17355] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 759.155902][T17355] ? __fget_files+0x215/0x3d0 [ 759.155921][T17355] ? __fget_files+0x21f/0x3d0 [ 759.155939][T17355] ksys_mmap_pgoff+0x3c8/0x650 [ 759.155956][T17355] ? __x64_sys_futex+0x34f/0x4d0 [ 759.155975][T17355] ? __x64_sys_futex+0x358/0x4d0 [ 759.155995][T17355] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 759.156012][T17355] ? xfd_validate_state+0x129/0x190 [ 759.156037][T17355] __x64_sys_mmap+0x125/0x190 [ 759.156060][T17355] do_syscall_64+0x106/0xf80 [ 759.156076][T17355] ? clear_bhb_loop+0x40/0x90 [ 759.156094][T17355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.156110][T17355] RIP: 0033:0x7f5aaff9c819 [ 759.156124][T17355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.156143][T17355] RSP: 002b:00007f5ab0f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 759.156158][T17355] RAX: ffffffffffffffda RBX: 00007f5ab0215fa0 RCX: 00007f5aaff9c819 [ 759.156169][T17355] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 00000000fffff000 [ 759.156178][T17355] RBP: 00007f5ab0032c91 R08: 00000000000000dd R09: 0000000000000000 [ 759.156188][T17355] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 759.156198][T17355] R13: 00007f5ab0216038 R14: 00007f5ab0215fa0 R15: 00007ffe108b5068 [ 759.156217][T17355] [ 760.397270][T17376] FAULT_INJECTION: forcing a failure. [ 760.397270][T17376] name fail_futex, interval 1, probability 0, space 0, times 0 [ 760.428298][T17374] FAULT_INJECTION: forcing a failure. [ 760.428298][T17374] name failslab, interval 1, probability 0, space 0, times 0 [ 760.445740][T17376] CPU: 0 UID: 0 PID: 17376 Comm: syz.8.2726 Tainted: G I L syzkaller #0 PREEMPT(full) [ 760.445766][T17376] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 760.445772][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.445781][T17376] Call Trace: [ 760.445787][T17376] [ 760.445793][T17376] dump_stack_lvl+0x100/0x190 [ 760.445821][T17376] should_fail_ex.cold+0x5/0xa [ 760.445839][T17376] get_futex_key+0x1d2/0x1620 [ 760.445860][T17376] ? __pfx_get_futex_key+0x10/0x10 [ 760.445877][T17376] ? lock_acquire+0x1cf/0x380 [ 760.445902][T17376] futex_wake+0xea/0x530 [ 760.445927][T17376] ? __pfx_futex_wake+0x10/0x10 [ 760.445949][T17376] ? exit_mm_release+0x19/0x30 [ 760.445973][T17376] do_futex+0x32b/0x350 [ 760.445993][T17376] ? __pfx_do_futex+0x10/0x10 [ 760.446011][T17376] ? __might_fault+0xc5/0x140 [ 760.446038][T17376] mm_release+0x24a/0x2f0 [ 760.446054][T17376] do_exit+0x704/0x2b60 [ 760.446077][T17376] ? __pfx_do_exit+0x10/0x10 [ 760.446096][T17376] ? do_raw_spin_lock+0x128/0x260 [ 760.446117][T17376] ? find_held_lock+0x2b/0x80 [ 760.446135][T17376] ? get_signal+0x7e0/0x21e0 [ 760.446159][T17376] do_group_exit+0xd5/0x2a0 [ 760.446180][T17376] get_signal+0x1ec7/0x21e0 [ 760.446203][T17376] ? __pfx_get_signal+0x10/0x10 [ 760.446220][T17376] ? do_futex+0x192/0x350 [ 760.446241][T17376] arch_do_signal_or_restart+0x91/0x770 [ 760.446262][T17376] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 760.446285][T17376] ? __pfx___x64_sys_futex+0x10/0x10 [ 760.446310][T17376] exit_to_user_mode_loop+0x86/0x4a0 [ 760.446332][T17376] do_syscall_64+0x668/0xf80 [ 760.446349][T17376] ? clear_bhb_loop+0x40/0x90 [ 760.446367][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.446382][T17376] RIP: 0033:0x7ff01d79c819 [ 760.446395][T17376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.446410][T17376] RSP: 002b:00007ff01e5df0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 760.446424][T17376] RAX: fffffffffffffe00 RBX: 00007ff01da15fa8 RCX: 00007ff01d79c819 [ 760.446435][T17376] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff01da15fa8 [ 760.446444][T17376] RBP: 00007ff01da15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 760.446453][T17376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.446462][T17376] R13: 00007ff01da16038 R14: 00007fff372878d0 R15: 00007fff372879b8 [ 760.446481][T17376] [ 760.700816][T17374] CPU: 0 UID: 0 PID: 17374 Comm: syz.6.2724 Tainted: G I L syzkaller #0 PREEMPT(full) [ 760.700844][T17374] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 760.700851][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.700861][T17374] Call Trace: [ 760.700867][T17374] [ 760.700874][T17374] dump_stack_lvl+0x100/0x190 [ 760.700901][T17374] should_fail_ex.cold+0x5/0xa [ 760.700920][T17374] should_failslab+0xc2/0x120 [ 760.700938][T17374] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 760.700960][T17374] ? proc_reg_open+0x23f/0x5f0 [ 760.700974][T17374] ? path_get+0x61/0x80 [ 760.700994][T17374] proc_reg_open+0x23f/0x5f0 [ 760.701009][T17374] do_dentry_open+0x6d8/0x1660 [ 760.701025][T17374] ? __pfx_proc_reg_open+0x10/0x10 [ 760.701052][T17374] vfs_open+0x82/0x3f0 [ 760.701073][T17374] path_openat+0x208c/0x31a0 [ 760.701095][T17374] ? __pfx_path_openat+0x10/0x10 [ 760.701118][T17374] do_file_open+0x20e/0x430 [ 760.701136][T17374] ? __pfx_do_file_open+0x10/0x10 [ 760.701164][T17374] ? __pfx_kfree_link+0x10/0x10 [ 760.701191][T17374] ? alloc_fd+0x476/0x790 [ 760.701209][T17374] ? do_getname+0x191/0x390 [ 760.701230][T17374] do_sys_openat2+0x10d/0x1e0 [ 760.701251][T17374] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.701273][T17374] ? __fget_files+0x21f/0x3d0 [ 760.701291][T17374] __x64_sys_openat+0x12d/0x210 [ 760.701312][T17374] ? __pfx___x64_sys_openat+0x10/0x10 [ 760.701339][T17374] do_syscall_64+0x106/0xf80 [ 760.701355][T17374] ? clear_bhb_loop+0x40/0x90 [ 760.701373][T17374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.701388][T17374] RIP: 0033:0x7ff66939c819 [ 760.701401][T17374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.701415][T17374] RSP: 002b:00007ff66a1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 760.701430][T17374] RAX: ffffffffffffffda RBX: 00007ff669615fa0 RCX: 00007ff66939c819 [ 760.701440][T17374] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 760.701450][T17374] RBP: 00007ff669432c91 R08: 0000000000000000 R09: 0000000000000000 [ 760.701458][T17374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.701467][T17374] R13: 00007ff669616038 R14: 00007ff669615fa0 R15: 00007ffd02e03158 [ 760.701486][T17374] [ 761.887451][T16041] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 762.024223][T17393] FAULT_INJECTION: forcing a failure. [ 762.024223][T17393] name fail_futex, interval 1, probability 0, space 0, times 0 [ 762.165028][T17393] CPU: 0 UID: 0 PID: 17393 Comm: syz.7.2731 Tainted: G I L syzkaller #0 PREEMPT(full) [ 762.165057][T17393] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 762.165068][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 762.165077][T17393] Call Trace: [ 762.165083][T17393] [ 762.165090][T17393] dump_stack_lvl+0x100/0x190 [ 762.165124][T17393] should_fail_ex.cold+0x5/0xa [ 762.165142][T17393] get_futex_key+0x1d2/0x1620 [ 762.165163][T17393] ? __pfx_get_futex_key+0x10/0x10 [ 762.165184][T17393] ? __fput+0x68a/0xb40 [ 762.165205][T17393] futex_wait_setup+0x83/0x510 [ 762.165232][T17393] __futex_wait+0x19f/0x300 [ 762.165256][T17393] ? __pfx___futex_wait+0x10/0x10 [ 762.165281][T17393] ? __pfx_futex_wake_mark+0x10/0x10 [ 762.165306][T17393] ? futex_hash+0x2c5/0x380 [ 762.165329][T17393] futex_wait+0xed/0x380 [ 762.165351][T17393] ? __pfx_futex_wait+0x10/0x10 [ 762.165383][T17393] do_futex+0x1ef/0x350 [ 762.165402][T17393] ? __pfx_do_futex+0x10/0x10 [ 762.165422][T17393] ? __pfx___might_resched+0x10/0x10 [ 762.165444][T17393] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 762.165470][T17393] __x64_sys_futex+0x34f/0x4d0 [ 762.165492][T17393] ? __pfx___x64_sys_futex+0x10/0x10 [ 762.165519][T17393] do_syscall_64+0x106/0xf80 [ 762.165534][T17393] ? clear_bhb_loop+0x40/0x90 [ 762.165552][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.165567][T17393] RIP: 0033:0x7f5aaff9c819 [ 762.165581][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.165595][T17393] RSP: 002b:00007f5ab0f350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 762.165610][T17393] RAX: ffffffffffffffda RBX: 00007f5ab0215fa8 RCX: 00007f5aaff9c819 [ 762.165620][T17393] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ab0215fa8 [ 762.165630][T17393] RBP: 00007f5ab0215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 762.165640][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.165649][T17393] R13: 00007f5ab0216038 R14: 00007ffe108b4f80 R15: 00007ffe108b5068 [ 762.165668][T17393] [ 764.995239][T17460] FAULT_INJECTION: forcing a failure. [ 764.995239][T17460] name fail_futex, interval 1, probability 0, space 0, times 0 [ 765.027333][T17469] FAULT_INJECTION: forcing a failure. [ 765.027333][T17469] name fail_futex, interval 1, probability 0, space 0, times 0 [ 765.079798][T17469] CPU: 0 UID: 0 PID: 17469 Comm: syz.5.2748 Tainted: G I L syzkaller #0 PREEMPT(full) [ 765.079826][T17469] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 765.079832][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 765.079841][T17469] Call Trace: [ 765.079847][T17469] [ 765.079853][T17469] dump_stack_lvl+0x100/0x190 [ 765.079881][T17469] should_fail_ex.cold+0x5/0xa [ 765.079899][T17469] get_futex_key+0x107c/0x1620 [ 765.079920][T17469] ? __pfx_get_futex_key+0x10/0x10 [ 765.079938][T17469] ? lock_acquire+0x1cf/0x380 [ 765.079963][T17469] futex_wake+0xea/0x530 [ 765.079988][T17469] ? __pfx_futex_wake+0x10/0x10 [ 765.080010][T17469] ? exit_mm_release+0x19/0x30 [ 765.080034][T17469] do_futex+0x32b/0x350 [ 765.080055][T17469] ? __pfx_do_futex+0x10/0x10 [ 765.080073][T17469] ? __might_fault+0xc5/0x140 [ 765.080100][T17469] mm_release+0x24a/0x2f0 [ 765.080116][T17469] do_exit+0x704/0x2b60 [ 765.080138][T17469] ? __pfx_do_exit+0x10/0x10 [ 765.080158][T17469] ? do_raw_spin_lock+0x128/0x260 [ 765.080180][T17469] ? find_held_lock+0x2b/0x80 [ 765.080194][T17469] ? get_signal+0x7e0/0x21e0 [ 765.080211][T17469] do_group_exit+0xd5/0x2a0 [ 765.080233][T17469] get_signal+0x1ec7/0x21e0 [ 765.080259][T17469] ? __pfx_get_signal+0x10/0x10 [ 765.080276][T17469] ? do_futex+0x192/0x350 [ 765.080297][T17469] arch_do_signal_or_restart+0x91/0x770 [ 765.080318][T17469] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 765.080342][T17469] ? __pfx___x64_sys_futex+0x10/0x10 [ 765.080366][T17469] exit_to_user_mode_loop+0x86/0x4a0 [ 765.080388][T17469] do_syscall_64+0x668/0xf80 [ 765.080404][T17469] ? clear_bhb_loop+0x40/0x90 [ 765.080423][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.080438][T17469] RIP: 0033:0x7fcad479c819 [ 765.080451][T17469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.080466][T17469] RSP: 002b:00007fcad56960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 765.080481][T17469] RAX: fffffffffffffe00 RBX: 00007fcad4a15fa8 RCX: 00007fcad479c819 [ 765.080491][T17469] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcad4a15fa8 [ 765.080500][T17469] RBP: 00007fcad4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 765.080509][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.080518][T17469] R13: 00007fcad4a16038 R14: 00007ffc1a3ffb00 R15: 00007ffc1a3ffbe8 [ 765.080537][T17469] [ 765.619052][T17460] CPU: 0 UID: 0 PID: 17460 Comm: syz.6.2746 Tainted: G I L syzkaller #0 PREEMPT(full) [ 765.619081][T17460] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 765.619087][T17460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 765.619097][T17460] Call Trace: [ 765.619102][T17460] [ 765.619109][T17460] dump_stack_lvl+0x100/0x190 [ 765.619136][T17460] should_fail_ex.cold+0x5/0xa [ 765.619155][T17460] get_futex_key+0x1d2/0x1620 [ 765.619176][T17460] ? __pfx_get_futex_key+0x10/0x10 [ 765.619197][T17460] ? __fput+0x68a/0xb40 [ 765.619217][T17460] futex_wait_setup+0x83/0x510 [ 765.619244][T17460] __futex_wait+0x19f/0x300 [ 765.619268][T17460] ? __pfx___futex_wait+0x10/0x10 [ 765.619294][T17460] ? __pfx_futex_wake_mark+0x10/0x10 [ 765.619319][T17460] ? futex_hash+0x2c5/0x380 [ 765.619342][T17460] futex_wait+0xed/0x380 [ 765.619364][T17460] ? __pfx_futex_wait+0x10/0x10 [ 765.619396][T17460] do_futex+0x1ef/0x350 [ 765.619416][T17460] ? __pfx_do_futex+0x10/0x10 [ 765.619435][T17460] ? __pfx___might_resched+0x10/0x10 [ 765.619456][T17460] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 765.619482][T17460] __x64_sys_futex+0x34f/0x4d0 [ 765.619505][T17460] ? __pfx___x64_sys_futex+0x10/0x10 [ 765.619531][T17460] do_syscall_64+0x106/0xf80 [ 765.619548][T17460] ? clear_bhb_loop+0x40/0x90 [ 765.619566][T17460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.619581][T17460] RIP: 0033:0x7ff66939c819 [ 765.619594][T17460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.619609][T17460] RSP: 002b:00007ff66a1bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 765.619624][T17460] RAX: ffffffffffffffda RBX: 00007ff669615fa8 RCX: 00007ff66939c819 [ 765.619635][T17460] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff669615fa8 [ 765.619644][T17460] RBP: 00007ff669615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 765.619653][T17460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.619661][T17460] R13: 00007ff669616038 R14: 00007ffd02e03070 R15: 00007ffd02e03158 [ 765.619680][T17460] [ 768.933287][T17519] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 769.181958][T17518] zswap: compressor not available [ 769.491140][T17530] FAULT_INJECTION: forcing a failure. [ 769.491140][T17530] name failslab, interval 1, probability 0, space 0, times 0 [ 769.535675][T17530] CPU: 0 UID: 0 PID: 17530 Comm: syz.6.2762 Tainted: G I L syzkaller #0 PREEMPT(full) [ 769.535703][T17530] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 769.535709][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 769.535718][T17530] Call Trace: [ 769.535724][T17530] [ 769.535729][T17530] dump_stack_lvl+0x100/0x190 [ 769.535756][T17530] should_fail_ex.cold+0x5/0xa [ 769.535774][T17530] should_failslab+0xc2/0x120 [ 769.535791][T17530] __kvmalloc_node_noprof+0xfa/0xa00 [ 769.535806][T17530] ? file_tty_write.isra.0+0x64e/0x890 [ 769.535835][T17530] file_tty_write.isra.0+0x64e/0x890 [ 769.535863][T17530] redirected_tty_write+0xd4/0x120 [ 769.535887][T17530] vfs_write+0x6ac/0x1070 [ 769.535902][T17530] ? __pfx_redirected_tty_write+0x10/0x10 [ 769.535928][T17530] ? __pfx_vfs_write+0x10/0x10 [ 769.535941][T17530] ? find_held_lock+0x2b/0x80 [ 769.535967][T17530] ksys_write+0x12a/0x250 [ 769.535982][T17530] ? __pfx_ksys_write+0x10/0x10 [ 769.536002][T17530] do_syscall_64+0x106/0xf80 [ 769.536018][T17530] ? clear_bhb_loop+0x40/0x90 [ 769.536036][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.536052][T17530] RIP: 0033:0x7ff66939c819 [ 769.536064][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.536078][T17530] RSP: 002b:00007ff66a1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.536093][T17530] RAX: ffffffffffffffda RBX: 00007ff669615fa0 RCX: 00007ff66939c819 [ 769.536102][T17530] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 769.536111][T17530] RBP: 00007ff66a1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 769.536120][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.536132][T17530] R13: 00007ff669616038 R14: 00007ff669615fa0 R15: 00007ffd02e03158 [ 769.536151][T17530] [ 769.973283][T16041] Bluetooth: hci4: command 0x0406 tx timeout [ 771.583119][T17574] FAULT_INJECTION: forcing a failure. [ 771.583119][T17574] name failslab, interval 1, probability 0, space 0, times 0 [ 771.650165][T17574] CPU: 0 UID: 0 PID: 17574 Comm: syz.7.2775 Tainted: G I L syzkaller #0 PREEMPT(full) [ 771.650206][T17574] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 771.650214][T17574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 771.650224][T17574] Call Trace: [ 771.650229][T17574] [ 771.650236][T17574] dump_stack_lvl+0x100/0x190 [ 771.650264][T17574] should_fail_ex.cold+0x5/0xa [ 771.650286][T17574] should_failslab+0xc2/0x120 [ 771.650304][T17574] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 771.650328][T17574] ? ptlock_alloc+0x1f/0x70 [ 771.650352][T17574] ptlock_alloc+0x1f/0x70 [ 771.650372][T17574] pte_alloc_one+0x82/0x3d0 [ 771.650389][T17574] do_fault+0x88e/0x18e0 [ 771.650407][T17574] ? __pmd_alloc+0x3fb/0x950 [ 771.650426][T17574] __handle_mm_fault+0x1815/0x2b60 [ 771.650449][T17574] ? mt_find+0x45e/0x8e0 [ 771.650468][T17574] ? __pfx___handle_mm_fault+0x10/0x10 [ 771.650487][T17574] ? __pfx_mt_find+0x10/0x10 [ 771.650513][T17574] ? find_vma+0xbf/0x140 [ 771.650528][T17574] ? __pfx_find_vma+0x10/0x10 [ 771.650545][T17574] handle_mm_fault+0x36d/0xa20 [ 771.650570][T17574] do_user_addr_fault+0x74c/0x12f0 [ 771.650592][T17574] exc_page_fault+0x6f/0xd0 [ 771.650608][T17574] asm_exc_page_fault+0x26/0x30 [ 771.650623][T17574] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 771.650644][T17574] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 771.650658][T17574] RSP: 0018:ffffc9000518fe38 EFLAGS: 00050202 [ 771.650670][T17574] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 771.650679][T17574] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000518fe90 [ 771.650688][T17574] RBP: 000000000000000c R08: 0000000000000001 R09: fffff52000a31fd3 [ 771.650697][T17574] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 771.650705][T17574] R13: ffffc9000518fe90 R14: 0000000000000001 R15: 0000000000000004 [ 771.650724][T17574] _copy_from_user+0x98/0xd0 [ 771.650744][T17574] __x64_sys_epoll_ctl+0x131/0x1e0 [ 771.650763][T17574] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 771.650787][T17574] do_syscall_64+0x106/0xf80 [ 771.650802][T17574] ? clear_bhb_loop+0x40/0x90 [ 771.650820][T17574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.650835][T17574] RIP: 0033:0x7f5aaff9c819 [ 771.650848][T17574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.650863][T17574] RSP: 002b:00007f5ab0f35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 771.650876][T17574] RAX: ffffffffffffffda RBX: 00007f5ab0215fa0 RCX: 00007f5aaff9c819 [ 771.650886][T17574] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: 0000000000000004 [ 771.650895][T17574] RBP: 00007f5ab0032c91 R08: 0000000000000000 R09: 0000000000000000 [ 771.650904][T17574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.650913][T17574] R13: 00007f5ab0216038 R14: 00007f5ab0215fa0 R15: 00007ffe108b5068 [ 771.650932][T17574] [ 773.358567][T17601] zswap: compressor not available [ 774.206851][T17616] zswap: compressor not available [ 776.838585][T17662] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2795'. [ 777.162074][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2798'. [ 777.329718][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2798'. [ 777.415514][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2798'. [ 779.342224][T17709] snd_virmidi snd_virmidi.0: control 61678:131081:43:yª:1 is already present [ 779.906837][T17717] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 780.467835][T17726] zswap: compressor not available [ 781.604221][T17748] zswap: compressor not available [ 781.965513][T17761] Invalid ELF header magic: != ELF [ 783.977740][T17791] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 783.987525][T17791] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 783.999055][T17791] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 784.006908][T17791] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 784.022817][T17791] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 784.652348][T17789] chnl_net:caif_netlink_parms(): no params data found [ 785.033405][T17789] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.094884][T17791] Bluetooth: hci3: command 0x0406 tx timeout [ 785.106669][T17789] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.170057][T17789] bridge_slave_0: entered allmulticast mode [ 785.202139][T17789] bridge_slave_0: entered promiscuous mode [ 785.245637][T17789] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.292174][T17789] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.355365][T17789] bridge_slave_1: entered allmulticast mode [ 785.377311][T17789] bridge_slave_1: entered promiscuous mode [ 785.510720][T17789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.654411][T17789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.837299][T17789] team0: Port device team_slave_0 added [ 785.920429][T17789] team0: Port device team_slave_1 added [ 786.046418][T16041] Bluetooth: hci9: command tx timeout [ 786.080080][T17789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.109994][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.226262][T17789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.285587][T17789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.319481][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.456202][T17789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.693272][T17789] hsr_slave_0: entered promiscuous mode [ 786.719879][T17789] hsr_slave_1: entered promiscuous mode [ 786.752357][T17789] debugfs: 'hsr0' already exists in 'hsr' [ 786.782460][T17789] Cannot create hsr debugfs directory [ 787.644329][T17789] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 787.681988][T17789] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 787.714955][T17789] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 787.767677][T17789] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 788.025719][T17789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.093338][T17789] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.111143][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.111231][T17105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.118875][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.118947][T16054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.128446][T16041] Bluetooth: hci9: command tx timeout [ 788.651461][T17789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.587220][T17789] veth0_vlan: entered promiscuous mode [ 789.652319][T17789] veth1_vlan: entered promiscuous mode [ 789.893628][T17789] veth0_macvtap: entered promiscuous mode [ 790.039529][T17789] veth1_macvtap: entered promiscuous mode [ 790.123506][T17789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.184578][T17789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.206509][T16041] Bluetooth: hci9: command tx timeout [ 790.269926][T16044] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.305525][T16044] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.419914][T16044] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.464784][T16044] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.642331][T17105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.698681][T17105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.801654][T16054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.845485][T16054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.135134][T17901] zswap: compressor not available [ 792.288016][T16041] Bluetooth: hci9: command tx timeout [ 792.411565][T17924] zswap: compressor not available [ 792.800057][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2847'. [ 792.864260][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2847'. [ 792.939480][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2847'. [ 794.123329][T17952] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2851'. [ 795.333488][T16041] Bluetooth: hci0: command 0x0406 tx timeout [ 796.554926][T18000] zswap: compressor not available [ 797.576982][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2867'. [ 799.947268][T18046] zswap: compressor not available [ 801.586540][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2878'. [ 802.695300][T18050] FAULT_INJECTION: forcing a failure. [ 802.695300][T18050] name failslab, interval 1, probability 0, space 0, times 0 [ 802.710328][T18050] CPU: 0 UID: 0 PID: 18050 Comm: syz.6.2874 Tainted: G I L syzkaller #0 PREEMPT(full) [ 802.710354][T18050] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 802.710361][T18050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 802.710370][T18050] Call Trace: [ 802.710375][T18050] [ 802.710382][T18050] dump_stack_lvl+0x100/0x190 [ 802.710409][T18050] should_fail_ex.cold+0x5/0xa [ 802.710428][T18050] should_failslab+0xc2/0x120 [ 802.710445][T18050] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 802.710468][T18050] ? taskstats_exit+0x650/0xbd0 [ 802.710487][T18050] taskstats_exit+0x650/0xbd0 [ 802.710501][T18050] ? __pfx_acct_update_integrals+0x10/0x10 [ 802.710517][T18050] ? __pfx_taskstats_exit+0x10/0x10 [ 802.710533][T18050] ? rcu_read_lock_any_held+0x6a/0xa0 [ 802.710548][T18050] ? exit_signals+0x395/0xaf0 [ 802.710567][T18050] do_exit+0x659/0x2b60 [ 802.710590][T18050] ? __pfx_do_exit+0x10/0x10 [ 802.710609][T18050] ? do_raw_spin_lock+0x128/0x260 [ 802.710632][T18050] ? find_held_lock+0x2b/0x80 [ 802.710653][T18050] ? get_signal+0x7e0/0x21e0 [ 802.710671][T18050] do_group_exit+0xd5/0x2a0 [ 802.710692][T18050] get_signal+0x1ec7/0x21e0 [ 802.710715][T18050] ? __pfx_get_signal+0x10/0x10 [ 802.710732][T18050] ? do_futex+0x192/0x350 [ 802.710754][T18050] arch_do_signal_or_restart+0x91/0x770 [ 802.710773][T18050] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 802.710798][T18050] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 802.710821][T18050] ? __pfx___x64_sys_futex+0x10/0x10 [ 802.710846][T18050] exit_to_user_mode_loop+0x86/0x4a0 [ 802.710867][T18050] do_syscall_64+0x668/0xf80 [ 802.710884][T18050] ? clear_bhb_loop+0x40/0x90 [ 802.710902][T18050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.710920][T18050] RIP: 0033:0x7ff66939c819 [ 802.710933][T18050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.710947][T18050] RSP: 002b:00007ff66a1bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 802.710962][T18050] RAX: fffffffffffffe00 RBX: 00007ff669615fa8 RCX: 00007ff66939c819 [ 802.710972][T18050] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff669615fa8 [ 802.710981][T18050] RBP: 00007ff669615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 802.710990][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.710998][T18050] R13: 00007ff669616038 R14: 00007ffd02e03070 R15: 00007ffd02e03158 [ 802.711017][T18050] [ 802.962056][T17791] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 804.240778][T18110] sd 0:0:1:0: PR command failed: 1026 [ 804.257071][T18110] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 804.273280][T18110] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 804.831642][T18120] zswap: compressor not available [ 805.572168][T16041] Bluetooth: hci1: command 0x0406 tx timeout [ 806.495071][T18153] zswap: compressor not available [ 807.507868][T18167] zswap: compressor not available [ 807.980962][T18175] NFSD: Failed to start, no listeners configured. [ 808.378766][T18181] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 808.425977][T18181] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 808.503710][T18181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 808.539715][T18181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 808.571940][T18181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 808.578989][T18181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 808.587499][T18181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 808.593570][T18181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 808.602132][T18181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 808.611735][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.619765][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.627912][T18181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 808.635841][T18181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 808.648397][T18181] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 808.655507][T18181] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 808.663937][T18181] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 808.679986][T18181] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 808.686018][T18181] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 808.727410][T18181] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 808.751436][T18181] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 808.767432][T18181] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 808.790408][T18181] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 808.813068][T18181] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 808.851923][T18181] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 808.876231][T18181] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 808.891978][T18181] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 808.899126][T18181] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 808.907478][T18181] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 809.104491][T18192] FAULT_INJECTION: forcing a failure. [ 809.104491][T18192] name failslab, interval 1, probability 0, space 0, times 0 [ 809.191237][T18192] CPU: 0 UID: 0 PID: 18192 Comm: syz.8.2905 Tainted: G I L syzkaller #0 PREEMPT(full) [ 809.191270][T18192] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 809.191277][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.191287][T18192] Call Trace: [ 809.191293][T18192] [ 809.191299][T18192] dump_stack_lvl+0x100/0x190 [ 809.191327][T18192] should_fail_ex.cold+0x5/0xa [ 809.191346][T18192] should_failslab+0xc2/0x120 [ 809.191363][T18192] __kmalloc_cache_noprof+0x7a/0x6f0 [ 809.191383][T18192] ? call_usermodehelper_setup+0xaf/0x360 [ 809.191409][T18192] ? __pfx_free_modprobe_argv+0x10/0x10 [ 809.191430][T18192] call_usermodehelper_setup+0xaf/0x360 [ 809.191456][T18192] __request_module+0x3c7/0x6c0 [ 809.191478][T18192] ? __pfx___request_module+0x10/0x10 [ 809.191504][T18192] ? __get_fs_type+0x12c/0x170 [ 809.191521][T18192] ? __get_fs_type+0x12c/0x170 [ 809.191545][T18192] get_fs_type+0xd7/0x190 [ 809.191564][T18192] __x64_sys_fsopen+0xca/0x220 [ 809.191585][T18192] do_syscall_64+0x106/0xf80 [ 809.191600][T18192] ? clear_bhb_loop+0x40/0x90 [ 809.191618][T18192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.191634][T18192] RIP: 0033:0x7ff01d79c819 [ 809.191647][T18192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.191662][T18192] RSP: 002b:00007ff01e5df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 809.191677][T18192] RAX: ffffffffffffffda RBX: 00007ff01da15fa0 RCX: 00007ff01d79c819 [ 809.191686][T18192] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 809.191695][T18192] RBP: 00007ff01d832c91 R08: 0000000000000000 R09: 0000000000000000 [ 809.191703][T18192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.191713][T18192] R13: 00007ff01da16038 R14: 00007ff01da15fa0 R15: 00007fff372879b8 [ 809.191731][T18192] [ 809.850605][T18197] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2907'. [ 809.874390][T18197] bridge_slave_1: left allmulticast mode [ 809.892267][T18197] bridge_slave_1: left promiscuous mode [ 809.959533][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.996823][T18197] bridge_slave_0: left allmulticast mode [ 810.016772][T18197] bridge_slave_0: left promiscuous mode [ 810.029638][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.446260][T17791] Bluetooth: hci4: command 0x0406 tx timeout [ 810.526704][T17791] Bluetooth: hci3: command 0x0406 tx timeout [ 810.606539][T16041] Bluetooth: hci1: command 0x0406 tx timeout [ 810.614083][T16080] Bluetooth: hci0: command 0x0406 tx timeout [ 810.623012][T17791] Bluetooth: hci2: command 0x0c1a tx timeout [ 810.688206][T17791] Bluetooth: hci6: command 0x0c1a tx timeout [ 810.694234][T17791] Bluetooth: hci5: command 0x0c1a tx timeout [ 810.772402][T17791] Bluetooth: hci7: command 0x0c1a tx timeout [ 810.846859][T17791] Bluetooth: hci8: command 0x0c1a tx timeout [ 810.930226][T17791] Bluetooth: hci9: command 0x0c1a tx timeout [ 812.526811][T17791] Bluetooth: hci4: command 0x0406 tx timeout [ 812.606187][T17791] Bluetooth: hci3: command 0x0406 tx timeout [ 812.688058][T17791] Bluetooth: hci2: command 0x0c1a tx timeout [ 812.694117][T16080] Bluetooth: hci0: command 0x0406 tx timeout [ 812.701863][T16080] Bluetooth: hci1: command 0x0406 tx timeout [ 812.766440][T17791] Bluetooth: hci5: command 0x0c1a tx timeout [ 812.772464][T17791] Bluetooth: hci6: command 0x0c1a tx timeout [ 812.825995][T16080] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 812.836630][T16080] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 812.845547][T16080] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 812.862379][T16041] Bluetooth: hci7: command 0x0c1a tx timeout [ 812.877585][T16080] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 812.885044][T16080] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 812.926699][T16080] Bluetooth: hci8: command 0x0c1a tx timeout [ 813.010836][T16080] Bluetooth: hci9: command 0x0c1a tx timeout [ 813.331621][T18211] chnl_net:caif_netlink_parms(): no params data found [ 813.592410][T18211] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.624134][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.649516][T18211] bridge_slave_0: entered allmulticast mode [ 813.681904][T18211] bridge_slave_0: entered promiscuous mode [ 813.719773][T18211] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.756214][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.782715][T18211] bridge_slave_1: entered allmulticast mode [ 813.826947][T18211] bridge_slave_1: entered promiscuous mode [ 813.947660][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.985844][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.060676][T18211] team0: Port device team_slave_0 added [ 814.077143][T18211] team0: Port device team_slave_1 added [ 814.139993][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.163406][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.231804][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.257066][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.292576][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.436558][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.595051][T18211] hsr_slave_0: entered promiscuous mode [ 814.611776][T18211] hsr_slave_1: entered promiscuous mode [ 814.637747][T18211] debugfs: 'hsr0' already exists in 'hsr' [ 814.643487][T18211] Cannot create hsr debugfs directory [ 814.766845][T16080] Bluetooth: hci2: command 0x0c1a tx timeout [ 814.847550][T16080] Bluetooth: hci6: command 0x0c1a tx timeout [ 814.853593][T16080] Bluetooth: hci5: command 0x0c1a tx timeout [ 814.931815][T16080] Bluetooth: hci10: command tx timeout [ 814.939196][T17791] Bluetooth: hci7: command 0x0c1a tx timeout [ 815.006783][T16080] Bluetooth: hci8: command 0x0c1a tx timeout [ 815.092579][T16080] Bluetooth: hci9: command 0x0c1a tx timeout [ 815.138070][T18211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.283308][T18211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.409258][T18211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.550405][T18211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.671512][T18239] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 815.840422][T18211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 815.871991][T18211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 815.929147][T18211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 815.977362][T18211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 816.187875][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.235570][T18211] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.290672][T16035] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.297821][T16035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.351051][T16035] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.358215][T16035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.840735][T18211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.907853][T17791] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 816.919216][T17791] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 816.930140][T17791] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 816.937863][T17791] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 816.945286][T17791] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 817.012613][T17791] Bluetooth: hci10: command tx timeout [ 817.062136][T18211] veth0_vlan: entered promiscuous mode [ 817.179515][T18211] veth1_vlan: entered promiscuous mode [ 817.339672][T18211] veth0_macvtap: entered promiscuous mode [ 817.399518][T18211] veth1_macvtap: entered promiscuous mode [ 817.527120][T18211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.569518][T18211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.633982][T18256] chnl_net:caif_netlink_parms(): no params data found [ 817.691761][T16035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.717885][T16035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.776401][T16035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.826221][T16035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.036039][T18271] zswap: compressor not available [ 818.180145][T16054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.197178][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.226204][T16054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.243371][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.262361][T18256] bridge_slave_0: entered allmulticast mode [ 818.273460][T18256] bridge_slave_0: entered promiscuous mode [ 818.361396][T18256] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.376280][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.408514][T18256] bridge_slave_1: entered allmulticast mode [ 818.436048][T18256] bridge_slave_1: entered promiscuous mode [ 818.596551][T17105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.621890][T17105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.642375][T18256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.842038][T18256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.007461][T17791] Bluetooth: hci11: command tx timeout [ 819.070718][T18256] team0: Port device team_slave_0 added [ 819.091476][T17791] Bluetooth: hci10: command tx timeout [ 819.132009][T18256] team0: Port device team_slave_1 added [ 819.568130][T18256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.575101][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.758795][T18256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.808399][T18256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.815381][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.976863][T18256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.177620][T18256] hsr_slave_0: entered promiscuous mode [ 820.213627][T18256] hsr_slave_1: entered promiscuous mode [ 820.243231][T18256] debugfs: 'hsr0' already exists in 'hsr' [ 820.277386][T18256] Cannot create hsr debugfs directory [ 820.837613][T18256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.010870][T18256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.087318][T17791] Bluetooth: hci11: command tx timeout [ 821.138610][T18256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.166391][T17791] Bluetooth: hci10: command tx timeout [ 821.391353][T18256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.034913][T18256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.132314][T18256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.169060][T18256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.227400][T18256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 822.348462][T18314] zswap: compressor  not available [ 822.745078][T18256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.818326][T18256] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.861204][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.868375][T16044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.939046][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.946186][T16054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.071478][T18256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 823.120310][T18256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.167069][T17791] Bluetooth: hci11: command tx timeout [ 823.396516][T18334] zswap: compressor not available [ 823.869097][T18256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.272553][T18256] veth0_vlan: entered promiscuous mode [ 824.347990][T18256] veth1_vlan: entered promiscuous mode [ 824.460198][T18256] veth0_macvtap: entered promiscuous mode [ 824.527904][T18256] veth1_macvtap: entered promiscuous mode [ 824.605659][T18256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.659135][T18256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.773359][T16037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.808753][T16037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.880970][T16037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.918420][T16037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.151180][T16054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.204798][T16054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.246475][ T31] INFO: task kworker/u10:0:16028 blocked for more than 143 seconds. [ 825.254478][ T31] Tainted: G I L syzkaller #0 [ 825.264069][T17791] Bluetooth: hci11: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 825.338908][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.380002][T16054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.414214][ T31] task:kworker/u10:0 state:D stack:26888 pid:16028 tgid:16028 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 825.463609][T16054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.548421][ T31] Workqueue: netns cleanup_net [ 825.573373][ T31] Call Trace: [ 825.601470][ T31] [ 825.604429][ T31] __schedule+0xfee/0x6120 [ 825.628533][ T31] ? __lock_acquire+0x4a5/0x2630 [ 825.633515][ T31] ? __pfx___schedule+0x10/0x10 [ 825.662090][T16080] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 825.681113][T16080] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 825.689404][T16080] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 825.697640][T16080] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 825.715221][T16080] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 825.762395][ T31] ? find_held_lock+0x2b/0x80 [ 825.796151][ T31] ? schedule+0x2bf/0x390 [ 825.800515][ T31] schedule+0xdd/0x390 [ 825.804569][ T31] schedule_timeout+0x1b2/0x280 [ 825.826181][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 825.841936][ T31] ? mark_held_locks+0x40/0x70 [ 825.856229][ T31] __wait_for_common+0x2e7/0x4c0 [ 825.878103][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 825.903784][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 825.914020][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 825.936155][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 825.942006][ T31] __flush_workqueue+0x3f7/0x1200 [ 825.970385][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 826.001521][ T31] ? net_generic+0xea/0x2a0 [ 826.006066][ T31] ? rxrpc_discard_prealloc+0x752/0x9c0 [ 826.057042][ T31] ? rxrpc_release_calls_on_socket+0x384/0x4e0 [ 826.136365][ T31] rxrpc_release+0x2a7/0x6a0 [ 826.140994][ T31] sock_release+0x91/0x1c0 [ 826.145401][ T31] afs_close_socket+0x21b/0x3e0 [ 826.201606][ T31] ? afs_wait_for_servers+0xec/0x220 [ 826.217592][ T31] ? __pfx_afs_close_socket+0x10/0x10 [ 826.223004][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 826.258630][ T31] ? __timer_delete_sync+0x10f/0x1c0 [ 826.263952][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 826.313039][ T31] afs_net_exit+0x93/0x150 [ 826.318741][ T31] ops_undo_list+0x2ee/0xab0 [ 826.323345][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 826.356323][ T31] ? cleanup_net+0x332/0x920 [ 826.360944][ T31] ? idr_destroy+0x62/0x2e0 [ 826.365441][ T31] cleanup_net+0x499/0x920 [ 826.406176][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 826.411150][ T31] ? rcu_is_watching+0x12/0xc0 [ 826.415910][ T31] process_one_work+0xa23/0x19a0 [ 826.451904][ T31] ? __pfx_process_one_work+0x10/0x10 [ 826.472388][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 826.496187][ T31] worker_thread+0x5ef/0xe50 [ 826.500823][ T31] ? kthread+0x13a/0x450 [ 826.505054][ T31] ? __pfx_worker_thread+0x10/0x10 [ 826.537253][ T31] kthread+0x370/0x450 [ 826.541359][ T31] ? __pfx_kthread+0x10/0x10 [ 826.545949][ T31] ret_from_fork+0x754/0xd80 [ 826.566223][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 826.571372][ T31] ? __switch_to+0x7b4/0x1120 [ 826.594902][ T31] ? __pfx_kthread+0x10/0x10 [ 826.609483][ T31] ret_from_fork_asm+0x1a/0x30 [ 826.614276][ T31] [ 826.637853][ T31] INFO: task syz.1.2469:16114 blocked for more than 144 seconds. [ 826.645595][ T31] Tainted: G I L syzkaller #0 [ 826.746372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.755069][ T31] task:syz.1.2469 state:D stack:28040 pid:16114 tgid:16114 ppid:15487 task_flags:0x400040 flags:0x00080002 [ 826.796224][ T31] Call Trace: [ 826.799533][ T31] [ 826.802449][ T31] __schedule+0xfee/0x6120 [ 826.816490][ T31] ? __lock_acquire+0x4a5/0x2630 [ 826.821443][ T31] ? __pfx___schedule+0x10/0x10 [ 826.847218][ T31] ? find_held_lock+0x2b/0x80 [ 826.851917][ T31] ? schedule+0x2bf/0x390 [ 826.866178][ T31] schedule+0xdd/0x390 [ 826.870250][ T31] schedule_timeout+0x1b2/0x280 [ 826.875091][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 826.899878][ T31] ? mark_held_locks+0x40/0x70 [ 826.904681][ T31] __wait_for_common+0x2e7/0x4c0 [ 826.916184][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 826.921575][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 826.946189][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.951427][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 826.966373][ T31] __flush_workqueue+0x3f7/0x1200 [ 826.971413][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 826.987952][ T31] ? net_generic+0xea/0x2a0 [ 826.992474][ T31] ? rxrpc_discard_prealloc+0x752/0x9c0 [ 827.026208][ T31] ? rxrpc_release_calls_on_socket+0x384/0x4e0 [ 827.032400][ T31] rxrpc_release+0x2a7/0x6a0 [ 827.049088][ T31] __sock_release+0xb3/0x260 [ 827.053692][ T31] ? __pfx_sock_close+0x10/0x10 [ 827.066559][ T31] sock_close+0x1c/0x30 [ 827.070713][ T31] __fput+0x3ff/0xb40 [ 827.074688][ T31] task_work_run+0x150/0x240 [ 827.104250][ T31] ? __pfx_task_work_run+0x10/0x10 [ 827.117349][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 827.122733][ T31] do_syscall_64+0x668/0xf80 [ 827.136153][ T31] ? clear_bhb_loop+0x40/0x90 [ 827.140842][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.158798][ T31] RIP: 0033:0x7f2f4619c819 [ 827.163226][ T31] RSP: 002b:00007fff10e9eae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 827.186757][ T31] RAX: 0000000000000000 RBX: 00007fff10e9ebd0 RCX: 00007f2f4619c819 [ 827.216204][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 827.224200][ T31] RBP: 00000000000a4b83 R08: 0000000000000001 R09: 0000000000000000 [ 827.246681][ T31] R10: 0000001b33e20000 R11: 0000000000000246 R12: 00007fff10e9ec10 [ 827.254673][ T31] R13: 00007f2f46415fac R14: 00000000000a4bdf R15: 00007f2f46415fa0 [ 827.286367][ T31] [ 827.289546][ T31] [ 827.289546][ T31] Showing all locks held in the system: [ 827.393809][ T31] 3 locks held by kworker/0:1/10: [ 827.416144][ T31] 1 lock held by khungtaskd/31: [ 827.421015][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 827.526240][ T31] 2 locks held by getty/5585: [ 827.530945][ T31] #0: ffff888036a430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 827.615460][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 827.677905][ T31] 3 locks held by kworker/u10:0/16028: [ 827.683385][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 827.776218][ T31] #1: ffffc90003a17d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 827.811637][T16080] Bluetooth: hci12: command tx timeout [ 827.856183][ T31] #2: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 827.865535][ T31] 1 lock held by syz.1.2469/16114: [ 827.936175][ T31] #0: ffff888057a1ccc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 827.982478][ T31] 1 lock held by syz.2.2495/16281: [ 828.008543][ T31] #0: ffff8880131f1908 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 828.047125][ T31] 1 lock held by syz.4.2575/16653: [ 828.052259][ T31] #0: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 828.076391][ T31] 1 lock held by syz.3.2580/16675: [ 828.081500][ T31] #0: ffff888057b287c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 828.110831][ T31] 1 lock held by syz.0.2600/16758: [ 828.115952][ T31] #0: ffff8880871a3008 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 828.156166][ T31] 1 lock held by syz.5.2758/17509: [ 828.161301][ T31] #0: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 828.186664][ T31] 1 lock held by syz.7.2867/18015: [ 828.191786][ T31] #0: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 828.216316][ T31] 1 lock held by syz.9.2878/18077: [ 828.221439][ T31] #0: ffff888060947508 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 828.266231][ T31] 3 locks held by syz.6.2908/18200: [ 828.271448][ T31] 3 locks held by syz-executor/18211: [ 828.286396][ T31] #0: ffff8880376bcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 828.295986][ T31] #1: ffff8880376bc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 828.326148][ T31] #2: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 828.358720][ T31] 3 locks held by syz-executor/18256: [ 828.364116][ T31] #0: ffff888035140ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 828.396161][ T31] #1: ffff8880351400c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 828.405849][ T31] #2: ffffffff908b0808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 828.434664][ T31] 1 lock held by syz.8.2935/18333: [ 828.448603][ T31] #0: ffffffff90617328 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 828.468618][ T31] 5 locks held by syz-executor/18354: [ 828.473995][ T31] #0: ffff8880aa154ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 828.506224][ T31] #1: ffff8880aa1540c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 828.515913][ T31] #2: ffffffff908b0808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 828.556360][ T31] #3: ffff888084187b00 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 828.565721][ T31] #4: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 828.652619][ T31] [ 828.654965][ T31] ============================================= [ 828.654965][ T31] [ 828.701297][ T31] NMI backtrace for cpu 0 [ 828.701315][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 828.701337][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 828.701343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 828.701352][ T31] Call Trace: [ 828.701358][ T31] [ 828.701364][ T31] dump_stack_lvl+0x100/0x190 [ 828.701392][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 828.701416][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 828.701439][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 828.701479][ T31] sys_info+0x141/0x190 [ 828.701498][ T31] watchdog+0xd25/0x1050 [ 828.701518][ T31] ? __pfx_watchdog+0x10/0x10 [ 828.701534][ T31] ? __kthread_parkme+0x18c/0x230 [ 828.701553][ T31] ? kthread+0x13a/0x450 [ 828.701571][ T31] ? __pfx_watchdog+0x10/0x10 [ 828.701585][ T31] kthread+0x370/0x450 [ 828.701603][ T31] ? __pfx_kthread+0x10/0x10 [ 828.701624][ T31] ret_from_fork+0x754/0xd80 [ 828.701647][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 828.701670][ T31] ? __switch_to+0x7b4/0x1120 [ 828.701686][ T31] ? __pfx_kthread+0x10/0x10 [ 828.701707][ T31] ret_from_fork_asm+0x1a/0x30 [ 828.701731][ T31] [ 829.049441][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 829.056332][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 829.067022][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 829.073501][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 829.083538][ T31] Call Trace: [ 829.086802][ T31] [ 829.089713][ T31] dump_stack_lvl+0x100/0x190 [ 829.094385][ T31] vpanic+0x552/0x970 [ 829.098353][ T31] ? __pfx_vpanic+0x10/0x10 [ 829.102837][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 829.108980][ T31] panic+0xd1/0xe0 [ 829.112681][ T31] ? __pfx_panic+0x10/0x10 [ 829.117079][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 829.123220][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 829.129360][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 829.135499][ T31] ? watchdog.cold+0x198/0x1ca [ 829.140246][ T31] ? watchdog+0xd35/0x1050 [ 829.144645][ T31] watchdog.cold+0x1a9/0x1ca [ 829.149224][ T31] ? __pfx_watchdog+0x10/0x10 [ 829.153893][ T31] ? __kthread_parkme+0x18c/0x230 [ 829.158903][ T31] ? kthread+0x13a/0x450 [ 829.163132][ T31] ? __pfx_watchdog+0x10/0x10 [ 829.167789][ T31] kthread+0x370/0x450 [ 829.171844][ T31] ? __pfx_kthread+0x10/0x10 [ 829.176424][ T31] ret_from_fork+0x754/0xd80 [ 829.181002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 829.186102][ T31] ? __switch_to+0x7b4/0x1120 [ 829.190763][ T31] ? __pfx_kthread+0x10/0x10 [ 829.195340][ T31] ret_from_fork_asm+0x1a/0x30 [ 829.200097][ T31] [ 829.203154][ T31] Kernel Offset: disabled [ 829.207468][ T31] Rebooting in 86400 seconds..