last executing test programs: 2.67195377s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x40890) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_FILTER(0xffff, 0x2, 0x0, 0x100000000, 0x5) prctl$auto(0x101, 0x8400000000000000, 0x0, 0xfff, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.637508342s ago: executing program 2 (id=3): socket(0x2, 0x1, 0xb7) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x40009, 0x9, 0x9b71, 0xffffffffffffffff, 0x4028000) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, 0x0, 0x7) 2.260337413s ago: executing program 2 (id=7): openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rx_duplicates\x00', 0x800, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0x358}, 0x1, 0x0, 0x0, 0x84}, 0x20000080) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/oss/sndstat\x00', 0x42500, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001080)=""/244, 0xf4) 1.943043391s ago: executing program 0 (id=10): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x5, 0x6) socket(0x2, 0x1, 0x0) r0 = socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8) statmount$auto(0x0, 0x0, 0x202, 0x2000000) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x8000000000000001, 0x15) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, &(0x7f0000001080)=0x81) read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000040)=""/4080, 0x1036) 1.708846573s ago: executing program 3 (id=11): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) write$auto(0x4, 0x0, 0x100082) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) 1.566489637s ago: executing program 1 (id=12): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="f50128df25f50a00776fe3be2d"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x80000000) writev$auto(r0, &(0x7f0000000240)={0x0, 0x9}, 0x5) 1.229422467s ago: executing program 1 (id=13): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2502"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb000000) 1.206696921s ago: executing program 2 (id=14): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x18bc00, 0x0) close_range$auto(0x0, r0, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xb, 0xc, 0x1000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)="13") ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 1.185970845s ago: executing program 0 (id=15): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer1\x00', 0xc0800, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100340, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1a9701, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"57f475c61457e99f769f5235b668e09caf9941b9b26b2fb80cf70643d6ff9594", 0x3ff, 0x23, 0xc130, 0xd5e9, 0x401}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x9e}, 0xa, 0x0) ioctl$auto(0x3, 0xc0383e04, r0) 1.097533442s ago: executing program 3 (id=16): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x401, 0x100, 0x100, 0x6, 0x1, 0x80a, 0xffffffffffffffff, [0xffff7d2e, 0x3c, 0x3d3f], {0x4, 0x10021, 0x3, 0x2de, 0x86, 0x1, 0x102, 0x8, 0xcdaa}, {0xfff7ffff, 0x3, 0x52, 0xd, 0x10001, 0x9, 0x76c5, 0x8, 0x8000000000040000}}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r1, 0xc2604110, 0x0) r3 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x23, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xb}}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) getsockopt$auto_SO_SNDLOWAT(r0, 0x0, 0x18, 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x319082, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) fanotify_init$auto(0x7c5, 0x1000) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x5) 1.018015314s ago: executing program 3 (id=17): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0xffff, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0xe80, 0x0) ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f0, 0xffffffffffffffff) 1.017588015s ago: executing program 0 (id=18): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0xc0880, 0x0) close_range$auto(r0, r0, 0x2) r1 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 998.336799ms ago: executing program 2 (id=19): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)=0x74c7) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() 891.511045ms ago: executing program 1 (id=20): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) fanotify_init$auto(0x8, 0x2000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c0b02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto(0x3, 0x5403, r2) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 734.702045ms ago: executing program 3 (id=21): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0xa0000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0x2c65c0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x560a, r0) 600.837768ms ago: executing program 1 (id=22): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) prctl$auto_SIGCONT(0xfffffffd, 0x12, r1, 0x1139, 0xfffffffffffff428) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x5, 0x0) ioctl$auto(r2, 0x8941, 0x8) 588.346261ms ago: executing program 3 (id=23): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100000000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) shutdown$auto(0x200000003, 0x2) 458.346047ms ago: executing program 1 (id=24): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "ce6232e4c38adc3600", "1aef09f057b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a3723933044e12e7aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c40316b50fd844ca966e25bae3ea9e0485911ca98dc015b6353fc8fdb75ed727190a9b59c895c6fd3f4857dd0a53acc9fc8eaaf65594d77abfb1a6b0788a2ac012a27f566ac119dff3c275c8e64a87699577b2ad1a822a23d98d5dcef24a81ad1005f9c69ebdea766c9795a8214e6804939ac95778ab3f25c3c4da43984d0b0f"}) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x4000010, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, 0x0) 420.161085ms ago: executing program 0 (id=25): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, 0x0, 0x6a) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 239.649768ms ago: executing program 0 (id=26): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x14, r2, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) 67.93963ms ago: executing program 0 (id=27): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 0s ago: executing program 1 (id=28): unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r6 = wait4$auto(r5, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r6, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r6}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r6, 0xc, 0x6) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. [ 56.444690][ T5603] cgroup: Unknown subsys name 'net' [ 56.566233][ T5603] cgroup: Unknown subsys name 'cpuset' [ 56.573475][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.698907][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.162074][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.162598][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.172250][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.177200][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.187477][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.191627][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.198891][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.204485][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.220088][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.222587][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.227389][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.234628][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.242255][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.248714][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.262702][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.263618][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.271157][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.281153][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.291080][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.299105][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.072830][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.080399][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.094071][ T5618] bridge_slave_0: entered allmulticast mode [ 60.112696][ T5618] bridge_slave_0: entered promiscuous mode [ 60.126355][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.133522][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.141326][ T5618] bridge_slave_1: entered allmulticast mode [ 60.149665][ T5618] bridge_slave_1: entered promiscuous mode [ 60.203499][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.225939][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.280119][ T5618] team0: Port device team_slave_0 added [ 60.290789][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.298054][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.305203][ T5615] bridge_slave_0: entered allmulticast mode [ 60.311635][ T5615] bridge_slave_0: entered promiscuous mode [ 60.324432][ T5618] team0: Port device team_slave_1 added [ 60.330184][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.337272][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.344519][ T5617] bridge_slave_0: entered allmulticast mode [ 60.350980][ T5617] bridge_slave_0: entered promiscuous mode [ 60.357905][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.365040][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.372153][ T5615] bridge_slave_1: entered allmulticast mode [ 60.378938][ T5615] bridge_slave_1: entered promiscuous mode [ 60.395461][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.402676][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.409922][ T5617] bridge_slave_1: entered allmulticast mode [ 60.416478][ T5617] bridge_slave_1: entered promiscuous mode [ 60.433225][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.440422][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.447657][ T5616] bridge_slave_0: entered allmulticast mode [ 60.454222][ T5616] bridge_slave_0: entered promiscuous mode [ 60.475851][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.483030][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.490347][ T5616] bridge_slave_1: entered allmulticast mode [ 60.497004][ T5616] bridge_slave_1: entered promiscuous mode [ 60.504019][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.510993][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.537005][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.549490][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.560333][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.571049][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.585583][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.592611][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.618733][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.631000][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.670066][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.680869][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.697088][ T5617] team0: Port device team_slave_0 added [ 60.704156][ T5615] team0: Port device team_slave_0 added [ 60.712079][ T5615] team0: Port device team_slave_1 added [ 60.723678][ T5617] team0: Port device team_slave_1 added [ 60.740061][ T5616] team0: Port device team_slave_0 added [ 60.762811][ T5616] team0: Port device team_slave_1 added [ 60.776233][ T5618] hsr_slave_0: entered promiscuous mode [ 60.782261][ T5618] hsr_slave_1: entered promiscuous mode [ 60.788852][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.795943][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.821987][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.838730][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.845784][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.871873][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.883682][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.890782][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.916707][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.927884][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.934948][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.961055][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.993321][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.000454][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.026460][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.039386][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.046406][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.072383][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.116736][ T5615] hsr_slave_0: entered promiscuous mode [ 61.122713][ T5615] hsr_slave_1: entered promiscuous mode [ 61.128773][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 61.134749][ T5615] Cannot create hsr debugfs directory [ 61.165402][ T5617] hsr_slave_0: entered promiscuous mode [ 61.171426][ T5617] hsr_slave_1: entered promiscuous mode [ 61.177496][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 61.183270][ T5617] Cannot create hsr debugfs directory [ 61.198530][ T5616] hsr_slave_0: entered promiscuous mode [ 61.204612][ T5616] hsr_slave_1: entered promiscuous mode [ 61.210470][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 61.216276][ T5616] Cannot create hsr debugfs directory [ 61.354077][ T5631] Bluetooth: hci2: command tx timeout [ 61.363991][ T5631] Bluetooth: hci3: command tx timeout [ 61.364010][ T5626] Bluetooth: hci0: command tx timeout [ 61.369425][ T49] Bluetooth: hci1: command tx timeout [ 61.432118][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.441048][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.449537][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.457877][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.465975][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.474702][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.485611][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.494278][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.523222][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.532266][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.543586][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.552743][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.560988][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.569554][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.582650][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.591480][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.630517][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.639300][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.647296][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.656105][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.663675][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.672352][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.682690][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.691294][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.744019][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.752394][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.761208][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.770019][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.782791][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.791586][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.799854][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.808707][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.863447][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.888606][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.915809][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.927798][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.934949][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.946493][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.958925][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.966027][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.987525][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.994650][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.003000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.010133][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.025359][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.063168][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.080629][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.094977][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.102074][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.117843][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.124969][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.168180][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.191166][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.198342][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.225244][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.232408][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.716740][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.781375][ T5615] veth0_vlan: entered promiscuous mode [ 62.814109][ T5615] veth1_vlan: entered promiscuous mode [ 62.862231][ T5615] veth0_macvtap: entered promiscuous mode [ 62.879614][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.898913][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.907718][ T5615] veth1_macvtap: entered promiscuous mode [ 62.921848][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.943461][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.958460][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.973217][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.982974][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.998876][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.020604][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.046897][ T5616] veth0_vlan: entered promiscuous mode [ 63.063699][ T5617] veth0_vlan: entered promiscuous mode [ 63.069592][ T5618] veth0_vlan: entered promiscuous mode [ 63.089964][ T5616] veth1_vlan: entered promiscuous mode [ 63.106602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.116142][ T5617] veth1_vlan: entered promiscuous mode [ 63.123000][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.135505][ T5618] veth1_vlan: entered promiscuous mode [ 63.150881][ T5616] veth0_macvtap: entered promiscuous mode [ 63.171953][ T652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.172792][ T5616] veth1_macvtap: entered promiscuous mode [ 63.186007][ T652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.209000][ T5618] veth0_macvtap: entered promiscuous mode [ 63.222867][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.236345][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.236727][ T5618] veth1_macvtap: entered promiscuous mode [ 63.259004][ T5617] veth0_macvtap: entered promiscuous mode [ 63.268019][ T5617] veth1_macvtap: entered promiscuous mode [ 63.281470][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.305038][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.328270][ T652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.342245][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.345179][ T5763] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.351326][ T652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.369201][ T652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.392555][ T652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.401420][ T652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.416086][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.431514][ T652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.434075][ T5631] Bluetooth: hci3: command tx timeout [ 63.441532][ T5626] Bluetooth: hci2: command tx timeout [ 63.445929][ T49] Bluetooth: hci1: command tx timeout [ 63.452069][ T5626] Bluetooth: hci0: command tx timeout [ 63.465525][ T652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.480237][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.495283][ T652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.506817][ T652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.507617][ T652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.507843][ T652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.507985][ T652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.606136][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.616158][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.648422][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.660918][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.686712][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.696785][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.701380][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.718006][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.749525][ T652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.784609][ T652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.827237][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.841636][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.087607][ T5780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.119291][ T5780] hsr_slave_0: left promiscuous mode [ 64.125250][ T5780] hsr_slave_1: left promiscuous mode [ 64.413180][ T5790] capability: warning: `syz.1.9' uses 32-bit capabilities (legacy support in use) [ 64.927179][ T5795] FAULT_INJECTION: forcing a failure. [ 64.927179][ T5795] name failslab, interval 1, probability 0, space 0, times 1 [ 64.940488][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 64.940524][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 64.940539][ T5795] Call Trace: [ 64.940544][ T5795] [ 64.940550][ T5795] dump_stack_lvl+0x100/0x190 [ 64.940583][ T5795] should_fail_ex.cold+0x5/0xa [ 64.940598][ T5795] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 64.940616][ T5795] ? __pfx_cgroup_show_path+0x10/0x10 [ 64.940634][ T5795] should_failslab+0xc2/0x120 [ 64.940655][ T5795] ? __pfx_cgroup_show_path+0x10/0x10 [ 64.940673][ T5795] __kmalloc_cache_noprof+0x7a/0x6e0 [ 64.940689][ T5795] ? cgroup_show_path+0xb2/0x730 [ 64.940707][ T5795] ? __pfx_cgroup_show_path+0x10/0x10 [ 64.940724][ T5795] cgroup_show_path+0xb2/0x730 [ 64.940742][ T5795] ? __pfx_cgroup_show_path+0x10/0x10 [ 64.940759][ T5795] kernfs_sop_show_path+0xe9/0x160 [ 64.940779][ T5795] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 64.940798][ T5795] show_path+0x9e/0x100 [ 64.940813][ T5795] show_mountinfo+0x1d8/0x820 [ 64.940834][ T5795] ? __pfx_show_mountinfo+0x10/0x10 [ 64.940854][ T5795] ? __kvmalloc_node_noprof+0x393/0xa60 [ 64.940876][ T5795] seq_read_iter+0xbce/0x1270 [ 64.940898][ T5795] ? __pfx_seq_read_iter+0x10/0x10 [ 64.940918][ T5795] vfs_read+0x82e/0xb40 [ 64.940939][ T5795] ? __pfx_vfs_read+0x10/0x10 [ 64.940964][ T5795] ksys_read+0x12a/0x250 [ 64.940984][ T5795] ? __pfx_ksys_read+0x10/0x10 [ 64.941004][ T5795] ? rcu_is_watching+0x12/0xc0 [ 64.941019][ T5795] do_syscall_64+0x115/0x840 [ 64.941036][ T5795] ? clear_bhb_loop+0x40/0x90 [ 64.941052][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.941074][ T5795] RIP: 0033:0x7fa5ec39ce59 [ 64.941091][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.941108][ T5795] RSP: 002b:00007fa5ed242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.941126][ T5795] RAX: ffffffffffffffda RBX: 00007fa5ec615fa0 RCX: 00007fa5ec39ce59 [ 64.941137][ T5795] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000003 [ 64.941146][ T5795] RBP: 00007fa5ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 64.941156][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.941165][ T5795] R13: 00007fa5ec616038 R14: 00007fa5ec615fa0 R15: 00007fff01d32318 [ 64.941179][ T5795] [ 65.228082][ T5805] syz.1.12 (5805): /proc/5805/oom_adj is deprecated, please use /proc/5805/oom_score_adj instead. [ 65.356889][ T5808] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 65.399676][ T5812] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 65.446457][ T5812] netlink: 306 bytes leftover after parsing attributes in process `syz.1.13'. [ 65.515525][ T5627] Bluetooth: hci3: command tx timeout [ 65.515626][ T49] Bluetooth: hci2: command tx timeout [ 65.521010][ T5626] Bluetooth: hci1: command tx timeout [ 65.528550][ T49] Bluetooth: hci0: command tx timeout [ 65.798874][ T5829] [U] 0 [ 65.812025][ T5818] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.834471][ T5828] [U] ‘QUIÚ [ 66.712659][ T5873] FAULT_INJECTION: forcing a failure. [ 66.712659][ T5873] name failslab, interval 1, probability 0, space 0, times 0 [ 66.780403][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.1.28 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.780428][ T5873] Tainted: [L]=SOFTLOCKUP [ 66.780434][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.780442][ T5873] Call Trace: [ 66.780448][ T5873] [ 66.780453][ T5873] dump_stack_lvl+0x100/0x190 [ 66.780481][ T5873] should_fail_ex.cold+0x5/0xa [ 66.780496][ T5873] ? fs_reclaim_acquire+0x70/0x100 [ 66.780517][ T5873] ? tracepoint_add_func+0x3a8/0x1150 [ 66.780535][ T5873] should_failslab+0xc2/0x120 [ 66.780558][ T5873] __kmalloc_noprof+0xe0/0x840 [ 66.780575][ T5873] ? __pfx_blk_add_trace_split+0x10/0x10 [ 66.780590][ T5873] tracepoint_add_func+0x3a8/0x1150 [ 66.780607][ T5873] ? __pfx_blk_add_trace_split+0x10/0x10 [ 66.780622][ T5873] ? __pfx_blk_add_trace_split+0x10/0x10 [ 66.780635][ T5873] tracepoint_probe_register+0xc4/0x110 [ 66.780654][ T5873] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 66.780672][ T5873] ? __pfx_blk_add_trace_split+0x10/0x10 [ 66.780686][ T5873] ? relay_open+0x793/0xa00 [ 66.780700][ T5873] blk_register_tracepoints+0x2be/0x440 [ 66.780720][ T5873] blk_trace_setup_finalize+0x320/0x3a0 [ 66.780742][ T5873] blk_trace_setup+0x254/0x440 [ 66.780756][ T5873] ? __pfx_blk_trace_setup+0x10/0x10 [ 66.780771][ T5873] ? __pfx_vsnprintf+0x10/0x10 [ 66.780793][ T5873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.780810][ T5873] ? do_vfs_ioctl+0x226/0x13e0 [ 66.780830][ T5873] blk_trace_ioctl+0x245/0x320 [ 66.780845][ T5873] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 66.780860][ T5873] ? rcu_is_watching+0x12/0xc0 [ 66.780873][ T5873] ? __fget_files+0x215/0x3d0 [ 66.780893][ T5873] ? hook_file_ioctl_common+0x149/0x410 [ 66.780911][ T5873] blkdev_ioctl+0x17c/0x6f0 [ 66.780930][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 66.780950][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 66.780969][ T5873] __x64_sys_ioctl+0x18e/0x210 [ 66.780989][ T5873] do_syscall_64+0x115/0x840 [ 66.781006][ T5873] ? clear_bhb_loop+0x40/0x90 [ 66.781022][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.781036][ T5873] RIP: 0033:0x7fd8fc79ce59 [ 66.781049][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.781063][ T5873] RSP: 002b:00007fd8fd5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.781079][ T5873] RAX: ffffffffffffffda RBX: 00007fd8fca16090 RCX: 00007fd8fc79ce59 [ 66.781088][ T5873] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000005 [ 66.781097][ T5873] RBP: 00007fd8fc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 66.781106][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.781115][ T5873] R13: 00007fd8fca16128 R14: 00007fd8fca16090 R15: 00007ffc3ff57b98 [ 66.781129][ T5873] [ 66.781244][ T5873] ------------[ cut here ]------------ [ 67.071227][ T5873] ret [ 67.071235][ T5873] WARNING: kernel/trace/blktrace.c:1365 at blk_register_tracepoints+0x40e/0x440, CPU#0: syz.1.28/5873 [ 67.084924][ T5873] Modules linked in: [ 67.088810][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.1.28 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.099670][ T5873] Tainted: [L]=SOFTLOCKUP [ 67.104122][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.114331][ T5873] RIP: 0010:blk_register_tracepoints+0x40e/0x440 [ 67.120658][ T5873] Code: 0f 0b 90 e9 5e fe ff ff e8 af 99 f7 ff 90 0f 0b 90 e9 7d fe ff ff e8 a1 99 f7 ff 90 0f 0b 90 e9 9c fe ff ff e8 93 99 f7 ff 90 <0f> 0b 90 e9 bb fe ff ff e8 85 99 f7 ff 90 0f 0b 90 e9 da fe ff ff [ 67.140757][ T5873] RSP: 0018:ffffc9000445faf8 EFLAGS: 00010283 [ 67.147188][ T5873] RAX: 000000000007056b RBX: 00000000fffffff4 RCX: ffffc90007231000 [ 67.155321][ T5873] RDX: 0000000000080000 RSI: ffffffff8211216d RDI: ffff888032780000 [ 67.163284][ T5873] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 67.171547][ T5873] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 67.179671][ T5873] R13: ffff888027202540 R14: ffffc9000445fd98 R15: 0000000000000001 [ 67.187801][ T5873] FS: 00007fd8fd5cb6c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 67.196890][ T5873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.203462][ T5873] CR2: 00007f92d3f0b000 CR3: 00000000793ac000 CR4: 00000000003526f0 [ 67.211592][ T5873] Call Trace: [ 67.215008][ T5873] [ 67.217936][ T5873] blk_trace_setup_finalize+0x320/0x3a0 [ 67.223483][ T5873] blk_trace_setup+0x254/0x440 [ 67.228418][ T5873] ? __pfx_blk_trace_setup+0x10/0x10 [ 67.233690][ T5873] ? __pfx_vsnprintf+0x10/0x10 [ 67.239066][ T5873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.245378][ T5873] ? do_vfs_ioctl+0x226/0x13e0 [ 67.250143][ T5873] blk_trace_ioctl+0x245/0x320 [ 67.254929][ T5873] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 67.260206][ T5873] ? rcu_is_watching+0x12/0xc0 [ 67.264981][ T5873] ? __fget_files+0x215/0x3d0 [ 67.269653][ T5873] ? hook_file_ioctl_common+0x149/0x410 [ 67.275308][ T5873] blkdev_ioctl+0x17c/0x6f0 [ 67.279809][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.284870][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.289889][ T5873] __x64_sys_ioctl+0x18e/0x210 [ 67.294663][ T5873] do_syscall_64+0x115/0x840 [ 67.299246][ T5873] ? clear_bhb_loop+0x40/0x90 [ 67.303937][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.309820][ T5873] RIP: 0033:0x7fd8fc79ce59 [ 67.314271][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.333893][ T5873] RSP: 002b:00007fd8fd5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.342672][ T5873] RAX: ffffffffffffffda RBX: 00007fd8fca16090 RCX: 00007fd8fc79ce59 [ 67.350886][ T5873] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000005 [ 67.358999][ T5873] RBP: 00007fd8fc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 67.366998][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.374976][ T5873] R13: 00007fd8fca16128 R14: 00007fd8fca16090 R15: 00007ffc3ff57b98 [ 67.382940][ T5873] [ 67.385983][ T5873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.393250][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.1.28 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.403912][ T5873] Tainted: [L]=SOFTLOCKUP [ 67.408228][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.418277][ T5873] Call Trace: [ 67.421547][ T5873] [ 67.424469][ T5873] dump_stack_lvl+0x100/0x190 [ 67.429146][ T5873] vpanic+0x552/0x970 [ 67.433113][ T5873] ? __pfx_vpanic+0x10/0x10 [ 67.437599][ T5873] ? lock_release+0x24d/0x310 [ 67.442313][ T5873] panic+0xd1/0xe0 [ 67.446025][ T5873] ? __pfx_panic+0x10/0x10 [ 67.450434][ T5873] check_panic_on_warn.cold+0x19/0x34 [ 67.455790][ T5873] ? blk_register_tracepoints+0x40e/0x440 [ 67.461511][ T5873] __warn.cold+0x191/0x318 [ 67.465931][ T5873] __report_bug+0x30f/0x440 [ 67.470436][ T5873] ? blk_register_tracepoints+0x40e/0x440 [ 67.476158][ T5873] ? __pfx___report_bug+0x10/0x10 [ 67.481175][ T5873] ? tracepoint_probe_register+0xd2/0x110 [ 67.486885][ T5873] ? lock_release+0x24d/0x310 [ 67.491751][ T5873] ? __mutex_unlock_slowpath+0x350/0x910 [ 67.497380][ T5873] ? blk_register_tracepoints+0x40e/0x440 [ 67.503182][ T5873] report_bug+0xb2/0x220 [ 67.507415][ T5873] ? blk_register_tracepoints+0x40e/0x440 [ 67.513125][ T5873] handle_bug+0x16a/0x2a0 [ 67.517450][ T5873] exc_invalid_op+0x17/0x50 [ 67.521950][ T5873] asm_exc_invalid_op+0x1a/0x20 [ 67.526785][ T5873] RIP: 0010:blk_register_tracepoints+0x40e/0x440 [ 67.533104][ T5873] Code: 0f 0b 90 e9 5e fe ff ff e8 af 99 f7 ff 90 0f 0b 90 e9 7d fe ff ff e8 a1 99 f7 ff 90 0f 0b 90 e9 9c fe ff ff e8 93 99 f7 ff 90 <0f> 0b 90 e9 bb fe ff ff e8 85 99 f7 ff 90 0f 0b 90 e9 da fe ff ff [ 67.552701][ T5873] RSP: 0018:ffffc9000445faf8 EFLAGS: 00010283 [ 67.558757][ T5873] RAX: 000000000007056b RBX: 00000000fffffff4 RCX: ffffc90007231000 [ 67.566716][ T5873] RDX: 0000000000080000 RSI: ffffffff8211216d RDI: ffff888032780000 [ 67.574671][ T5873] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 67.582624][ T5873] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 67.590580][ T5873] R13: ffff888027202540 R14: ffffc9000445fd98 R15: 0000000000000001 [ 67.598545][ T5873] ? blk_register_tracepoints+0x40d/0x440 [ 67.604263][ T5873] ? blk_register_tracepoints+0x40d/0x440 [ 67.609971][ T5873] blk_trace_setup_finalize+0x320/0x3a0 [ 67.615508][ T5873] blk_trace_setup+0x254/0x440 [ 67.620270][ T5873] ? __pfx_blk_trace_setup+0x10/0x10 [ 67.625551][ T5873] ? __pfx_vsnprintf+0x10/0x10 [ 67.630324][ T5873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.636204][ T5873] ? do_vfs_ioctl+0x226/0x13e0 [ 67.640974][ T5873] blk_trace_ioctl+0x245/0x320 [ 67.645722][ T5873] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 67.650997][ T5873] ? rcu_is_watching+0x12/0xc0 [ 67.655753][ T5873] ? __fget_files+0x215/0x3d0 [ 67.660422][ T5873] ? hook_file_ioctl_common+0x149/0x410 [ 67.665954][ T5873] blkdev_ioctl+0x17c/0x6f0 [ 67.670451][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.675469][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.680489][ T5873] __x64_sys_ioctl+0x18e/0x210 [ 67.685248][ T5873] do_syscall_64+0x115/0x840 [ 67.689827][ T5873] ? clear_bhb_loop+0x40/0x90 [ 67.694489][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.700367][ T5873] RIP: 0033:0x7fd8fc79ce59 [ 67.704767][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.724359][ T5873] RSP: 002b:00007fd8fd5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.732759][ T5873] RAX: ffffffffffffffda RBX: 00007fd8fca16090 RCX: 00007fd8fc79ce59 [ 67.740714][ T5873] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000005 [ 67.748670][ T5873] RBP: 00007fd8fc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 67.756636][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.764595][ T5873] R13: 00007fd8fca16128 R14: 00007fd8fca16090 R15: 00007ffc3ff57b98 [ 67.772556][ T5873] [ 67.775842][ T5873] Kernel Offset: disabled [ 67.780156][ T5873] Rebooting in 86400 seconds..