last executing test programs: 2m47.937170225s ago: executing program 0 (id=1728): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f00000001c0)="ed53734343389030a4cfeb0e6f61fc9b3384a831ed2c4d5b7bc1b8e97bad3214858b15490e213024b9d35c7a2e9ba183328eb2a637a95db92a1fea547b49882afdec866158e4c15451396e555b7fcd5709c73b1b04470013a12e520c98bb5d6104a7bae45688462608997f6442e75541d745b5a7444b5842000ae6a2bc9efd2f31a342a179047d123907d94e422785c40395e6") unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) io_getevents$auto(0x6, 0x8, 0x2, &(0x7f00000000c0)={0x80000000, 0x1, 0x101, 0x8}, &(0x7f0000000040)={0xb0e, 0x1}) r2 = socket(0xa, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r2, 0x29, 0xcf, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f00000003c0)={0x0, 0xf9}, 0x3) socket(0x15, 0x5, 0x0) r4 = gettid() accept$auto(0x3, 0x0, 0x0) kill$auto(r4, 0x11) socket(0x1e, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = socket(0x0, 0x1, 0x3b) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x800, 0x0) 2m45.855056598s ago: executing program 0 (id=1732): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, 0x0, 0x4c) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) getcwd$auto(&(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x2c, 0x0, 0xfff8, 0x1, 0x0}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/eql/statistics/tx_carrier_errors\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/45, 0x2d) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) sysfs$auto(0x2, 0x3b, 0x0) io_pgetevents$auto(0x10, 0x5, 0x0, &(0x7f0000000100)={0x5, 0x3, 0x2, 0x37f}, &(0x7f00000000c0)={0x10, 0x347b}, &(0x7f0000000140)={&(0x7f0000000380)={0x800000009}}) 2m44.26906036s ago: executing program 0 (id=1736): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) getcwd$auto(0x0, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x2c, 0x0, 0xfff8, 0x1, 0x0}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/eql/statistics/tx_carrier_errors\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/45, 0x2d) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) sysfs$auto(0x2, 0x3b, 0x0) io_pgetevents$auto(0x10, 0x5, 0x0, &(0x7f0000000100)={0x5, 0x3, 0x2, 0x37f}, &(0x7f00000000c0)={0x10, 0x347b}, &(0x7f0000000140)={&(0x7f0000000380)={0x800000009}}) 2m42.471424251s ago: executing program 0 (id=1740): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m42.318414398s ago: executing program 0 (id=1744): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) preadv$auto(0xffffffffffffffff, 0x0, 0x9, 0xff, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x8, 0x7, 0x0, 0x1, [@generic="68c3e315"]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nbd14\x00', 0x6000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0x80000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='5', 0x1) 2m41.615026291s ago: executing program 0 (id=1745): landlock_restrict_self$auto(0xffffffffffffffff, 0xc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) setns(0xc9, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="330000009ff9608683df5febcc3a105a3b728d9b8349f786569141350a11df3cbe1b8f11d17cd377ec0bde3c3456c467b3d64d3241aa4d2b5d627d572985d494a450c09f66ad039a65f87c8a8f1c883492426bb8", @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) 2m26.59698918s ago: executing program 32 (id=1745): landlock_restrict_self$auto(0xffffffffffffffff, 0xc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) setns(0xc9, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="330000009ff9608683df5febcc3a105a3b728d9b8349f786569141350a11df3cbe1b8f11d17cd377ec0bde3c3456c467b3d64d3241aa4d2b5d627d572985d494a450c09f66ad039a65f87c8a8f1c883492426bb8", @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) 1m55.492110441s ago: executing program 1 (id=1859): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x21e9, 0x8c, 0x6, 0x2, 0xb, r0, 0x3, 0x3}, 0x101) getsockopt$auto_SO_NO_CHECK(r0, 0x8000, 0xb, &(0x7f0000000000)='!]\xc0]}\xb0./^.[@]-([W[/\x00', &(0x7f0000000040)=0xbb24) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x80901, 0x0) r3 = ioctl$auto_TIOCGPTPEER(r1, 0x5441, 0x0) socket(0x10, 0x3, 0xb) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r2, 0x3, r3) bpf$auto(0x2, 0x0, 0xf) bpf$auto(0x3, 0x0, 0xc) getsockopt$auto_SO_ZEROCOPY(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000001e00)='.\\K}\xc3\x00', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x840) socket(0x16, 0x3, 0x5) mincore$auto(0x288f, 0x8, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000001580)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xf}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x404c010) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)="fb", 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/vicodec/parameters/debug\x00', 0x42582, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)=""/7, 0x7) 1m55.012281989s ago: executing program 1 (id=1861): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x4, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) io_uring_setup$auto(0x7ffc, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000140), r0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x1}, 0x54) r3 = socket(0x28, 0x5, 0x0) bind$auto(r3, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) r4 = socket(0x29, 0x0, 0x1) bind$auto(r4, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_prog_fd, 0x403, @old_prog_fd=r2}, 0x8) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x6, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) lsetxattr$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\n\x00(\xa2\b\x00\x00\x00\x00\x00\x00\x00E\t\x00\x00\x00\xd4\xf2\xdf\x80\x9c\x87N\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7y\xe1\xff\xff\xc4\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9)\x0f`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xa2\xef\x0e\\\x8a\x15\xcb\xa9\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alo\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\a\xac\xa0\xc7\xf7\'\x8d\xab\xaeC5\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/505, &(0x7f0000001340), 0x2, 0x0) listxattr$auto(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xffffffffffffffff) sysfs$auto(0x2, 0x3b, 0x0) 1m54.052989301s ago: executing program 1 (id=1863): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x80064, 0x9) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x20003, 0x4000000000dd, 0xebf, 0x4, 0x200000008000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) madvise$auto(0x0, 0x200007, 0x19) keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x40, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) write$auto(r1, &(0x7f00000000c0)='.$Rv\x00', 0x80000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/node/node0/cpulist\x00', 0x28000, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) ioctl$auto_SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000740)) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sysfs$auto(0x2, 0xc, 0x3) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) 1m52.798530444s ago: executing program 1 (id=1866): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) getcwd$auto(&(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/eql/statistics/tx_carrier_errors\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/45, 0x2d) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) sysfs$auto(0x2, 0x3b, 0x0) io_pgetevents$auto(0x10, 0x5, 0x0, &(0x7f0000000100)={0x5, 0x3, 0x2, 0x37f}, &(0x7f00000000c0)={0x10, 0x347b}, &(0x7f0000000140)={&(0x7f0000000380)={0x800000009}}) 1m51.162590301s ago: executing program 1 (id=1872): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x80000, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) getsockopt$auto(r1, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 32) socket(0xa, 0x3, 0x3b) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r2, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x14, 0x0, 0x4) (async) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x7fffffff, 0x5, 0x100}, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x6, 0x2, 0xc, 0x8, 0x8001, 0x10000, 0x381, 0xff, 0x8000, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) keyctl$auto(0x7, r5, r5, r6, 0x9) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1ec, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}, @NFC_ATTR_LLC_SDP={0x13f, 0x13, 0x0, 0x1, [@generic="3a13b8133755b5c98cc43ceedab844df6429f9797363948329f2c4", @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r0}, @typed={0x101, 0xe5, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x4b, 0x0, 0x0, @uid=r5}]}, @NFC_ATTR_VENDOR_DATA={0x73, 0x1f, "e1d3d5665a8b516703de6c625cd46fd0e096c96ab03728d77bea8b16f11aacb672456b5f9f34c62718f33c323f39ed869ada116926c63aba3499aa412522fbf64b3787749f68fbf21cc97cc0e2af24f709257e6f361b648f42b6a0b398ebd0352f738ab90f4424943d2bc98417542a"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x6}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'nfsd\x00'}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x400}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m34.182696913s ago: executing program 33 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r2) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000009deed9903310cf18b704c344cc93f15b58ec389e2a324659a84ec3e2ee3b156322c0c7bca517360a81e2ca57bc32c55b18ead42a4c2b144fdc8faa4ac46a870e6faddda9a003ae16d8c07", @ANYRES16=r4, @ANYBLOB="00032abd7000ffdbdf251b00000005000f0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) msgctl$auto(0x6, 0xfffffffd, &(0x7f00000000c0)={{0xfffffff7, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x7fffffff, 0x5, 0x100}, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x6, 0x2, 0xc, 0x8, 0x8001, 0x10000, 0x381, 0xff, 0x8000, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) keyctl$auto(0x7, r5, r5, r6, 0x9) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1ec, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}, @NFC_ATTR_LLC_SDP={0x13f, 0x13, 0x0, 0x1, [@generic="3a13b8133755b5c98cc43ceedab844df6429f9797363948329f2c4", @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r0}, @typed={0x101, 0xe5, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x4b, 0x0, 0x0, @uid=r5}]}, @NFC_ATTR_VENDOR_DATA={0x73, 0x1f, "e1d3d5665a8b516703de6c625cd46fd0e096c96ab03728d77bea8b16f11aacb672456b5f9f34c62718f33c323f39ed869ada116926c63aba3499aa412522fbf64b3787749f68fbf21cc97cc0e2af24f709257e6f361b648f42b6a0b398ebd0352f738ab90f4424943d2bc98417542a"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x6}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'nfsd\x00'}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x400}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.964690916s ago: executing program 3 (id=2182): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/cgroup.freeze\x00', 0xb02, 0x0) socket(0x2b, 0x5, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0xcc, 0x40000f, 0x804, 0x5, 0xfff, 0x3, 0xffffffffffffffff, [0x0, 0x0, 0x208], {0x7, 0x200005, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0xa0000000, 0x3, 0x40, 0x200, 0x8, 0x100000000}}) pselect6$auto(0x5, &(0x7f0000000400)={[0x1000000008, 0xfffffffffffffffc, 0x0, 0x5, 0x8001, 0x7, 0xac, 0x2000009, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x8000, 0x1004, 0x7fff, 0xa, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x0, 0x8, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x40aa2, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0xc8, 0x894c, 0x5c8d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb-serial/drivers/kobil/uevent\x00', 0x10000, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x40800, 0x0) unshare$auto(0x20000) unshare$auto(0x20000) setresuid$auto(0x0, 0x8, 0x0) sysfs$auto(0x2, 0x3b, 0x0) r2 = fsopen$auto(0x0, 0x1) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, 0x0, 0x40000) ioctl$auto_dma_heap_fops_dma_heap(r1, 0x100, &(0x7f00000013c0)="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") 6.969535756s ago: executing program 4 (id=2183): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x4, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) io_uring_setup$auto(0x7ffc, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000140), r0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, 0x0, 0xd) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x1}, 0x54) r2 = socket(0x28, 0x5, 0x0) bind$auto(r2, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) r3 = socket(0x29, 0x0, 0x1) bind$auto(r3, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r1, @new_prog_fd, 0x403, @old_prog_fd=r1}, 0x8) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x6, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) lsetxattr$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\n\x00(\xa2\b\x00\x00\x00\x00\x00\x00\x00E\t\x00\x00\x00\xd4\xf2\xdf\x80\x9c\x87N\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7y\xe1\xff\xff\xc4\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9)\x0f`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xa2\xef\x0e\\\x8a\x15\xcb\xa9\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alo\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\a\xac\xa0\xc7\xf7\'\x8d\xab\xaeC5\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/505, &(0x7f0000001340), 0x2, 0x0) listxattr$auto(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xffffffffffffffff) sysfs$auto(0x2, 0x3b, 0x0) 6.478649958s ago: executing program 5 (id=2185): prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f402, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x4, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400006242181d32ef301df7b2d86c0e43cf00", @ANYRES16=r3, @ANYBLOB="000325bd7000fddbdf250300000007000200292800000600010009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004010) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xe3, 0x4000000002, 0x8}, 0x6f4) io_getevents$auto(0x6, 0x8, 0x3fdf, &(0x7f0000000000)={0xfc8, 0x5, 0x101, 0x8}, &(0x7f0000000040)={0xb0e, 0x7fff}) r4 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, r3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) getsockopt$auto(r4, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) (async) r5 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 4.567332504s ago: executing program 3 (id=2189): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf250300009e040008000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 4.487744755s ago: executing program 5 (id=2190): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xffffffffffffffff, r0, 0x8201, 0x2, 0x18, 0x1, 0xe3, 0x4000000002, 0x8}, 0xff) io_getevents$auto(0x6, 0x8000008, 0x2, &(0x7f0000000040)={0x10000fc6, 0x5, 0x8001, 0x800000008}, &(0x7f0000000340)={0xb0e, 0x1}) r1 = socket(0x26, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r2, &(0x7f00000003c0)={0x0, 0xf9}, 0x3) r3 = socket(0x15, 0x5, 0x0) r4 = gettid() r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x227480, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x8e051, r5, 0x0) accept$auto(0x3, 0x0, 0x0) kill$auto(r4, 0x11) socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9af17dc41dfa964a652cf0000af", @ANYRES16=r0, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000600bd8408cf63b582c12767f1b49a9700fcdbdf251200000004040200d90330f38d4f3b35450dcfaa03b9f76003baec863b72f9a5cf5a630b35e73b6bf176b4dab6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000011) sysfs$auto(0x2, 0x3b, 0x0) 4.434181619s ago: executing program 3 (id=2191): socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x7, 0xdf, 0xb2, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) msgctl$auto_MSG_STAT(0x2, 0xb, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0xd6e, 0xd, 0x5, 0x2004}, &(0x7f0000000280)=0x15, &(0x7f0000000040)=0x6, 0x0, 0x1, 0x4, 0x4, 0x40000000004, 0x9, 0x7, 0xa6b7}) setfsuid$auto(r2) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) fcntl$auto(r1, 0x400, 0x1) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) mlockall$auto(0x7) ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x40100, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x6, 0x0, 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r6, &(0x7f0000000180)=""/205, 0xcd) 4.413259938s ago: executing program 4 (id=2192): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x4, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) io_uring_setup$auto(0x7ffc, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x1}, 0x54) r3 = socket(0x28, 0x5, 0x0) bind$auto(r3, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) r4 = socket(0x29, 0x0, 0x1) bind$auto(r4, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_prog_fd, 0x403, @old_prog_fd=r2}, 0x8) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x6, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) lsetxattr$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\n\x00(\xa2\b\x00\x00\x00\x00\x00\x00\x00E\t\x00\x00\x00\xd4\xf2\xdf\x80\x9c\x87N\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7y\xe1\xff\xff\xc4\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9)\x0f`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xa2\xef\x0e\\\x8a\x15\xcb\xa9\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alo\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\a\xac\xa0\xc7\xf7\'\x8d\xab\xaeC5\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/505, &(0x7f0000001340), 0x2, 0x0) listxattr$auto(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xffffffffffffffff) sysfs$auto(0x2, 0x3b, 0x0) 4.369583623s ago: executing program 2 (id=2193): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) getcwd$auto(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)=':-.\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) (async) inotify_init1$auto(0x3000000000000) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) (async) unshare$auto(0x40000080) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async, rerun: 64) socket(0x8, 0x5, 0x7) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x70, 0x0, 0x4) (async, rerun: 32) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 32) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) readv$auto(r1, &(0x7f0000000000)={0x0, 0x100ffff}, 0x1) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000001, 0x8}, 0x6f4) (async) io_getevents$auto(0x6, 0x8, 0x3fdf, &(0x7f0000000000)={0x7, 0x5, 0x101, 0x8}, &(0x7f0000000040)={0xb0e, 0x7fff}) (async) socket(0x27, 0x800, 0x5) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x1, 0x0) (async, rerun: 32) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async, rerun: 32) write$auto_ctl_device_fops_user(0xffffffffffffffff, &(0x7f00000000c0)="cd55e6559904f6699d615b0ad7297a1d6479873f1f2c3fd41c4b6c497c37747fb4130b7c72ddd96ef23afbb5bfea71023da7d55508b54b7f44d07f9a5584e98424639a884d8a801664a6863f7f4349a5b4e6d583cffe1683379deeffa3b5e3359792c07c83c135b9", 0x68) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socket(0x2b, 0x1, 0x1) 4.150478217s ago: executing program 2 (id=2194): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/cgroup.freeze\x00', 0xb02, 0x0) socket(0x2b, 0x5, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0xcc, 0x40000f, 0x804, 0x5, 0xfff, 0x3, 0xffffffffffffffff, [0x0, 0x0, 0x208], {0x7, 0x200005, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0xa0000000, 0x3, 0x40, 0x200, 0x8, 0x100000000}}) pselect6$auto(0x5, &(0x7f0000000400)={[0x1000000008, 0xfffffffffffffffc, 0x0, 0x5, 0x8001, 0x7, 0xac, 0x2000009, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x8000, 0x1004, 0x7fff, 0xa, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x0, 0x8, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x40aa2, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0xc8, 0x894c, 0x5c8d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb-serial/drivers/kobil/uevent\x00', 0x10000, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x40800, 0x0) unshare$auto(0x20000) unshare$auto(0x20000) setresuid$auto(0x0, 0x8, 0x0) sysfs$auto(0x2, 0x3b, 0x0) r2 = fsopen$auto(0x0, 0x1) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, 0x0, 0x40000) ioctl$auto_dma_heap_fops_dma_heap(r1, 0x100, &(0x7f00000013c0)="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") 3.564977764s ago: executing program 5 (id=2195): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, r2, 0x9) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffde0}, 0x1, 0x0, 0x0, 0x4004850}, 0x800) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0x6, 0x400004, 0x200000000840000d}) ioctl$auto_BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r6, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0x17, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) mmap$auto(0x1000000000000, 0x9, 0x7, 0xfffffffffffffffe, r3, 0x8000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80010}, 0x44000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) 3.479845173s ago: executing program 3 (id=2196): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e00fbe18d073ba65c6df9cd1c8d10ea3ad6d7ac15"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x1900}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x7}) 3.233666843s ago: executing program 3 (id=2197): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) pread64$auto(r1, 0x0, 0x3, 0x800000000000000) r2 = prctl$auto_PR_SCHED_CORE_GET(0x1, 0x0, 0xffffffffffffffff, 0x7, 0x2172) getsockopt$auto_SO_BSDCOMPAT(r0, 0xb, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x27, 0xffffffffffffffff, 0x8000000000000, 0x2f) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffff) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/192, 0xc0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x1) r5 = getpid() process_vm_readv$auto(r5, 0x0, 0x5, &(0x7f0000000380)={&(0x7f00000003c0)="5d4846965d0b30daa3e6601c064002004ef4e3449da9de6d8e81b8ef5ba7539963c8a299f8bf8f816d2fd597aff09165fb11db610530b5ff686981cc7cb546f1a6192dc51d47abb1d077af445519b9844596b7f246681246ac9d2c851ac3803d504a303643768bea050522be34f77c5e0127fe6b3aeb745f71b0d241ed3a8abec0e46b13b787c00958c3d840b59099cb02f74d9cce7e86f05e60a70ef0a00d046c010000000000000000"}, 0x6, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf25030000005400018008000300c100000008000100", @ANYRES32=r7, @ANYBLOB="0800030004000000140002007767310000000000000000000000000008000300ff03000008000100", @ANYRES32=r8, @ANYBLOB="0400020076657468315f766972747b6057585f756966690005000265ff46ec1b2b8a0001000000050005001f00000005000300010000000500050004000000180001801400020076657468305f76000000007769666905000200"], 0xb0}, 0x1, 0x0, 0x0, 0x4000884}, 0x4040080) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) r9 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) r10 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r10, &(0x7f0000000000)={&(0x7f0000000000), 0x101}, 0x2) 2.994978793s ago: executing program 4 (id=2198): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop7/pm_only\x00', 0x40000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f00000001c0)=""/70, 0x46) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x4, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) io_uring_setup$auto(0x7ffc, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_prog_fd, 0x403, @old_prog_fd=r2}, 0x8) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) lsetxattr$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\n\x00(\xa2\b\x00\x00\x00\x00\x00\x00\x00E\t\x00\x00\x00\xd4\xf2\xdf\x80\x9c\x87N\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7y\xe1\xff\xff\xc4\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9)\x0f`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xa2\xef\x0e\\\x8a\x15\xcb\xa9\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alo\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\a\xac\xa0\xc7\xf7\'\x8d\xab\xaeC5\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/505, &(0x7f0000001340), 0x2, 0x0) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 2.516059727s ago: executing program 2 (id=2199): r0 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x20640, 0x0) write$auto(r0, &(0x7f0000000080)='-,\\\x00', 0x81) write$auto(r0, &(0x7f00000000c0)='/+)\x00', 0x4) shmctl$auto_SHM_INFO(0x8, 0xe, &(0x7f0000001200)={{0x80000000, 0xee00, 0xffffffffffffffff, 0x7, 0x10001, 0x9e, 0x8}, 0x7, 0x4, 0xe2, 0x2, @inferred=0xffffffffffffffff, @raw=0x513d, 0x2, 0x0, &(0x7f0000000100)="e2297b5bcb31b863fd7cd6faa34fb2f8d079745b76b5f46e33b00930bb2e02c2d725eaff488f4923d58052a06b88889a48e25c8defb9e44a8b13dbeff510ff50ceebd51b84c51d050b496617dee0cea944f74ec6effa8ca3e5ae4228e92a593938da59a3c3a8c8b8fc042c376574c147d8aff37660abb1f4029cb08d90168c38704f9f78d10405371243f6a4e92208892ecff7e3b7194cd694896641286151146c5295eb0f45be022ad2e777399eed2b666fb374989b5fe68b66621125d29c0acdc139", &(0x7f0000000200)="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"}) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000001300)={{0x3, 0xee01, 0xee01, 0xfffffffd, 0x7fffffff, 0x8000, 0x7}, 0x7fffffff, 0x1, 0xfffffffffffffffd, 0x5, @inferred=0xffffffffffffffff, @raw=0xa48, 0x250b, 0x0, &(0x7f0000001280)="2d2d51542723b8b581c740158d5c7492", &(0x7f00000012c0)}) keyctl$auto(0x101, r1, r2, 0xee00, 0x0) r4 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000001380)='/proc/thread-self/make-it-fail\x00', 0x109800, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKBSZSET(r6, 0x40081271, &(0x7f0000001540)=0x8) write$auto(r6, &(0x7f0000001580)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x5) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001640)={0x314, r5, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x7f}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x2d8, 0x124, 0x0, 0x1, [@generic="20a3c26f279706ca2c8a33c9cbf2ec3d92d0a19e6e61c962dcfc27d067383f69d1d94d55af29c4b57d950c4d03964ddfa7", @nested={0xf3, 0x155, 0x0, 0x1, [@generic="5b4221d1e7105c33d01611dad4b7c1be1ecd80539d84692cc4d323037ca0c7e0828eb09b587e4ad7a2442f12", @generic="b42d8f04fbb59bac4bacb51fe668198f6d31e2e2b49cc4fe3146eaf5bfe3a793a14a792115c421848c254238b6d9fc9a40a06a2f26aed84d7a1a4769fd8669430cd0363626661d775b80a3c8be65ace9bb38455065c82277cc47b8a590750aa86619b1be63d5d199d8065df3a5b10adac40ba939b757b3ae4a9291ecf1cdb7afab6af2c99a21b982ebb697ea3796fdbcb09d081e08578169c5e4d5b2381afa11a091b1f8cc60b89dc4e0915578a9c20bec3200b2fec1cb5181cd6c", @nested={0x4, 0x9b}, @nested={0x4, 0x5d}]}, @generic="30fa7c41de5585e313487ec8c1ef7792c974d00f5e97b751d7b4f4951cab31d7c2a314faecdf3bc195e1d74afdac4a1298053eb36cf247ae10907b6b8caa01ddf7cbd02e2b73a3111a377dc6a0f3b4f440d60e410af14100ff8393eac3e6f6669ee8440e6bd3a143d4e3660e1ec5d69e5ddab8a39bf03070edebd34e9f", @generic="6a08fa1e0d7168fd80ea042355a34221239ad8b380071d5099442c139460a166226e35350133b0ef734bff313376130f4fdd19386c1bf4234fa8bce2a5f4a8e1c3c9f1992949ed68b9d03ec5151f6f7f6b8a46121c47b38accd183612874b6e2cfa60c32587f7e6c", @typed={0x8, 0x71, 0x0, 0x0, @u32=0xb74}, @typed={0x8, 0x69, 0x0, 0x0, @pid=r3}, @generic="57b2d33b1434eb4137e8867d5cf5fe04d82989a38f6a8595338a0dfa399ea03bca53187b2a66bb25a0add50fc7159b4b016f89958eb8081678ad66699fb79bcf396fa0ff543c0865d7fd27850b51b1e3f8cbaf60cd80d6316e2c12ba39c2ebc0ae33b324d1847fbf8d699d78e28dec329e56a45dfff1e788ea4cd3651e8aef63389dde99df639fa0e754d5890c185abc5a14a968c9ba59f03519ecc6a95a250e329c", @typed={0x8, 0x14b, 0x0, 0x0, @u32}, @nested={0xe, 0x35, 0x0, 0x1, [@nested={0x4, 0x16a}, @generic="e88cecb73810"]}]}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x314}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r8 = prctl$auto_PR_SET_VMA_ANON_NAME(0x3, 0x0, r3, 0x98b5, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000001b00)={0x94, 0x7, 0x7c, 0x1, 0x7ff, "b5ed7b5d7332eb2aca30efb8"}) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001b80), r7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001bc0)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001c00)={'ipvlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r8, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xb4, r9, 0x10, 0x70bd2b, 0x6, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) r12 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000001d80), 0x238002, 0x0) r13 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/nbd10\x00', 0x0, 0x0) r14 = ioctl$auto_NS_GET_PID_IN_PIDNS(r8, 0x8004b708, &(0x7f0000001e00)=0x2) r15 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000001e40), 0x40700, 0x0) r16 = ioctl$auto_UDMABUF_CREATE_LIST(r12, 0x40087543, &(0x7f0000001e80)={0xa0000000, 0x0, [{r13, 0x0, 0x7, 0x8000000000000001}, {r4, 0x0, 0xdc, 0xd9}, {r6, 0x0, 0x1, 0x4}, {r0, 0x0, 0x180000000000, 0x10000000}, {r8, 0x0, 0x5, 0x7}, {r14, 0x0, 0x80000000, 0x3}, {r15, 0x0, 0xc, 0x4}, {r6, 0x0, 0x40b0}, {r6, 0x0, 0x554e}]}) shmat$auto(0x5, &(0x7f0000001f80)='veth0_to_hsr\x00', 0x7) read$auto_hsr_node_table_fops_(r8, &(0x7f0000001fc0)=""/202, 0xca) ioctl$auto_VHOST_GET_VRING_ENDIAN(r16, 0x4008af14, &(0x7f00000020c0)={0x70, 0x7f}) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) 2.395464672s ago: executing program 2 (id=2200): prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f402, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x4, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400006242181d32ef301df7b2d86c0e43cf00", @ANYRES16=r3, @ANYBLOB="000325bd7000fddbdf250300000007000200292800000600010009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004010) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400006242181d32ef301df7b2d86c0e43cf00", @ANYRES16=r5, @ANYBLOB="000325bd7000fddbdf250300000007000200292800000600010009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004010) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, r4, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) bind$auto(r0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram2\x00', 0x460080, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x81, 0x3, 0x635}) (async) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000a80), 0x101, 0x0) writev$auto(r2, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r3 = socket(0x10, 0x2, 0x4) bind$auto(r3, 0x0, 0xe) (async, rerun: 64) bind$auto(r3, 0x0, 0x65) (async, rerun: 64) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/pcm\x00', 0x2440, 0x0) (async) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) (async) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 32.38463ms ago: executing program 5 (id=2206): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000140)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x400000000000, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x111, 0x25, 0x0, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x121900, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) r3 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) read$auto_hwsim_fops_rx_rssi_(r3, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r1) 0s ago: executing program 2 (id=2207): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, 0x0, 0x8014) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000000c0), 0x2, &(0x7f00000003c0)={0x0, 0xb9d}, 0x3, 0x0, 0x3, 0x5}, 0xfff}, 0x101, 0xc3a4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x99d}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) write$auto(0x3, 0x0, 0x100000000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) r1 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) recvfrom$auto(r1, 0x0, 0xe230, 0x5, 0x0, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) ioctl$auto(0x3, 0x8906, 0xd) r2 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r2, 0x8000) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r2, &(0x7f00000005c0)=""/238, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 77.398281][ T5612] cgroup: Unknown subsys name 'net' [ 77.549734][ T5612] cgroup: Unknown subsys name 'cpuset' [ 77.558074][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.052880][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.196230][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.204300][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.205127][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.221834][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.225215][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.229873][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.238159][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.244348][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.251118][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.258348][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.265464][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.272108][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.280006][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.286239][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.304721][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.312380][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.312930][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.327066][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.329542][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.341759][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.940824][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.948700][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.955945][ T5625] bridge_slave_0: entered allmulticast mode [ 82.963009][ T5625] bridge_slave_0: entered promiscuous mode [ 82.994857][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.002280][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.009884][ T5625] bridge_slave_1: entered allmulticast mode [ 83.017047][ T5625] bridge_slave_1: entered promiscuous mode [ 83.099216][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.140433][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.149704][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.157477][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.164654][ T5624] bridge_slave_0: entered allmulticast mode [ 83.171594][ T5624] bridge_slave_0: entered promiscuous mode [ 83.178831][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.185981][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.193075][ T5626] bridge_slave_0: entered allmulticast mode [ 83.201573][ T5626] bridge_slave_0: entered promiscuous mode [ 83.228029][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.235316][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.242418][ T5624] bridge_slave_1: entered allmulticast mode [ 83.249748][ T5624] bridge_slave_1: entered promiscuous mode [ 83.256805][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.263980][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.271129][ T5626] bridge_slave_1: entered allmulticast mode [ 83.278232][ T5626] bridge_slave_1: entered promiscuous mode [ 83.285022][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.292143][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.299363][ T5623] bridge_slave_0: entered allmulticast mode [ 83.306491][ T5623] bridge_slave_0: entered promiscuous mode [ 83.315088][ T5635] Bluetooth: hci3: command tx timeout [ 83.347107][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.354419][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.361555][ T5623] bridge_slave_1: entered allmulticast mode [ 83.368790][ T5623] bridge_slave_1: entered promiscuous mode [ 83.377953][ T5625] team0: Port device team_slave_0 added [ 83.384596][ T5635] Bluetooth: hci0: command tx timeout [ 83.390592][ T5628] Bluetooth: hci1: command tx timeout [ 83.390748][ T5639] Bluetooth: hci2: command tx timeout [ 83.423487][ T5625] team0: Port device team_slave_1 added [ 83.431907][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.445063][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.456570][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.497608][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.509155][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.549079][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.562893][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.569905][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.595893][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.609313][ T5624] team0: Port device team_slave_0 added [ 83.635494][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.642523][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.668486][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.681174][ T5624] team0: Port device team_slave_1 added [ 83.688584][ T5626] team0: Port device team_slave_0 added [ 83.722009][ T5626] team0: Port device team_slave_1 added [ 83.730497][ T5623] team0: Port device team_slave_0 added [ 83.739023][ T5623] team0: Port device team_slave_1 added [ 83.780942][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.788235][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.815136][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.859008][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.867308][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.893343][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.905059][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.912022][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.938439][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.955931][ T5625] hsr_slave_0: entered promiscuous mode [ 83.962345][ T5625] hsr_slave_1: entered promiscuous mode [ 83.969558][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.976814][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.002762][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.022259][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.029440][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.055496][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.068462][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.075826][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.101829][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.201287][ T5624] hsr_slave_0: entered promiscuous mode [ 84.207614][ T5624] hsr_slave_1: entered promiscuous mode [ 84.213626][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 84.219968][ T5624] Cannot create hsr debugfs directory [ 84.238519][ T5626] hsr_slave_0: entered promiscuous mode [ 84.244841][ T5626] hsr_slave_1: entered promiscuous mode [ 84.250809][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 84.256766][ T5626] Cannot create hsr debugfs directory [ 84.277407][ T5623] hsr_slave_0: entered promiscuous mode [ 84.283574][ T5623] hsr_slave_1: entered promiscuous mode [ 84.289778][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 84.295676][ T5623] Cannot create hsr debugfs directory [ 84.712519][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.730766][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.738931][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.749346][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.757511][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.767095][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.775821][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.785164][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.866893][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.877323][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.887232][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.897343][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.910028][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.919590][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.930441][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.941213][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.042398][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.053094][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.062514][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.075112][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.083275][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.092795][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.101424][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.111211][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.217706][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.227768][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.236671][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.246920][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.255664][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.265305][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.273195][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.282562][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.307375][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.368226][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.384102][ T5639] Bluetooth: hci3: command tx timeout [ 85.393208][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.400599][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.418298][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.455494][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.462629][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.464505][ T5635] Bluetooth: hci1: command tx timeout [ 85.478702][ T5628] Bluetooth: hci2: command tx timeout [ 85.484393][ T5639] Bluetooth: hci0: command tx timeout [ 85.491636][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.524495][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.531720][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.559184][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.566313][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.616023][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.657989][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.707689][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.740031][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.747240][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.783351][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.801568][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.808784][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.841631][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.848825][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.902125][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.909345][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.497827][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.583644][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.678342][ T29] cfg80211: failed to load regulatory.db [ 86.740215][ T5625] veth0_vlan: entered promiscuous mode [ 86.811722][ T5625] veth1_vlan: entered promiscuous mode [ 86.859652][ T5624] veth0_vlan: entered promiscuous mode [ 86.897761][ T5624] veth1_vlan: entered promiscuous mode [ 86.943451][ T5625] veth0_macvtap: entered promiscuous mode [ 86.959793][ T5625] veth1_macvtap: entered promiscuous mode [ 86.981804][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.032161][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.048906][ T5624] veth0_macvtap: entered promiscuous mode [ 87.063721][ T5624] veth1_macvtap: entered promiscuous mode [ 87.072946][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.097483][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.129848][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.139563][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.160784][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170014][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.190413][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.217399][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.236223][ T5626] veth0_vlan: entered promiscuous mode [ 87.254643][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.280656][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.289774][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.326506][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.343490][ T5623] veth0_vlan: entered promiscuous mode [ 87.355549][ T5626] veth1_vlan: entered promiscuous mode [ 87.402984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.416259][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.435331][ T5623] veth1_vlan: entered promiscuous mode [ 87.464772][ T5639] Bluetooth: hci3: command tx timeout [ 87.491626][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.500536][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.538654][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.544888][ T5639] Bluetooth: hci0: command tx timeout [ 87.546913][ T5635] Bluetooth: hci1: command tx timeout [ 87.552125][ T5628] Bluetooth: hci2: command tx timeout [ 87.561699][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.593279][ T5626] veth0_macvtap: entered promiscuous mode [ 87.613471][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.630577][ T5626] veth1_macvtap: entered promiscuous mode [ 87.633208][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.653206][ T5623] veth0_macvtap: entered promiscuous mode [ 87.690071][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.693812][ T5623] veth1_macvtap: entered promiscuous mode [ 87.726217][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.748155][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.788097][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.823470][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.852094][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.901870][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.912929][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.925186][ T5782] FAULT_INJECTION: forcing a failure. [ 87.925186][ T5782] name failslab, interval 1, probability 0, space 0, times 1 [ 87.949348][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.953841][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 87.953880][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.953903][ T5782] Call Trace: [ 87.953913][ T5782] [ 87.953922][ T5782] dump_stack_lvl+0x100/0x190 [ 87.953964][ T5782] should_fail_ex.cold+0x5/0xa [ 87.953997][ T5782] should_failslab+0xc2/0x120 [ 87.954034][ T5782] kmem_cache_alloc_noprof+0x91/0x6a0 [ 87.954066][ T5782] ? stack_trace_save+0x8e/0xc0 [ 87.954104][ T5782] ? alloc_empty_file+0x5b/0x1c0 [ 87.954144][ T5782] alloc_empty_file+0x5b/0x1c0 [ 87.954180][ T5782] path_openat+0xe7/0x4280 [ 87.954220][ T5782] ? __kasan_slab_alloc+0x89/0x90 [ 87.954257][ T5782] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 87.954289][ T5782] ? do_getname+0x35/0x390 [ 87.954321][ T5782] ? do_sys_openat2+0xc7/0x1e0 [ 87.954354][ T5782] ? __x64_sys_openat+0x12d/0x210 [ 87.954389][ T5782] ? do_syscall_64+0x115/0x840 [ 87.954420][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.954458][ T5782] ? __pfx_path_openat+0x10/0x10 [ 87.954496][ T5782] do_file_open+0x20e/0x430 [ 87.954526][ T5782] ? __pfx_do_file_open+0x10/0x10 [ 87.954578][ T5782] ? alloc_fd+0x471/0x7a0 [ 87.954608][ T5782] ? do_getname+0x191/0x390 [ 87.954645][ T5782] do_sys_openat2+0x10f/0x1e0 [ 87.954681][ T5782] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.954729][ T5782] __x64_sys_openat+0x12d/0x210 [ 87.954766][ T5782] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.954825][ T5782] do_syscall_64+0x115/0x840 [ 87.954857][ T5782] ? clear_bhb_loop+0x40/0x90 [ 87.954891][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.954921][ T5782] RIP: 0033:0x7f15bd19de99 [ 87.954948][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.954978][ T5782] RSP: 002b:00007f15be094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.955008][ T5782] RAX: ffffffffffffffda RBX: 00007f15bd425fa0 RCX: 00007f15bd19de99 [ 87.955026][ T5782] RDX: 0000000000000080 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 87.955043][ T5782] RBP: 00007f15bd233eaf R08: 0000000000000000 R09: 0000000000000000 [ 87.955059][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.955076][ T5782] R13: 00007f15bd426038 R14: 00007f15bd425fa0 R15: 00007ffd4da58158 [ 87.955111][ T5782] [ 88.283741][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.308722][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.383228][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.468528][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.568506][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.580483][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.963837][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.971956][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.051513][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.063021][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.189966][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.222050][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.546382][ T5628] Bluetooth: hci3: command tx timeout [ 89.625108][ T5628] Bluetooth: hci2: command tx timeout [ 89.625346][ T5639] Bluetooth: hci0: command tx timeout [ 89.631095][ T5635] Bluetooth: hci1: command tx timeout [ 90.151169][ T5809] FAULT_INJECTION: forcing a failure. [ 90.151169][ T5809] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.166356][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 90.166387][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.166401][ T5809] Call Trace: [ 90.166410][ T5809] [ 90.166419][ T5809] dump_stack_lvl+0x100/0x190 [ 90.166452][ T5809] should_fail_ex.cold+0x5/0xa [ 90.166480][ T5809] get_futex_key+0x1d2/0x14f0 [ 90.166510][ T5809] ? __pfx_get_futex_key+0x10/0x10 [ 90.166536][ T5809] ? lock_acquire+0x1b9/0x370 [ 90.166582][ T5809] futex_wake+0xf4/0x5e0 [ 90.166619][ T5809] ? __pfx_futex_wake+0x10/0x10 [ 90.166651][ T5809] ? find_held_lock+0x2b/0x80 [ 90.166682][ T5809] ? exit_mm_release+0x19/0x30 [ 90.166721][ T5809] do_futex+0x2b2/0x440 [ 90.166750][ T5809] ? __pfx_do_futex+0x10/0x10 [ 90.166775][ T5809] ? __might_fault+0xc5/0x140 [ 90.166810][ T5809] mm_release+0x24a/0x2f0 [ 90.166837][ T5809] do_exit+0x707/0x2ae0 [ 90.166874][ T5809] ? __pfx_do_exit+0x10/0x10 [ 90.166908][ T5809] ? do_raw_spin_lock+0x128/0x260 [ 90.166935][ T5809] ? find_held_lock+0x2b/0x80 [ 90.166963][ T5809] ? get_signal+0x7e0/0x21e0 [ 90.167004][ T5809] do_group_exit+0xd5/0x2a0 [ 90.167041][ T5809] get_signal+0x1ec7/0x21e0 [ 90.167077][ T5809] ? __lock_acquire+0x49f/0x1a40 [ 90.167116][ T5809] ? __pfx_get_signal+0x10/0x10 [ 90.167146][ T5809] ? do_futex+0x190/0x440 [ 90.167175][ T5809] arch_do_signal_or_restart+0x91/0x7a0 [ 90.167217][ T5809] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 90.167278][ T5809] exit_to_user_mode_loop+0x139/0x6f0 [ 90.167301][ T5809] ? rcu_is_watching+0x12/0xc0 [ 90.167338][ T5809] do_syscall_64+0x652/0x840 [ 90.167367][ T5809] ? clear_bhb_loop+0x40/0x90 [ 90.167399][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.167425][ T5809] RIP: 0033:0x7f762bb9de99 [ 90.167446][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.167475][ T5809] RSP: 002b:00007f76291cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.167499][ T5809] RAX: fffffffffffffe00 RBX: 00007f762be26458 RCX: 00007f762bb9de99 [ 90.167516][ T5809] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f762be26458 [ 90.167531][ T5809] RBP: 00007f762be26450 R08: 0000000000000000 R09: 0000000000000000 [ 90.167546][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.167560][ T5809] R13: 00007f762be264e8 R14: 00007ffeb398ac70 R15: 00007ffeb398ad58 [ 90.167594][ T5809] [ 91.827951][ T5833] netlink: 330 bytes leftover after parsing attributes in process `syz.2.9'. [ 91.955389][ T5833] Zero length message leads to an empty skb [ 98.765248][ T5945] usb usb3: usbfs: process 5945 (syz.0.24) did not claim interface 0 before use [ 100.589122][ T5977] ACPI: Can not change Invalid GPE/Fixed Event status [ 100.701789][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.597234][ T6025] usb usb3: usbfs: process 6025 (syz.1.35) did not claim interface 0 before use [ 105.690559][ T6053] ovs_: entered promiscuous mode [ 108.717786][ T6101] netlink: 330 bytes leftover after parsing attributes in process `syz.0.50'. [ 111.669589][ T6171] usb usb3: usbfs: process 6171 (syz.1.60) did not claim interface 0 before use [ 115.662905][ T6246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.751276][ T6246] netlink: 330 bytes leftover after parsing attributes in process `syz.0.71'. [ 116.281581][ T6259] usb usb3: usbfs: process 6259 (syz.0.72) did not claim interface 0 before use [ 119.716634][ T6331] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.072626][ T6345] FAULT_INJECTION: forcing a failure. [ 121.072626][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 121.103691][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.1.86 Not tainted syzkaller #0 PREEMPT(full) [ 121.103725][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.103739][ T6345] Call Trace: [ 121.103744][ T6345] [ 121.103751][ T6345] dump_stack_lvl+0x100/0x190 [ 121.103782][ T6345] should_fail_ex.cold+0x5/0xa [ 121.103799][ T6345] should_failslab+0xc2/0x120 [ 121.103820][ T6345] kmem_cache_alloc_noprof+0x91/0x6a0 [ 121.103839][ T6345] ? __pfx_map_id_range_down+0x10/0x10 [ 121.103863][ T6345] ? security_inode_alloc+0x3b/0x2c0 [ 121.103899][ T6345] security_inode_alloc+0x3b/0x2c0 [ 121.103931][ T6345] inode_init_always_gfp+0xc77/0xfb0 [ 121.103962][ T6345] alloc_inode+0x8e/0x250 [ 121.103982][ T6345] sock_alloc+0x44/0x280 [ 121.104003][ T6345] ? security_socket_create+0x7f/0x250 [ 121.104022][ T6345] __sock_create+0xc2/0x860 [ 121.104041][ T6345] __sys_socket+0x14d/0x260 [ 121.104057][ T6345] ? __pfx___sys_socket+0x10/0x10 [ 121.104077][ T6345] __x64_sys_socket+0x72/0xb0 [ 121.104092][ T6345] ? lockdep_hardirqs_on+0x78/0x100 [ 121.104110][ T6345] do_syscall_64+0x115/0x840 [ 121.104126][ T6345] ? clear_bhb_loop+0x40/0x90 [ 121.104145][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.104161][ T6345] RIP: 0033:0x7fd0c099de99 [ 121.104185][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.104199][ T6345] RSP: 002b:00007fd0c18fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 121.104214][ T6345] RAX: ffffffffffffffda RBX: 00007fd0c0c25fa0 RCX: 00007fd0c099de99 [ 121.104224][ T6345] RDX: 000000000000003b RSI: 0000000000000003 RDI: 000000000000000a [ 121.104232][ T6345] RBP: 00007fd0c0a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 121.104241][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.104249][ T6345] R13: 00007fd0c0c26038 R14: 00007fd0c0c25fa0 R15: 00007ffd95f7a398 [ 121.104269][ T6345] [ 121.487544][ T6345] socket: no more sockets [ 124.310077][ T6405] netlink: 330 bytes leftover after parsing attributes in process `syz.2.96'. [ 126.322183][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 126.514312][ T6447] bond0: (slave bond_slave_0): Releasing backup interface [ 128.927574][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 129.466293][ T6513] process 'syz.3.114' launched ':,' with NULL argv: empty string added [ 131.435830][ T6546] FAULT_INJECTION: forcing a failure. [ 131.435830][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 131.466098][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) [ 131.466138][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.466156][ T6546] Call Trace: [ 131.466166][ T6546] [ 131.466177][ T6546] dump_stack_lvl+0x100/0x190 [ 131.466219][ T6546] should_fail_ex.cold+0x5/0xa [ 131.466252][ T6546] should_failslab+0xc2/0x120 [ 131.466292][ T6546] __kmalloc_cache_noprof+0x91/0x6c0 [ 131.466321][ T6546] ? find_held_lock+0x2b/0x80 [ 131.466355][ T6546] ? yama_ptracer_add+0x48/0x590 [ 131.466405][ T6546] yama_ptracer_add+0x48/0x590 [ 131.466457][ T6546] yama_task_prctl+0xf4/0x1c0 [ 131.466501][ T6546] security_task_prctl+0xc2/0x160 [ 131.466552][ T6546] __do_sys_prctl+0x9b/0x2270 [ 131.466595][ T6546] ? __pfx___do_sys_prctl+0x10/0x10 [ 131.466647][ T6546] do_syscall_64+0x115/0x840 [ 131.466680][ T6546] ? clear_bhb_loop+0x40/0x90 [ 131.466715][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.466741][ T6546] RIP: 0033:0x7fd0c099de99 [ 131.466765][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.466792][ T6546] RSP: 002b:00007fd0c1859028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 131.466818][ T6546] RAX: ffffffffffffffda RBX: 00007fd0c0c26450 RCX: 00007fd0c099de99 [ 131.466837][ T6546] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000059616d61 [ 131.466853][ T6546] RBP: 00007fd0c0a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 131.466870][ T6546] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 131.466886][ T6546] R13: 00007fd0c0c264e8 R14: 00007fd0c0c26450 R15: 00007ffd95f7a398 [ 131.466923][ T6546] [ 132.746591][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756079][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.367007][ T6592] netlink: 330 bytes leftover after parsing attributes in process `syz.2.129'. [ 136.461657][ T6648] netlink: 'syz.2.140': attribute type 23 has an invalid length. [ 148.859731][ T6910] netlink: 342 bytes leftover after parsing attributes in process `syz.0.182'. [ 153.323200][ T7010] netlink: 330 bytes leftover after parsing attributes in process `syz.2.196'. [ 164.105455][ T5635] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 164.115137][ T5635] Bluetooth: hci3: Injecting HCI hardware error event [ 164.126458][ T5635] Bluetooth: hci3: hardware error 0x00 [ 166.184289][ T5635] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 170.673165][ T7361] kexec: Could not allocate control_code_buffer [ 170.774500][ T7384] netlink: 'syz.3.255': attribute type 16 has an invalid length. [ 170.795455][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 170.946993][ T7384] sit0: entered promiscuous mode [ 170.954006][ T7384] sit0: entered allmulticast mode [ 171.661550][ T7404] capability: warning: `syz.0.258' uses deprecated v2 capabilities in a way that may be insecure [ 179.900633][ T7579] netlink: 330 bytes leftover after parsing attributes in process `syz.0.286'. [ 182.193213][ T5635] Bluetooth: hci2: unexpected event 0x07 length: 435 > 255 [ 189.277855][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 194.188192][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196620][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.396076][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 196.989871][ T7969] netlink: 330 bytes leftover after parsing attributes in process `syz.1.345'. [ 198.158156][ T7994] syz.0.351 (7994) used greatest stack depth: 19504 bytes left [ 202.353136][ T8099] openvswitch: netlink: Message has 8 unknown bytes. [ 206.514208][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 206.514243][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 206.520277][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 218.106562][ T8461] netlink: 330 bytes leftover after parsing attributes in process `syz.2.422'. [ 218.276970][ T8469] capability: warning: `syz.1.423' uses 32-bit capabilities (legacy support in use) [ 221.896733][ T8546] netlink: 330 bytes leftover after parsing attributes in process `syz.0.439'. [ 223.178766][ T8571] netlink: 330 bytes leftover after parsing attributes in process `syz.3.442'. [ 230.392761][ T8721] syz.1.462 uses obsolete (PF_INET,SOCK_PACKET) [ 232.197911][ T8765] netlink: 330 bytes leftover after parsing attributes in process `syz.1.471'. [ 236.650592][ T8880] openvswitch: netlink: Missing valid actions attribute. [ 250.441739][ T9210] netlink: 330 bytes leftover after parsing attributes in process `syz.1.536'. [ 255.627828][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.634227][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.937426][ T5628] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 261.275691][ T9446] netlink: 146 bytes leftover after parsing attributes in process `syz.1.576'. [ 262.073284][ T9462] openvswitch: netlink: Message has 8 unknown bytes. [ 266.563410][ T9543] openvswitch: netlink: Message has 8 unknown bytes. [ 277.126127][ T9745] openvswitch: netlink: Message has 8 unknown bytes. [ 280.526853][ T9852] netlink: 330 bytes leftover after parsing attributes in process `syz.2.646'. [ 290.211988][T10072] mmap: syz.2.681 (10072): VmData 46141440 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 297.565780][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 297.612089][T10240] bond0: (slave bond_slave_1): Releasing backup interface [ 300.922840][T10304] netlink: 130 bytes leftover after parsing attributes in process `syz.2.715'. [ 302.021221][T10341] netlink: 330 bytes leftover after parsing attributes in process `syz.2.723'. [ 317.077094][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.087697][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.169025][T10726] openvswitch: netlink: Message has 8 unknown bytes. [ 321.677426][T10799] netlink: 330 bytes leftover after parsing attributes in process `syz.1.792'. [ 340.172052][T11223] netlink: 342 bytes leftover after parsing attributes in process `syz.0.852'. [ 340.185368][T11223] netlink: 342 bytes leftover after parsing attributes in process `syz.0.852'. [ 345.750824][T11356] netlink: 330 bytes leftover after parsing attributes in process `syz.1.873'. [ 354.640845][T11567] netlink: 25 bytes leftover after parsing attributes in process `syz.3.899'. [ 360.364284][T11701] netlink: 330 bytes leftover after parsing attributes in process `syz.3.918'. [ 378.510846][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.521730][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.775772][T12276] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1000'. [ 384.797077][T12276] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1000'. [ 384.826648][T12276] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1000'. [ 384.848672][T12276] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1000'. [ 384.861365][T12276] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1000'. [ 385.365309][T12290] openvswitch: netlink: Message has 8 unknown bytes. [ 390.121824][T12406] openvswitch: netlink: Message has 8 unknown bytes. [ 392.885521][T12476] openvswitch: netlink: Message has 8 unknown bytes. [ 396.056355][T12551] syz.1.1050 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 407.349819][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.362313][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.373735][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.384301][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.393733][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.744733][ T7909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.869038][ T7909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.023687][ T7909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.173587][ T7909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.466375][ T5639] Bluetooth: hci3: command tx timeout [ 409.792976][ T7909] bridge_slave_1: left allmulticast mode [ 409.808335][ T7909] bridge_slave_1: left promiscuous mode [ 409.817131][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.841980][ T7909] bridge_slave_0: left allmulticast mode [ 409.855256][ T7909] bridge_slave_0: left promiscuous mode [ 409.872263][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.273488][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.299450][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.317557][ T7909] bond0 (unregistering): Released all slaves [ 410.377540][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 410.787704][T12891] mmap: syz.1.1096 (12891) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 411.327593][ T7909] hsr_slave_0: left promiscuous mode [ 411.344514][ T7909] hsr_slave_1: left promiscuous mode [ 411.352716][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.376173][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.389033][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.406039][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.455431][ T7909] veth1_macvtap: left promiscuous mode [ 411.471034][ T7909] veth0_macvtap: left promiscuous mode [ 411.485196][ T7909] veth1_vlan: left promiscuous mode [ 411.496677][ T7909] veth0_vlan: left promiscuous mode [ 411.543915][ T5639] Bluetooth: hci3: command tx timeout [ 411.978889][ T7909] team0 (unregistering): Port device team_slave_1 removed [ 412.005247][ T7909] team0 (unregistering): Port device team_slave_0 removed [ 412.289760][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 412.868166][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.877201][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.887450][T12822] bridge_slave_0: entered allmulticast mode [ 412.898224][T12822] bridge_slave_0: entered promiscuous mode [ 413.027320][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.036412][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.043624][T12822] bridge_slave_1: entered allmulticast mode [ 413.052068][T12822] bridge_slave_1: entered promiscuous mode [ 413.328767][T12822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.397193][T12822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.634648][ T5639] Bluetooth: hci3: command tx timeout [ 413.662451][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 413.701576][T12822] team0: Port device team_slave_0 added [ 413.710466][T12822] team0: Port device team_slave_1 added [ 413.913617][T12822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.920786][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.960321][T12822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.081603][T12822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.091213][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.131881][T12822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.663733][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 414.705550][T12822] hsr_slave_0: entered promiscuous mode [ 414.712144][T12822] hsr_slave_1: entered promiscuous mode [ 414.720478][T12822] debugfs: 'hsr0' already exists in 'hsr' [ 414.726578][T12822] Cannot create hsr debugfs directory [ 415.704335][ T5639] Bluetooth: hci3: command tx timeout [ 417.243027][T12822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.263805][T12822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.377553][T12822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.402512][T12822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.498253][T12822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.520029][T12822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.713279][T12822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.736612][T12822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.617783][T12822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.057745][T12822] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.282012][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.289245][ T7910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.311032][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.318252][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.712970][T12822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.621461][T12822] veth0_vlan: entered promiscuous mode [ 422.924915][T12822] veth1_vlan: entered promiscuous mode [ 423.170850][T12822] veth0_macvtap: entered promiscuous mode [ 423.572176][T12822] veth1_macvtap: entered promiscuous mode [ 423.774516][ T5639] Bluetooth: hci2: unexpected event 0x01 length: 124 > 1 [ 423.942641][T12822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.051993][T12822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.215595][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.252348][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.346223][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.365361][ T7909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.008497][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.033906][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.447918][ T7913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.467343][ T7913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.687223][T13260] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1090'. [ 429.126327][T13336] usb usb3: usbfs: process 13336 (syz.0.1140) did not claim interface 4 before use [ 437.187910][ T5639] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 438.285364][T13545] openvswitch: netlink: Message has 8 unknown bytes. [ 438.623000][T13550] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 439.882933][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.889693][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.739759][T13687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1192'. [ 446.772644][T13687] bridge_slave_1: left allmulticast mode [ 446.794484][T13687] bridge_slave_1: left promiscuous mode [ 446.814450][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.846157][T13687] bridge_slave_0: left allmulticast mode [ 446.859068][T13687] bridge_slave_0: left promiscuous mode [ 446.871554][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.337871][T13695] bridge0: port 3(netdevsim3) entered blocking state [ 447.359417][T13695] bridge0: port 3(netdevsim3) entered disabled state [ 447.381287][T13695] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 447.400590][T13695] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 447.412112][T13695] bridge0: port 3(netdevsim3) entered blocking state [ 447.418973][T13695] bridge0: port 3(netdevsim3) entered forwarding state [ 447.531823][T13707] usb usb3: usbfs: process 13707 (syz.0.1195) did not claim interface 0 before use [ 450.143558][T13778] ACPI: Can not change Invalid GPE/Fixed Event status [ 450.354970][T13785] ACPI: Can not change Invalid GPE/Fixed Event status [ 457.414265][T13933] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 457.646546][T13941] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[12822] was attempted by "ŸÙ’OlŸ3?÷âN¹Q:CiNØaëÂ?\x5cOV+]œ½:€õ<Å\x0döKšÎÉ—Ù+Éè´—°¤ú™\x0cöKÖ§¥eÐè2EE£>qíŽJ·¦˜\x09|J•æB\x1bc”çß\x1b¶±éûÕ®gÞ(cÉXÒÝããðö\x09•Aü­ÉËQ–$óÅ´ó-\x22+sLZ³ì̧ú+,0@7Ñ\x0a¢%®í®²¼\x22Öv²GßõÄÊÈP_7˜îíkÓMÜ#Ò`…I­·›g-……)Þ\x5c Ý\x0cu¯eÌŠÖµEÙ\x0d_3dÒÍò<}̘+ì¦|yÉTxAcm†AÒÜOÇ6ñlùãÛ¶×2@;ÙÈÃÙjYtYm„ÙØž3x‡Œè—‡ÙêÂöŽ°’:§Ç팶„üüÒî‘îu¦T¯¼ô\x0bÕYݱf8û÷~“'Úêúþß܇åÅUêõ.s1(£8™£ÕÜÎUO?&qá%ìš#\x07aWË'Á(ÎlÝóÆÛæÌlúŽ ¯\x09R…Žˆ*&7(õp‹fêéæ0\x0bV&™ÄÔTƒ'C–Á\x09\x0a˜¥ÞÏŽ±¢©Ûs’J‰‹‹Oj¢½°x£ }Ö)\x0a†z”]—½FHêÄ„¯6µK=nçÖÙ\x22¯4…L%G‰LÉÐcåô£Ím)pfz\x1bÞZT§I±¦4*ÞL2ז޼θz¦Gb‹mø~˃5…ŸÕV±éFé \x1bĹàX°±bZRÏ;ÔH’ ¤åÖéĆ*Ï#ÔàÇá;áv@¤øáHp\x22õ'À/mA{Ç\x0aÒ2û:ƒ`ª!XíÀц­Ñ´®¾ø ç·KÝ>±ünÂS£>m0u×2¡ç©ÎVÍ1/øÇÖ’m}gƒOe­¯\x07Ú£œfG‘‰E.]ÝïüN)X«}6£áõŽj¿ª©Î¹’V€iàí.’/ÓFì7ü3ŽþzÍÏ•y„XŽètï ›â§G®¥„Å¢ùlµ‘„? TñF<¢QÓRõeÕãnáÀ†ËÓ«ßaðhæ“oçvšsyÒ’,H@ùP1ÛGe&×›NÂVƒ†°Å\x0bË33uÿÑîªa)Y´2qœ†Ë\x0b¤0eA\x07úý3,³e¼–±ˆÂ¼Å†œ§XÂOý¹{™8mZÆ–qÍrxÆ [ 458.409340][T13941] zswap: compressor not available [ 459.025234][T13972] usb usb3: usbfs: process 13972 (syz.0.1230) did not claim interface 0 before use [ 462.152321][T14050] usb usb3: usbfs: process 14050 (syz.0.1239) did not claim interface 0 before use [ 463.827507][ T5639] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 464.558720][T14097] FAULT_INJECTION: forcing a failure. [ 464.558720][T14097] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 464.599403][T14097] CPU: 1 UID: 0 PID: 14097 Comm: syz.0.1248 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.599448][T14097] Tainted: [L]=SOFTLOCKUP [ 464.599458][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 464.599482][T14097] Call Trace: [ 464.599491][T14097] [ 464.599502][T14097] dump_stack_lvl+0x100/0x190 [ 464.599551][T14097] should_fail_ex.cold+0x5/0xa [ 464.599581][T14097] ? fs_reclaim_acquire+0x70/0x100 [ 464.599627][T14097] should_fail_alloc_page+0xeb/0x140 [ 464.599669][T14097] prepare_alloc_pages+0x1f0/0x5f0 [ 464.599714][T14097] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 464.599747][T14097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 464.599781][T14097] ? __pfx_stack_trace_save+0x10/0x10 [ 464.599821][T14097] ? stack_depot_save_flags+0x27/0x9d0 [ 464.599865][T14097] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 464.599895][T14097] ? stack_depot_save_flags+0x479/0x9d0 [ 464.599942][T14097] ? kasan_save_stack+0x3f/0x50 [ 464.599977][T14097] ? kasan_save_stack+0x30/0x50 [ 464.600010][T14097] ? kasan_save_track+0x14/0x30 [ 464.600042][T14097] ? __kasan_kmalloc+0xaa/0xb0 [ 464.600074][T14097] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 464.600097][T14097] ? relay_open_buf.part.0+0x91/0xb70 [ 464.600132][T14097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 464.600167][T14097] ? __lock_acquire+0x49f/0x1a40 [ 464.600226][T14097] ? find_held_lock+0x2b/0x80 [ 464.600258][T14097] ? rcu_read_unlock+0x17/0x60 [ 464.600297][T14097] ? rcu_read_unlock+0x17/0x60 [ 464.600342][T14097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.600385][T14097] ? policy_nodemask+0xed/0x4f0 [ 464.600427][T14097] alloc_pages_mpol+0x1fb/0x540 [ 464.600468][T14097] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 464.600516][T14097] alloc_pages_noprof+0x1a/0x160 [ 464.600551][T14097] relay_open_buf.part.0+0x261/0xb70 [ 464.600599][T14097] relay_open+0x7b9/0xa00 [ 464.600639][T14097] blk_trace_setup_prepare+0x35c/0x6c0 [ 464.600679][T14097] blk_trace_setup+0x217/0x440 [ 464.600720][T14097] ? __pfx_blk_trace_setup+0x10/0x10 [ 464.600753][T14097] ? lockdep_hardirqs_on+0x16/0x100 [ 464.600796][T14097] ? __pfx_vsnprintf+0x10/0x10 [ 464.600852][T14097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.600894][T14097] ? do_vfs_ioctl+0x226/0x13e0 [ 464.600938][T14097] blk_trace_ioctl+0x245/0x320 [ 464.600976][T14097] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 464.601018][T14097] ? find_held_lock+0x2b/0x80 [ 464.601051][T14097] ? __fget_files+0x215/0x3d0 [ 464.601076][T14097] ? hook_file_ioctl_common+0x140/0x440 [ 464.601118][T14097] blkdev_ioctl+0x17c/0x6f0 [ 464.601146][T14097] ? __pfx_blkdev_ioctl+0x10/0x10 [ 464.601180][T14097] ? __pfx_blkdev_ioctl+0x10/0x10 [ 464.601210][T14097] __x64_sys_ioctl+0x18e/0x210 [ 464.601253][T14097] do_syscall_64+0x115/0x840 [ 464.601286][T14097] ? clear_bhb_loop+0x40/0x90 [ 464.601321][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.601350][T14097] RIP: 0033:0x7f11ae99de99 [ 464.601374][T14097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.601401][T14097] RSP: 002b:00007f11af819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.601436][T14097] RAX: ffffffffffffffda RBX: 00007f11aec26090 RCX: 00007f11ae99de99 [ 464.601456][T14097] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 464.601474][T14097] RBP: 00007f11aea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 464.601490][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.601505][T14097] R13: 00007f11aec26128 R14: 00007f11aec26090 R15: 00007ffcc5782648 [ 464.601547][T14097] [ 466.325348][T14129] usb usb3: usbfs: process 14129 (syz.0.1252) did not claim interface 0 before use [ 471.760950][T14218] openvswitch: netlink: Message has 8 unknown bytes. [ 475.257254][T14289] usb usb3: usbfs: process 14289 (syz.0.1275) did not claim interface 0 before use [ 476.837303][ T5639] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 481.193490][T14425] openvswitch: netlink: Message has 8 unknown bytes. [ 493.456564][T14681] netlink: zone id is out of range [ 493.475616][T14681] netlink: zone id is out of range [ 493.481694][T14681] netlink: zone id is out of range [ 493.486945][T14681] netlink: zone id is out of range [ 493.494576][T14681] netlink: zone id is out of range [ 493.499820][T14681] netlink: zone id is out of range [ 493.506726][T14681] netlink: zone id is out of range [ 493.512235][T14681] netlink: zone id is out of range [ 493.517436][T14681] netlink: zone id is out of range [ 493.527566][T14681] netlink: zone id is out of range [ 501.004657][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.011808][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.719996][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 514.573696][T15180] net_ratelimit: 48 callbacks suppressed [ 514.573717][T15180] openvswitch: netlink: Message has 8 unknown bytes. [ 533.633270][T15522] Bluetooth: hci3: command 0x0406 tx timeout [ 535.561002][T15611] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1466'. [ 540.991702][ T5639] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 541.167784][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 552.031781][T16023] kAFS: unparsable volume name [ 552.346120][T16033] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1524'. [ 552.420174][T16033] mac80211_hwsim hwsim3 ›: renamed from wlan0 [ 562.128769][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.135382][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.230461][T16227] futex_wake_op: syz.3.1550 tries to shift op by -2048; fix this program [ 562.241306][T16227] futex_wake_op: syz.3.1550 tries to shift op by -2048; fix this program [ 567.175084][T16330] openvswitch: netlink: Message has 8 unknown bytes. [ 577.612029][T16520] openvswitch: netlink: Message has 8 unknown bytes. [ 580.374863][ T7908] bridge0: port 3(netdevsim3) entered disabled state [ 580.435091][ T7908] netdevsim netdevsim1 netdevsim3 (unregistering): left allmulticast mode [ 580.464707][ T7908] netdevsim netdevsim1 netdevsim3 (unregistering): left promiscuous mode [ 580.488378][ T7908] bridge0: port 3(netdevsim3) entered disabled state [ 580.526625][ T7908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.657662][T15522] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.672427][T15522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.682400][T15522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.693700][T15522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.702877][T15522] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.924114][ T7908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.937272][T16601] openvswitch: netlink: Message has 8 unknown bytes. [ 581.045008][ T7908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.169236][ T7908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.761917][ T7908] bridge_slave_1: left allmulticast mode [ 581.767785][ T7908] bridge_slave_1: left promiscuous mode [ 581.773880][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.786057][ T7908] bridge_slave_0: left allmulticast mode [ 581.792185][ T7908] bridge_slave_0: left promiscuous mode [ 581.798090][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.975662][ T7908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.997904][ T7908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.008362][ T7908] bond0 (unregistering): Released all slaves [ 582.425833][T16641] netlink: 'syz.3.1613': attribute type 21 has an invalid length. [ 582.444318][T16641] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1613'. [ 582.651851][ T7908] hsr_slave_0: left promiscuous mode [ 582.669423][ T7908] hsr_slave_1: left promiscuous mode [ 582.683227][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.707110][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.720496][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.733038][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.740497][T15522] Bluetooth: hci0: command tx timeout [ 582.798866][ T7908] veth1_macvtap: left promiscuous mode [ 582.816411][ T7908] veth0_macvtap: left promiscuous mode [ 582.833374][ T7908] veth1_vlan: left promiscuous mode [ 582.838962][ T7908] veth0_vlan: left promiscuous mode [ 583.126012][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 583.141406][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 583.326430][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 584.690859][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 584.735096][T16594] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.753639][T16594] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.762027][T16594] bridge_slave_0: entered allmulticast mode [ 584.770324][T16594] bridge_slave_0: entered promiscuous mode [ 584.782792][T16594] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.790047][T16594] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.798312][T16594] bridge_slave_1: entered allmulticast mode [ 584.805721][T15522] Bluetooth: hci0: command tx timeout [ 584.814089][T16594] bridge_slave_1: entered promiscuous mode [ 585.198722][T16594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.246630][T16594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.473570][T16594] team0: Port device team_slave_0 added [ 585.487747][T16594] team0: Port device team_slave_1 added [ 585.645829][T16594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.673615][T16594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.722944][T16594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.972861][T16594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.990930][T16594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.057418][T16594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.090507][T16731] ======================================================= [ 586.090507][T16731] WARNING: The mand mount option has been deprecated and [ 586.090507][T16731] and is ignored by this kernel. Remove the mand [ 586.090507][T16731] option from the mount to silence this warning. [ 586.090507][T16731] ======================================================= [ 586.206558][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 586.390295][T16594] hsr_slave_0: entered promiscuous mode [ 586.397061][T16594] hsr_slave_1: entered promiscuous mode [ 586.875350][T15522] Bluetooth: hci0: command tx timeout [ 587.328101][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 588.944025][T15522] Bluetooth: hci0: command tx timeout [ 590.014674][T16594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 590.029809][T16594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.132919][T16594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 590.161659][T16594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.188593][T16862] openvswitch: netlink: Message has 8 unknown bytes. [ 590.271629][T16594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 590.305337][T16594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.323373][T16594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.351782][T16594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.657388][T16880] netlink: zone id is out of range [ 590.670660][T16880] netlink: zone id is out of range [ 590.685042][T16880] netlink: zone id is out of range [ 590.694174][T16880] netlink: zone id is out of range [ 590.707191][T16880] netlink: zone id is out of range [ 590.725483][T16880] netlink: zone id is out of range [ 590.732392][T16880] netlink: zone id is out of range [ 590.742977][T16880] netlink: zone id is out of range [ 590.749535][T16880] netlink: zone id is out of range [ 592.565401][T16594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.614706][T16946] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1636'. [ 592.823645][T16594] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.892495][T14814] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.899704][T14814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.950402][T14814] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.957604][T14814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.932726][T16594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.398452][T16594] veth0_vlan: entered promiscuous mode [ 595.428921][T17008] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1644'. [ 595.443979][T17008] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1644'. [ 595.468540][T16594] veth1_vlan: entered promiscuous mode [ 595.526380][T16594] veth0_macvtap: entered promiscuous mode [ 595.547918][T16594] veth1_macvtap: entered promiscuous mode [ 595.577828][T16594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.606494][T16594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.652595][T14814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.676255][T14814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.687864][T14814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.733970][T14814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.370651][T15935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.394546][T15935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.951793][T15936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.970228][T15936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.886619][T15522] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 600.887813][T15522] Bluetooth: hci3: hardware error 0x00 [ 603.031174][T15522] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 605.105982][T17180] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 607.225770][T15522] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 608.213100][T17253] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 609.240172][ T5639] Bluetooth: hci1: command 0x0406 tx timeout syzkaller syzkaller login: [ 609.971121][T17293] usb usb3: usbfs: process 17293 (syz.1.1683) did not claim interface 0 before use [ 611.309250][T15522] Bluetooth: hci1: command 0x0406 tx timeout [ 615.319955][T17404] usb usb3: usbfs: process 17404 (syz.1.1699) did not claim interface 0 before use [ 616.817190][T17429] net_ratelimit: 50 callbacks suppressed [ 616.817211][T17429] openvswitch: netlink: Message has 8 unknown bytes. [ 620.432004][T17512] openvswitch: netlink: Message has 8 unknown bytes. [ 621.504476][T17529] usb usb3: usbfs: process 17529 (syz.1.1718) did not claim interface 0 before use [ 622.988267][T17560] usb usb3: usbfs: process 17560 (syz.1.1723) did not claim interface 0 before use [ 623.258496][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.265995][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.854499][T17589] usb usb3: usbfs: process 17589 (syz.1.1727) did not claim interface 0 before use [ 625.053004][ T30] audit: type=1804 audit(2073541549.944:2): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1730" name="file0" dev="tmpfs" ino=2389 res=1 errno=0 [ 629.331104][T17686] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1740'. [ 631.887279][T17741] Process accounting resumed [ 631.972190][T17757] openvswitch: netlink: Message has 8 unknown bytes. [ 635.834252][T17835] openvswitch: netlink: Message has 8 unknown bytes. [ 638.800792][T17913] usb usb3: usbfs: process 17913 (syz.1.1770) did not claim interface 0 before use [ 641.291124][ T30] audit: type=1800 audit(2073541566.268:3): pid=17961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1776" name="dbroot" dev="configfs" ino=132037 res=0 errno=0 [ 645.310846][T15522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.336832][T15522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.349670][T15522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.362536][T15522] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.376430][T15522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.441196][ T5639] Bluetooth: hci4: command tx timeout [ 647.825789][T18047] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.841816][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.853478][T18047] bridge_slave_0: entered allmulticast mode [ 647.862200][T18047] bridge_slave_0: entered promiscuous mode [ 647.886357][T18047] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.894505][T18047] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.902160][T18047] bridge_slave_1: entered allmulticast mode [ 647.910020][T18047] bridge_slave_1: entered promiscuous mode [ 648.021713][T18047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.084662][T18047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.145946][ T30] audit: type=1800 audit(2073541573.154:4): pid=18115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1793" name="dbroot" dev="configfs" ino=133766 res=0 errno=0 [ 648.199256][T18047] team0: Port device team_slave_0 added [ 648.266642][T18047] team0: Port device team_slave_1 added [ 648.743862][T18047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.754658][T18047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.783063][T18047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.862992][T18047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.870666][T18047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.906808][T18047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.309697][T18047] hsr_slave_0: entered promiscuous mode [ 649.317188][T18047] hsr_slave_1: entered promiscuous mode [ 649.325266][T18047] debugfs: 'hsr0' already exists in 'hsr' [ 649.332716][T18047] Cannot create hsr debugfs directory [ 649.510068][ T5639] Bluetooth: hci4: command tx timeout [ 650.145996][T18047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 650.201100][T18047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.210125][T18047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 650.249599][T18047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.274394][T18047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 650.299280][T18047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.443683][T18047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 650.454556][T18047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.322458][T18047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.359886][T18047] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.390493][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.397706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.442663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.449847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.482052][T18176] openvswitch: netlink: Message has 8 unknown bytes. [ 651.579533][ T5639] Bluetooth: hci4: command tx timeout [ 653.648739][ T5639] Bluetooth: hci4: command tx timeout [ 653.976124][T18047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.746164][T18047] veth0_vlan: entered promiscuous mode [ 654.780744][T18047] veth1_vlan: entered promiscuous mode [ 654.850706][T18047] veth0_macvtap: entered promiscuous mode [ 654.861926][T18047] veth1_macvtap: entered promiscuous mode [ 655.168930][T18047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.373777][T18047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.619788][T14816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.629803][T14816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.715844][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.732801][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.820642][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.858885][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.297094][T14814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.306910][T14814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.114258][T18304] FAULT_INJECTION: forcing a failure. [ 658.114258][T18304] name failslab, interval 1, probability 0, space 0, times 0 [ 658.129080][T18304] CPU: 1 UID: 0 PID: 18304 Comm: syz.1.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.129121][T18304] Tainted: [L]=SOFTLOCKUP [ 658.129131][T18304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 658.129147][T18304] Call Trace: [ 658.129228][T18304] [ 658.129239][T18304] dump_stack_lvl+0x100/0x190 [ 658.129338][T18304] should_fail_ex.cold+0x5/0xa [ 658.129389][T18304] should_failslab+0xc2/0x120 [ 658.129451][T18304] kmem_cache_alloc_noprof+0x91/0x6a0 [ 658.129493][T18304] ? __kernfs_new_node+0xd2/0xa10 [ 658.129581][T18304] __kernfs_new_node+0xd2/0xa10 [ 658.129614][T18304] ? __pfx___kernfs_new_node+0x10/0x10 [ 658.129649][T18304] ? find_held_lock+0x2b/0x80 [ 658.129702][T18304] ? kernfs_root+0xee/0x2a0 [ 658.129765][T18304] ? kernfs_root+0xee/0x2a0 [ 658.129810][T18304] kernfs_new_node+0x117/0x150 [ 658.129840][T18304] __kernfs_create_file+0x53/0x350 [ 658.129876][T18304] sysfs_add_file_mode_ns+0x207/0x3c0 [ 658.129955][T18304] internal_create_group+0x593/0xfb0 [ 658.130005][T18304] ? __pfx_internal_create_group+0x10/0x10 [ 658.130049][T18304] ? kernfs_create_link+0x1bd/0x240 [ 658.130086][T18304] internal_create_groups+0x9d/0x150 [ 658.130128][T18304] device_add+0xf60/0x1970 [ 658.130252][T18304] ? __pfx_device_add+0x10/0x10 [ 658.130290][T18304] ? lockdep_init_map_type+0x5c/0x250 [ 658.130316][T18304] ? __init_waitqueue_head+0xca/0x150 [ 658.130350][T18304] netdev_register_kobject+0x1a9/0x3d0 [ 658.130449][T18304] register_netdevice+0x15b6/0x25a0 [ 658.130544][T18304] ? __pfx_register_netdevice+0x10/0x10 [ 658.130592][T18304] __ip_tunnel_create+0x52b/0x670 [ 658.130664][T18304] ? __pfx___ip_tunnel_create+0x10/0x10 [ 658.130697][T18304] ? net_generic+0xea/0x2a0 [ 658.130735][T18304] ip_tunnel_init_net+0x230/0x780 [ 658.130768][T18304] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 658.130813][T18304] ? __pfx_ipgre_init_net+0x10/0x10 [ 658.130876][T18304] ops_init+0x1e2/0x5f0 [ 658.130973][T18304] setup_net+0x118/0x3a0 [ 658.131009][T18304] ? __pfx_setup_net+0x10/0x10 [ 658.131045][T18304] ? mutex_init_lockdep+0xf1/0x120 [ 658.131076][T18304] copy_net_ns+0x46f/0x7c0 [ 658.131116][T18304] create_new_namespaces+0x3ea/0xac0 [ 658.131163][T18304] unshare_nsproxy_namespaces+0xf2/0x220 [ 658.131193][T18304] ksys_unshare+0x438/0xab0 [ 658.131232][T18304] ? __pfx_ksys_unshare+0x10/0x10 [ 658.131277][T18304] __x64_sys_unshare+0x31/0x40 [ 658.131307][T18304] do_syscall_64+0x115/0x840 [ 658.131417][T18304] ? clear_bhb_loop+0x40/0x90 [ 658.131463][T18304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.131489][T18304] RIP: 0033:0x7f6b1419de99 [ 658.131511][T18304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.131534][T18304] RSP: 002b:00007f6b150a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 658.131588][T18304] RAX: ffffffffffffffda RBX: 00007f6b14426090 RCX: 00007f6b1419de99 [ 658.131605][T18304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 658.131620][T18304] RBP: 00007f6b14233eaf R08: 0000000000000000 R09: 0000000000000000 [ 658.131637][T18304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.131651][T18304] R13: 00007f6b14426128 R14: 00007f6b14426090 R15: 00007ffda789a668 [ 658.131685][T18304] [ 660.851775][T18359] nbd: must specify at least one socket [ 662.822583][T18383] netlink: 'syz.3.1826': attribute type 1 has an invalid length. [ 662.860692][T18383] nbd: error processing sock list [ 663.314427][T18367] Process accounting paused [ 667.400559][T18455] usb usb3: usbfs: process 18455 (syz.4.1836) did not claim interface 0 before use [ 676.174251][T18608] openvswitch: netlink: Message has 8 unknown bytes. [ 676.325281][T18610] openvswitch: netlink: Message has 8 unknown bytes. [ 676.345964][T18612] ima: policy update failed [ 676.353554][ T30] audit: type=1802 audit(2073541601.520:5): pid=18612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1859" res=0 errno=0 [ 676.642830][T18612] zswap: compressor û not available [ 678.471991][T18644] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 678.832744][T18667] usb usb3: usbfs: process 18667 (syz.4.1865) did not claim interface 0 before use [ 679.248650][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1867'. [ 679.393427][T18674] team0: Port device team_slave_1 removed [ 679.846251][T18689] openvswitch: netlink: Message has 8 unknown bytes. [ 682.574721][T18752] openvswitch: netlink: Message has 8 unknown bytes. [ 684.374276][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.381233][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.824460][T18904] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.147333][T18960] usb usb3: usbfs: process 18960 (syz.4.1905) did not claim interface 0 before use [ 692.541424][T18972] openvswitch: netlink: Message has 8 unknown bytes. [ 693.135635][T18989] usb usb3: usbfs: process 18989 (syz.4.1909) did not claim interface 0 before use [ 697.586237][T16594] Process accounting resumed [ 697.775315][T15522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 697.788507][T15522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.798415][T15522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.810742][T15522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.818849][T15522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 699.844062][T19069] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.852063][T19069] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.859917][T19069] bridge_slave_0: entered allmulticast mode [ 699.867027][T19069] bridge_slave_0: entered promiscuous mode [ 699.889088][T15522] Bluetooth: hci5: command tx timeout [ 699.914711][T19069] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.933536][T19069] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.952997][T19069] bridge_slave_1: entered allmulticast mode [ 699.973616][T19069] bridge_slave_1: entered promiscuous mode [ 700.379827][T19069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.393638][T19069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.634565][T19069] team0: Port device team_slave_0 added [ 700.649332][T19069] team0: Port device team_slave_1 added [ 700.901532][T19069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.908680][T19069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.935266][T19069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.949995][T19069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.957207][T19069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.985205][T19069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.324874][T19069] hsr_slave_0: entered promiscuous mode [ 701.340554][T19069] hsr_slave_1: entered promiscuous mode [ 701.353057][T19069] debugfs: 'hsr0' already exists in 'hsr' [ 701.362190][T19069] Cannot create hsr debugfs directory [ 701.958354][T15522] Bluetooth: hci5: command tx timeout [ 703.199467][T19179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1932'. [ 703.403355][T19069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 703.422935][T19069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.431286][T19069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 703.440276][T19069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.555255][T19069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 703.587664][T19069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.663816][T19069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 703.673040][T19069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.028689][T15522] Bluetooth: hci5: command tx timeout [ 704.237261][T19069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.384321][T19069] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.399468][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.406672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.513704][T14812] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.520917][T14812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.670824][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1937'. [ 704.682729][T19069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.693767][T19069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.864987][T19069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.097456][T15522] Bluetooth: hci5: command tx timeout [ 706.653540][T19069] veth0_vlan: entered promiscuous mode [ 706.813431][T19250] Bluetooth: hci0: command 0x0406 tx timeout [ 706.904992][T19069] veth1_vlan: entered promiscuous mode [ 706.983939][T19069] veth0_macvtap: entered promiscuous mode [ 706.995723][T19069] veth1_macvtap: entered promiscuous mode [ 707.224320][T19272] usb usb3: usbfs: process 19272 (syz.4.1941) did not claim interface 0 before use [ 707.249636][ T30] audit: type=1107 audit(2073541632.570:6): pid=19267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 707.366377][T19069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.573828][T19069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.144848][T14812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.154541][T14812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.203135][T14812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.212076][T14812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.506524][T14812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.519432][T14812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.673114][T15935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.693231][T15935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.210894][T19334] openvswitch: netlink: Message has 8 unknown bytes. [ 711.368173][T19339] netlink: 110 bytes leftover after parsing attributes in process `syz.5.1953'. [ 713.648117][T19371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 713.667539][T19371] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 713.751879][T19371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 713.758953][T19371] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 713.786302][T19371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 713.811256][T19371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 713.830080][T19371] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 713.837579][T19371] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 713.861012][T19371] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 713.882586][T19371] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 713.890261][T19371] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 713.923067][T19371] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 714.507748][T19396] openvswitch: netlink: Message has 8 unknown bytes. [ 714.702359][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 715.647891][T19427] Bluetooth: hci1: command 0x0406 tx timeout [ 715.816310][T19427] Bluetooth: hci0: command 0x0406 tx timeout [ 715.822815][T19427] Bluetooth: hci2: command 0x0406 tx timeout [ 715.896151][T19450] Bluetooth: hci4: command 0x0c1a tx timeout [ 715.902233][T19427] Bluetooth: hci5: command 0x0c1a tx timeout [ 716.778045][T19489] openvswitch: netlink: Message has 8 unknown bytes. [ 717.718429][T19427] Bluetooth: hci1: command 0x0406 tx timeout [ 717.877402][T19450] Bluetooth: hci0: command 0x0406 tx timeout [ 717.883779][T19427] Bluetooth: hci2: command 0x0406 tx timeout [ 717.955829][T19411] Bluetooth: hci4: command 0x0c1a tx timeout [ 717.962000][T19504] Bluetooth: hci5: command 0x0c1a tx timeout [ 718.395461][T19524] usb usb3: usbfs: process 19524 (syz.4.1975) did not claim interface 0 before use [ 720.027602][T19504] Bluetooth: hci5: command 0x0c1a tx timeout [ 720.034747][T19411] Bluetooth: hci4: command 0x0c1a tx timeout [ 720.434069][T19568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1982'. [ 724.958450][T19664] openvswitch: netlink: Message has 8 unknown bytes. [ 725.857551][T19693] nvme_fabrics: missing parameter 'transport=%s' [ 725.885846][T19693] nvme_fabrics: missing parameter 'nqn=%s' [ 727.300263][T19716] openvswitch: netlink: Message has 8 unknown bytes. [ 730.567930][T19785] bond0: option slaves: interface -Ãô¾ does not exist! [ 732.366069][T19840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2024'. [ 734.436300][T19879] usb usb3: usbfs: process 19879 (syz.4.2028) did not claim interface 0 before use [ 734.549554][T19854] Process accounting resumed [ 743.880718][T19504] block nbd0: Receive control failed (result -32) [ 745.508383][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.514962][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.567882][T20116] netlink: 'syz.3.2067': attribute type 33 has an invalid length. [ 747.906215][T20170] usb usb3: usbfs: process 20170 (syz.4.2073) did not claim interface 0 before use [ 749.579219][T20190] syz.4.2079 (20190): attempted to duplicate a private mapping with mremap. This is not supported. [ 755.311175][T20294] overlayfs: missing 'lowerdir' [ 756.909051][T20336] openvswitch: netlink: Message has 798 unknown bytes. [ 759.250668][T19504] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 760.833622][T20407] usb usb3: usbfs: process 20407 (syz.4.2112) did not claim interface 0 before use [ 764.981339][T19411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 764.999170][T19411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.008541][T19411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.021115][T19411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.030155][T19411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.130155][T19504] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 766.165966][T19439] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.030252][T20529] futex_wake_op: syz.4.2130 tries to shift op by -2048; fix this program [ 767.061945][T19504] Bluetooth: hci5: command tx timeout [ 767.154656][T20529] 0x000000000000-0x000000020000 : "" [ 767.320852][T20529] ftl_cs: FTL header not found. [ 767.977006][T20485] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.993408][T20485] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.007868][T20485] bridge_slave_0: entered allmulticast mode [ 768.025089][T20485] bridge_slave_0: entered promiscuous mode [ 768.080025][T20485] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.090003][T20485] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.104349][T20485] bridge_slave_1: entered allmulticast mode [ 768.121741][T20485] bridge_slave_1: entered promiscuous mode [ 768.265806][T20485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.365900][T20485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.572444][T20485] team0: Port device team_slave_0 added [ 768.705264][T20485] team0: Port device team_slave_1 added [ 769.130281][T19504] Bluetooth: hci5: command tx timeout [ 769.202053][T20485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.214901][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.257039][T20485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.361728][T20485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.374748][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.401331][T20485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.775755][T20485] hsr_slave_0: entered promiscuous mode [ 769.783246][T20485] hsr_slave_1: entered promiscuous mode [ 769.789951][T20485] debugfs: 'hsr0' already exists in 'hsr' [ 769.795778][T20485] Cannot create hsr debugfs directory [ 770.482393][T20485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.765421][T20485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.027706][T20485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.199354][T19504] Bluetooth: hci5: command tx timeout [ 771.444874][T20485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.933588][T20485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 771.954944][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.964084][T20485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 771.989040][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.070431][T20485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 772.088909][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.100348][T20485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 772.125856][T20485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.548769][T20485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.631609][T20485] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.673592][T19421] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.680832][T19421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.754428][T19423] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.761678][T19423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.270766][T19504] Bluetooth: hci5: command tx timeout [ 773.852265][T20485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.456591][T20661] vhci_hcd vhci_hcd.2: invalid port number 22 [ 774.472983][T20661] vhci_hcd vhci_hcd.2: default hub control req: 2305 v04b2 i0016 l4095 [ 774.761727][T20661] zswap: compressor not available [ 774.806083][T20485] veth0_vlan: entered promiscuous mode [ 774.858181][T20485] veth1_vlan: entered promiscuous mode [ 775.296213][T20485] veth0_macvtap: entered promiscuous mode [ 775.344400][T20485] veth1_macvtap: entered promiscuous mode [ 775.538333][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 775.693641][T20485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.742494][T20485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.773201][T19463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.798802][T19463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.885687][T19463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.945327][T19463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.283156][T19439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.297046][T19439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.799358][T20670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.810641][T20670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.994752][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'. [ 781.898273][T20807] netlink: 346 bytes leftover after parsing attributes in process `syz.5.2171'. [ 782.471129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 782.720486][T20830] openvswitch: netlink: Message has 8 unknown bytes. [ 782.979956][T20841] futex_wake_op: syz.3.2177 tries to shift op by -2048; fix this program [ 783.006224][T20841] futex_wake_op: syz.3.2177 tries to shift op by -2048; fix this program [ 783.542351][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 783.682571][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2181'. [ 787.242001][T20919] openvswitch: netlink: Message has 8 unknown bytes. [ 787.710682][T20924] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 790.158178][T20995] openvswitch: netlink: Message has 8 unknown bytes. [ 791.972473][ T31] INFO: task syz.0.1745:17722 blocked for more than 143 seconds. [ 791.994709][ T31] Tainted: G L syzkaller #0 [ 792.002841][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 792.012722][ T31] task:syz.0.1745 state:D stack:26896 pid:17722 tgid:17720 ppid:12822 task_flags:0x400140 flags:0x00080002 [ 792.026917][ T31] Call Trace: [ 792.030469][ T31] [ 792.033575][ T31] __schedule+0x125c/0x6730 [ 792.041068][ T31] ? do_raw_spin_lock+0x128/0x260 [ 792.046453][ T31] ? __pfx___schedule+0x10/0x10 [ 792.055278][ T31] ? find_held_lock+0x2b/0x80 [ 792.060036][ T31] ? schedule+0x225/0x2c0 [ 792.064940][ T31] schedule+0xdd/0x2c0 [ 792.069073][ T31] schedule_preempt_disabled+0x13/0x30 [ 792.077642][ T31] __mutex_lock+0xccc/0x1bd0 [ 792.082588][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.088719][ T31] ? __sys_sendmsg+0x160/0x210 [ 792.093899][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.100429][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 792.106833][ T31] ? __asan_memset+0x23/0x50 [ 792.112841][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 792.118463][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.126686][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.135909][ T31] ? rcu_is_watching+0x12/0xc0 [ 792.143991][ T31] ? trace_kmalloc+0xeb/0x110 [ 792.152643][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 792.157468][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 792.165189][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 792.172607][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 792.179773][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 792.193533][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 792.207600][ T31] ? genl_get_cmd+0x3e7/0x760 [ 792.223770][ T31] ? bpf_lsm_capable+0x9/0x10 [ 792.238667][ T31] ? security_capable+0x80/0x260 [ 792.250171][ T31] genl_rcv_msg+0x560/0x800 [ 792.260271][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.270916][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 792.287403][ T31] netlink_rcv_skb+0x159/0x420 [ 792.293385][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.304322][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.314130][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 792.352684][ T31] genl_rcv+0x28/0x40 [ 792.363413][ T31] netlink_unicast+0x585/0x850 [ 792.378111][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 792.384040][ T31] netlink_sendmsg+0x8b0/0xda0 [ 792.389270][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.394716][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 792.401535][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 792.406349][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.412839][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.418227][ T31] ? kasan_quarantine_put+0x104/0x240 [ 792.423878][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 792.430338][ T31] ? find_held_lock+0x2b/0x80 [ 792.435104][ T31] ___sys_sendmsg+0x190/0x1e0 [ 792.440914][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.448897][ T31] ? __lock_acquire+0x49f/0x1a40 [ 792.455780][ T31] __sys_sendmsg+0x160/0x210 [ 792.461514][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.466886][ T31] ? kcov_ioctl+0x17a/0x750 [ 792.471590][ T31] do_syscall_64+0x115/0x840 [ 792.476860][ T31] ? clear_bhb_loop+0x40/0x90 [ 792.481612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.487520][ T31] RIP: 0033:0x7f11ae99de99 [ 792.492317][ T31] RSP: 002b:00007f11af819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.500788][ T31] RAX: ffffffffffffffda RBX: 00007f11aec26090 RCX: 00007f11ae99de99 [ 792.509658][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000002 [ 792.517643][ T31] RBP: 00007f11aea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 792.526368][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.534471][ T31] R13: 00007f11aec26128 R14: 00007f11aec26090 R15: 00007ffcc5782648 [ 792.543203][ T31] [ 792.546310][ T31] [ 792.546310][ T31] Showing all locks held in the system: [ 792.570291][ T31] 2 locks held by ksoftirqd/1/23: [ 792.575358][ T31] 1 lock held by khungtaskd/31: [ 792.581330][ T31] #0: ffffffff8ebe7f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 792.598353][ T31] 2 locks held by syz.3.358/8040: [ 792.606773][ T31] #0: ffff88805a935880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 792.620299][ T31] #1: ffffffff90aa2140 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1f3/0xc10 [ 792.630377][ T31] 2 locks held by getty/17281: [ 792.635147][ T31] #0: ffff8880365a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 792.645064][ T31] #1: ffffc90002e8a2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 792.657385][ T31] 2 locks held by syz.0.1745/17721: [ 792.663295][ T31] #0: ffffffff90b50e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 792.671558][ T31] #1: ffffffff8f0716a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.682307][ T31] 2 locks held by syz.0.1745/17722: [ 792.687507][ T31] #0: ffffffff90b50e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 792.702044][ T31] #1: ffffffff8f0716a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.712230][ T31] 2 locks held by syz.1.1877/18742: [ 792.717428][ T31] #0: ffffffff90b50e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 792.725684][ T31] #1: ffffffff8f0716a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.736525][ T31] 4 locks held by kworker/u10:3/19424: [ 792.743408][ T31] #0: ffff88801ce92140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 792.759509][ T31] #1: ffffc900074ffd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 792.772053][ T31] #2: ffff8880370aa0d8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 792.782854][ T31] #3: ffff8880370a8c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 792.794000][ T31] 5 locks held by kworker/u10:5/19439: [ 792.799739][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 792.810807][ T31] #1: ffffc900052c7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 792.820812][ T31] #2: ffffffff90a89548 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 792.830319][ T31] #3: ffffffff90aa2140 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 792.841067][ T31] #4: ffffffff8ebf3a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 792.853140][ T31] 2 locks held by kworker/u10:6/19463: [ 792.860334][ T31] #0: ffff88801f32d140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 792.872070][ T31] #1: ffffc90002eefd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 792.884224][ T31] 2 locks held by syz.3.2197/20970: [ 792.889470][ T31] #0: ffff88803217c0d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 792.900374][ T31] #1: ffffffff8f0716a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 792.910030][ T31] 2 locks held by syz.4.2205/21027: [ 792.915227][ T31] #0: ffffffff90a89548 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.925329][ T31] #1: ffffffff90aa2140 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 792.936193][ T31] 2 locks held by syz.5.2206/21032: [ 792.941505][ T31] #0: ffffffff90a89548 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.951589][ T31] #1: ffffffff90aa2140 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 792.963846][ T31] 2 locks held by syz.5.2206/21033: [ 792.969112][ T31] #0: ffffffff90a89548 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.979384][ T31] #1: ffffffff90aa2140 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 792.990185][ T31] 2 locks held by syz.5.2206/21035: [ 792.995392][ T31] #0: ffffffff90a89548 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 793.004864][ T31] #1: ffffffff90aa2140 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 793.017466][ T31] [ 793.019967][ T31] ============================================= [ 793.019967][ T31] [ 793.030832][ T31] NMI backtrace for cpu 0 [ 793.030853][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.030884][ T31] Tainted: [L]=SOFTLOCKUP [ 793.030891][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.030902][ T31] Call Trace: [ 793.030909][ T31] [ 793.030916][ T31] dump_stack_lvl+0x100/0x190 [ 793.030946][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 793.030976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.031031][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 793.031147][ T31] sys_info+0x141/0x190 [ 793.031177][ T31] watchdog+0xcb1/0x1030 [ 793.031215][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.031273][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.031306][ T31] ? __kthread_parkme+0x18c/0x230 [ 793.031336][ T31] ? kthread+0x13a/0x450 [ 793.031365][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.031395][ T31] kthread+0x370/0x450 [ 793.031428][ T31] ? __pfx_kthread+0x10/0x10 [ 793.031460][ T31] ret_from_fork+0x72b/0xd50 [ 793.031502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 793.031532][ T31] ? __switch_to+0x800/0x10f0 [ 793.031581][ T31] ? __switch_to_asm+0x39/0x70 [ 793.031614][ T31] ? __pfx_kthread+0x10/0x10 [ 793.031649][ T31] ret_from_fork_asm+0x1a/0x30 [ 793.031698][ T31] [ 793.031724][ T31] Sending NMI from CPU 0 to CPUs 1: [ 793.172364][ C1] NMI backtrace for cpu 1 [ 793.172384][ C1] CPU: 1 UID: 0 PID: 21023 Comm: syz.2.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.172416][ C1] Tainted: [L]=SOFTLOCKUP [ 793.172424][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.172437][ C1] RIP: 0010:check_preemption_disabled+0x1c/0xe0 [ 793.172473][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d d5 55 ab 08 65 f7 05 c6 55 ab 08 ff ff ff 7f 74 0f <48> 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea [ 793.172494][ C1] RSP: 0018:ffffc9000402ebb8 EFLAGS: 00000202 [ 793.172511][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 793.172524][ C1] RDX: ffffffff81b803bd RSI: ffffffff8c400900 RDI: ffffffff8c400940 [ 793.172544][ C1] RBP: ffffc9000402ecb0 R08: 000000002fb9b5d8 R09: 0000000000000007 [ 793.172557][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f3d740 [ 793.172571][ C1] R13: ffffc9000402ec68 R14: 0000000000000000 R15: ffff888012c15d00 [ 793.172585][ C1] FS: 0000000000000000(0000) GS:ffff888123ee3000(0000) knlGS:0000000000000000 [ 793.172605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.172619][ C1] CR2: 0000001b346aaff8 CR3: 000000005b09a000 CR4: 00000000003526f0 [ 793.172633][ C1] Call Trace: [ 793.172639][ C1] [ 793.172648][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 793.172705][ C1] rcu_is_watching+0x12/0xc0 [ 793.172732][ C1] unwind_next_frame+0x6fa/0x2090 [ 793.172764][ C1] ? shrink_dentry_list+0x1e8/0x310 [ 793.172796][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 793.172827][ C1] arch_stack_walk+0x94/0xf0 [ 793.172859][ C1] ? shrink_dentry_list+0x1e8/0x310 [ 793.172890][ C1] stack_trace_save+0x8e/0xc0 [ 793.172919][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 793.172949][ C1] ? __lock_acquire+0x49f/0x1a40 [ 793.172982][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.173005][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 793.173030][ C1] save_stack+0x162/0x1e0 [ 793.173064][ C1] ? __pfx_save_stack+0x10/0x10 [ 793.173090][ C1] ? free_unref_folios+0xa44/0x1710 [ 793.173113][ C1] ? folios_put_refs+0x585/0xaa0 [ 793.173133][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 793.173155][ C1] ? shmem_evict_inode+0x3a5/0xbe0 [ 793.173178][ C1] ? evict+0x3c2/0xad0 [ 793.173202][ C1] ? iput.part.0+0x989/0x1050 [ 793.173226][ C1] ? iput+0x35/0x40 [ 793.173248][ C1] ? dentry_unlink_inode+0x284/0x470 [ 793.173271][ C1] ? dentry_kill+0x25d/0xc20 [ 793.173297][ C1] ? shrink_dentry_list+0x1e8/0x310 [ 793.173327][ C1] ? page_ext_put+0x3e/0xd0 [ 793.173358][ C1] __reset_page_owner+0x84/0x190 [ 793.173387][ C1] free_unref_folios+0xa44/0x1710 [ 793.173415][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.173440][ C1] folios_put_refs+0x585/0xaa0 [ 793.173463][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 793.173487][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 793.173517][ C1] shmem_undo_range+0x5e5/0x1570 [ 793.173551][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 793.173589][ C1] ? find_held_lock+0x2b/0x80 [ 793.173615][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 793.173657][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 793.173707][ C1] shmem_evict_inode+0x3a5/0xbe0 [ 793.173732][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 793.173819][ C1] ? kasan_save_stack+0x3f/0x50 [ 793.173845][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 793.173870][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 793.173904][ C1] ? find_held_lock+0x2b/0x80 [ 793.173929][ C1] ? evict+0x37e/0xad0 [ 793.173953][ C1] ? evict+0x37e/0xad0 [ 793.173979][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 793.174003][ C1] evict+0x3c2/0xad0 [ 793.174030][ C1] ? __pfx_evict+0x10/0x10 [ 793.174058][ C1] ? iput.part.0+0x981/0x1050 [ 793.174088][ C1] iput.part.0+0x989/0x1050 [ 793.174117][ C1] iput+0x35/0x40 [ 793.174140][ C1] dentry_unlink_inode+0x284/0x470 [ 793.174166][ C1] dentry_kill+0x25d/0xc20 [ 793.174194][ C1] shrink_dentry_list+0x1e8/0x310 [ 793.174225][ C1] ? __pfx_select_collect_umount+0x10/0x10 [ 793.174250][ C1] shrink_dcache_tree+0x201/0x400 [ 793.174280][ C1] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 793.174308][ C1] ? fsnotify_grab_connector+0x11f/0x290 [ 793.174374][ C1] shrink_dcache_for_umount+0x101/0x6c0 [ 793.174407][ C1] ? __pfx_shrink_dcache_for_umount+0x10/0x10 [ 793.174438][ C1] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 793.174465][ C1] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 793.174487][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 793.174514][ C1] generic_shutdown_super+0x7e/0x360 [ 793.174551][ C1] kill_anon_super+0x3a/0x60 [ 793.174579][ C1] deactivate_locked_super+0xc1/0x1b0 [ 793.174611][ C1] deactivate_super+0xe7/0x110 [ 793.174642][ C1] cleanup_mnt+0x21f/0x450 [ 793.174677][ C1] task_work_run+0x150/0x240 [ 793.174709][ C1] ? __pfx_task_work_run+0x10/0x10 [ 793.174744][ C1] do_exit+0x951/0x2ae0 [ 793.174776][ C1] ? __pfx_do_exit+0x10/0x10 [ 793.174804][ C1] ? do_raw_spin_lock+0x128/0x260 [ 793.174827][ C1] ? find_held_lock+0x2b/0x80 [ 793.174852][ C1] ? get_signal+0x7e0/0x21e0 [ 793.174877][ C1] do_group_exit+0xd5/0x2a0 [ 793.174908][ C1] get_signal+0x1ec7/0x21e0 [ 793.174934][ C1] ? __pfx_do_mbind+0x10/0x10 [ 793.174957][ C1] ? __pfx_get_signal+0x10/0x10 [ 793.174985][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 793.175021][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 793.175061][ C1] ? kernel_mbind+0x118/0x200 [ 793.175086][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 793.175107][ C1] ? rcu_is_watching+0x12/0xc0 [ 793.175133][ C1] do_syscall_64+0x652/0x840 [ 793.175158][ C1] ? clear_bhb_loop+0x40/0x90 [ 793.175184][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.175206][ C1] RIP: 0033:0x7f15bd19de99 [ 793.175222][ C1] Code: Unable to access opcode bytes at 0x7f15bd19de6f. [ 793.175232][ C1] RSP: 002b:00007f15be094028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 793.175251][ C1] RAX: 0000000000000000 RBX: 00007f15bd425fa0 RCX: 00007f15bd19de99 [ 793.175267][ C1] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 793.175280][ C1] RBP: 00007f15bd233eaf R08: 0000000000000006 R09: 0000000000000002 [ 793.175293][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.175306][ C1] R13: 00007f15bd426038 R14: 00007f15bd425fa0 R15: 00007ffd4da58158 [ 793.175330][ C1] [ 793.816951][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 793.823838][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.834537][ T31] Tainted: [L]=SOFTLOCKUP [ 793.838867][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.848936][ T31] Call Trace: [ 793.852224][ T31] [ 793.855170][ T31] dump_stack_lvl+0x100/0x190 [ 793.859872][ T31] vpanic+0x552/0x970 [ 793.863880][ T31] ? __pfx_vpanic+0x10/0x10 [ 793.868405][ T31] ? rcu_is_watching+0x12/0xc0 [ 793.873200][ T31] panic+0xd1/0xe0 [ 793.876940][ T31] ? __pfx_panic+0x10/0x10 [ 793.881377][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 793.887566][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 793.893752][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 793.899937][ T31] ? watchdog.cold+0x1ec/0x234 [ 793.904719][ T31] ? watchdog+0xcc1/0x1030 [ 793.909167][ T31] watchdog.cold+0x1fd/0x234 [ 793.913781][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.919609][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.924311][ T31] ? __kthread_parkme+0x18c/0x230 [ 793.929358][ T31] ? kthread+0x13a/0x450 [ 793.933617][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.938311][ T31] kthread+0x370/0x450 [ 793.942398][ T31] ? __pfx_kthread+0x10/0x10 [ 793.947023][ T31] ret_from_fork+0x72b/0xd50 [ 793.951632][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 793.956763][ T31] ? __switch_to+0x800/0x10f0 [ 793.961469][ T31] ? __switch_to_asm+0x39/0x70 [ 793.966255][ T31] ? __pfx_kthread+0x10/0x10 [ 793.970865][ T31] ret_from_fork_asm+0x1a/0x30 [ 793.975663][ T31] [ 793.978949][ T31] Kernel Offset: disabled [ 793.983271][ T31] Rebooting in 86400 seconds..