last executing test programs: 7.542929615s ago: executing program 1 (id=890): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)='&\x00', 0x0, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000006b1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mremap$auto(0x7, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r4 = socket(0xa, 0x801, 0x106) setsockopt$auto(r4, 0x1, 0x1, 0x0, 0xb559) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) listen$auto(0x3, 0x81) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x100, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f00000000c0)="f8afaf8e2194115be622c38f4ca65f8d2247dbb3e6b099f14d8eb01033075aa9ea89f138a950b0eecf748f543d9c330472112e4624f9061c90dcbeea23b9963dbd7e5c0ed7f709be53", 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x4) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) 6.516947482s ago: executing program 1 (id=891): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) r1 = socket(0x8, 0x1, 0x33) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) sendmmsg$auto(r2, &(0x7f0000000440)={{&(0x7f0000000140)="5ea2542bd324c750dcbfec954b088ff654bc130899896d30ffb00745ff22df386139883d7562682b82583333bc328b4da85b652c63d4da5abfbc9bad6614", 0x8, &(0x7f0000000380)={&(0x7f0000000280)="261b40afc3243c264d39986c65cb4e3a01b98fc3eea3539293093d6646450a07087d2d56b255dd8fedc07bda90376f833fb92f662ab6652c97048199b330e45fade9ef5b3b", 0x6}, 0x8, &(0x7f00000003c0), 0x2, 0x1000}, 0x4}, 0x4, 0x4) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) ioctl$auto_XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, 0x0) writev$auto(r3, &(0x7f0000000340)={0x0, 0x18}, 0x8) ioctl$auto_UI_SET_FFBIT(r3, 0x4004556b, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unlinkat$auto(r4, 0x0, 0x3) mmap$auto(0xffffffffffffffff, 0x2020009, 0x100003, 0x9000000eb1, r4, 0x0) sysfs$auto(0x2, 0xd, 0x8) ioctl$auto(0xc8, 0x401054d5, 0x0) 5.764930245s ago: executing program 1 (id=893): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mbind$auto(0xb0, 0x800, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x7, 0x3) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0x4, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x7, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)='\x00\x00') unshare$auto(0x40000080) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r2, 0x8982, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) getsockopt$auto_SO_TXTIME(r0, 0x3, 0x3d, &(0x7f0000000180)='/proc/self/maps\x00', 0x0) socket(0x2a, 0x2, 0x1) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x10, 0xd, 0x300000000000) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)=@task_fd_query={0xffffffffffffffff, r1, 0x7f, 0x5, 0x8, 0x4, r2, 0x7, 0x1}, 0xffff27c2) execveat$auto(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=&(0x7f00000003c0)='M]\x00', &(0x7f0000000200)=&(0x7f00000004c0)='\xf8$\xb2\xc8E(\xa6\xa5\xba3\xe1\xab{Z\'\xc7\x8d\x0f\x93\xbbr\xbf\xc9R\xa8\x06\xa9:\\\x89[O\x13\xfb\x15t\xe9s\xa1q\x17\xa0#Z\xc5\xaf\xcc*\xaf\xe8\xd0\xaf7j\x19\xa9\xf2Q5\x1ai\xc3R=Z\'\x9d^\xf3\x01\x8e\xca\x8b\xef\xa0\x86\x0fL\x96hgz\xa7\x96>2\xccqJ\x85\xe5\x98p\xba\x19\xd9\x03k5\xfc\x913\n\x85Y?\xe9\x00Ox\xe2\xfd\xbe;T\xbfB\x93f\xbb\xc0\x8f\xdc\x04t\xcf\a.\xb1`Q\xf6\xdc\xdb\xc8\xe2\x04\xea\xac/\xf0\xb9\x91\xe5u\xc1\xc5\x8c\x9d.\xdc\xc8\xb3\xb7\r,\xd5L\x8fx\xc3\xff\x94\xa9:\xaba\x91\xafa\xbbJ\xc5\xa1h\xf0\xfc\x82\xd6\xc3\xf4Q\b!H\xf3^\x991L1\x1b\xb5\x12\x98A1\x82\xd5\xaac\xd2^N\xfc\xad\xac\xd1r\xe3\x87\xb1 \xb4&\x01gk\xfc\x82\xba\xa9\xdf*{\x84h\xc1\xab\xed\xeae\xbf\xc0\x91\xd7\x00\x00\x00', 0xf) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x3) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={0x0}}, 0x4020000) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 5.758946852s ago: executing program 3 (id=894): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x5) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000700)=""/4096, 0x1000) setreuid$auto(0x9, 0x1) getpriority$auto(0x2, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) writev$auto(0x3, &(0x7f0000000300)={&(0x7f0000000140), 0x7111}, 0x8) ptrace$auto_PTRACE_DETACH(0x11, r0, 0xa, 0x9) 5.481986629s ago: executing program 3 (id=895): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video66\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="02002dbd7000ffdbdf04050000000800040010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2001c081}, 0x4000091) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000001c0), r1) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x3) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r4, 0x4000) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8d4628bd7000fcdbdf25030000000800030003000000e84c4ea061"], 0x1c}, 0x1, 0x0, 0x0, 0x4885}, 0x11) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x1, 0x1, 0x0, 0x14, r0, 0x5) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 5.211399955s ago: executing program 2 (id=896): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) pipe$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) close_range$auto(0x2, 0x8000, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) 4.967409473s ago: executing program 2 (id=897): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mbind$auto(0xb0, 0x800, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x7, 0x3) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0x4, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x7, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)='\x00\x00') unshare$auto(0x40000080) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r2, 0x8982, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) getsockopt$auto_SO_TXTIME(r0, 0x3, 0x3d, &(0x7f0000000180)='/proc/self/maps\x00', 0x0) socket(0x2a, 0x2, 0x1) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x10, 0xd, 0x300000000000) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)=@task_fd_query={0xffffffffffffffff, r1, 0x7f, 0x5, 0x8, 0x4, r2, 0x7, 0x1}, 0xffff27c2) execveat$auto(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=&(0x7f00000003c0)='M]\x00', &(0x7f0000000200)=&(0x7f00000004c0)='\xf8$\xb2\xc8E(\xa6\xa5\xba3\xe1\xab{Z\'\xc7\x8d\x0f\x93\xbbr\xbf\xc9R\xa8\x06\xa9:\\\x89[O\x13\xfb\x15t\xe9s\xa1q\x17\xa0#Z\xc5\xaf\xcc*\xaf\xe8\xd0\xaf7j\x19\xa9\xf2Q5\x1ai\xc3R=Z\'\x9d^\xf3\x01\x8e\xca\x8b\xef\xa0\x86\x0fL\x96hgz\xa7\x96>2\xccqJ\x85\xe5\x98p\xba\x19\xd9\x03k5\xfc\x913\n\x85Y?\xe9\x00Ox\xe2\xfd\xbe;T\xbfB\x93f\xbb\xc0\x8f\xdc\x04t\xcf\a.\xb1`Q\xf6\xdc\xdb\xc8\xe2\x04\xea\xac/\xf0\xb9\x91\xe5u\xc1\xc5\x8c\x9d.\xdc\xc8\xb3\xb7\r,\xd5L\x8fx\xc3\xff\x94\xa9:\xaba\x91\xafa\xbbJ\xc5\xa1h\xf0\xfc\x82\xd6\xc3\xf4Q\b!H\xf3^\x991L1\x1b\xb5\x12\x98A1\x82\xd5\xaac\xd2^N\xfc\xad\xac\xd1r\xe3\x87\xb1 \xb4&\x01gk\xfc\x82\xba\xa9\xdf*{\x84h\xc1\xab\xed\xeae\xbf\xc0\x91\xd7\x00\x00\x00', 0xf) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x3) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r0, 0x0, 0x4020000) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 4.71399483s ago: executing program 0 (id=898): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mbind$auto(0xb0, 0x800, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x7, 0x3) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0x4, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x7, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)='\x00\x00') unshare$auto(0x40000080) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r2, 0x8982, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) getsockopt$auto_SO_TXTIME(r0, 0x3, 0x3d, &(0x7f0000000180)='/proc/self/maps\x00', 0x0) socket(0x2a, 0x2, 0x1) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x10, 0xd, 0x300000000000) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)=@task_fd_query={0xffffffffffffffff, r1, 0x7f, 0x5, 0x8, 0x4, r2, 0x7, 0x1}, 0xffff27c2) execveat$auto(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=&(0x7f00000003c0)='M]\x00', &(0x7f0000000200)=&(0x7f00000004c0)='\xf8$\xb2\xc8E(\xa6\xa5\xba3\xe1\xab{Z\'\xc7\x8d\x0f\x93\xbbr\xbf\xc9R\xa8\x06\xa9:\\\x89[O\x13\xfb\x15t\xe9s\xa1q\x17\xa0#Z\xc5\xaf\xcc*\xaf\xe8\xd0\xaf7j\x19\xa9\xf2Q5\x1ai\xc3R=Z\'\x9d^\xf3\x01\x8e\xca\x8b\xef\xa0\x86\x0fL\x96hgz\xa7\x96>2\xccqJ\x85\xe5\x98p\xba\x19\xd9\x03k5\xfc\x913\n\x85Y?\xe9\x00Ox\xe2\xfd\xbe;T\xbfB\x93f\xbb\xc0\x8f\xdc\x04t\xcf\a.\xb1`Q\xf6\xdc\xdb\xc8\xe2\x04\xea\xac/\xf0\xb9\x91\xe5u\xc1\xc5\x8c\x9d.\xdc\xc8\xb3\xb7\r,\xd5L\x8fx\xc3\xff\x94\xa9:\xaba\x91\xafa\xbbJ\xc5\xa1h\xf0\xfc\x82\xd6\xc3\xf4Q\b!H\xf3^\x991L1\x1b\xb5\x12\x98A1\x82\xd5\xaac\xd2^N\xfc\xad\xac\xd1r\xe3\x87\xb1 \xb4&\x01gk\xfc\x82\xba\xa9\xdf*{\x84h\xc1\xab\xed\xeae\xbf\xc0\x91\xd7\x00\x00\x00', 0xf) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x3) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r0, 0x0, 0x4020000) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 4.500847257s ago: executing program 3 (id=899): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mbind$auto(0xb0, 0x800, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x7, 0x3) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0x4, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x7, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)='\x00\x00') unshare$auto(0x40000080) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r2, 0x8982, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$auto_SO_TXTIME(r0, 0x3, 0x3d, &(0x7f0000000180)='/proc/self/maps\x00', &(0x7f00000001c0)=0x8) socket(0x2a, 0x2, 0x1) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x10, 0xd, 0x300000000000) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)=@task_fd_query={0xffffffffffffffff, r1, 0x7f, 0x5, 0x8, 0x4, r2, 0x7, 0x1}, 0xffff27c2) execveat$auto(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=&(0x7f00000003c0)='M]\x00', &(0x7f0000000200)=&(0x7f00000004c0)='\xf8$\xb2\xc8E(\xa6\xa5\xba3\xe1\xab{Z\'\xc7\x8d\x0f\x93\xbbr\xbf\xc9R\xa8\x06\xa9:\\\x89[O\x13\xfb\x15t\xe9s\xa1q\x17\xa0#Z\xc5\xaf\xcc*\xaf\xe8\xd0\xaf7j\x19\xa9\xf2Q5\x1ai\xc3R=Z\'\x9d^\xf3\x01\x8e\xca\x8b\xef\xa0\x86\x0fL\x96hgz\xa7\x96>2\xccqJ\x85\xe5\x98p\xba\x19\xd9\x03k5\xfc\x913\n\x85Y?\xe9\x00Ox\xe2\xfd\xbe;T\xbfB\x93f\xbb\xc0\x8f\xdc\x04t\xcf\a.\xb1`Q\xf6\xdc\xdb\xc8\xe2\x04\xea\xac/\xf0\xb9\x91\xe5u\xc1\xc5\x8c\x9d.\xdc\xc8\xb3\xb7\r,\xd5L\x8fx\xc3\xff\x94\xa9:\xaba\x91\xafa\xbbJ\xc5\xa1h\xf0\xfc\x82\xd6\xc3\xf4Q\b!H\xf3^\x991L1\x1b\xb5\x12\x98A1\x82\xd5\xaac\xd2^N\xfc\xad\xac\xd1r\xe3\x87\xb1 \xb4&\x01gk\xfc\x82\xba\xa9\xdf*{\x84h\xc1\xab\xed\xeae\xbf\xc0\x91\xd7\x00\x00\x00', 0xf) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={0x0}}, 0x4020000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 2.540986102s ago: executing program 3 (id=900): timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) write$auto(r0, 0x0, 0x47ffffdf2) ioctl$auto(r0, 0x8, r0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0082, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r2, 0x0, 0xfccd) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0xa) setsockopt$auto(r5, 0x104000000000010e, 0x1, 0x0, 0x16) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb3/statistics/tx_errors\x00', 0x2000, 0x0) 2.523579066s ago: executing program 1 (id=901): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRES16=r3, @ANYRES8=r5, @ANYRES16=r0], 0x1ac}}, 0x20048010) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2b, 0x1, 0x1) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) (async) socket(0x29, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) socket(0x10, 0x2, 0x14) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRES16=r3, @ANYRES8=r5, @ANYRES16=r0], 0x1ac}}, 0x20048010) (async) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async) 2.510906818s ago: executing program 2 (id=902): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/memory.numa_stat\x00', 0xe2080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r0 = bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00'}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00'}) openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x25ae06, 0x0) r3 = fsopen$auto(&(0x7f0000000440)='.\x00', 0x3) bpf$auto(0x1, &(0x7f0000000380)=@test={r3, 0x5, 0x2b7f, 0x10001, 0x8e13, 0x65beb219, 0x4, 0x7f, 0x40000ac, 0x35, 0x9, 0x7, 0x0, 0x80, 0x8}, 0x6f4) syslog$auto(0x3, 0x0, 0x5) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10) ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000080)=0xd3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) socket(0x11, 0x3, 0x2) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x85) r5 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010020bd7008fcdbdf04000000008f271605289dafc6a5921fa5611752c878d955182814715c11630409bb2aec9ee6866621ec8316eb1b82a84d17bacab60ee1fb3d14e11f30d96c230c43754c20903ce581f63ec0d9cc7c394c6ef85318042727385eadd30b342ba200"/121], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) 2.415272348s ago: executing program 0 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0xa888, 0x128}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) close_range$auto(r0, r0, 0x10000) 2.194835437s ago: executing program 0 (id=904): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0xc) ptrace$auto_PTRACE_DETACH(0x11, r0, 0xb, 0x9) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r2, 0x40000000113, 0x2, 0xfffffffffffffffc, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xe8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc4, 0xbd, "3a3d6d7320181d731624f55d1f78869b318f5fd39b94a2d1ad798f5977d4e2ac17d3be7c6a026102304081bafe8ab2d1d28aee270b8f736366cc3a22da33a8b7dd83f1304cb41e3ecb064add42b07c0596b89723327cbd6d46da8b7ab9de5dfd4592396c1d72939ada5febe6679d5235a0940bdad8d09134a22f78537a9a97bd2b28ef12f012151df6d758557278c0f634a5471a838411309474dfb177c0f1934acd9bcf98147797819eb88a55dd03dfd079034db934160c47e502ab07a91291"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a) r3 = socket(0x200000000000011, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'macvlan1\x00'}) sendmsg$auto_NFC_CMD_LLC_SDREQ(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000040)={0x11cc, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x50df}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_LLC_SDP={0x119a, 0x13, 0x0, 0x1, [@typed={0x9, 0x50, 0x0, 0x0, @str='{)!-\x00'}, @nested={0xa3, 0x14a, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic, @nested={0x4, 0x11e}, @typed={0xe, 0x167, 0x0, 0x0, @str='/:{]([@!+\x00'}, @generic="bba620336d6a176a9c7de70d77baff1f7b83ec089b11553ab9313077a42d030159698e5e2203ba90a67652c7f19993ddb9ad9139c9c4824aa8ed1cccaf5e333906e84f0cc348f6a5223d3d9e321c480d626f6fad08f5ca26bca4855c894989f8739b83ff81e44898c4f1518d409bc8e06d8cab746646d5507e1d226bccf0f552a9dfe6f2bd1935"]}, @generic="0fa908a51295c9b8d41cc750621a0c11862307a0f4b36959b8df486937d1377a362e61e05f4f7b97895f66873b2ddda0b20664107236ea02a32cea0d66d7077e806e7258df69efa662e1d7c5571c", @nested={0x97, 0x3b, 0x0, 0x1, [@generic="428ab2daaa574a40947db76855e67326ad490dc0bb9121e618c3787772be5c1efee8c4a0bc714495a6d0bf68a60c9069886172c66104752c08821110dcd9c39478640963e83153736382d514510927de59b21035dd823f910c1e7ebe4ff58e0e8c081488d0394bc539fb7153d614436c413dcae076ad4ab20adc1f50c7cea053cf22a86dca8d8685493aca43d38480", @nested={0x4, 0xb1}]}, @generic="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"]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x8}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.05804134s ago: executing program 2 (id=905): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/dev/cdrom/autoclose\x00', 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) r1 = io_uring_setup$auto(0x59, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(r1, r1, 0x80000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)) epoll_ctl$auto(0xffffffffffffffff, 0x1, r2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, 0x0, 0xb01, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x100040, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r4, 0xc0884123, &(0x7f0000000280)={0x5, 0x0, @reserved="e5d3ae87fbcd20f354bc462d9518a90adaffe1ee53ac907ef49a78f7f58694e39f46c35bd0c8ad2a47a2aff7fda026a07e8dd68f0a57203bb6c2cf1b764eaba7", @control={{}, 0x4, {}, {}, 0x6}}) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r5, 0x0, 0x101) 1.999920476s ago: executing program 0 (id=906): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/dev/cdrom/autoclose\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) r1 = io_uring_setup$auto(0x59, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x0, &(0x7f00000000c0)='Z\xd6Ps\xfd\x99\xd5\xed\x91O\x9f4\n\xd9\xf4\x11\xa2QO\xb5\x9e\x95\xb5\xd1\x80\\\x1a=', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810007, 0xffb, 0x110, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x6, &(0x7f0000000140)) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, 0x0, 0xb01, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x100040, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r2, 0xc0884123, &(0x7f0000000280)={0x5, 0x0, @reserved="e5d3ae87fbcd20f354bc462d9518a90adaffe1ee53ac907ef49a78f7f58694e39f46c35bd0c8ad2a47a2aff7fda026a07e8dd68f0a57203bb6c2cf1b764eaba7", @control={{}, 0x4, {}, {}, 0x6}}) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r3, 0x0, 0x101) 1.870788193s ago: executing program 1 (id=907): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, r1, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') poll$auto(&(0x7f0000000340)={r4, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) 1.41993236s ago: executing program 0 (id=908): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) socketpair$auto(0x1, 0x5, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) write$auto(r0, &(0x7f0000000180)='/dev/audio&\xba\xf6G\xef\x05\x00', 0x9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180)) read$auto(0xffffffffffffffff, 0x0, 0x1f40) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x8201, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.337906067s ago: executing program 3 (id=909): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400007, 0x400000df, 0x9b72, 0xffffffffffffffff, 0x3) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) getcwd$auto(0x0, 0x80) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, &(0x7f0000000140)="d45c94e6f01fda0b35b53b23b49a512788bfc0f43fe976989b60e9b08c700a58bc9512a0adce3c8da294f8fa0d0046") r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1882c2, 0x78e22799f4a46f1c) flock$auto(r2, 0x5) r3 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r3, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abe0) flock$auto(r4, 0x1) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000000e8, 0x91, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x9, 0x0, 0x8, 0xfffffffffffffffe, 0xfc7, 0x9, 0x8000, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) accept$auto(0x3, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1.241861717s ago: executing program 2 (id=910): request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='veth0\x00', &(0x7f0000000080)='veth0\x00', 0x0, 0xfffffffffffffff8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/023/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x8, 0x8b, 0x9, 0xe9, 0x1, 0x7ab, &(0x7f00000001c0)}) ioctl$auto(0xffffffffffffffff, 0x80045430, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xfffd}, {0x21000002, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x20200, 0x0) preadv$auto(r2, &(0x7f0000000240)={0x0, 0x9}, 0xc, 0x9, 0x402) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xc5c) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) ioctl$auto_MEMERASE64(r1, 0x40104d14, &(0x7f0000000140)={0xd26, 0xf}) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) fdatasync$auto(r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0x511000, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) 615.692586ms ago: executing program 3 (id=911): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mbind$auto(0xb0, 0x800, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x7, 0x3) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0x4, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x7, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)='\x00\x00') unshare$auto(0x40000080) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r2, 0x8982, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) getsockopt$auto_SO_TXTIME(r0, 0x3, 0x3d, &(0x7f0000000180)='/proc/self/maps\x00', 0x0) socket(0x2a, 0x2, 0x1) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x10, 0xd, 0x300000000000) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)=@task_fd_query={0xffffffffffffffff, r1, 0x7f, 0x5, 0x8, 0x4, r2, 0x7, 0x1}, 0xffff27c2) execveat$auto(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=&(0x7f00000003c0)='M]\x00', &(0x7f0000000200)=&(0x7f00000004c0)='\xf8$\xb2\xc8E(\xa6\xa5\xba3\xe1\xab{Z\'\xc7\x8d\x0f\x93\xbbr\xbf\xc9R\xa8\x06\xa9:\\\x89[O\x13\xfb\x15t\xe9s\xa1q\x17\xa0#Z\xc5\xaf\xcc*\xaf\xe8\xd0\xaf7j\x19\xa9\xf2Q5\x1ai\xc3R=Z\'\x9d^\xf3\x01\x8e\xca\x8b\xef\xa0\x86\x0fL\x96hgz\xa7\x96>2\xccqJ\x85\xe5\x98p\xba\x19\xd9\x03k5\xfc\x913\n\x85Y?\xe9\x00Ox\xe2\xfd\xbe;T\xbfB\x93f\xbb\xc0\x8f\xdc\x04t\xcf\a.\xb1`Q\xf6\xdc\xdb\xc8\xe2\x04\xea\xac/\xf0\xb9\x91\xe5u\xc1\xc5\x8c\x9d.\xdc\xc8\xb3\xb7\r,\xd5L\x8fx\xc3\xff\x94\xa9:\xaba\x91\xafa\xbbJ\xc5\xa1h\xf0\xfc\x82\xd6\xc3\xf4Q\b!H\xf3^\x991L1\x1b\xb5\x12\x98A1\x82\xd5\xaac\xd2^N\xfc\xad\xac\xd1r\xe3\x87\xb1 \xb4&\x01gk\xfc\x82\xba\xa9\xdf*{\x84h\xc1\xab\xed\xeae\xbf\xc0\x91\xd7\x00\x00\x00', 0xf) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x3) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x4020000) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 335.006392ms ago: executing program 1 (id=912): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/032/001\x00', 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000240)={0x1, 0xf2, 0x1, 0xff, 0x6, 0x7, 0x400, 0x0, 0x80, 0xbfe, 0x1d, 0x0, [{0x7, 0xffff8000, 0xb7}, {0x3ff, 0x6b5, 0x9}]}) r1 = socket(0xa, 0x5, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r8 = wait4$auto(r7, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r8, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r8}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r8, 0xc, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r9, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x14, r10, 0x321, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x2004) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) 281.487708ms ago: executing program 2 (id=913): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESDEC], 0x1ac}}, 0x4004) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)="351547") recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(0x0, 0x3) mmap$auto(0x200000000, 0x2020008, 0x3, 0x19, 0xffffffffffffffff, 0x8003) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x90100, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x6, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x1, 0x0) prctl$auto(0x3a, 0x0, 0x0, 0x1, 0xfffffffffffffffc) write$auto(r2, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xfc\xeek\xb7\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccw9\x17d}\xfd;2\xf1\xea\xa6\x86qT\xa6\xeeC\"\xb6\xe8\xd5+tL8\xa5\x8a\x14\x8b\x0fZz\xeaXY\xc7\xbf\x97ZU\x0fk\xcfzn_:{a\t\xeb\xb5\xbf\xdf<\xcd&*\xe1\xebz\x81\xcf9\xfd\xda\x80\x83n\xd1\xc1G\a\xed\xd0\xfb\xc9p\x03VHG\xf3\x1e?]\xfb@}l\xa7J\xd3{\x8a\x80\xb3\xc5\x12:\xec\x15\xe4tP7 L\xf5\xf6\xb6|\xff\x04', 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) inotify_init1$auto(0x5615) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) 0s ago: executing program 0 (id=914): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/dev/cdrom/autoclose\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) io_uring_setup$auto(0x59, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) epoll_ctl$auto(0xffffffffffffffff, 0x1, r1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, 0x0, 0xb01, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x100040, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r3, 0xc0884123, &(0x7f0000000280)={0x5, 0x0, @reserved="e5d3ae87fbcd20f354bc462d9518a90adaffe1ee53ac907ef49a78f7f58694e39f46c35bd0c8ad2a47a2aff7fda026a07e8dd68f0a57203bb6c2cf1b764eaba7", @control={{}, 0x4, {}, {}, 0x6}}) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) write$auto(r4, 0x0, 0x101) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 76.725529][ T5621] cgroup: Unknown subsys name 'net' [ 76.863526][ T5621] cgroup: Unknown subsys name 'cpuset' [ 76.872216][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.383013][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.411815][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.416679][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.421017][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.429224][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.437016][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.451130][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.459834][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.467000][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.467515][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.477259][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.491435][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.494987][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.501173][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.506954][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.513420][ T5650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.521524][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.527864][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.537874][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.544330][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.550192][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.111159][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.118947][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.126402][ T5633] bridge_slave_0: entered allmulticast mode [ 82.133685][ T5633] bridge_slave_0: entered promiscuous mode [ 82.175479][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.182816][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.190199][ T5633] bridge_slave_1: entered allmulticast mode [ 82.197242][ T5633] bridge_slave_1: entered promiscuous mode [ 82.247045][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.254355][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.261691][ T5632] bridge_slave_0: entered allmulticast mode [ 82.268868][ T5632] bridge_slave_0: entered promiscuous mode [ 82.277869][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286039][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.293337][ T5632] bridge_slave_1: entered allmulticast mode [ 82.300460][ T5632] bridge_slave_1: entered promiscuous mode [ 82.350277][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.357481][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.364812][ T5635] bridge_slave_0: entered allmulticast mode [ 82.371972][ T5635] bridge_slave_0: entered promiscuous mode [ 82.383290][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.415360][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.423022][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.430406][ T5635] bridge_slave_1: entered allmulticast mode [ 82.437521][ T5635] bridge_slave_1: entered promiscuous mode [ 82.446665][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.459030][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.479143][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.486734][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.494003][ T5634] bridge_slave_0: entered allmulticast mode [ 82.501990][ T5634] bridge_slave_0: entered promiscuous mode [ 82.529340][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.540378][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.547582][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.554891][ T5634] bridge_slave_1: entered allmulticast mode [ 82.562201][ T5634] bridge_slave_1: entered promiscuous mode [ 82.580508][ T5650] Bluetooth: hci1: command tx timeout [ 82.586529][ T5638] Bluetooth: hci0: command tx timeout [ 82.586548][ T50] Bluetooth: hci3: command tx timeout [ 82.618217][ T5633] team0: Port device team_slave_0 added [ 82.627108][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.657356][ T5633] team0: Port device team_slave_1 added [ 82.663499][ T5638] Bluetooth: hci2: command tx timeout [ 82.677746][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.697646][ T5632] team0: Port device team_slave_0 added [ 82.706049][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.718463][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.749140][ T5632] team0: Port device team_slave_1 added [ 82.764739][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.771788][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.798132][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.816541][ T5635] team0: Port device team_slave_0 added [ 82.844110][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.851391][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.877820][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.891300][ T5635] team0: Port device team_slave_1 added [ 82.909851][ T5634] team0: Port device team_slave_0 added [ 82.933263][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.940584][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.966634][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.983303][ T5634] team0: Port device team_slave_1 added [ 83.015040][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.022189][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.048302][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.075473][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.082688][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.108884][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.132089][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.139202][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.165542][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.177688][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.185104][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.211286][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.234705][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.241978][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.267931][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.302086][ T5633] hsr_slave_0: entered promiscuous mode [ 83.308675][ T5633] hsr_slave_1: entered promiscuous mode [ 83.369129][ T5632] hsr_slave_0: entered promiscuous mode [ 83.376260][ T5632] hsr_slave_1: entered promiscuous mode [ 83.382762][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 83.389049][ T5632] Cannot create hsr debugfs directory [ 83.453298][ T5634] hsr_slave_0: entered promiscuous mode [ 83.460072][ T5634] hsr_slave_1: entered promiscuous mode [ 83.466145][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 83.471947][ T5634] Cannot create hsr debugfs directory [ 83.491692][ T5635] hsr_slave_0: entered promiscuous mode [ 83.498391][ T5635] hsr_slave_1: entered promiscuous mode [ 83.504799][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 83.510669][ T5635] Cannot create hsr debugfs directory [ 83.962644][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.980607][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.988520][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.999186][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.008776][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.020781][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.041254][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.051715][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.116483][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.132176][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.150931][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.162705][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.172972][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.183191][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.200504][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.211602][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.304267][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.314864][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.323790][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.333738][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.345999][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.358278][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.366910][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.376461][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.474799][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.484356][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.502125][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.513237][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.521477][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.531012][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.538886][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.549078][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.595569][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.659546][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.659988][ T5638] Bluetooth: hci3: command tx timeout [ 84.670091][ T5650] Bluetooth: hci0: command tx timeout [ 84.673261][ T50] Bluetooth: hci1: command tx timeout [ 84.689077][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.712153][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.719393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.740158][ T50] Bluetooth: hci2: command tx timeout [ 84.747906][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.755457][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.818528][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.858091][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.869203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.876430][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.906580][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.913722][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.944835][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.972814][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.997914][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.005141][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.045464][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.052609][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.069198][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.101653][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.108786][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.156264][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.163504][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.036536][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.222745][ T5633] veth0_vlan: entered promiscuous mode [ 86.256768][ T5633] veth1_vlan: entered promiscuous mode [ 86.307034][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.353715][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.409080][ T5633] veth0_macvtap: entered promiscuous mode [ 86.425212][ T5633] veth1_macvtap: entered promiscuous mode [ 86.443670][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.505958][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.525743][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.561652][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.573234][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.584645][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.607730][ T5634] veth0_vlan: entered promiscuous mode [ 86.616589][ T1178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627095][ T5632] veth0_vlan: entered promiscuous mode [ 86.671150][ T5632] veth1_vlan: entered promiscuous mode [ 86.686250][ T5634] veth1_vlan: entered promiscuous mode [ 86.714992][ T5635] veth0_vlan: entered promiscuous mode [ 86.740646][ T50] Bluetooth: hci0: command tx timeout [ 86.741779][ T5638] Bluetooth: hci1: command tx timeout [ 86.746153][ T5650] Bluetooth: hci3: command tx timeout [ 86.781469][ T5635] veth1_vlan: entered promiscuous mode [ 86.811689][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.819777][ T5638] Bluetooth: hci2: command tx timeout [ 86.844256][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.848387][ T5632] veth0_macvtap: entered promiscuous mode [ 86.885708][ T5632] veth1_macvtap: entered promiscuous mode [ 86.945450][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.965608][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.966027][ T5634] veth0_macvtap: entered promiscuous mode [ 86.995036][ T5635] veth0_macvtap: entered promiscuous mode [ 87.036200][ T5634] veth1_macvtap: entered promiscuous mode [ 87.058651][ T5635] veth1_macvtap: entered promiscuous mode [ 87.104698][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.125439][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.155223][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.196487][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.225623][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.275475][ T1156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.294191][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.337159][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.347322][ T1156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.366254][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.393112][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.402713][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.422080][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.446534][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.456425][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.505493][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.514609][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.538052][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.548600][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.693514][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.713215][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.798352][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.820903][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.867113][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.891036][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.947260][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.962495][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.987251][ T5795] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.009750][ T5795] Zero length message leads to an empty skb [ 88.273757][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.289140][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.362912][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.379558][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.820393][ T5638] Bluetooth: hci1: command tx timeout [ 88.822991][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.840711][ T5638] Bluetooth: hci0: command tx timeout [ 88.846915][ T5638] Bluetooth: hci3: command tx timeout [ 88.901704][ T5638] Bluetooth: hci2: command tx timeout [ 91.082514][ T5843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.087219][ T5829] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[5829] [ 91.788969][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.844413][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.045406][ T1577] cfg80211: failed to load regulatory.db [ 92.059765][ T30] audit: type=1800 audit(1780721253.722:2): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13" name="dbroot" dev="configfs" ino=9274 res=0 errno=0 [ 93.667584][ T5865] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[5865] [ 94.885341][ T5902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 95.058289][ T5902] team0: Port device team_slave_0 removed [ 96.098509][ T5917] sctp: [Deprecated]: syz.0.24 (pid 5917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.098509][ T5917] Use struct sctp_sack_info instead [ 96.969479][ T5916] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 97.926273][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 98.219234][ T5638] Bluetooth: hci2: unexpected event 0x10 length: 124 > 1 [ 98.221095][ T50] Bluetooth: hci2: hardware error 0x00 [ 98.394286][ T5638] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 99.776751][ T5638] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 99.784786][ T5638] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 99.802253][ T5638] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 99.802343][ T5638] Bluetooth: hci3: Malformed LE Event: 0x0d [ 99.805184][ T5984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.352931][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 101.247835][ T6008] syz.3.46 (6008) used greatest stack depth: 19720 bytes left [ 101.827965][ T6030] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 102.409201][ T6056] netlink: 326 bytes leftover after parsing attributes in process `syz.2.57'. [ 104.921693][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 104.962007][ T6111] bridge_slave_1: left allmulticast mode [ 104.996711][ T6111] bridge_slave_1: left promiscuous mode [ 105.040675][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.120785][ T6111] bridge_slave_0: left allmulticast mode [ 105.141991][ T6111] bridge_slave_0: left promiscuous mode [ 105.163122][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.566053][ T6136] process 'syz.1.68' launched ':,' with NULL argv: empty string added [ 105.591581][ T6138] netlink: 334 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.737836][ T6144] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1024 out of range (51000000..2150000000) [ 109.264860][ T6229] mmap: syz.0.89 (6229) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.091602][ T6260] capability: warning: `syz.3.96' uses 32-bit capabilities (legacy support in use) [ 111.354932][ T6277] ubi0: attaching mtd0 [ 111.418917][ T6277] ubi0: scanning is finished [ 111.446465][ T6277] ubi0: empty MTD device detected [ 112.147769][ T6277] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 112.157751][ T6277] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 112.174321][ T6277] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.195067][ T6277] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 112.218298][ T6277] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.242274][ T6277] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.258417][ T6277] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4119028999 [ 112.275819][ T6277] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.289517][ T6322] ubi0: background thread "ubi_bgt0d" started, PID 6322 [ 112.322757][ T6295] ubi0: detaching mtd0 [ 112.403958][ T6295] ubi0: mtd0 is detached [ 113.647693][ T6336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.575528][ T6431] FAULT_INJECTION: forcing a failure. [ 117.575528][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 117.613192][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) [ 117.613232][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.613256][ T6431] Call Trace: [ 117.613267][ T6431] [ 117.613278][ T6431] dump_stack_lvl+0x100/0x190 [ 117.613356][ T6431] should_fail_ex.cold+0x5/0xa [ 117.613395][ T6431] should_failslab+0xc2/0x120 [ 117.613432][ T6431] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 117.613476][ T6431] ? ptlock_alloc+0x1f/0x70 [ 117.613516][ T6431] ? mark_held_locks+0x40/0x70 [ 117.613562][ T6431] ptlock_alloc+0x1f/0x70 [ 117.613600][ T6431] pte_alloc_one+0x82/0x3d0 [ 117.613636][ T6431] __pte_alloc+0x6d/0x380 [ 117.613667][ T6431] ? __pfx___pte_alloc+0x10/0x10 [ 117.613701][ T6431] ? __rcu_read_unlock+0x27f/0x5e0 [ 117.613746][ T6431] walk_pgd_range+0xb99/0x1dd0 [ 117.613779][ T6431] ? __pfx_guard_install_set_pte+0x10/0x10 [ 117.613813][ T6431] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 117.613849][ T6431] ? __pfx_guard_install_set_pte+0x10/0x10 [ 117.613887][ T6431] ? __pfx_guard_install_set_pte+0x10/0x10 [ 117.613923][ T6431] ? __pfx_guard_install_set_pte+0x10/0x10 [ 117.613957][ T6431] ? __pfx_walk_pgd_range+0x10/0x10 [ 117.613995][ T6431] __walk_page_range+0x171/0x850 [ 117.614042][ T6431] walk_page_range_vma_unsafe+0x209/0x8f0 [ 117.614078][ T6431] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 117.614127][ T6431] madvise_guard_install+0x421/0x790 [ 117.614172][ T6431] ? __pfx_madvise_guard_install+0x10/0x10 [ 117.614208][ T6431] ? find_held_lock+0x2b/0x80 [ 117.614243][ T6431] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 117.614275][ T6431] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 117.614308][ T6431] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 117.614355][ T6431] ? __pfx_guard_install_set_pte+0x10/0x10 [ 117.614401][ T6431] madvise_vma_behavior+0xb9b/0x2240 [ 117.614444][ T6431] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 117.614484][ T6431] ? lock_vma_under_rcu+0x17c/0x590 [ 117.614530][ T6431] ? lock_vma_under_rcu+0x25/0x590 [ 117.614567][ T6431] ? lock_vma_under_rcu+0x1f9/0x590 [ 117.614606][ T6431] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 117.614653][ T6431] ? preempt_schedule_thunk+0x16/0x30 [ 117.614695][ T6431] ? preempt_schedule_common+0x42/0xc0 [ 117.614737][ T6431] madvise_walk_vmas+0x71c/0xa90 [ 117.614771][ T6431] ? try_to_wake_up+0x5f6/0x1900 [ 117.614804][ T6431] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 117.614840][ T6431] ? find_held_lock+0x2b/0x80 [ 117.614880][ T6431] madvise_do_behavior+0x1ea/0x510 [ 117.614912][ T6431] ? futex_private_hash_put+0x107/0x1c0 [ 117.614952][ T6431] ? __pfx_madvise_do_behavior+0x10/0x10 [ 117.614982][ T6431] ? futex_wake+0x1ad/0x530 [ 117.615004][ T6431] ? lockdep_hardirqs_on+0x78/0x100 [ 117.615023][ T6431] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.615046][ T6431] do_madvise+0x195/0x240 [ 117.615064][ T6431] ? __pfx_do_madvise+0x10/0x10 [ 117.615082][ T6431] ? do_futex+0x192/0x350 [ 117.615100][ T6431] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.615124][ T6431] ? exit_to_user_mode_loop+0xf3/0x670 [ 117.615151][ T6431] __x64_sys_madvise+0xa9/0x110 [ 117.615169][ T6431] ? lockdep_hardirqs_on+0x78/0x100 [ 117.615188][ T6431] do_syscall_64+0x115/0x840 [ 117.615207][ T6431] ? clear_bhb_loop+0x40/0x90 [ 117.615224][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.615239][ T6431] RIP: 0033:0x7f280519ce59 [ 117.615263][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.615282][ T6431] RSP: 002b:00007f2805fb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 117.615300][ T6431] RAX: ffffffffffffffda RBX: 00007f2805415fa0 RCX: 00007f280519ce59 [ 117.615310][ T6431] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 117.615349][ T6431] RBP: 00007f2805232d6f R08: 0000000000000000 R09: 0000000000000000 [ 117.615358][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.615367][ T6431] R13: 00007f2805416038 R14: 00007f2805415fa0 R15: 00007ffdcdc4fb38 [ 117.615387][ T6431] [ 120.798724][ T6491] ======================================================= [ 120.798724][ T6491] WARNING: The mand mount option has been deprecated and [ 120.798724][ T6491] and is ignored by this kernel. Remove the mand [ 120.798724][ T6491] option from the mount to silence this warning. [ 120.798724][ T6491] ======================================================= [ 121.845260][ T6529] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 122.246199][ T6538] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 122.254057][ T6538] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 122.333738][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 124.421520][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 125.347511][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 125.833061][ T6598] FAULT_INJECTION: forcing a failure. [ 125.833061][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 125.893031][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT(full) [ 125.893053][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.893063][ T6598] Call Trace: [ 125.893068][ T6598] [ 125.893074][ T6598] dump_stack_lvl+0x100/0x190 [ 125.893103][ T6598] should_fail_ex.cold+0x5/0xa [ 125.893122][ T6598] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 125.893144][ T6598] should_failslab+0xc2/0x120 [ 125.893161][ T6598] __kmalloc_noprof+0xe0/0x850 [ 125.893185][ T6598] ? __kmalloc_noprof+0x320/0x850 [ 125.893210][ T6598] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 125.893235][ T6598] x509_note_issuer+0xf9/0x210 [ 125.893268][ T6598] asn1_ber_decoder+0xd0c/0x2170 [ 125.893293][ T6598] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 125.893324][ T6598] x509_cert_parse+0x1c9/0x910 [ 125.893345][ T6598] ? kasan_save_stack+0x3f/0x50 [ 125.893359][ T6598] ? kasan_save_stack+0x30/0x50 [ 125.893372][ T6598] ? kasan_save_track+0x14/0x30 [ 125.893388][ T6598] pkcs7_extract_cert+0xa4/0x380 [ 125.893412][ T6598] asn1_ber_decoder+0x12b3/0x2170 [ 125.893435][ T6598] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 125.893463][ T6598] pkcs7_parse_message+0x289/0x870 [ 125.893488][ T6598] verify_pkcs7_signature+0x30/0xa0 [ 125.893507][ T6598] valid_regdb+0x211/0x590 [ 125.893525][ T6598] ? __pfx_valid_regdb+0x10/0x10 [ 125.893546][ T6598] reg_reload_regdb+0x11a/0x460 [ 125.893565][ T6598] ? __pfx_reg_reload_regdb+0x10/0x10 [ 125.893584][ T6598] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 125.893606][ T6598] ? nl80211_pre_doit+0x19a/0xae0 [ 125.893630][ T6598] genl_family_rcv_msg_doit+0x214/0x300 [ 125.893653][ T6598] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 125.893674][ T6598] ? genl_get_cmd+0x3e7/0x760 [ 125.893698][ T6598] ? bpf_lsm_capable+0x9/0x10 [ 125.893714][ T6598] ? security_capable+0x80/0x260 [ 125.893731][ T6598] genl_rcv_msg+0x560/0x800 [ 125.893757][ T6598] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.893778][ T6598] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 125.893798][ T6598] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 125.893814][ T6598] ? __pfx_nl80211_post_doit+0x10/0x10 [ 125.893841][ T6598] netlink_rcv_skb+0x159/0x420 [ 125.893860][ T6598] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.893881][ T6598] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.893907][ T6598] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.893927][ T6598] genl_rcv+0x28/0x40 [ 125.893946][ T6598] netlink_unicast+0x585/0x850 [ 125.893968][ T6598] ? __pfx_netlink_unicast+0x10/0x10 [ 125.893992][ T6598] netlink_sendmsg+0x8b0/0xda0 [ 125.894013][ T6598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.894031][ T6598] ? __import_iovec+0x1d2/0x640 [ 125.894053][ T6598] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 125.894071][ T6598] ____sys_sendmsg+0x9e1/0xb70 [ 125.894089][ T6598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.894109][ T6598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.894131][ T6598] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.894153][ T6598] ___sys_sendmsg+0x190/0x1e0 [ 125.894173][ T6598] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.894215][ T6598] __sys_sendmsg+0x170/0x220 [ 125.894231][ T6598] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.894245][ T6598] ? __x64_sys_futex+0x34f/0x4d0 [ 125.894274][ T6598] ? rcu_is_watching+0x12/0xc0 [ 125.894294][ T6598] do_syscall_64+0x115/0x840 [ 125.894314][ T6598] ? clear_bhb_loop+0x40/0x90 [ 125.894332][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.894347][ T6598] RIP: 0033:0x7efc1179ce59 [ 125.894360][ T6598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.894374][ T6598] RSP: 002b:00007efc1268c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.894390][ T6598] RAX: ffffffffffffffda RBX: 00007efc11a16090 RCX: 00007efc1179ce59 [ 125.894400][ T6598] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 125.894409][ T6598] RBP: 00007efc11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 125.894418][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.894427][ T6598] R13: 00007efc11a16128 R14: 00007efc11a16090 R15: 00007ffd3df8ecf8 [ 125.894446][ T6598] [ 126.502374][ T5638] Bluetooth: hci1: command 0x2016 tx timeout [ 126.843413][ T6603] hub 1-0:1.0: USB hub found [ 126.894030][ T6603] hub 1-0:1.0: 1 port detected [ 128.124978][ T6625] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET) [ 129.856474][ T6670] netlink: 326 bytes leftover after parsing attributes in process `syz.0.177'. [ 131.818641][ T6707] netlink: 215 bytes leftover after parsing attributes in process `syz.3.184'. [ 133.000046][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.008745][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.743386][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 135.105756][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.175888][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.764599][ T6827] random: crng reseeded on system resumption [ 142.646744][ T6309] syz.1.98 (6309) used greatest stack depth: 18984 bytes left [ 143.767883][ T6922] kexec: Could not allocate control_code_buffer [ 144.866264][ T6975] netlink: 'syz.2.234': attribute type 11 has an invalid length. [ 145.482165][ T30] audit: type=1800 audit(1780721307.152:3): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.236" name="lu_gp_id" dev="configfs" ino=13159 res=0 errno=0 [ 146.310531][ T7013] tipc: Started in network mode [ 146.369081][ T7013] tipc: Node identity ee00, cluster identity 4711 [ 146.419130][ T7013] tipc: Node number set to 60928 [ 149.078146][ T7041] kexec: Could not allocate control_code_buffer [ 149.579321][ T7076] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 149.988928][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 151.049348][ T7108] warning: `syz.1.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.146375][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 151.241808][ T7108] bond0: (slave bond_slave_0): Releasing backup interface [ 154.097783][ T7117] kexec: Could not allocate control_code_buffer [ 154.717583][ T7171] sctp: [Deprecated]: syz.1.275 (pid 7171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.717583][ T7171] Use struct sctp_sack_info instead [ 155.327363][ T7206] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.016039][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 157.292364][ T7244] veth0_vlan: entered allmulticast mode [ 157.385414][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.289'. [ 157.506236][ T7254] bridge_slave_1: left allmulticast mode [ 157.518719][ T7254] bridge_slave_1: left promiscuous mode [ 157.527990][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.543532][ T7254] bridge_slave_0: left allmulticast mode [ 157.562117][ T7254] bridge_slave_0: left promiscuous mode [ 157.568228][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.183675][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 158.345509][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 158.591643][ T7285] smpboot: CPU 1 is now offline [ 159.278150][ T7294] FAULT_INJECTION: forcing a failure. [ 159.278150][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 159.366093][ T7294] CPU: 0 UID: 0 PID: 7294 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 159.366118][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.366131][ T7294] Call Trace: [ 159.366138][ T7294] [ 159.366145][ T7294] dump_stack_lvl+0x100/0x190 [ 159.366178][ T7294] should_fail_ex.cold+0x5/0xa [ 159.366197][ T7294] should_failslab+0xc2/0x120 [ 159.366215][ T7294] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 159.366237][ T7294] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 159.366262][ T7294] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 159.366281][ T7294] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 159.366304][ T7294] alloc_inode+0x68/0x250 [ 159.366326][ T7294] new_inode+0x22/0x1c0 [ 159.366348][ T7294] hugetlbfs_get_inode+0x39a/0x700 [ 159.366367][ T7294] ? do_futex+0x192/0x350 [ 159.366384][ T7294] hugetlb_file_setup+0x15b/0x5b0 [ 159.366411][ T7294] ksys_mmap_pgoff+0x242/0x610 [ 159.366444][ T7294] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 159.366465][ T7294] ? xfd_validate_state+0x129/0x190 [ 159.366479][ T7294] ? ksys_write+0x1ac/0x250 [ 159.366498][ T7294] __x64_sys_mmap+0x125/0x190 [ 159.366515][ T7294] do_syscall_64+0x115/0x840 [ 159.366534][ T7294] ? clear_bhb_loop+0x40/0x90 [ 159.366552][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.366568][ T7294] RIP: 0033:0x7efc1179ce59 [ 159.366581][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.366595][ T7294] RSP: 002b:00007efc126ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.366610][ T7294] RAX: ffffffffffffffda RBX: 00007efc11a15fa0 RCX: 00007efc1179ce59 [ 159.366619][ T7294] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 159.366628][ T7294] RBP: 00007efc11832d6f R08: 000000000000000d R09: 0000300000000000 [ 159.366637][ T7294] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 159.366646][ T7294] R13: 00007efc11a16038 R14: 00007efc11a15fa0 R15: 00007ffd3df8ecf8 [ 159.366664][ T7294] [ 161.804478][ T7355] FAULT_INJECTION: forcing a failure. [ 161.804478][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 161.851373][ T7355] CPU: 0 UID: 0 PID: 7355 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT(full) [ 161.851396][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.851405][ T7355] Call Trace: [ 161.851411][ T7355] [ 161.851417][ T7355] dump_stack_lvl+0x100/0x190 [ 161.851446][ T7355] should_fail_ex.cold+0x5/0xa [ 161.851466][ T7355] should_failslab+0xc2/0x120 [ 161.851484][ T7355] __kmalloc_cache_noprof+0x7a/0x6f0 [ 161.851505][ T7355] ? percpu_ref_init+0xec/0x3f0 [ 161.851523][ T7355] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 161.851543][ T7355] percpu_ref_init+0xec/0x3f0 [ 161.851560][ T7355] io_uring_setup.cold+0x23b/0x1c6e [ 161.851585][ T7355] ? __pfx_io_uring_setup+0x10/0x10 [ 161.851608][ T7355] ? do_futex+0x192/0x350 [ 161.851623][ T7355] ? __pfx_do_futex+0x10/0x10 [ 161.851646][ T7355] ? xfd_validate_state+0x129/0x190 [ 161.851665][ T7355] __x64_sys_io_uring_setup+0xc2/0x170 [ 161.851688][ T7355] do_syscall_64+0x115/0x840 [ 161.851708][ T7355] ? clear_bhb_loop+0x40/0x90 [ 161.851725][ T7355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.851740][ T7355] RIP: 0033:0x7f280519ce59 [ 161.851754][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.851767][ T7355] RSP: 002b:00007f2805fb1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 161.851782][ T7355] RAX: ffffffffffffffda RBX: 00007f2805415fa0 RCX: 00007f280519ce59 [ 161.851792][ T7355] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 161.851801][ T7355] RBP: 00007f2805232d6f R08: 0000000000000000 R09: 0000000000000000 [ 161.851817][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.851825][ T7355] R13: 00007f2805416038 R14: 00007f2805415fa0 R15: 00007ffdcdc4fb38 [ 161.851845][ T7355] [ 163.272095][ T7395] netlink: 25 bytes leftover after parsing attributes in process `syz.0.320'. [ 163.356815][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 163.369781][ T7399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.320'. [ 164.676760][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 165.205117][ T50] Bluetooth: hci3: SCO packet too small [ 165.970725][ T7458] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 11!phy1!netdev:wlan1!rc_rateid syzkaller syzkaller login: [ 167.332732][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 169.898466][ T7547] FAULT_INJECTION: forcing a failure. [ 169.898466][ T7547] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 169.926201][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 169.961893][ T7547] CPU: 0 UID: 0 PID: 7547 Comm: syz.0.351 Not tainted syzkaller #0 PREEMPT(full) [ 169.961916][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.961925][ T7547] Call Trace: [ 169.961931][ T7547] [ 169.961938][ T7547] dump_stack_lvl+0x100/0x190 [ 169.961967][ T7547] should_fail_ex.cold+0x5/0xa [ 169.961984][ T7547] ? prepare_alloc_pages+0x16d/0x5f0 [ 169.962004][ T7547] should_fail_alloc_page+0xeb/0x140 [ 169.962023][ T7547] prepare_alloc_pages+0x1f0/0x5f0 [ 169.962044][ T7547] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 169.962069][ T7547] ? find_held_lock+0x2b/0x80 [ 169.962089][ T7547] ? lock_acquire+0x1b1/0x370 [ 169.962112][ T7547] ? __lock_acquire+0x4a5/0x2630 [ 169.962135][ T7547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.962158][ T7547] ? page_table_check_set+0x486/0x920 [ 169.962177][ T7547] ? do_raw_spin_lock+0x128/0x260 [ 169.962196][ T7547] ? mark_held_locks+0x40/0x70 [ 169.962217][ T7547] ? find_held_lock+0x2b/0x80 [ 169.962234][ T7547] ? find_held_lock+0x2b/0x80 [ 169.962250][ T7547] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.962271][ T7547] ? policy_nodemask+0xed/0x4f0 [ 169.962290][ T7547] alloc_pages_mpol+0x1fb/0x540 [ 169.962307][ T7547] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 169.962326][ T7547] ? __lock_acquire+0x4a5/0x2630 [ 169.962349][ T7547] folio_alloc_mpol_noprof+0x36/0x260 [ 169.962369][ T7547] vma_alloc_folio_noprof+0xed/0x1d0 [ 169.962388][ T7547] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 169.962413][ T7547] do_anonymous_page+0xb46/0x2050 [ 169.962434][ T7547] ? rcu_read_unlock+0x2d/0xb0 [ 169.962459][ T7547] __handle_mm_fault+0x1d2c/0x2a00 [ 169.962484][ T7547] ? reacquire_held_locks+0xce/0x1e0 [ 169.962506][ T7547] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.962530][ T7547] ? lock_vma_under_rcu+0x17c/0x590 [ 169.962561][ T7547] handle_mm_fault+0x37b/0xa30 [ 169.962585][ T7547] do_user_addr_fault+0x5a3/0x12f0 [ 169.962608][ T7547] exc_page_fault+0x6f/0xd0 [ 169.962629][ T7547] asm_exc_page_fault+0x26/0x30 [ 169.962643][ T7547] RIP: 0033:0x7f280505e60b [ 169.962657][ T7547] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 169.962671][ T7547] RSP: 002b:00007f2805faffa0 EFLAGS: 00010206 [ 169.962683][ T7547] RAX: 0000000000000000 RBX: 00007f2805415fa0 RCX: 0000000000000000 [ 169.962692][ T7547] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140 [ 169.962702][ T7547] RBP: 00007f2805232d6f R08: 0000000000000000 R09: 0000000000000000 [ 169.962711][ T7547] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 169.962720][ T7547] R13: 00007f2805416038 R14: 00007f2805415fa0 R15: 00007ffdcdc4fb38 [ 169.962740][ T7547] [ 169.962916][ T7547] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 170.718864][ T7563] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 170.763928][ T7563] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 171.572561][ T7606] nbd: must specify at least one socket [ 173.442699][ T7626] netlink: 330 bytes leftover after parsing attributes in process `syz.3.366'. [ 173.511914][ T7626] : renamed from geneve0 (while UP) [ 174.175850][ T7647] futex_wake_op: syz.3.371 tries to shift op by -2048; fix this program [ 174.585980][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 174.825949][ T7651] ipvlan1: entered promiscuous mode [ 174.921645][ T7651] ipvlan1: entered allmulticast mode [ 175.011690][ T7651] veth0_vlan: entered allmulticast mode [ 175.843741][ T50] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 176.050837][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.378'. [ 179.101895][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 179.733264][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 180.929950][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 181.140074][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 181.684000][ T7841] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 181.858701][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.413'. [ 182.074948][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 182.125034][ T7856] bridge_slave_1: left allmulticast mode [ 182.158580][ T7856] bridge_slave_1: left promiscuous mode [ 182.184537][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.236223][ T7856] bridge_slave_0: left allmulticast mode [ 182.266241][ T7856] bridge_slave_0: left promiscuous mode [ 182.291761][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.219718][ T5638] Bluetooth: hci3: command 0x2016 tx timeout [ 183.287795][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 183.467829][ T50] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 185.574814][ T7925] vmstat_refresh: nr_hugetlb -512 [ 185.669451][ T7927] vmstat_refresh: nr_hugetlb -512 [ 188.312796][ T7991] netlink: 'syz.3.442': attribute type 21 has an invalid length. [ 188.357801][ T7991] netlink: 334 bytes leftover after parsing attributes in process `syz.3.442'. [ 189.138626][ T8003] nbd: must specify at least one socket [ 192.735339][ T8106] FAULT_INJECTION: forcing a failure. [ 192.735339][ T8106] name fail_futex, interval 1, probability 0, space 0, times 1 [ 192.817605][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.1.465 Not tainted syzkaller #0 PREEMPT(full) [ 192.817628][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.817636][ T8106] Call Trace: [ 192.817641][ T8106] [ 192.817646][ T8106] dump_stack_lvl+0x100/0x190 [ 192.817673][ T8106] should_fail_ex.cold+0x5/0xa [ 192.817691][ T8106] get_futex_key+0x295/0x1510 [ 192.817715][ T8106] ? __pfx_get_futex_key+0x10/0x10 [ 192.817735][ T8106] ? lock_acquire+0x1b1/0x370 [ 192.817760][ T8106] futex_wake+0xea/0x530 [ 192.817778][ T8106] ? __pfx_futex_wake+0x10/0x10 [ 192.817794][ T8106] ? exit_mm_release+0x19/0x30 [ 192.817819][ T8106] do_futex+0x32b/0x350 [ 192.817833][ T8106] ? __pfx_do_futex+0x10/0x10 [ 192.817845][ T8106] ? __might_fault+0xc5/0x140 [ 192.817870][ T8106] mm_release+0x24a/0x2f0 [ 192.817886][ T8106] do_exit+0x707/0x2af0 [ 192.817909][ T8106] ? __pfx_do_exit+0x10/0x10 [ 192.817927][ T8106] ? do_raw_spin_lock+0x128/0x260 [ 192.817941][ T8106] ? find_held_lock+0x2b/0x80 [ 192.817957][ T8106] ? get_signal+0x7e5/0x2210 [ 192.817977][ T8106] do_group_exit+0xd5/0x2a0 [ 192.817998][ T8106] get_signal+0x20ff/0x2210 [ 192.818020][ T8106] ? __pfx_get_signal+0x10/0x10 [ 192.818038][ T8106] ? do_futex+0x192/0x350 [ 192.818053][ T8106] arch_do_signal_or_restart+0x91/0x7a0 [ 192.818072][ T8106] ? find_held_lock+0x2b/0x80 [ 192.818088][ T8106] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 192.818112][ T8106] ? __x64_sys_close_range+0x30f/0x5d0 [ 192.818130][ T8106] ? rcu_is_watching+0x12/0xc0 [ 192.818148][ T8106] exit_to_user_mode_loop+0x98/0x670 [ 192.818168][ T8106] ? rcu_is_watching+0x12/0xc0 [ 192.818185][ T8106] do_syscall_64+0x652/0x840 [ 192.818211][ T8106] ? clear_bhb_loop+0x40/0x90 [ 192.818228][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.818242][ T8106] RIP: 0033:0x7efc1179ce59 [ 192.818254][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.818267][ T8106] RSP: 002b:00007efc1266b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.818280][ T8106] RAX: fffffffffffffe00 RBX: 00007efc11a16188 RCX: 00007efc1179ce59 [ 192.818289][ T8106] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc11a16188 [ 192.818297][ T8106] RBP: 00007efc11a16180 R08: 0000000000000000 R09: 0000000000000000 [ 192.818305][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.818313][ T8106] R13: 00007efc11a16218 R14: 00007ffd3df8ec10 R15: 00007ffd3df8ecf8 [ 192.818331][ T8106] [ 193.278897][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.467'. [ 193.289077][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.364421][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.426975][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.433676][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.643992][ T8130] ima: policy update failed [ 194.659325][ T30] audit: type=1802 audit(1780729156.320:4): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.471" res=0 errno=0 [ 196.188066][ T8169] Invalid ELF header magic: != ELF [ 197.015098][ T30] audit: type=1107 audit(1780729158.680:5): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 197.071011][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.481'. [ 197.615542][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 197.733790][ T30] audit: type=1800 audit(1780729159.400:6): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.486" name="lu_gp_id" dev="configfs" ino=21244 res=0 errno=0 [ 197.781994][ T8205] kstrtoul() returned -22 for lu_gp_id [ 199.868887][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 201.928843][ T8288] nbd: must specify at least one socket [ 202.589219][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 206.515165][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.524'. [ 206.746329][ T4949] Bluetooth: hci1: command 0x2016 tx timeout [ 206.752586][ T5647] Bluetooth: hci3: command 0x2016 tx timeout [ 206.758612][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 207.202769][ T8412] kexec: Could not allocate control_code_buffer [ 207.338789][ T8416] FAULT_INJECTION: forcing a failure. [ 207.338789][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 207.381775][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 207.381798][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.381808][ T8416] Call Trace: [ 207.381813][ T8416] [ 207.381819][ T8416] dump_stack_lvl+0x100/0x190 [ 207.381849][ T8416] should_fail_ex.cold+0x5/0xa [ 207.381868][ T8416] should_failslab+0xc2/0x120 [ 207.381885][ T8416] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 207.381909][ T8416] ? __d_alloc+0x34/0xa40 [ 207.381932][ T8416] __d_alloc+0x34/0xa40 [ 207.381953][ T8416] d_alloc_parallel+0x111/0x14e0 [ 207.381967][ T8416] ? stack_trace_save+0x8e/0xc0 [ 207.381988][ T8416] ? __lock_acquire+0x4a5/0x2630 [ 207.382012][ T8416] ? __pfx_d_alloc_parallel+0x10/0x10 [ 207.382028][ T8416] ? lockdep_init_map_type+0x5c/0x250 [ 207.382051][ T8416] ? lockdep_init_map_type+0x5c/0x250 [ 207.382076][ T8416] __lookup_slow+0x193/0x460 [ 207.382098][ T8416] ? __pfx___lookup_slow+0x10/0x10 [ 207.382128][ T8416] ? __d_lookup+0x266/0x4a0 [ 207.382146][ T8416] lookup_slow+0x50/0x70 [ 207.382167][ T8416] link_path_walk+0x1377/0x1cc0 [ 207.382189][ T8416] path_openat+0x1be/0x31a0 [ 207.382206][ T8416] ? kasan_save_stack+0x3f/0x50 [ 207.382219][ T8416] ? kasan_save_stack+0x30/0x50 [ 207.382239][ T8416] ? kasan_save_track+0x14/0x30 [ 207.382254][ T8416] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 207.382281][ T8416] ? __pfx_path_openat+0x10/0x10 [ 207.382307][ T8416] do_file_open+0x20e/0x430 [ 207.382327][ T8416] ? __pfx_do_file_open+0x10/0x10 [ 207.382359][ T8416] ? alloc_fd+0x476/0x790 [ 207.382379][ T8416] ? do_getname+0x191/0x390 [ 207.382401][ T8416] do_sys_openat2+0x10d/0x1e0 [ 207.382422][ T8416] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.382453][ T8416] __x64_sys_openat+0x12d/0x210 [ 207.382475][ T8416] ? __pfx___x64_sys_openat+0x10/0x10 [ 207.382495][ T8416] ? ksys_write+0x1ac/0x250 [ 207.382514][ T8416] ? rcu_is_watching+0x12/0xc0 [ 207.382532][ T8416] do_syscall_64+0x115/0x840 [ 207.382552][ T8416] ? clear_bhb_loop+0x40/0x90 [ 207.382569][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.382585][ T8416] RIP: 0033:0x7f280519ce59 [ 207.382599][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.382613][ T8416] RSP: 002b:00007f2805fb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 207.382627][ T8416] RAX: ffffffffffffffda RBX: 00007f2805415fa0 RCX: 00007f280519ce59 [ 207.382637][ T8416] RDX: 0000000000121102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 207.382646][ T8416] RBP: 00007f2805232d6f R08: 0000000000000000 R09: 0000000000000000 [ 207.382655][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.382664][ T8416] R13: 00007f2805416038 R14: 00007f2805415fa0 R15: 00007ffdcdc4fb38 [ 207.382683][ T8416] [ 209.046128][ T5638] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 209.441487][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.535'. [ 211.139718][ T5650] Bluetooth: hci1: command 0x2016 tx timeout [ 212.517707][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 213.219598][ T5638] Bluetooth: hci1: command 0x2016 tx timeout [ 215.254761][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 216.163884][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 216.180875][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 217.914723][ T8629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 221.968636][ T8699] FAULT_INJECTION: forcing a failure. [ 221.968636][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 222.081146][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.1.583 Not tainted syzkaller #0 PREEMPT(full) [ 222.081170][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.081179][ T8699] Call Trace: [ 222.081184][ T8699] [ 222.081190][ T8699] dump_stack_lvl+0x100/0x190 [ 222.081220][ T8699] should_fail_ex.cold+0x5/0xa [ 222.081239][ T8699] should_failslab+0xc2/0x120 [ 222.081257][ T8699] __kvmalloc_node_noprof+0xfa/0xa00 [ 222.081279][ T8699] ? io_alloc_cache_init+0x38/0x170 [ 222.081297][ T8699] ? lockdep_init_map_type+0x5c/0x250 [ 222.081324][ T8699] io_alloc_cache_init+0x38/0x170 [ 222.081343][ T8699] io_uring_setup.cold+0x3cd/0x1c6e [ 222.081368][ T8699] ? __pfx_io_uring_setup+0x10/0x10 [ 222.081391][ T8699] ? do_futex+0x192/0x350 [ 222.081406][ T8699] ? __pfx_do_futex+0x10/0x10 [ 222.081429][ T8699] ? xfd_validate_state+0x129/0x190 [ 222.081443][ T8699] ? ksys_write+0x1ac/0x250 [ 222.081463][ T8699] __x64_sys_io_uring_setup+0xc2/0x170 [ 222.081486][ T8699] do_syscall_64+0x115/0x840 [ 222.081505][ T8699] ? clear_bhb_loop+0x40/0x90 [ 222.081523][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.081538][ T8699] RIP: 0033:0x7efc1179ce59 [ 222.081551][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.081565][ T8699] RSP: 002b:00007efc126ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 222.081580][ T8699] RAX: ffffffffffffffda RBX: 00007efc11a15fa0 RCX: 00007efc1179ce59 [ 222.081589][ T8699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 222.081598][ T8699] RBP: 00007efc11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 222.081606][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.081614][ T8699] R13: 00007efc11a16038 R14: 00007efc11a15fa0 R15: 00007ffd3df8ecf8 [ 222.081633][ T8699] [ 222.549524][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.585'. [ 222.692827][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'. [ 222.740210][ T8715] bridge_slave_1: left allmulticast mode [ 222.753909][ T8715] bridge_slave_1: left promiscuous mode [ 222.771589][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.856095][ T8715] bridge_slave_0: left allmulticast mode [ 222.862808][ T8715] bridge_slave_0: left promiscuous mode [ 222.869315][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.245706][ T8720] netlink: 'syz.2.588': attribute type 10 has an invalid length. [ 223.288334][ T8720] netlink: 330 bytes leftover after parsing attributes in process `syz.2.588'. [ 226.683230][ T8774] kexec: Could not allocate control_code_buffer [ 227.437161][ T30] audit: type=1800 audit(4294967306.030:7): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.608" name="members" dev="configfs" ino=24572 res=0 errno=0 [ 227.606271][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 229.017830][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'. [ 232.760455][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 235.505722][ T8946] kexec: Could not allocate control_code_buffer [ 235.521400][ T5650] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 236.920840][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'. [ 237.280997][ T8995] netlink: 326 bytes leftover after parsing attributes in process `syz.1.642'. [ 237.542664][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 238.192177][ T9013] ubi0: attaching mtd0 [ 238.227737][ T9013] ubi0: scanning is finished [ 238.486175][ T9013] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 238.578526][ T9013] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 238.669117][ T9013] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 238.732220][ T9013] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 238.774829][ T9013] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 238.838683][ T9013] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 238.923677][ T9013] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4119028999 [ 239.061117][ T9013] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.322536][ T9022] ubi0: background thread "ubi_bgt0d" started, PID 9022 [ 239.620185][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 240.897912][ T9076] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 241.033837][ T9076] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 242.661117][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 244.015444][ T9127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.662'. [ 244.346971][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 244.383743][ T9085] Process accounting resumed [ 245.494769][ T9162] futex_wake_op: syz.0.668 tries to shift op by -2048; fix this program [ 245.742029][ T9162] 0x000000000001-0x000000020000 : "" [ 246.167292][ T9162] ftl_cs: FTL header corrupt! [ 247.376902][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 248.009819][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 249.612278][ T9225] netlink: 164 bytes leftover after parsing attributes in process `syz.2.680'. [ 250.671017][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.685'. [ 251.292337][ T9261] netlink: set zone limit has 4 unknown bytes [ 252.553057][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'. [ 255.861660][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869711][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.386578][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 260.127574][ T9412] netlink: 342 bytes leftover after parsing attributes in process `syz.1.719'. [ 260.194661][ T9412] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.258241][ T9412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.267919][ T9412] IPv6: NLM_F_CREATE should be set when creating new route [ 260.275239][ T9412] IPv6: NLM_F_CREATE should be set when creating new route [ 261.048678][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'. [ 261.856754][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 264.093695][ T9476] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 268.253502][ T9531] netlink: 146 bytes leftover after parsing attributes in process `syz.1.742'. [ 269.585305][ T9556] lo: entered allmulticast mode [ 269.761724][ T9556] lo: left allmulticast mode [ 270.306155][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 272.827979][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 273.727884][ T9630] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.813910][ T9616] zswap: compressor 000 not available [ 274.599103][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.763'. [ 275.129148][ T9624] Process accounting paused [ 275.392902][ T9661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 276.533017][ T9684] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.996734][ T9705] random: crng reseeded on system resumption [ 278.954641][ T5650] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 279.808493][ T9719] Invalid ELF header magic: != ELF [ 281.569292][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.785'. [ 283.142172][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'. [ 283.664153][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 292.068207][ T9891] netlink: 'syz.3.816': attribute type 2 has an invalid length. [ 292.503482][ T9891] futex_wake_op: syz.3.816 tries to shift op by -2048; fix this program [ 294.104534][ T9927] futex_wake_op: syz.0.822 tries to shift op by -2048; fix this program [ 294.167680][ T9927] futex_wake_op: syz.0.822 tries to shift op by -2048; fix this program [ 294.937530][ T9913] kexec: Could not allocate control_code_buffer [ 297.096950][ T9949] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 299.534516][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 300.879250][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 302.388910][T10043] FAULT_INJECTION: forcing a failure. [ 302.388910][T10043] name fail_page_alloc, interval 0, probability 0, space 0, times 0 [ 302.476862][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT(full) [ 302.476885][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.476908][T10043] Call Trace: [ 302.476914][T10043] [ 302.476920][T10043] dump_stack_lvl+0x100/0x190 [ 302.476951][T10043] should_fail_ex.cold+0x5/0xa [ 302.476968][T10043] ? fs_reclaim_acquire+0x70/0x100 [ 302.476988][T10043] should_fail_alloc_page+0xeb/0x140 [ 302.477009][T10043] prepare_alloc_pages+0x1f0/0x5f0 [ 302.477034][T10043] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 302.477058][T10043] ? rcu_is_watching+0x12/0xc0 [ 302.477074][T10043] ? trace_sched_exit_tp+0x11c/0x160 [ 302.477095][T10043] ? __schedule+0x12a7/0x67a0 [ 302.477112][T10043] ? __pfx_stack_trace_save+0x10/0x10 [ 302.477137][T10043] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 302.477159][T10043] ? __lock_acquire+0x4a5/0x2630 [ 302.477181][T10043] ? blk_trace_setup_prepare+0x35c/0x6c0 [ 302.477199][T10043] ? __pfx___schedule+0x10/0x10 [ 302.477222][T10043] ? irqentry_exit+0x24d/0x970 [ 302.477249][T10043] ? lockdep_hardirqs_on+0x78/0x100 [ 302.477270][T10043] ? irqentry_exit+0x24d/0x970 [ 302.477290][T10043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.477311][T10043] ? policy_nodemask+0xed/0x4f0 [ 302.477331][T10043] alloc_pages_mpol+0x1fb/0x540 [ 302.477349][T10043] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 302.477366][T10043] ? alloc_frozen_pages_noprof+0x16/0x160 [ 302.477385][T10043] ? __sanitizer_cov_trace_pc+0x39/0x70 [ 302.477408][T10043] alloc_pages_noprof+0x1a/0x160 [ 302.477428][T10043] relay_open_buf.part.0+0x261/0xb70 [ 302.477451][T10043] relay_open+0x7b9/0xa00 [ 302.477470][T10043] blk_trace_setup_prepare+0x35c/0x6c0 [ 302.477489][T10043] blk_trace_setup+0x217/0x440 [ 302.477508][T10043] ? __pfx_blk_trace_setup+0x10/0x10 [ 302.477523][T10043] ? lockdep_hardirqs_on+0x36/0x100 [ 302.477547][T10043] ? __pfx_vsnprintf+0x10/0x10 [ 302.477576][T10043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.477597][T10043] ? do_vfs_ioctl+0x226/0x13e0 [ 302.477614][T10043] blk_trace_ioctl+0x245/0x320 [ 302.477632][T10043] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 302.477652][T10043] ? find_held_lock+0x2b/0x80 [ 302.477668][T10043] ? __fget_files+0x215/0x3d0 [ 302.477684][T10043] ? hook_file_ioctl_common+0x149/0x410 [ 302.477704][T10043] blkdev_ioctl+0x17c/0x6f0 [ 302.477726][T10043] ? __pfx_blkdev_ioctl+0x10/0x10 [ 302.477750][T10043] ? __pfx_blkdev_ioctl+0x10/0x10 [ 302.477772][T10043] __x64_sys_ioctl+0x18e/0x210 [ 302.477788][T10043] do_syscall_64+0x115/0x840 [ 302.477806][T10043] ? clear_bhb_loop+0x40/0x90 [ 302.477824][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.477845][T10043] RIP: 0033:0x7f280519ce59 [ 302.477858][T10043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.477873][T10043] RSP: 002b:00007f2805f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.477889][T10043] RAX: ffffffffffffffda RBX: 00007f2805416090 RCX: 00007f280519ce59 [ 302.477899][T10043] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 302.477908][T10043] RBP: 00007f2805232d6f R08: 0000000000000000 R09: 0000000000000000 [ 302.477917][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.477926][T10043] R13: 00007f2805416128 R14: 00007f2805416090 R15: 00007ffdcdc4fb38 [ 302.477946][T10043] [ 305.981999][T10077] Process accounting resumed [ 308.039275][T10125] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 308.094360][T10125] pci 0000:00:01.3: PCI INT A: no GSI [ 308.874033][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 312.411116][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.879'. [ 312.562483][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 313.623399][T10245] bonding: &Irh,| is being created... [ 314.543232][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.889'. [ 316.176996][T10303] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 316.298227][ T5295] 8021q: adding VLAN 0 to HW filter on device &Irh,| [ 317.302921][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.309530][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.861899][ T5650] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 320.640358][T10390] netlink: Failed to add  helper -22 [ 320.663810][T10361] can: request_module (can-proto-3) failed. [ 321.940246][ T5638] Bluetooth: hci1: command 0x2016 tx timeout [ 322.288854][T10421] FAULT_INJECTION: forcing a failure. [ 322.288854][T10421] name failslab, interval 1, probability 0, space 0, times 0 [ 322.363195][T10421] CPU: 0 UID: 0 PID: 10421 Comm: syz.1.912 Not tainted syzkaller #0 PREEMPT(full) [ 322.363218][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.363227][T10421] Call Trace: [ 322.363233][T10421] [ 322.363239][T10421] dump_stack_lvl+0x100/0x190 [ 322.363269][T10421] should_fail_ex.cold+0x5/0xa [ 322.363288][T10421] ? tracepoint_add_func+0x3a8/0x1150 [ 322.363309][T10421] should_failslab+0xc2/0x120 [ 322.363334][T10421] __kmalloc_noprof+0xe0/0x850 [ 322.363360][T10421] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 322.363379][T10421] tracepoint_add_func+0x3a8/0x1150 [ 322.363398][T10421] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 322.363419][T10421] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 322.363436][T10421] tracepoint_probe_register+0xc4/0x110 [ 322.363459][T10421] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 322.363480][T10421] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 322.363498][T10421] ? relay_open+0x793/0xa00 [ 322.363518][T10421] blk_register_tracepoints+0x237/0x440 [ 322.363532][T10421] blk_trace_setup_finalize+0x320/0x3a0 [ 322.363549][T10421] blk_trace_setup+0x254/0x440 [ 322.363568][T10421] ? __pfx_blk_trace_setup+0x10/0x10 [ 322.363583][T10421] ? lockdep_hardirqs_on+0x36/0x100 [ 322.363608][T10421] ? __pfx_vsnprintf+0x10/0x10 [ 322.363638][T10421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.363659][T10421] ? do_vfs_ioctl+0x226/0x13e0 [ 322.363676][T10421] blk_trace_ioctl+0x245/0x320 [ 322.363694][T10421] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 322.363714][T10421] ? find_held_lock+0x2b/0x80 [ 322.363731][T10421] ? __fget_files+0x215/0x3d0 [ 322.363746][T10421] ? hook_file_ioctl_common+0x149/0x410 [ 322.363767][T10421] blkdev_ioctl+0x17c/0x6f0 [ 322.363790][T10421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 322.363814][T10421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 322.363840][T10421] __x64_sys_ioctl+0x18e/0x210 [ 322.363856][T10421] do_syscall_64+0x115/0x840 [ 322.363875][T10421] ? clear_bhb_loop+0x40/0x90 [ 322.363892][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.363907][T10421] RIP: 0033:0x7efc1179ce59 [ 322.363920][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.363933][T10421] RSP: 002b:00007efc1268c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.363947][T10421] RAX: ffffffffffffffda RBX: 00007efc11a16090 RCX: 00007efc1179ce59 [ 322.363957][T10421] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 322.363966][T10421] RBP: 00007efc11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 322.363975][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.363983][T10421] R13: 00007efc11a16128 R14: 00007efc11a16090 R15: 00007ffd3df8ecf8 [ 322.364004][T10421] [ 322.364150][T10421] ------------[ cut here ]------------ [ 322.651531][T10421] ret [ 322.651541][T10421] WARNING: kernel/trace/blktrace.c:1359 at blk_register_tracepoints+0x3e4/0x440, CPU#0: syz.1.912/10421 [ 322.665420][T10421] Modules linked in: [ 322.669553][T10421] CPU: 0 UID: 0 PID: 10421 Comm: syz.1.912 Not tainted syzkaller #0 PREEMPT(full) [ 322.678824][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.688931][T10421] RIP: 0010:blk_register_tracepoints+0x3e4/0x440 [ 322.695393][T10421] Code: 0f 0b 90 e9 01 fe ff ff e8 09 99 f7 ff 90 0f 0b 90 e9 20 fe ff ff e8 fb 98 f7 ff 90 0f 0b 90 e9 3f fe ff ff e8 ed 98 f7 ff 90 <0f> 0b 90 e9 5e fe ff ff e8 df 98 f7 ff 90 0f 0b 90 e9 7d fe ff ff [ 322.715649][T10421] RSP: 0018:ffffc90003a7faf8 EFLAGS: 00010283 [ 322.722453][T10421] RAX: 000000000004aaab RBX: 00000000fffffff4 RCX: ffffc9000e569000 [ 322.730888][T10421] RDX: 0000000000080000 RSI: ffffffff821062b3 RDI: ffff88807f4c5d00 [ 322.738851][T10421] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 322.747158][T10421] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 322.755304][T10421] R13: ffff88802725a540 R14: ffffc90003a7fd98 R15: 0000000000000001 [ 322.763466][T10421] FS: 00007efc1268c6c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 322.772482][T10421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.779171][T10421] CR2: 0000001b34e20ff8 CR3: 0000000037f08000 CR4: 00000000003526f0 [ 322.787213][T10421] Call Trace: [ 322.790532][T10421] [ 322.793454][T10421] blk_trace_setup_finalize+0x320/0x3a0 [ 322.798994][T10421] blk_trace_setup+0x254/0x440 [ 322.803806][T10421] ? __pfx_blk_trace_setup+0x10/0x10 [ 322.809106][T10421] ? lockdep_hardirqs_on+0x36/0x100 [ 322.814395][T10421] ? __pfx_vsnprintf+0x10/0x10 [ 322.819913][T10421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.825896][T10421] ? do_vfs_ioctl+0x226/0x13e0 [ 322.831290][T10421] blk_trace_ioctl+0x245/0x320 [ 322.836051][T10421] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 322.841442][T10421] ? find_held_lock+0x2b/0x80 [ 322.846120][T10421] ? __fget_files+0x215/0x3d0 [ 322.850989][T10421] ? hook_file_ioctl_common+0x149/0x410 [ 322.856529][T10421] blkdev_ioctl+0x17c/0x6f0 [ 322.861103][T10421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 322.866159][T10421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 322.871290][T10421] __x64_sys_ioctl+0x18e/0x210 [ 322.876049][T10421] do_syscall_64+0x115/0x840 [ 322.880671][T10421] ? clear_bhb_loop+0x40/0x90 [ 322.885339][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.891260][T10421] RIP: 0033:0x7efc1179ce59 [ 322.895685][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.915693][T10421] RSP: 002b:00007efc1268c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.924892][T10421] RAX: ffffffffffffffda RBX: 00007efc11a16090 RCX: 00007efc1179ce59 [ 322.933308][T10421] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 322.941337][T10421] RBP: 00007efc11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 322.950486][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.958506][T10421] R13: 00007efc11a16128 R14: 00007efc11a16090 R15: 00007ffd3df8ecf8 [ 322.966571][T10421] [ 322.969641][T10421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.976926][T10421] CPU: 0 UID: 0 PID: 10421 Comm: syz.1.912 Not tainted syzkaller #0 PREEMPT(full) [ 322.986191][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.996317][T10421] Call Trace: [ 322.999588][T10421] [ 323.002510][T10421] dump_stack_lvl+0x100/0x190 [ 323.007181][T10421] vpanic+0x552/0x970 [ 323.011147][T10421] ? __pfx_vpanic+0x10/0x10 [ 323.015639][T10421] panic+0xd1/0xe0 [ 323.019348][T10421] ? __pfx_panic+0x10/0x10 [ 323.023754][T10421] check_panic_on_warn.cold+0x19/0x34 [ 323.029115][T10421] ? blk_register_tracepoints+0x3e4/0x440 [ 323.034819][T10421] __warn.cold+0x191/0x328 [ 323.039228][T10421] __report_bug+0x296/0x3d0 [ 323.043749][T10421] ? blk_register_tracepoints+0x3e4/0x440 [ 323.049456][T10421] ? __pfx___report_bug+0x10/0x10 [ 323.054473][T10421] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 323.060095][T10421] ? __kmalloc_noprof+0x320/0x850 [ 323.065117][T10421] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.071097][T10421] ? blk_register_tracepoints+0x3e4/0x440 [ 323.076803][T10421] report_bug+0xb2/0x220 [ 323.081038][T10421] ? blk_register_tracepoints+0x3e4/0x440 [ 323.086772][T10421] handle_bug+0x16a/0x2a0 [ 323.091161][T10421] exc_invalid_op+0x17/0x50 [ 323.095664][T10421] asm_exc_invalid_op+0x1a/0x20 [ 323.100523][T10421] RIP: 0010:blk_register_tracepoints+0x3e4/0x440 [ 323.106972][T10421] Code: 0f 0b 90 e9 01 fe ff ff e8 09 99 f7 ff 90 0f 0b 90 e9 20 fe ff ff e8 fb 98 f7 ff 90 0f 0b 90 e9 3f fe ff ff e8 ed 98 f7 ff 90 <0f> 0b 90 e9 5e fe ff ff e8 df 98 f7 ff 90 0f 0b 90 e9 7d fe ff ff [ 323.126591][T10421] RSP: 0018:ffffc90003a7faf8 EFLAGS: 00010283 [ 323.132840][T10421] RAX: 000000000004aaab RBX: 00000000fffffff4 RCX: ffffc9000e569000 [ 323.140796][T10421] RDX: 0000000000080000 RSI: ffffffff821062b3 RDI: ffff88807f4c5d00 [ 323.148754][T10421] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 323.156710][T10421] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 323.164669][T10421] R13: ffff88802725a540 R14: ffffc90003a7fd98 R15: 0000000000000001 [ 323.172646][T10421] ? blk_register_tracepoints+0x3e3/0x440 [ 323.178360][T10421] ? blk_register_tracepoints+0x3e3/0x440 [ 323.184069][T10421] blk_trace_setup_finalize+0x320/0x3a0 [ 323.189605][T10421] blk_trace_setup+0x254/0x440 [ 323.194359][T10421] ? __pfx_blk_trace_setup+0x10/0x10 [ 323.199640][T10421] ? lockdep_hardirqs_on+0x36/0x100 [ 323.204855][T10421] ? __pfx_vsnprintf+0x10/0x10 [ 323.209623][T10421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.215510][T10421] ? do_vfs_ioctl+0x226/0x13e0 [ 323.220260][T10421] blk_trace_ioctl+0x245/0x320 [ 323.225010][T10421] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 323.230285][T10421] ? find_held_lock+0x2b/0x80 [ 323.234948][T10421] ? __fget_files+0x215/0x3d0 [ 323.239629][T10421] ? hook_file_ioctl_common+0x149/0x410 [ 323.245184][T10421] blkdev_ioctl+0x17c/0x6f0 [ 323.249681][T10421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 323.254706][T10421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 323.259727][T10421] __x64_sys_ioctl+0x18e/0x210 [ 323.264497][T10421] do_syscall_64+0x115/0x840 [ 323.269080][T10421] ? clear_bhb_loop+0x40/0x90 [ 323.273746][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.279629][T10421] RIP: 0033:0x7efc1179ce59 [ 323.284030][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.303708][T10421] RSP: 002b:00007efc1268c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.312108][T10421] RAX: ffffffffffffffda RBX: 00007efc11a16090 RCX: 00007efc1179ce59 [ 323.320075][T10421] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 323.328117][T10421] RBP: 00007efc11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 323.336098][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.344053][T10421] R13: 00007efc11a16128 R14: 00007efc11a16090 R15: 00007ffd3df8ecf8 [ 323.352037][T10421] [ 323.355136][T10421] Kernel Offset: disabled [ 323.359455][T10421] Rebooting in 86400 seconds..