last executing test programs: 17m38.380822898s ago: executing program 32 (id=557): mmap$auto(0x0, 0x2020009, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 64) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptybc\x00', 0x101e81, 0x0) (async) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe$auto(&(0x7f0000000000)=r1) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) accept$auto(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xe8) (rerun: 64) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) (async, rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = io_uring_setup$auto(0x3ff, 0x0) (rerun: 64) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r2, 0x8000) (async) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) sendmsg$auto_NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_TAIL={0x1a, 0xf, "b56937262368794f5c3f99f9cbe53a752cf09cae936c"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0bc5e99be1811a89"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci1/rfkill6/name\x00', 0x121002, 0x0) mmap$auto(0x0, 0x5, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x40) 14m36.929801194s ago: executing program 33 (id=920): mmap$auto(0x3, 0x20009, 0x7, 0xeb1, 0xffffffffffffffff, 0x7) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x4) unshare$auto(0x6c000000) r1 = socket(0x26, 0x800, 0x100001) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) setfsuid$auto(0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r1, 0x2, 0x0) timer_settime$auto(0x1, 0x3, 0x0, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = socket(0xa, 0x3, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r4, 0x400454ca, 0x38) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2800, 0x0) ioctl$auto(r2, 0x4bfa, r5) fcntl$getown(r4, 0x9) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0xe) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) r8 = socket(0xa, 0x3, 0x3b) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0x50, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRESDEC=r5, @ANYRES64=r8], 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x40000007, 0x400a, 0xffffffffffffffff, [0x0, 0x100000], {0x4, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(r3, 0x1000421, &(0x7f0000000100)="05f0ee484fefc7fef8c22e9749e100309ac60162b42a4578066c406f12d04de253c5761ae35f88df197b55ec69f9011f8db63caac48813de6b96e52e9b0b0aff6e54ab723ebbb5e21df66ec8b272c0ca4b4e4b3219860ca564ae7f5873e276ec0fedb8e3e7451656f4f6bdabad4709f0f59613f229385ac35b4bbe", 0x0) 9m7.053486175s ago: executing program 4 (id=1814): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba08") read$auto(0xffffffffffffffff, 0x0, 0x1f40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x811) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) 9m6.111792579s ago: executing program 4 (id=1816): ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 9m2.259031108s ago: executing program 4 (id=1825): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) (async, rerun: 32) r0 = socket(0x1d, 0x800, 0x1) (async, rerun: 32) socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/environ\x00', 0x88f80, 0x0) readv$auto(r1, &(0x7f0000001780)={0x0, 0x400}, 0x7f) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0c/xrun_debug\x00', 0x8f3b7a51b8160521, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000001c0)="5ced72ac", 0x4) (async) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x18, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0xfa9b, 0xfffffffffffffff9, 0x7ffffffffffffffe, 0x4, 0x3, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r6 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r6) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r0) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) (rerun: 32) 9m1.869675317s ago: executing program 4 (id=1827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x14, r1, 0x321, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x2004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x100) r3 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(r3, 0x0, 0x1da, 0x3, 0x0) sysfs$auto(0x2, 0x4c, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x5, 0x0) r4 = socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(r4, 0x104000000000010e, 0x1, 0x0, 0x16) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24}, 0x68) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) 9m0.865290997s ago: executing program 4 (id=1832): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000043) recvfrom$auto(0x3, 0x0, 0x8000800000000e, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_IPVS_CMD_SET_DEST(r0, 0x0, 0x80) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyda\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) ioctl$auto_TIOCGEXCL(0xffffffffffffffff, 0x80045440, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x401) socket$nl_generic(0x10, 0x3, 0x10) 8m59.691682968s ago: executing program 4 (id=1835): mmap$auto(0x0, 0x40000400008, 0xdf, 0x80000000000019, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x4, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x717, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sethostname$auto(0x0, 0x7) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf25110000000c00098008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, r4, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) 8m44.319702422s ago: executing program 34 (id=1835): mmap$auto(0x0, 0x40000400008, 0xdf, 0x80000000000019, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x4, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x717, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sethostname$auto(0x0, 0x7) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf25110000000c00098008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, r4, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) 2m36.200487952s ago: executing program 6 (id=2982): read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, 0x0, 0x6, 0x5ef6) r0 = bpf$auto(0x0, 0x0, 0xd) bpf$auto(0x7f, &(0x7f00000001c0)=@link_update={r0, @new_map_fd=r0, 0x403, @old_prog_fd=r0}, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, 0x0, 0x40c4) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x40000) r2 = socket(0x1b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) socket(0x2, 0x1, 0x106) mmap$auto(0xfff, 0x5, 0xfac, 0x100000000000017, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) symlink$auto(0x0, &(0x7f0000000440)='./file0\x00') 2m34.126673457s ago: executing program 6 (id=2989): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = fanotify_init$auto(0x5, 0x2000000000002) r2 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r1, 0x9, 0x9, r2, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) r4 = socket(0xb, 0x1, 0x0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000100)={r3, 0x0, 0x2, 0x3, 0x8, 0x1}) write$auto_snd_seq_f_ops_seq_clientmgr(r5, &(0x7f0000000340)="308724546bf87941231eb2763ea3697944bf9103e0695f6de468006d925447a8827e2db4d1fe4c61a5843f467eabf0e455e6b2aa5987794172e4712d4d631d43db343216f19593784679666b4a5f5229018368ad9ef835201ac3793e2368f7c4a2f6aad54a3eb6ca4a8b666d896bc21d1933f5a681a3cd3617c5db7228acfd623dcaecfbc7bd917fec49a18599407b9c7d4aaf1457f15ac0d3929750fcb8d3e716f3ae4a056ea6b3efd7825c21d1319cd30ea2c65d3898c6b174dc09dc07cf06affdb4ad2dabb3ebe443cca5331de4b81e82ec850fc7caa467f92a8aa456ba48938b553f71a786f041521684e2fc04", 0xef) bind$auto(r4, &(0x7f0000000040)=@nl=@unspec, 0x3) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) flock$auto(r6, 0x5) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r7, &(0x7f0000000180)=""/240, 0xf0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0x11f9, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r6, 0x7, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', &(0x7f0000000280)="ce733dfc6c36c38f8acc33535d57321765d842507aa050dde52c111d71073e1766bbc43e6f8297febb72452a29f651f71bdb604ed229e5e5f09a7f2b8a39093a5266812cefa6a9877ff61766dc6e6ad75046d9cf1cfd3ec41c5c08c0aaa684aed1cac88445fa97bb8c528bcc93f0c2c27e0293545a4b8359f9f7d4a142d660fc90dd6bea409e41551a07000c1ffb07e941a1ed41ed6cb3c3ccefb818d6336759ee90d0cd906e6ab99b875c2e439a737b8bd8f6e94b", 0x5) r8 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r8, 0x0, 0x0) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/snd/midiC2D3\x00', 0x200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r9, 0x80045700, &(0x7f0000000f00)=0x3) mprotect$auto(0x1ff, 0x8000000000000001, 0xfffffffffffffffb) 2m33.638315765s ago: executing program 6 (id=2992): openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) capget$auto(&(0x7f0000000140)={0x8000, 0x0}, &(0x7f0000000200)={0x8, 0x7, 0x91}) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800011}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1dc, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x400}, @NL802154_ATTR_SEC_DEVKEY={0x1a8, 0x2f, 0x0, 0x1, [@nested={0xf3, 0x3, 0x0, 0x1, [@generic="5cdfca1da9539fbdff9b1fff9c9d3c7eb36afc10a142e82ae97cf7a6c11f78b039882f795604d1b02a33d0830bd2bfd1d02fa60b37b3769f4daa7a9d7cbbbbca873ecac733e58557d34602113debd98c428a37c34b41a86cffafb714e8d6d7534b4504caa5f8d298ef7d28353defa1bdaabf5ecdbcefdeae2adcf46f4d62ef6e3f818bcd008371e80183a3f5502bf4501cc01a73babc9e214aeb399367caf45c588715d0e605fad44a312ccb841347bb8bcee1d5f6d1165559aefa480aca068827a5fdb53068a944023dc3a72cf9158c2e12a1f0f25bbe6e6315b1ea3ea9c7352cda0b21a0b1d8e5797ec2", @typed={0x4, 0x9}]}, @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@remote}, @generic="2e759874ca2f36f6bc42d1d4ab396ec6118b854f46292f0686879e24606f2248b43a6104e4839df70449b62ec5a52664ba7c937f9e0d1d1abd07b42e5c095a76ba77dd9dd391bafd51fb26648c985234e9569377439bc656f3d31802ec9f982b8b4a060d14f8afa160701b6f8378c3655dc46f3d38dab3f1a73ae5fb3a7f0bc7e0cbc5a32b8b6f29400787c329fd2ef02e48372b677e4cb543fe9251c88c44d159a69c98fa72a803"]}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x9}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40040}, 0x20040004) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x21, 0x2, 0x2) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48085}, 0x20008000) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 2m33.089567857s ago: executing program 6 (id=2995): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) accept$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, &(0x7f0000000100)=0x5) write$auto(0x3, 0x0, 0xfdef) 2m32.008683306s ago: executing program 6 (id=3000): socket(0x25, 0x3, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0x74c) 2m31.361797655s ago: executing program 6 (id=3003): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x40000000000, 0x20009, 0x99a, 0x17, r2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop8\x00', 0x26200, 0x0) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121082, 0x0) read$auto_transaction_log_fops_(r5, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0x20005, 0x7, 0x5, 0x11, 0xffffffffffffffff, 0x1ff) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) sysfs$auto(0x2, 0x42, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcc3, 0x7) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) write$auto(r3, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x100000000) mmap$auto(0x2, 0x80000000004005, 0x4, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x4000) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001480)={{r2, &(0x7f0000000280)="36912d2a16b9b3d53096ac602f207df13fb6e8d2a12800f0aadcd7b513a1666b326d39f1144eb85fed1fd7c2abb8b3681d9e40459d88bde8a538c383573dbcab59c71cc9ef9c6cb2d31720514924b22fcf36a783412b7926350b641f463adb7c532558d281fedbd0054daf4c274070e5b713c02702a269b4a5afb2af1d612011a3bb97c4afb7fc9bb509aa407b64d8cffe685a8cff113b7721821d22f8d0afe005", 0x3bf791c9, &(0x7f0000000340)="e72842764c7ace97b197f8a85819e775189f20ddb48731e521deb68eb38c1e48", 0xbe, &(0x7f0000000380)="5fd290cc2dcdc5882495536a8c6f9a10ea30efde148f7307c9a4ddd85edf303ce547cc5f5a43b4a2f6a846339e607dcad9ee9311b089b1f4dd3d2da392433b60a6cdcbe4a643dbdf83c39d97403a3cbbd4331ed239cd3113734c23e91948109e90013298b1c51be0e76a8f314aeadd5a1ab9b6a5785904d86a548055191377de0003ec2eaab3e9e7b696a687a99824fb50f23d7d07a8baf059791a54c14120a6e9448a", &(0x7f0000000440)=0x1}, {[0x10001, 0x4, 0xffffff81, 0x5]}, 0xcd2b, 0x5, &(0x7f0000000480)="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"}) 2m29.349587441s ago: executing program 5 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex_wait$auto(0x0, 0x2, 0x7, 0x2, &(0x7f0000000080)={0x80000000005, 0x7fff}, 0x1) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0806000000000000110001006f76a0bc3ed3c1eea93dda707939fca7735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_BLKTRACESETUP2(r4, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub3/info\x00', 0x8280, 0x0) 2m28.736675473s ago: executing program 5 (id=3010): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffff7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x8209c25d4bd731ab, 0x13) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x1, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x80, 0xdf, 0x17, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000180)=@in={0x2, 0x3, @empty}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(r2, 0x400454cc, r0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, r2) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r4, 0x8000) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r3], 0x5c}}, 0x4040000) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc}, 0x8, 0x0, 0xd, 0x6}, 0x4}, 0x2000003, 0x5) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 2m27.411659417s ago: executing program 5 (id=3016): openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x111100, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r1, 0x0, 0x81) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64a1d5) listmount$auto(&(0x7f0000000100)={0x3, @inferred=r0, 0x3, 0x909, 0x3}, &(0x7f0000000140)=0x37, 0x9, 0xfffffc00) ioctl$auto_TUNSETVNETHDRSZ2(r0, 0x400454d8, &(0x7f0000000080)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000400) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0x5, 0x0) r3 = pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) vmsplice$auto(r3, &(0x7f0000000000)={0x0, 0x4000005}, 0x6, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x9000003, 0x0, 0x7, 0x0, 0x7, 0x201d55}, 0x2}, 0x800, 0x80000000) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x21, 0x2, 0x2) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 2m26.324528689s ago: executing program 5 (id=3017): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbadc, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) fsconfig$auto_FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)="01bc", 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getsockopt$auto_SO_GET_FILTER(r3, 0x4, 0x1a, 0x0, 0x0) memfd_create$auto(&(0x7f00000000c0)='\x98\x0f\x00', 0x1) r4 = socket(0xa, 0x801, 0x84) close_range$auto(r4, 0xfffffffffffff000, 0x4000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xc, 0xd, 0x2007d49, 0xa, 0x4, 0x0, 0x100000003, 0x3, 0x0, 0x2, 0x8000000ab8, 0xfffffffffffffff7, 0x5, 0x2, 0x5363]}, 0x0) 2m25.253626108s ago: executing program 5 (id=3020): mmap$auto(0x0, 0x4001, 0x6ef0, 0x40ebe, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m25.020530362s ago: executing program 5 (id=3021): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.bfq.dequeue\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x10001, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.bfq.dequeue\x00', 0x80000, 0x0) (async) read$auto(r1, 0x0, 0x4) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x10001, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) (async) 2m15.870008133s ago: executing program 35 (id=3003): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x40000000000, 0x20009, 0x99a, 0x17, r2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop8\x00', 0x26200, 0x0) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121082, 0x0) read$auto_transaction_log_fops_(r5, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0x20005, 0x7, 0x5, 0x11, 0xffffffffffffffff, 0x1ff) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) sysfs$auto(0x2, 0x42, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcc3, 0x7) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) write$auto(r3, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x100000000) mmap$auto(0x2, 0x80000000004005, 0x4, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x4000) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001480)={{r2, &(0x7f0000000280)="36912d2a16b9b3d53096ac602f207df13fb6e8d2a12800f0aadcd7b513a1666b326d39f1144eb85fed1fd7c2abb8b3681d9e40459d88bde8a538c383573dbcab59c71cc9ef9c6cb2d31720514924b22fcf36a783412b7926350b641f463adb7c532558d281fedbd0054daf4c274070e5b713c02702a269b4a5afb2af1d612011a3bb97c4afb7fc9bb509aa407b64d8cffe685a8cff113b7721821d22f8d0afe005", 0x3bf791c9, &(0x7f0000000340)="e72842764c7ace97b197f8a85819e775189f20ddb48731e521deb68eb38c1e48", 0xbe, &(0x7f0000000380)="5fd290cc2dcdc5882495536a8c6f9a10ea30efde148f7307c9a4ddd85edf303ce547cc5f5a43b4a2f6a846339e607dcad9ee9311b089b1f4dd3d2da392433b60a6cdcbe4a643dbdf83c39d97403a3cbbd4331ed239cd3113734c23e91948109e90013298b1c51be0e76a8f314aeadd5a1ab9b6a5785904d86a548055191377de0003ec2eaab3e9e7b696a687a99824fb50f23d7d07a8baf059791a54c14120a6e9448a", &(0x7f0000000440)=0x1}, {[0x10001, 0x4, 0xffffff81, 0x5]}, 0xcd2b, 0x5, &(0x7f0000000480)="e73b218d8276bcb7b83518572ac58772c3a1e821b2ea0e2962b7fa2cdb75c7cb3c904e5d3de50c48427cd06e602e4ea8fe9051c1e44ea59130b45e7ab8a6120fb805a944507aca6e91988ccf8dd934248d261bb740d753c8ff88d7ac498d8084d0fa96ce93932009912b70d3951078a77fb61fbea2ed6dbc80e5cc33756ea96e370e684dcdb18c2ea71279c4f8ff76da29fbfbb1c412f707d2ea07161cb167a574e5568973870ed981b6764a77975ee973aa68af499c6a96c2b7996d0b8b1283442a3191d53482db0ae20a65a7d55d6f7b3a4cfb419d1955bcbc5c56c5ab878eb2556f5f4832a938bdafc611db9eab9e1d780a429a1df256d326c9104379d6711539a89f4e5b4703ea4428722c23c79f2828669ab3b78121d7ff6ff4d47debe044449fc3f1b837be7589f86b11928988f23f33b712e294bef860ddf17f04eae66cae474e5d9a574fd1ab193649b70f6c9cb816e5bb72fce8908a693baf924602b0ee758831965a35e9e7b1192296074e1b81918f77ebad077ea9cb91b04997aa8ca195d54c55798c040c83a985b9bdd662da6e3add9adf59f32f370f17638ce5753ae52ca1a227877adab3acf3f51047d6b0ca9e56d3e2518d24ad1e91ab35bf673e8357435b4cf448b795d69bae1d55bea4d1fe5dbadac6b7ea66cd023f1697ac370e801914d6e786cf2fa87aaec4d09e51e67092e1e36f539d9731a10ce8967c7893c4f83f964c5aab911d919993e9e9f339ac8b7d05faecd2fbbe18b4cd5fc4237958d730bf29dbc859e90e293f2d01eb2de44d52b23bccd3fc79786f6a640978f1ab71a533634b4cf8fe00d45033f2a04ad07e4033525391a86ec6415cf7a7be45985b782ab51da9e29301370509a3980f287340bfbdede3148c8fe96144df69decf758434f0844f172cbffff2953ade637a23f1e6a94163863b5098c976db0b1fbfb4a80871f280fec4e94c871a0c90f12603f46b270f5286fc397379e0416c7f5e3176dc737dfef7422e0a52b57686fc2544b017ccd914eb0a45441d556427f19eb0eae882d830ae5ecd781a4093a7e8d293111ba9d18ee54c59e15339b5f5db59f8a0ba6426cae80fc800f65c40e528dc6063d65803f4189ca8a31dd7141a850ee10e5910dcf637a29476244999111fbbf6f1857be5371f1e9596b7f283704b7616f78b70eb93e5d817230d88dc14ba8bc963fb068a145d3c77d746656c9b3f982bc5441d977c03d5928de085200e59f950dc9902b48d9db610ec17494e435b01e0abfe3547e54f251e187154831221f1b20a432d5062419730a9e55f43822dc0147b41b8555b99d0f35f04652ef1f0da32b19098fb5cbcae57304e3808821922bc5d2a550ec16ba89341c29461d3fcf74adf7e5a1c488fa78cc5b4df560b5b497bbd3d1bd95cbe71c3031a7f30d261cf398f44dcb20f40c6c1595e8f7a78d38a75ba989683853ad942692929ea7f93312ddaf24888d3e87abafec05e9ac43c6b37ac571f1099cbb44bc6f9dc7be519e2c9bcd410fb42c439e1ab0dd080a79138cfccd80c4b15e099cc5a66554369e0dd58f966df0e82c486e400b989006fd8b3cb5faf56b21b32eed60ac12f59a547cb1531c031ef923b1c895feda4a89966312a0f0675ca0d76acdf4f1918357c27a95493e7cb09445ec794897d7bcc74bd9296e56e8e794860426c80ddd7ff8d52ab0147ce9449fdc960124f56ac23748a4c525d66ae42ddefbde65c3af2d018aa8d637c1b1738224efb91f486a1fd40a2727b7fcf03aa34754fa67e5befbeb9867f3b62677e7e60980e098c79f58b4f9116784101365db1d4291249736b206c9ed77fe1e1a8e80982744dbb496a9669dec5a8094d70467f1617840cb336e497ea801c4f793034fba311f8681b5d036d84caccb13ead41a9a191b2fceba078697a254aeb75aa9a3162397b20931c4a1ec3d87e135e8da9f7918c87db5cfa6f284c3816a2b8b34bcbb8da92f3e2d549dfb429da6e429d282735cf92aea886b5c8545c22b08becadea2c0c4297419c8981f33ea0df04d25eee1c75eba211598f860086f692ecf9a2d685d819b2e64a723e267e71466565104dd35bedf3d476ba7c6eda28ec5f1b3bdf9400a9fea688352c198b3861b162fd87486c13034909b31f31547cbfac1f66ebcca5f88bdd9e71eb7a9afa7c1abcd918318b6e0ef2a7e77b29c3c809dafc9319602b5960817bed3a8f5b35aa36f06a54b115b50f4fab3e936128a427646ab9d626a2dc39eb094240e0653e596a538df26c671413e84b30653cbd59108ef1bc816f63ea108b66194bf3efdfe382f82fd40ba4a3a44a7e9cde50f0b3715be66192714b8a4739f7beab9484e56ec1c84c167f04a18bcf5dba63c27ee5ae7f3de0ec60177aa07e282e47012429fbbcd7028d83f866a9ec85066a5e4b3707bf125522750176a52c12c96739cbe6a5e89e15d4c45be3dae240efba0a3caf327755f84c6a5dbada977d1021ad98ea2e612a29b28b7450c317db055dd56e1f1f2dbba65b4fddf6917e157e71b1c73aeb4d2568c72d3826d563dd2cc4967ce2c81164baa27844dac5ba161c71c77c212eb71cda83d646889352529398c7f2d850c16f13b84f430a3bb04debe105dda7732b0e9e2e25cd203828a9c2c8bf1bc7a6d7e9b4250175f48d09739ac17cb4fe5a47eba291ab82ac5d7cacd3b82273d0c18b6a02b1485860ed0fe0e87aa3f9f900e1a26677a9f5583d7e1e8ea82cb0d35f9ff5c3ef27786cbde9d3ca3e2d8f2f245bc0e6817d13136640f691a86c4b0f9ea6560864c6fe18fac637a4c943dd5e96946809e7affddcd29f9b3b15a0506d9e59346acdaf574fc6af2c1fa4e3e4aaf1cf9f7c2e1bfd0b62614d45657ed048751b0e1455bece0b9260a05cf89b754e23f28baac2d13a7f08ea0d9c7ff8a75a26e4f0fced9f47eb0d1fd61b534208c2472e22b18efd6637af3b75938a4cf068804af2fb6e8380442e1c887ead23005489b2bff75c2563465345646d1c36829c539391fa6bd41e59fed79a943d63b998e163b102e6b06f84e635f1efc48544bdd857db0402bc05e32ed969e66213571d06b2f6bfb3c7fd67b0984d7449a247215d6a9a788d1a862e4447c05e6f0e6a093eb22ce72f573b8c5408193907fb87a0be15184156e468249ecc5a4285974c2e9197d62b140969a363786216f5baf64eba7df6fb7b333a4515c95e47cf9985be2f66a54aead251e31f236a8fe122c893292eaf8cdd45969d8a8b90944689a7cc044c1d9b984e2578f818660abb44d37c0d3648ae20c347dfac1ab374d64bde4d43c5f9c5c0498321ce4e0f91268ff13a3a9d276e1cebb841ce2c4c974123361fcaab73a487e2d4435b0a21e5531c42208145591a46391bf4c469c4d61ee4706de979fb5828a3fbf4bcdb035e2bb94582a9451e537a2a8b343ffd5162b741a67374f5315edb49449936806d01ae55eba8df75c5ae0ef6d13918fd832e792649bb4c6c09c89e5a3bbe57ee09891e8bd510e1276751e9a54bc895c8a3dbb5bcfae2e8a9b7a9ecd891c5a04a9f1265f8680dbafc9987736c6956b24460dcb9eeb3f62f5ce36da4708b77c3335807737f6ce45e242a9571623e0eccf2eea8bd7052edeee9153009f058fcde811d3800929846735b5582629767203e30bc304d98a3691176402f5d1da01a7e4856c91427b87da6772fc775189849d1fa6db4740a3ae309da19558919f71ba21c72b115126bac3ad8c0c96255ee67a4fc671981c86a65120def1bec80b923dfd10543cfc63e9751d975e9f86f8f091493f757a0337c8db0cbf7ac51e0613a70b490dcafa7aa27bd67f0a0e25b8d73b5beff1a25aeaa755a9e6c21d3723c247e7d6aa064fbc29d4fdd67749cbdb43995f18246ecd823b77492294d02582932fe86b76860f97ad239c3aeba66f2bbc09f09310226bd166ec0b0bb4d4f71d419efffb8aa7e000f1161c9d571882a9fd0be8492c815de88aa978a0c5aecadee9317e62bf5a444111002072b6c157114f7c938c3a2d04dc02ade4986698bcc3aca98a046b2ea43e75de60771bb639762b5e4dd8f25629ae6e8e44cc11999c6fbb76d3b8a4fd73d9d6312b866f79b20b781a632b0b83abddf70f95774591787cde67f0a06225e5445789c5bbb0fdf345f653e9346dc8eae13815c4a9e36327c915d5723241de6926db62ad73914970a213067bc4cd2ffe6c774d3310b7882b79fe97dd7a4523767ce2bbbb3b9b25bee67008e43538985d469ab164a368f1898b17015994fae00325accfd92e6a4788d8d69304fe96ea9076cefc86b228903aa8bf1410c0bdf571265f5e4865eca4320abec17732d32d0c8bc5c7e6a9174ccc3e8f6bec80db053ebef6ad2ffdcf5003876845bbac1e0b19e26f9babab11845a737b442684a299a385b7b2678d1f9d6f523ec0ef97cffa09d3a16baca75152cef0f25e93ce403a5cf7f440c0ee2337cd8d4c7a95be447c02a2a8c4d27e96fe7f31c9502c36bb14bd30452cb4ed9d6f07ea70c173c3a54bb01be57efdc8b192c7f4edead945c5b03472bbaf88c12134ecac66258c5d8982820767790442dc32d8f25c44dd96e61e46b92014d94fa6ecd711e43e5e4f0251aa1cde139aacfa533141246d29486224fc46cba858b342fffa7a1c5030cf0f0e27cc00b97f53e3885dac8fd1dc12c9915532f2956b80b04e5911d40b04027308d0187c09450a8323d80452a6a8214922e92660b3ae5de2e3180fc7ee8410ffa8976a263fcfc4ddf4e2a6b740b132222da2c715fbc6975170a0167d6be746b70e6b1a61b2be2c5206baa0e12ebc6a4fb00b0af9be08f3cfd40ccbfceaa7c04f9e12e7a17cf1869cee06b6bebadd551898bd13a2d947994ffe1fcebe5cdc6663bfe0bfee39b51b865a22a4940ac5dee2597a35ea45e6097eeb08f3532bb3db9bff5e92f0f07baa6abda4982339ee215b0d6c6848830f73cc8e3e510ccf7fe92a91fc3db8b59c1ed11f69b579e4eeb074f7a601a693cf5b9afda927a50d9187015d06345c80524c267ab9005f8e9272ad6834f33ebe2d109d642a60b2fba6a932c7fdcc8025a61318dbc847a9b1755925e985c2d42744e030320a481d46dbd0c9967973e7d567075f6c7e3f1121738ef0f2de342a0f5e2a0c56ddb939bc4f581cc29471b39cadef278c295f2a8e3c953c2824ca78aa18aad09411697268519f874c4bc0c2e05710408c029c27d97b82c57e4d0984c16ac0e690756efc7a66fb60327b1caf5e74592d9a719b12e4e18ef01745a87245b6c4b8f5ac516573a295d8fc3d1b9186fd476c4ddc0b41f6f9f405e8f752e3b1ee9ed2384af112b8f8329d5da0153d2af196724bc007a139062afdd7c2415a7da3397dd909ea86eda893fc25038b70946c70ee62f287028e43673745cfc1e3e551738103171f35ebdc2c053f7f9c6c33010943765686b580928cb789711de159655cffeffdac85f7f087aad00653d67ed43f4361832ea5468f3e05c5dd352c4088a9f749e68a9f51e0828d18cedeeda95341b25a036d9b15cf08e9720587171f2d5e3d709e0d6a3e80afae1c40a0c3bdb49bcea89874001a89aab26072ac84613e3a03589bda7abbea6b3b5ce87339448648c5c9372cafbdac991902f9811875e5c5c9cda0eef70a2b989d6b21a75b307218cb63969d8021ede245d3f726c99a8abd1b6909c8e5f9b7499228d098cfd5488b8cd8eef9abf01e00cb5a7142ee74b44194820a8e648d9f69eaee97a07b1f893983907d9df54ccc8aed765aedd1669ddb6bf75655a2c669df6"}) 2m13.493562196s ago: executing program 1 (id=3049): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000440)={0x7f0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x784, 0x2, 0x0, 0x1, [@generic="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", @generic="2814c011e23c141ab1b66fe30c4b3f70eb51fb08b0ace61641dd0cbf55d8d7bba6d7d017b8e110943bb3fbcfc25c63b35543e0a013c606fe279fefe47ed06d4a6a654b36259f61cb9bda83f8c0797aa28e85cf91cfb83abd9f09a53505b062cc24ae957d424702e9dfcdd59712cc64437ba3192e6d70ca19192f9bbe9ffe19fae1a72c67bcc29a0a0656b848eae6273b8c02b652fb69fee97db6450eb229e2f4cbea88e135fce3bb1c3081576afe08b4d8beef3f531cfc325ea67217f8505a4e8231066c4bec735359513743f380686dcff1e16325554a699f04327d3e0d6698b80abeb97f0dcd98912f8350bde3f8fb97af222185", @nested={0x2f7, 0x85, 0x0, 0x1, [@nested={0x4, 0x5b}, @generic="1e76d71a6e2fc85b7fab401a1f4476b3e32b9512b5bd9a2029aac31c96dd7b2357e1694d5908702f649102b622e3c5b8977341d47ef5c9e20fbc5460e6e4b9fe41b24e47be025e74310ce1123988", @typed={0x14, 0xd7, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x7b}, @typed={0xcc, 0xe2, 0x0, 0x0, @binary="cfaef53b92a7cafc1f2f61a105682e9a1bb028cd4a44b96e791201925f0ba7a7eafc2cfa2992627fac7bde49ec87ad197aeb0ba728831edb5386413b59bf46849dd0c0988a71ae1d1aaa9e8a724d23990362d736637bf6f4b93b98de6c464bb865760a1776d93509447288bb821ab58bd91738227ec1ab367a2bd074528ce3c9cc744acead41600f04eb55a1694d7f2f696e1943e1598ef9ce8c70ac6c6e33759b40af5ba6de87890680fd0afa7a79e92ab237fdf50a576e3880fd7bc67c848d409359d68950bd4d"}, @generic="0afc315660d6e1ae843296bba4db3a2f79f469c60f58a03f728fe3c251f646d49a4063262404c571992dfbdbe8ed8ebf38a28bff6ae9ab31f5b163748d2f9efa6f2e1e138f964e59aec923be1f4520d5d6790480fb5ef3eaa584095396fa52d9864a3570cbbdc9e2cc1f1eb521134f9ce97a3d298189ea708607ba215cd84d252389ff40e9ee06fb3bc83749455d2970671d7aab8f3ff2251501fb10f4e0c9536e8645672d5d12dfd71e87fbb7966dacfcaa56c39f19577ba46653aaac27de509497a18a648922c93e936eab5d6c9ab9a8ceb29b75858fcdcc", @nested={0x4, 0x2a}, @nested={0x4, 0x105}, @typed={0xdb, 0xbc, 0x0, 0x0, @binary="ef0068034e38aa748025f0b67b5b37c911a665cbf427421a471ff8377ae453d34ad6f04f8778884defcc83353e21fbbf1ecffde1956df9b7c5d675dbe19fe69a43f11772c669b1171a0cd8587359da9587b3199671f45792e36ff291845f30686b1d84a403ff1e1688c74c3efebd681cb1661c8d1e5522505b7231859071e09bcbfb4cee0875378110140f1cd16e0897469a1afdf9e4c8eef338f47b7c96d1f75af799eb4ac5570b82cda379d983ac938f13fca254ec71fa5983716156ef745e849a6544a31e1bc57796626bc89d7656f7ed94e505e724"}]}, @generic="583d0c35cfbabd53ac318ad1d80185c2861debff30faeba53c174ea498edb6056e64b1c53695ff93ba2ada58eeb22839521ad0dc56da1c7440f46fbe63bcbb47cefcfb063442a67284b6393c19d3724da2d6479cbcf5abfde9307cdfdc1da985c59ecc08dc10e6e3e2770d73d0ecf655d3c4ef933942ed3e57ad65aee2c416285f4a6e70514afe53c339d0c97333e363ff26c260df3279137f4fd6a5de3e30f70074b712d4f3ef62b38197354b020a0e97a6e33a7cc7adda0c0f7ff9c70263b9fabb27499cf454f60c07c78bcad5459a1b1917df0b1f9bd01002c9026cc428319de2a9f6f42d73", @generic="4f2f2b38bc947c39bb799440079503a017ec5638237d1119496d332b0aaed472515029ea36991ea283695e4021dbce57c0c9c4fe1786bd9611cbc8846972eaa444abb778c5d58d691b4833e291aaea7ecaf3af69568f8cfcc7f8bba76fb416cb59f9e02cfa4eb5795968a1eeea75241f2bbecbe7a055a0c39afb3ba9cc4c4176538f60d8469baecf524752e4f1f98418e7fef1d3c4e6563cc83dcbe3b66e634763e0091a8d28cec515629894654673bc714aadc7062e3aef764ad8678069df038515c7dafd4ec6fe56", @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee01}, @generic="c8e6e568f253a298ea6d1451993df4873765fe984ceafb3db1b89fbe1ade2a3624985c41c7bfd4e1da97b970c84b167ece2d624ee0a00bd4878fc927c3eecbc118a913bde85a5ed06a172b164351fb19fee7c9edcde7fae29191b88dce2fb64ca3a971d09a4c7191a69ab93865b8397fc3f55c059b9a2bd6496ff2aebf664ea808404cea929026c04e7c21e1cddfdf7ba01c78ee48f4b114538cc2af29235e4296a6aef104c051a926728bc2caf6274f0864901aeb7c16deb5ff5f9588dc5277ab235e70d6b0190d160126191e18e858f762d306c79dc5615b24cacb4aa4"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xc1, 0x0, 0x0, @u32=0x7}]}]}, 0x7f0}}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0xd, 0x0) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x14, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) sendmsg$auto_NETDEV_CMD_NAPI_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x9}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x7f}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x5}, @NETDEV_A_NAPI_ID={0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x6c9f}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xfffffffd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20010800}, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250c00000008000400ffffff7f"], 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x50) r7 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000280), 0x10280, 0x0) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80802, 0x0) ioctl$auto(r8, 0x800064bb, r8) ioctl$auto_BCH_IOCTL_QUERY_UUID(r7, 0x8010bc01, &(0x7f00000002c0)={{"09286bc471be75b56c9e7dc8dc0bd0a6"}}) 2m13.134638268s ago: executing program 1 (id=3050): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r0, 0x4b69, r0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x2404c000) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) socket(0x200000000000011, 0x2, 0x0) ppoll$auto(0x0, 0xaf, 0x0, 0x0, 0x8) unshare$auto(0x8000400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlockall$auto(0x7) munlock$auto(0x2, 0x200c06d) 2m11.58184716s ago: executing program 1 (id=3052): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbadc, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) fsconfig$auto_FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)="01bc", 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) getsockopt$auto_SO_GET_FILTER(r3, 0x4, 0x1a, 0x0, 0x0) memfd_create$auto(&(0x7f00000000c0)='\x98\x0f\x00', 0x1) r4 = socket(0xa, 0x801, 0x84) close_range$auto(r4, 0xfffffffffffff000, 0x4000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xc, 0xd, 0x2007d49, 0xa, 0x4, 0x0, 0x100000003, 0x3, 0x0, 0x2, 0x8000000ab8, 0xfffffffffffffff7, 0x5, 0x2, 0x5363]}, 0x0) 2m11.247280904s ago: executing program 1 (id=3053): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r0, 0x4b69, r0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x2404c000) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) socket(0x200000000000011, 0x2, 0x0) ppoll$auto(0x0, 0xaf, 0x0, 0x0, 0x8) unshare$auto(0x8000400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlockall$auto(0x7) munlock$auto(0x2, 0x200c06d) 2m9.816494127s ago: executing program 1 (id=3055): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000300)='}[,&*}/file0\x00') open(&(0x7f00000002c0)='}[,&*}/file1\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc+\x87\x95\x9a\xb7\xa0\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\xe6\xa3\xd2>\x9f\xf4\xfb\xa3\xa8\x86\xd3\xa1y\xe0\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf74_\xca\xd5\xd8\xa4g_\xb1w\x18\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe13\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\xf4\x14me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\x12\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e,u\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01w\xda\xdd\xef\x1c6\x1f\xd6m\xd2\x85U@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7fv\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03{^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xffu\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1b\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ\xb4&\t=\xcf6S\xaa#\xef<\x83\xc3\xab{.\xe0\x83\x10\x97z\x91\xcd6H\xb1\x00\x86\x8e\xc9\xa3S\x1c4\x9b\f\x01/\xd3\xd5\'\xbc\x97\x9d\xef\x967\x86\x0f{y\x8b\xa1F\xd7\x03\xbf\x8ep, 5\xd6\xca\x9e\x90\x8f1\x88\x14\x02:\x86\xc4\xaa!%\x96\xcd\xbb\xe6%\x88\x97\xf8E\xd9\x94\x0f\xe3j2$\x82\xc25\x8f\x15g\xfd\x13>\x83\xbf\x02I\x9aAS-\xfd\x8e\aTu\xe8\x03\xees\xf2W\xe1CKI\xa5\x8b/\x1eJ\xe4\xf0\xc0\x1c\x9d\xee\xda>`\x97\t\xf9\r\xa1\xb2=\xb7\xe9\x12H\xe8\xfb[\xcdHH\a\xff\xe3\xaf\x1fc\xdb\xa9\xab8\x18\x8d\xb9\xd0\x9c\f\xbe\xc2\x05\x9cM\xc5\x16\x8e\x99\xca0n}\xb5\xd5\x13#\xdb\x93\xa0\x85\xf7\x949\xe8\xed\x03`\xe2\x16;\xc7\xb6\nG\xdb\x96\xcf\x8f\xb6\xe0\xc0\xb4S\x88\xd8pt\xa9$C\xc9\xcb\f\x92\x12\xb1\xe2\xa4\xaby\x8d\xd7\xd4\xf7V\a!J\x04\xbe!n$\x85\xa6Q\xecq\xa6!V\xe2+\x94\xec\xb6\xc1\x80-5R\x06\xe6\'', 0xd) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/syz_tun/interval_probe_time_ms\x00', 0x11720e91f8b2e34d, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x190137b683296ebf, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x5d, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r2, r2, 0xfff) bpf$auto(0x0, &(0x7f0000000380)=@iter_create={r3, 0x2}, 0x35000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0xc86) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="74130000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1374}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 2m9.729976705s ago: executing program 36 (id=3021): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.bfq.dequeue\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x10001, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.bfq.dequeue\x00', 0x80000, 0x0) (async) read$auto(r1, 0x0, 0x4) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x10001, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) (async) 2m8.163933353s ago: executing program 1 (id=3059): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) writev$auto(r2, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x2}, 0xfffffff7, 0x10004, 0x40, 0x4df9e870, @raw=0x3, @raw=0x8001, 0xb, 0x0, 0x0, 0x0}) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000001040)='\xf8V\xe1c\xc0\xd4\n\xb6\x0f%\xa7\xee^\xe3\x9fE\x9e)a\xa8\x10\xba8G!o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`t\xf4t\x1e\xd3\xc7\xb8\xe2+\xdb4\xa1\xfdC\xeb\xbc\xdd\x1c\x8cp8\x14\x1d\xeb\xd9C\xd5\xab\x8c\xbb\x0e!\xae\'\x9c<\xe6\x92<\x83Qa$b\xd2\xfc\x90\xcb-\xe2i\xa5!w\x1a\xb1\xe8\xa6o\b\xce\xb5z4k\x035*\' V\xeb\xb1S\xf2-\xd4\xcd\x1c\xf7\x9e-,\xa7\x1a\xd2\x84\x13T\x12\x12\xf8 ;Z4\xa9\xe1\xe0\x93\xb2d\x16r1\'\xf0^\xe41\xa9\x98\b\xc6\b\x83\x8b$\xf9&\x99\x88\x81\xda\x04\x06\xd2(D\xb1\xddZ\xfc\xca~_\xd4\xc7\x17\"\xbei\xc2\xe2\xa8\xee\xed\x95\xe5\xc4F\a\x8cwb$\xc6\x7f61q\xf9\xe5\xe9\xffF2*-D\xa3o\x96\xe8$B\xfd\xfbh\x0e\xf9(\xa0\xd2F2X*\xcc\xa6\xebX\x82cU1\x0e\tL\x99hs?\xd8SP8 F\x18\xed+Q\x03\x9d\x8c\xfc\xdf\xf4\xe3v\"\xfdv\"M\x9a', &(0x7f0000000300)=0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1m52.745322957s ago: executing program 37 (id=3059): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) writev$auto(r2, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x2}, 0xfffffff7, 0x10004, 0x40, 0x4df9e870, @raw=0x3, @raw=0x8001, 0xb, 0x0, 0x0, 0x0}) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000001040)='\xf8V\xe1c\xc0\xd4\n\xb6\x0f%\xa7\xee^\xe3\x9fE\x9e)a\xa8\x10\xba8G!o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`t\xf4t\x1e\xd3\xc7\xb8\xe2+\xdb4\xa1\xfdC\xeb\xbc\xdd\x1c\x8cp8\x14\x1d\xeb\xd9C\xd5\xab\x8c\xbb\x0e!\xae\'\x9c<\xe6\x92<\x83Qa$b\xd2\xfc\x90\xcb-\xe2i\xa5!w\x1a\xb1\xe8\xa6o\b\xce\xb5z4k\x035*\' V\xeb\xb1S\xf2-\xd4\xcd\x1c\xf7\x9e-,\xa7\x1a\xd2\x84\x13T\x12\x12\xf8 ;Z4\xa9\xe1\xe0\x93\xb2d\x16r1\'\xf0^\xe41\xa9\x98\b\xc6\b\x83\x8b$\xf9&\x99\x88\x81\xda\x04\x06\xd2(D\xb1\xddZ\xfc\xca~_\xd4\xc7\x17\"\xbei\xc2\xe2\xa8\xee\xed\x95\xe5\xc4F\a\x8cwb$\xc6\x7f61q\xf9\xe5\xe9\xffF2*-D\xa3o\x96\xe8$B\xfd\xfbh\x0e\xf9(\xa0\xd2F2X*\xcc\xa6\xebX\x82cU1\x0e\tL\x99hs?\xd8SP8 F\x18\xed+Q\x03\x9d\x8c\xfc\xdf\xf4\xe3v\"\xfdv\"M\x9a', &(0x7f0000000300)=0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1m11.86068992s ago: executing program 7 (id=3153): mmap$auto(0x0, 0x4001, 0x6ef0, 0x40ebe, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m11.456956142s ago: executing program 7 (id=3154): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x40000000000802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121400, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x9, 0x400, 0x5}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x19) socket(0x9, 0x5, 0x3b) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) ioctl$auto_TIOCNOTTY2(r1, 0x5422, &(0x7f00000002c0)="e0777c5f9005bcc00e5456c960c4b594ab24091e9e") r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2980c2, 0x0) socket(0x1e, 0x4, 0x84) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x70000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/039/001\x00', 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) mmap$auto(0x2000040, 0x4, 0x4000000000df, 0x100000000000eb4, 0x401, 0x5) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x8000004, 0x0, 0x8, 0x2) mmap$auto(0x0, 0x202000d, 0x7, 0x14, r2, 0x8000) 1m9.563576387s ago: executing program 7 (id=3157): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) writev$auto(r1, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x2}, 0xfffffff7, 0x10004, 0x40, 0x4df9e870, @raw=0x3, @raw=0x8001, 0xb, 0x0, 0x0, 0x0}) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000001040)='\xf8V\xe1c\xc0\xd4\n\xb6\x0f%\xa7\xee^\xe3\x9fE\x9e)a\xa8\x10\xba8G!o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`t\xf4t\x1e\xd3\xc7\xb8\xe2+\xdb4\xa1\xfdC\xeb\xbc\xdd\x1c\x8cp8\x14\x1d\xeb\xd9C\xd5\xab\x8c\xbb\x0e!\xae\'\x9c<\xe6\x92<\x83Qa$b\xd2\xfc\x90\xcb-\xe2i\xa5!w\x1a\xb1\xe8\xa6o\b\xce\xb5z4k\x035*\' V\xeb\xb1S\xf2-\xd4\xcd\x1c\xf7\x9e-,\xa7\x1a\xd2\x84\x13T\x12\x12\xf8 ;Z4\xa9\xe1\xe0\x93\xb2d\x16r1\'\xf0^\xe41\xa9\x98\b\xc6\b\x83\x8b$\xf9&\x99\x88\x81\xda\x04\x06\xd2(D\xb1\xddZ\xfc\xca~_\xd4\xc7\x17\"\xbei\xc2\xe2\xa8\xee\xed\x95\xe5\xc4F\a\x8cwb$\xc6\x7f61q\xf9\xe5\xe9\xffF2*-D\xa3o\x96\xe8$B\xfd\xfbh\x0e\xf9(\xa0\xd2F2X*\xcc\xa6\xebX\x82cU1\x0e\tL\x99hs?\xd8SP8 F\x18\xed+Q\x03\x9d\x8c\xfc\xdf\xf4\xe3v\"\xfdv\"M\x9a', &(0x7f0000000300)=0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1m8.182539351s ago: executing program 7 (id=3160): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex_wait$auto(0x0, 0x2, 0x7, 0x2, &(0x7f0000000080)={0x80000000005, 0x7fff}, 0x1) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0806000000000000110001006f76a0bc3ed3c1eea93dda707939fca7735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_BLKTRACESETUP2(r4, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub3/info\x00', 0x8280, 0x0) 1m7.110900791s ago: executing program 7 (id=3163): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="110000000400"/17, 0x11) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x20) mlockall$auto(0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) mmap$auto(0x0, 0x400008, 0x4727, 0x6878, 0xffffffffffffffff, 0x1000000000000) ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7) r3 = io_uring_setup$auto(0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) mmap$auto_snd_pcm_oss_f_reg_pcm_oss(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x10010, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0xffffffffffffffff, 0x800, 0x6, 0x4a, 0x1000009, 0x5f, 0x8000000004, 0x7}, 0x6f3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r5, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) socket(0xa, 0x1, 0x100) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(0x0, r6) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1m5.406940056s ago: executing program 7 (id=3167): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x40000000000802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121400, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x9, 0x400, 0x5}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x19) socket(0x9, 0x5, 0x3b) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) ioctl$auto_TIOCNOTTY2(r1, 0x5422, &(0x7f00000002c0)="e0777c5f9005bcc00e5456c960c4b594ab24091e9e") r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2980c2, 0x0) socket(0x1e, 0x4, 0x84) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x70000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/039/001\x00', 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) mmap$auto(0x2000040, 0x4, 0x4000000000df, 0x100000000000eb4, 0x401, 0x5) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x8000004, 0x0, 0x8, 0x2) mmap$auto(0x0, 0x202000d, 0x7, 0x14, r2, 0x8000) 58.869190498s ago: executing program 0 (id=3177): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9cca2e1196e5d16434355712", @ANYBLOB="00012cbd7000fcdbdf251100000008002a00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) unshare$auto(0x40000080) unshare$auto(0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2c, 0x2, 0x9) io_setup$auto(0xffff, &(0x7f0000000580)) ioctl$auto(0xffffffffffffffff, 0x800064bd, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) fallocate$auto(0xffffffffffffffff, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0xffffffffffffffda, 0x3000000000000, 0x3, 0x2000000eb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket(0x10, 0x5, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r3, 0x24000000, r3}, 0x210) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 54.197098813s ago: executing program 0 (id=3184): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="030000a4", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250200000008002700040000000a001800aaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x10000, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r1, 0x80044df9, &(0x7f0000000340)="1405146ffc921791f59d2ae63ac1fe7703daf42cba22fd6be9b3c04ebea54aadfc61358715533f64f410469ce6e9337fcdeab1f3276f8b0a393e9cf27ea0f4ef193e7ecb0d160993624be640959af27d45daead9c0ab332bbf9b48e6bdbfbc43efe820a5eb2924a5e0ca8772da830698b2673966a78ea154f68005c2e99d6dace77d8dce9e39b26a01cd3345677c9e6bd4") 53.595504567s ago: executing program 0 (id=3186): close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) landlock_create_ruleset$auto(0x0, 0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xa}, 0x5, 0x108) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) write$auto(0x3, 0x0, 0x3f00) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x0) pipe$auto(0x0) socket(0x11, 0x3, 0x8) io_submit$auto(0x2, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x2, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0x1001, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyzd\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(r2, 0x0, 0x7f) write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) 52.972151453s ago: executing program 0 (id=3189): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x2, 0x0, 0x5, 0xeb1, r0, 0x400000000000001) sysfs$auto(0x2, 0x43, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r1, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0xff9c) landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0) socket(0x2c, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r2, 0x80045430, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r3, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x0, 0x0, 0x40003, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0xfb, 0x0, 0x3cf, 0x0, 0x8, 0x88) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000040)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x1, 0x9) 51.30984736s ago: executing program 0 (id=3191): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/rndis_host/uevent\x00', 0x100000, 0x0) setsockopt$auto_SO_PASSCRED(r0, 0x3, 0x10, &(0x7f00000000c0)='/dev/kvm\x00', 0xffff) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f00000002c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x8, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x1, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r5, 0x0, 0x60, 0x0, 0x6f7250c4) 50.182997512s ago: executing program 38 (id=3167): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x40000000000802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121400, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x9, 0x400, 0x5}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x19) socket(0x9, 0x5, 0x3b) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) ioctl$auto_TIOCNOTTY2(r1, 0x5422, &(0x7f00000002c0)="e0777c5f9005bcc00e5456c960c4b594ab24091e9e") r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2980c2, 0x0) socket(0x1e, 0x4, 0x84) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x70000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/039/001\x00', 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) mmap$auto(0x2000040, 0x4, 0x4000000000df, 0x100000000000eb4, 0x401, 0x5) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x8000004, 0x0, 0x8, 0x2) mmap$auto(0x0, 0x202000d, 0x7, 0x14, r2, 0x8000) 48.445178652s ago: executing program 0 (id=3197): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (rerun: 64) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) (async) bpf$auto(0x0, 0x0, 0x6f3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x3) (async) socket(0x11, 0x3, 0x9) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x14900, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x20080, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1c9}, 0x4000002, 0x8) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x80280, 0x0) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) (async) mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x7c1faaf70770f6d9, 0xffffffffffffffff, 0x100000001) mmap$auto(0x0, 0x3, 0x4000000000df, 0x400eb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x800) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x40201, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r3, 0x0, 0x7ef) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 33.157846881s ago: executing program 39 (id=3197): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (rerun: 64) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) (async) bpf$auto(0x0, 0x0, 0x6f3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x3) (async) socket(0x11, 0x3, 0x9) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x14900, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x20080, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1c9}, 0x4000002, 0x8) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x80280, 0x0) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) (async) mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x7c1faaf70770f6d9, 0xffffffffffffffff, 0x100000001) mmap$auto(0x0, 0x3, 0x4000000000df, 0x400eb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x800) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x40201, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r3, 0x0, 0x7ef) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 19.375048862s ago: executing program 9 (id=3229): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x40000000000802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121400, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x9, 0x400, 0x5}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x19) socket(0x9, 0x5, 0x3b) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) ioctl$auto_TIOCNOTTY2(r1, 0x5422, &(0x7f00000002c0)="e0777c5f9005bcc00e5456c960c4b594ab24091e9e") r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2980c2, 0x0) socket(0x1e, 0x4, 0x84) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x70000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/039/001\x00', 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) mmap$auto(0x2000040, 0x4, 0x4000000000df, 0x100000000000eb4, 0x401, 0x5) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x8000004, 0x0, 0x8, 0x2) mmap$auto(0x0, 0x202000d, 0x7, 0x14, r2, 0x8000) 19.22700086s ago: executing program 8 (id=3231): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x28, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x2, 0x0, 0x9) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(0x0, 0x8001) close_range$auto(0x0, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$auto(r1, 0x10e, 0x6, 0xfffffffffffffffc, 0x3) pipe$auto(0x0) pipe$auto(0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) open(0x0, 0x0, 0x0) mremap$auto(0x5, 0xffffffffffffffff, 0x9, 0x8, 0x7fffffffb000) close_range$auto(0x2, 0x8, 0x0) 18.116772577s ago: executing program 8 (id=3233): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fremovexattr$auto(0xffffffffffffffff, &(0x7f00000002c0)='system.posix_acl_access\x00e\xd8\v\x1b\x02\xd5q?\x8c\xf1\x8f\x89\x7f\xd47\x84dG\xb3\xf1\xa6\x1b\x03\x18s8G \x950\xf0\xe0H!\x86,\xd1{\xf0\vX-c\xfd\xc4\xf24\xdd\xac\xea\x1f1\xc2+0\xc7gA\xa8\xc6B\xc9f\'_]\xe5.\xc6X\xe0c\xbbtzB\xe7\x9383\xdf\xf7x\x18\xd8\xfb(\xae\xb6\xc3\x02;mlG\x14\xdf\x9f\xea\xbf\x93\xae\xa5.\xfd\xe2a\xa4\x1bK\xbbZA\xb8\xc4\x9f\x93\xff\x86l\xd2\a7\xba=LC\xc4\xdc3\xf3%\xef\x7f\x81\x9eB\x9ak\a\xa3\xea?\x11\xd8LuY\x9b\xa8\xe2j\x98\\\xd0\xd72_c\b\xb3\xd1\xa6g,5\b|\x95\x98\xb0c\x90\xfd\x12\x1f\x1c!)(\xae\xfe\xc4\xec\x8f\xa1\x98\te\'\xc8\x97\xda\xe4&)\xe5\xa3)@\x13In\x1e0\xe5\xff\xcbv\xd2B\xd5\xaf+\xc8T\xc2\xb1\xd3\xaan\xfe}\x17\xcd\xebD[\xba\x9d\'\xb0') r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) setxattr$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x1fffffe, 0x9) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b73, 0x1000000002, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bfb373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mmap$auto(0x0, 0x8, 0x400000000000df, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0xeda5, 0xc86) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 15.803590506s ago: executing program 9 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9cca2e1196e5d16434355712", @ANYBLOB="00012cbd7000fcdbdf251100000008002a00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) unshare$auto(0x40000080) unshare$auto(0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2c, 0x2, 0x9) io_setup$auto(0xffff, &(0x7f0000000580)) ioctl$auto(0xffffffffffffffff, 0x800064bd, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) fallocate$auto(0xffffffffffffffff, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0xffffffffffffffda, 0x3000000000000, 0x3, 0x2000000eb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket(0x10, 0x5, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r3, 0x24000000, r3}, 0x210) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 13.06823217s ago: executing program 3 (id=3237): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex_wait$auto(0x0, 0x2, 0x7, 0x2, &(0x7f0000000080)={0x80000000005, 0x7fff}, 0x1) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0806000000000000110001006f76a0bc3ed3c1eea93dda707939fca7735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586a", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_BLKTRACESETUP2(r4, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub3/info\x00', 0x8280, 0x0) 12.980918587s ago: executing program 8 (id=3238): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x3ff, 0xa, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) semctl$auto_GETPID(0x0, 0x2e3, 0xb, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1c97, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) futex_waitv$auto(&(0x7f0000000000)={0x7, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) 11.839948473s ago: executing program 3 (id=3239): r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x1d, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x18b202, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty10\x00', 0x161600, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) socket(0x28, 0xa, 0xd) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x106) 10.14565495s ago: executing program 9 (id=3240): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x40000000000802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121400, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x9, 0x400, 0x5}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x19) socket(0x9, 0x5, 0x3b) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) ioctl$auto_TIOCNOTTY2(r1, 0x5422, &(0x7f00000002c0)="e0777c5f9005bcc00e5456c960c4b594ab24091e9e") r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2980c2, 0x0) socket(0x1e, 0x4, 0x84) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x70000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/039/001\x00', 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) mmap$auto(0x2000040, 0x4, 0x4000000000df, 0x100000000000eb4, 0x401, 0x5) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x8000004, 0x0, 0x8, 0x2) mmap$auto(0x0, 0x202000d, 0x7, 0x14, r2, 0x8000) 9.90897853s ago: executing program 8 (id=3241): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0x32) r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) pread64$auto(r1, &(0x7f0000000040)='\'[\x00', 0x401, 0xff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/netstat\x00', 0xa0001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r2, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xadR\\\xcc\x8b\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y', 0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000340)='%]{\fZ', 0xffffffff) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon17\x00', 0x80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x200000000000, 0x5, 0x4) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x2, 0x7, 0x5, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0xd, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0x4]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mprotect$auto(0x0, 0x8000000000000001, 0x8) r4 = fcntl$getown(r0, 0x9) r5 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x8, 0x0, r4, 0x1, 0xb91) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r0) sendmsg$auto_GTP_CMD_GETPDP(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="a500000000000000635625357f04032abd7000a8ba043ce560558f5e85e3a90cd9fb1ebe111a6038eade64f62ed669bc2533c28f6328834391eb049ca4a25d0f53c7327cc74c8480496c9ec8b03f442ea8fbecdf9333410ea68e529c6e2e5696ca11b8e37fedf4c0062b823424c3de8a3cb8affe125c80b45b1e83d62a5aede3a6761066511eee5163f3c2aecc0cd91cbc7ddcd80eaf3261241a0a5590851a2ed14e518cad8b965036d49ead72fde291c9094e3a4eb0ed219ab047a6300625db6a053c2a3f35d406"], 0x14}, 0x1, 0x0, 0x0, 0x214c0}, 0x2000400) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000000)={0xf, 0x9, 0x6, 0x100000001, 0x5, r4}) 9.26349333s ago: executing program 8 (id=3242): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) mmap$auto(0x0, 0x4020009, 0x800, 0x1000000000ebe, 0x401, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(r0, &(0x7f0000000180)='e\x82C/\x0e\x88\xbc\x8f\x86\xa1\xf7OV\xe8G\x05\x8eDf8\x0e\x13\x97\xd8=\xf3\xa4\xd6\xb6\xd3\xe1\xce2|\xf9\xf3\x0f\x90:ht\x0e\x99\x813\x1e\xe9\x9c\n\xf7\xb5N\xd5\xe2A \xa4\xf0\x1e{e \xaa\r\xbe\xba\xe9D\xf3\x9f\x9b{<\x05\xea\xfe\xb5\xe2\xa3V<\xe6?\x83+\xf0\xd0\x83\xd3\xce\x8d\xae\x17\x85DV&\nY}\xe4\xa5\xa2\x17\x15\xcb\xf8I\xbb\xcd\xab\xb43}\x00\xec\x8bk\x11\x19\x00\xf1\xad\xf2\x7f\xfb\x16\x16\xaf\x8c\xb61\x1d%\x8e\xe3\'tv\xc3 \xb0\xd9\xce\xaf\xf9\b\'\xccW\xbc\xf3\x9b\xeb\xd8\xa9\xd6\xffh\xcd\xef\xc1\xb0~\x14U\x93\x8f\x84\x8cTX s@\xb4\x89*\xaeuG\x94\x8f\x00\x00\x00\x00\x00\x00', 0x7f) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/92, 0x5c) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto_kmsg_fops_printk(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/tty12\x00', 0x480000, 0x0) socket(0x2, 0x5, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) write$auto(0x3, 0x0, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='}[,&*}/file0\x00', &(0x7f0000000180)={0x189442, 0x30, 0x7}, 0x18) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/43, 0x2b) sendfile$auto(0x1, 0x3, 0x0, 0x7fffeffc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) sysfs$auto(0x2, 0x3c, 0x0) 7.844463308s ago: executing program 8 (id=3243): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x2) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ppoll$auto(&(0x7f00000000c0)={r1, 0x6, 0x4006}, 0x2, 0x0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r2) sendmsg$auto_OVS_DP_CMD_NEW(r2, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x11, 0x3, 0x8) io_submit$auto(0x2, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x2, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0x1001, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x8) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MNTR_FLAGS={0xe2, 0x17, "e4fcbfcad46bcd8684a0b5c53b8ad228dcf711e36d51ecbb91b5138f759a3d0dcf013fe28c5985913c61c6a704981762d268e7db0eee4f3644e172934583a4ffd044b486edfa77ac656849d48d13851375544f8defe869e31633e8c3526d69e8d4702e07e345c1bc9d05b44b3e693c622ffb78b7f07ac4da7df6bcabb6d9264b00c8c98d23ee3cea2c7ffc19875dc5be4b0f3dec18932ce7d0086da9ebf1a93cff7bf1371317ff9fffe7f4dd006afc6d4dbbf31cbd798d2e2361d740e8628eb0beefb42a7cdb743328a8adff98b27e849ca5c6a69e115c6014ee277275db"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) 7.152910586s ago: executing program 9 (id=3245): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) lseek$auto(0x3, 0x0, 0x1) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(r1, 0x29a6f4b4, &(0x7f00000000c0)={@_si_pad}) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) socket(0x5, 0x80000, 0x2) epoll_create1$auto(0x9f) shmdt$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/macaddress\x00', 0x40780, 0x0) read$auto(r2, &(0x7f00000003c0)='\x98g\x8c=\xcd`\n\x1cbf\x8c/a#%\xca}H3\xf0p\x87\x90yrLK.\xcd\x02\xf3G\xd0\xd4\t\xf8\xfb\xbfV\xa0\xdc\xc4\xc8\xd20x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0806000000000000110001006f76a0bc3ed3c1eea93dda707939fca7735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586a", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_BLKTRACESETUP2(r4, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub3/info\x00', 0x8280, 0x0) 3.176026414s ago: executing program 2 (id=3252): mmap$auto(0x0, 0x2c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) unshare$auto(0x40000080) r1 = socket(0x1e, 0x4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4048098}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1.978742225s ago: executing program 9 (id=3253): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c0") openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x9) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r2, 0x0, 0x4000002) ioctl$auto(r0, 0x4b69, r0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x2404c000) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) socket(0x200000000000011, 0x2, 0x0) ppoll$auto(0x0, 0xaf, 0x0, 0x0, 0x8) unshare$auto(0x8000400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlockall$auto(0x7) munlock$auto(0x2, 0x200c06d) 796.012776ms ago: executing program 2 (id=3254): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = io_uring_setup$auto(0x6, 0x0) r1 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r0, 0x8004b706, &(0x7f0000000000)) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000080)={@raw=0x5, 0x7, 0x3, @unused, @name="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"}) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x121200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x183281, 0x0) ioctl$auto(r4, 0xc040564a, r3) 507.785927ms ago: executing program 2 (id=3255): socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r0, 0x80045430, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r1, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x40000008, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129a00, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r4 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000001480)=@token_create={0x9, r3}, 0x8001) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r4, &(0x7f0000001400)={{&(0x7f0000000140)="434d8f7c48eb1bc49b17331d4b7c389c00a557662a4c97d12fd20a3d01889ba54fb713c1c5acadb1262135280b76f93c213ad9a8f29128ef938e72d50592c78c0fe86aa2a80c8b6e7973ef42bb56779331ac54f52340b8b89e8330b48b1e39798833349cba194c86ee970f576f0d282b34858b099a75ed820584b97244ad705e67", 0x5, &(0x7f00000003c0)={&(0x7f00000002c0)="e901872f0036ef52a9d69ca4d58ca67252054ae81a69db5696b1cd27fa1909da19b3f175b3a70ca830eec6e3198d61c5d83e7e59a995006184866df71b32d33904c4d2962bbe5204305f43a475751f7bbb35c7a3b85183d1e098848a92f86fb87bd63d84c7e363c50aecd576e42dca6a23d9ecf1b80a0120d63a8bf4cb78eef66ffdc6dcaa145ccd95d18ced909cb3a57a66102c18f78c33e51a4c1b03454d7b51e9bc9ef81dff0a4778e17d0892ca1d3f783834ecad26dea1be2abc77b137e04d2ee4118ffb0d2f0cf08d376d6ce6562972537d26ea0b", 0xb4c}, 0x6, &(0x7f0000000400)="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", 0x1, 0x6}, 0xfff}, 0x4, 0x400, &(0x7f0000001440)={0x40, 0x1}) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) 349.979594ms ago: executing program 3 (id=3256): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x40000000000802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121400, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x9, 0x400, 0x5}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x19) socket(0x9, 0x5, 0x3b) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) ioctl$auto_TIOCNOTTY2(r1, 0x5422, &(0x7f00000002c0)="e0777c5f9005bcc00e5456c960c4b594ab24091e9e") r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2980c2, 0x0) socket(0x1e, 0x4, 0x84) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x70000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/039/001\x00', 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) mmap$auto(0x2000040, 0x4, 0x4000000000df, 0x100000000000eb4, 0x401, 0x5) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x8000004, 0x0, 0x8, 0x2) mmap$auto(0x0, 0x202000d, 0x7, 0x14, r2, 0x8000) 0s ago: executing program 2 (id=3257): syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2, 0x3, 0xa) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) kernel console output (not intermixed with test programs): 0][T20400] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.312571][T20399] CPU: 0 UID: 0 PID: 20399 Comm: syz.1.2764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.312610][T20399] Tainted: [L]=SOFTLOCKUP [ 1200.312620][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.312643][T20399] Call Trace: [ 1200.312652][T20399] [ 1200.312662][T20399] dump_stack_lvl+0x100/0x190 [ 1200.312698][T20399] should_fail_ex.cold+0x5/0xa [ 1200.312748][T20399] should_failslab+0xc2/0x120 [ 1200.312783][T20399] __kmalloc_noprof+0xfc/0x820 [ 1200.312814][T20399] ? copy_splice_read+0x1a3/0xbb0 [ 1200.312844][T20399] copy_splice_read+0x1a3/0xbb0 [ 1200.312867][T20399] ? rcu_is_watching+0x12/0xc0 [ 1200.312899][T20399] ? trace_contention_end+0x126/0x160 [ 1200.312927][T20399] ? __mutex_lock+0x26d/0x1bd0 [ 1200.312951][T20399] ? __pfx_copy_splice_read+0x10/0x10 [ 1200.312981][T20399] ? __pfx___mutex_lock+0x10/0x10 [ 1200.313015][T20399] sock_splice_read+0xe9/0x110 [ 1200.313047][T20399] ? __pfx_sock_splice_read+0x10/0x10 [ 1200.313077][T20399] do_splice_read+0x285/0x370 [ 1200.313106][T20399] splice_file_to_pipe+0x82/0x120 [ 1200.313136][T20399] do_sendfile+0x366/0xe20 [ 1200.313180][T20399] ? __pfx_do_sendfile+0x10/0x10 [ 1200.313215][T20399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1200.313257][T20399] ? __fget_files+0x21f/0x3d0 [ 1200.313287][T20399] __x64_sys_sendfile64+0x1d8/0x220 [ 1200.313314][T20399] ? ksys_write+0x1ac/0x250 [ 1200.313336][T20399] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1200.313373][T20399] do_syscall_64+0x115/0x840 [ 1200.313412][T20399] ? clear_bhb_loop+0x40/0x90 [ 1200.313441][T20399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.313466][T20399] RIP: 0033:0x7fc89b99ce59 [ 1200.313486][T20399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.313510][T20399] RSP: 002b:00007fc89c805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1200.313534][T20399] RAX: ffffffffffffffda RBX: 00007fc89bc16090 RCX: 00007fc89b99ce59 [ 1200.313551][T20399] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1200.313565][T20399] RBP: 00007fc89c805090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.313580][T20399] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.313594][T20399] R13: 00007fc89bc16128 R14: 00007fc89bc16090 R15: 00007ffc8808f788 [ 1200.313624][T20399] [ 1200.808789][T20400] CPU: 0 UID: 0 PID: 20400 Comm: syz.5.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.808830][T20400] Tainted: [L]=SOFTLOCKUP [ 1200.808839][T20400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.808855][T20400] Call Trace: [ 1200.808865][T20400] [ 1200.808876][T20400] dump_stack_lvl+0x100/0x190 [ 1200.808913][T20400] should_fail_ex.cold+0x5/0xa [ 1200.808945][T20400] should_failslab+0xc2/0x120 [ 1200.808981][T20400] __kmalloc_cache_noprof+0x91/0x6c0 [ 1200.809006][T20400] ? kasan_save_track+0x14/0x30 [ 1200.809037][T20400] ? __kasan_kmalloc+0xaa/0xb0 [ 1200.809067][T20400] ? nfc_allocate_device+0x15b/0x5e0 [ 1200.809098][T20400] nfc_allocate_device+0x15b/0x5e0 [ 1200.809121][T20400] ? __init_swait_queue_head+0xca/0x150 [ 1200.809158][T20400] nci_allocate_device+0x23b/0x410 [ 1200.809194][T20400] virtual_ncidev_open+0x6f/0x220 [ 1200.809258][T20400] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1200.809297][T20400] misc_open+0x26d/0x450 [ 1200.809322][T20400] ? __pfx_misc_open+0x10/0x10 [ 1200.809346][T20400] chrdev_open+0x234/0x6a0 [ 1200.809372][T20400] ? __pfx_apparmor_file_open+0x10/0x10 [ 1200.809400][T20400] ? __pfx_chrdev_open+0x10/0x10 [ 1200.809427][T20400] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1200.809463][T20400] do_dentry_open+0x6ab/0x14d0 [ 1200.809488][T20400] ? __pfx_chrdev_open+0x10/0x10 [ 1200.809520][T20400] vfs_open+0x82/0x3f0 [ 1200.809555][T20400] path_openat+0x2873/0x4280 [ 1200.809593][T20400] ? __pfx_path_openat+0x10/0x10 [ 1200.809632][T20400] do_file_open+0x20e/0x430 [ 1200.809660][T20400] ? __pfx_do_file_open+0x10/0x10 [ 1200.809707][T20400] ? alloc_fd+0x471/0x7a0 [ 1200.809734][T20400] ? do_getname+0x191/0x390 [ 1200.809768][T20400] do_sys_openat2+0x10f/0x1e0 [ 1200.809802][T20400] ? __pfx_do_sys_openat2+0x10/0x10 [ 1200.809837][T20400] ? __fget_files+0x21f/0x3d0 [ 1200.809867][T20400] __x64_sys_openat+0x12d/0x210 [ 1200.809901][T20400] ? __pfx___x64_sys_openat+0x10/0x10 [ 1200.809946][T20400] do_syscall_64+0x115/0x840 [ 1200.809969][T20400] ? clear_bhb_loop+0x40/0x90 [ 1200.809999][T20400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.810025][T20400] RIP: 0033:0x7fc8d839ce59 [ 1200.810045][T20400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.810070][T20400] RSP: 002b:00007fc8d9174028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1200.810094][T20400] RAX: ffffffffffffffda RBX: 00007fc8d8616090 RCX: 00007fc8d839ce59 [ 1200.810110][T20400] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1200.810126][T20400] RBP: 00007fc8d8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1200.810141][T20400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.810156][T20400] R13: 00007fc8d8616128 R14: 00007fc8d8616090 R15: 00007fff722a6c08 [ 1200.810188][T20400] [ 1202.004249][T20379] Process accounting resumed [ 1202.455714][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2769'. [ 1202.775291][T20437] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1202.839413][T20439] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2775'. [ 1202.939293][T20439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.946695][T20439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.886496][ T30] audit: type=1804 audit(4294969594.192:66): pid=20455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2777" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1062 res=1 errno=0 [ 1204.685021][T20474] hub 1-0:1.0: USB hub found [ 1204.735689][T20474] hub 1-0:1.0: 1 port detected [ 1205.399907][T20490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2785'. [ 1205.411293][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2784'. [ 1205.954707][T20507] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2789: iget: checksum invalid [ 1206.050073][T20507] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1206.187714][T20507] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2789: iget: checksum invalid [ 1206.359420][T20507] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1206.526665][T20507] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2789: iget: checksum invalid [ 1206.714254][T20507] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1206.876231][T20507] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2789: iget: checksum invalid [ 1206.953222][T20507] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1207.021533][T20507] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1207.083583][T20507] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1209.196653][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2798'. [ 1209.908229][T20581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1210.147278][T20586] usb usb20: check_ctrlrecip: process 20586 (syz.0.2799) requesting ep 01 but needs 81 [ 1210.171336][T20586] usb usb20: usbfs: process 20586 (syz.0.2799) did not claim interface 0 before use [ 1210.642645][T18098] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.774781][T20594] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2804'. [ 1211.126287][T20605] FAULT_INJECTION: forcing a failure. [ 1211.126287][T20605] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1211.238553][T18219] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1211.274679][T20605] CPU: 0 UID: 0 PID: 20605 Comm: syz.1.2806 Tainted: G L syzkaller #0 PREEMPT(full) [ 1211.274719][T20605] Tainted: [L]=SOFTLOCKUP [ 1211.274729][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1211.274744][T20605] Call Trace: [ 1211.274753][T20605] [ 1211.274763][T20605] dump_stack_lvl+0x100/0x190 [ 1211.274800][T20605] should_fail_ex.cold+0x5/0xa [ 1211.274833][T20605] get_futex_key+0x1d2/0x14f0 [ 1211.274871][T20605] ? __pfx_get_futex_key+0x10/0x10 [ 1211.274896][T20605] ? find_held_lock+0x2b/0x80 [ 1211.274928][T20605] ? futex_wake+0x4ea/0x5e0 [ 1211.274968][T20605] futex_wake+0xf4/0x5e0 [ 1211.274999][T20605] ? futex_wait+0x11e/0x370 [ 1211.275036][T20605] ? __pfx_futex_wake+0x10/0x10 [ 1211.275074][T20605] ? __lock_acquire+0x49f/0x1a40 [ 1211.275102][T20605] do_futex+0x2b2/0x440 [ 1211.275135][T20605] ? __pfx_do_futex+0x10/0x10 [ 1211.275166][T20605] ? find_held_lock+0x2b/0x80 [ 1211.275201][T20605] __x64_sys_futex+0x34f/0x4d0 [ 1211.275232][T20605] ? __fget_files+0x21f/0x3d0 [ 1211.275255][T20605] ? __pfx___x64_sys_futex+0x10/0x10 [ 1211.275295][T20605] do_syscall_64+0x115/0x840 [ 1211.275318][T20605] ? clear_bhb_loop+0x40/0x90 [ 1211.275349][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.275375][T20605] RIP: 0033:0x7fc89b99ce59 [ 1211.275395][T20605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.275419][T20605] RSP: 002b:00007fc89c8050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1211.275443][T20605] RAX: ffffffffffffffda RBX: 00007fc89bc16098 RCX: 00007fc89b99ce59 [ 1211.275460][T20605] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc89bc1609c [ 1211.275476][T20605] RBP: 00007fc89bc16090 R08: 0000000000000001 R09: 0000000000000000 [ 1211.275491][T20605] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1211.275506][T20605] R13: 00007fc89bc16128 R14: 00007ffc8808f6a0 R15: 00007ffc8808f788 [ 1211.275537][T20605] [ 1211.867482][T20620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1212.721765][T20616] ima: policy update failed [ 1212.757871][ T30] audit: type=1802 audit(4294969603.067:67): pid=20616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2810" res=0 errno=0 [ 1212.821796][T20636] netlink: 4380 bytes leftover after parsing attributes in process `syz.0.2812'. [ 1212.906157][T20639] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2813'. [ 1213.168875][T20637] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 1213.168875][T20637] program syz.0.2812 not setting count and/or reply_len properly [ 1213.710254][T20648] futex_wake_op: syz.5.2815 tries to shift op by -2048; fix this program [ 1213.765532][T20649] 0x000000000001-0x000000020000 : "" [ 1213.780078][T20651] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1213.915143][T20649] ftl_cs: FTL header corrupt! [ 1214.237411][T20661] FAULT_INJECTION: forcing a failure. [ 1214.237411][T20661] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.386645][T20661] CPU: 0 UID: 0 PID: 20661 Comm: syz.0.2818 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.386685][T20661] Tainted: [L]=SOFTLOCKUP [ 1214.386694][T20661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1214.386709][T20661] Call Trace: [ 1214.386718][T20661] [ 1214.386728][T20661] dump_stack_lvl+0x100/0x190 [ 1214.386764][T20661] should_fail_ex.cold+0x5/0xa [ 1214.386796][T20661] should_failslab+0xc2/0x120 [ 1214.386832][T20661] __kmalloc_cache_noprof+0x91/0x6c0 [ 1214.386858][T20661] ? kasan_save_track+0x14/0x30 [ 1214.386893][T20661] ? __kasan_kmalloc+0xaa/0xb0 [ 1214.386924][T20661] ? nfc_allocate_device+0x15b/0x5e0 [ 1214.386954][T20661] nfc_allocate_device+0x15b/0x5e0 [ 1214.386978][T20661] ? __init_swait_queue_head+0xca/0x150 [ 1214.387009][T20661] nci_allocate_device+0x23b/0x410 [ 1214.387046][T20661] virtual_ncidev_open+0x6f/0x220 [ 1214.387086][T20661] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1214.387124][T20661] misc_open+0x26d/0x450 [ 1214.387149][T20661] ? __pfx_misc_open+0x10/0x10 [ 1214.387173][T20661] chrdev_open+0x234/0x6a0 [ 1214.387200][T20661] ? __pfx_apparmor_file_open+0x10/0x10 [ 1214.387227][T20661] ? __pfx_chrdev_open+0x10/0x10 [ 1214.387273][T20661] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1214.387309][T20661] do_dentry_open+0x6ab/0x14d0 [ 1214.387334][T20661] ? __pfx_chrdev_open+0x10/0x10 [ 1214.387366][T20661] vfs_open+0x82/0x3f0 [ 1214.387401][T20661] path_openat+0x2873/0x4280 [ 1214.387439][T20661] ? __pfx_path_openat+0x10/0x10 [ 1214.387473][T20661] do_file_open+0x20e/0x430 [ 1214.387501][T20661] ? __pfx_do_file_open+0x10/0x10 [ 1214.387553][T20661] ? alloc_fd+0x471/0x7a0 [ 1214.387584][T20661] ? do_getname+0x191/0x390 [ 1214.387619][T20661] do_sys_openat2+0x10f/0x1e0 [ 1214.387653][T20661] ? __pfx_do_sys_openat2+0x10/0x10 [ 1214.387690][T20661] ? __fget_files+0x21f/0x3d0 [ 1214.387719][T20661] __x64_sys_openat+0x12d/0x210 [ 1214.387753][T20661] ? __pfx___x64_sys_openat+0x10/0x10 [ 1214.387799][T20661] do_syscall_64+0x115/0x840 [ 1214.387820][T20661] ? clear_bhb_loop+0x40/0x90 [ 1214.387850][T20661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.387876][T20661] RIP: 0033:0x7f903d39ce59 [ 1214.387897][T20661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.387922][T20661] RSP: 002b:00007f903e20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1214.387946][T20661] RAX: ffffffffffffffda RBX: 00007f903d616090 RCX: 00007f903d39ce59 [ 1214.387963][T20661] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1214.387980][T20661] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1214.387995][T20661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.388010][T20661] R13: 00007f903d616128 R14: 00007f903d616090 R15: 00007fffb8f1dfd8 [ 1214.388042][T20661] [ 1215.820266][T18219] Bluetooth: hci1: unexpected event 0x09 length: 435 > 3 [ 1217.229598][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1217.407885][T20698] bridge_slave_0 (unregistering): left allmulticast mode [ 1217.443386][T20698] bridge_slave_0 (unregistering): left promiscuous mode [ 1217.477581][T20698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.773477][T18219] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1217.874756][T20710] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2828'. [ 1218.259869][T20714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2829'. [ 1219.035917][T20720] futex_wake_op: syz.1.2831 tries to shift op by -2048; fix this program [ 1219.140231][T20730] FAULT_INJECTION: forcing a failure. [ 1219.140231][T20730] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.204608][T20737] FAULT_INJECTION: forcing a failure. [ 1219.204608][T20737] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.246259][T20730] CPU: 0 UID: 0 PID: 20730 Comm: syz.0.2832 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.246297][T20730] Tainted: [L]=SOFTLOCKUP [ 1219.246306][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.246321][T20730] Call Trace: [ 1219.246328][T20730] [ 1219.246338][T20730] dump_stack_lvl+0x100/0x190 [ 1219.246372][T20730] should_fail_ex.cold+0x5/0xa [ 1219.246404][T20730] should_failslab+0xc2/0x120 [ 1219.246439][T20730] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1219.246472][T20730] ? __d_alloc+0x35/0xa50 [ 1219.246503][T20730] __d_alloc+0x35/0xa50 [ 1219.246542][T20730] d_alloc_pseudo+0x1c/0xc0 [ 1219.246576][T20730] alloc_file_pseudo+0x118/0x290 [ 1219.246610][T20730] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1219.246649][T20730] __shmem_file_setup+0x205/0x460 [ 1219.246688][T20730] ? __pfx___shmem_file_setup+0x10/0x10 [ 1219.246728][T20730] ? vm_area_alloc+0x1f/0x160 [ 1219.246754][T20730] shmem_zero_setup+0x96/0x1b0 [ 1219.246784][T20730] __mmap_region+0x24ef/0x2db0 [ 1219.246815][T20730] ? __pfx___mmap_region+0x10/0x10 [ 1219.246839][T20730] ? __pfx___might_resched+0x10/0x10 [ 1219.246886][T20730] ? __lock_acquire+0x49f/0x1a40 [ 1219.246927][T20730] ? __lock_acquire+0x49f/0x1a40 [ 1219.246962][T20730] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1219.247006][T20730] ? rcu_is_watching+0x12/0xc0 [ 1219.247036][T20730] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1219.247063][T20730] ? lockdep_hardirqs_on+0x78/0x100 [ 1219.247145][T20730] mmap_region+0x35d/0x620 [ 1219.247173][T20730] ? rcu_is_watching+0x12/0xc0 [ 1219.247202][T20730] ? __pfx_mmap_region+0x10/0x10 [ 1219.247232][T20730] ? cap_mmap_addr+0x4b/0x120 [ 1219.247254][T20730] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1219.247281][T20730] ? security_mmap_addr+0x71/0x1e0 [ 1219.247313][T20730] ? __get_unmapped_area+0x255/0x3e0 [ 1219.247352][T20730] do_mmap+0xc63/0x12f0 [ 1219.247391][T20730] ? __pfx_do_mmap+0x10/0x10 [ 1219.247425][T20730] ? __pfx_down_write_killable+0x10/0x10 [ 1219.247450][T20730] ? __pfx_futex_wait+0x10/0x10 [ 1219.247487][T20730] vm_mmap_pgoff+0x29e/0x470 [ 1219.247525][T20730] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1219.247570][T20730] ? __pfx_do_futex+0x10/0x10 [ 1219.247602][T20730] ksys_mmap_pgoff+0xe4/0x610 [ 1219.247636][T20730] ? __x64_sys_futex+0x358/0x4d0 [ 1219.247664][T20730] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1219.247698][T20730] ? xfd_validate_state+0x129/0x190 [ 1219.247733][T20730] __x64_sys_mmap+0x125/0x190 [ 1219.247768][T20730] do_syscall_64+0x115/0x840 [ 1219.247789][T20730] ? clear_bhb_loop+0x40/0x90 [ 1219.247817][T20730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.247842][T20730] RIP: 0033:0x7f903d39ce59 [ 1219.247861][T20730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.247884][T20730] RSP: 002b:00007f903e20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1219.247907][T20730] RAX: ffffffffffffffda RBX: 00007f903d616090 RCX: 00007f903d39ce59 [ 1219.247923][T20730] RDX: 1000000000000007 RSI: 0000000002020006 RDI: 0000000000000000 [ 1219.247938][T20730] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000001008000 [ 1219.247953][T20730] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1219.247968][T20730] R13: 00007f903d616128 R14: 00007f903d616090 R15: 00007fffb8f1dfd8 [ 1219.247998][T20730] [ 1219.930795][T20737] CPU: 0 UID: 0 PID: 20737 Comm: syz.6.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.930836][T20737] Tainted: [L]=SOFTLOCKUP [ 1219.930845][T20737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.930861][T20737] Call Trace: [ 1219.930869][T20737] [ 1219.930879][T20737] dump_stack_lvl+0x100/0x190 [ 1219.930915][T20737] should_fail_ex.cold+0x5/0xa [ 1219.930949][T20737] should_failslab+0xc2/0x120 [ 1219.930986][T20737] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1219.931017][T20737] ? __pfx___handle_mm_fault+0x10/0x10 [ 1219.931044][T20737] ? sock_alloc_inode+0x26/0x2c0 [ 1219.931081][T20737] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1219.931117][T20737] sock_alloc_inode+0x26/0x2c0 [ 1219.931160][T20737] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1219.931194][T20737] alloc_inode+0x68/0x250 [ 1219.931228][T20737] sock_alloc+0x44/0x280 [ 1219.931258][T20737] ? security_socket_create+0x7f/0x250 [ 1219.931286][T20737] __sock_create+0xc2/0x860 [ 1219.931328][T20737] __sys_socket+0x14d/0x260 [ 1219.931366][T20737] ? exc_page_fault+0x6f/0xd0 [ 1219.931404][T20737] ? __pfx___sys_socket+0x10/0x10 [ 1219.931451][T20737] __x64_sys_socket+0x72/0xb0 [ 1219.931489][T20737] ? lockdep_hardirqs_on+0x78/0x100 [ 1219.931528][T20737] do_syscall_64+0x115/0x840 [ 1219.931551][T20737] ? clear_bhb_loop+0x40/0x90 [ 1219.931581][T20737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.931607][T20737] RIP: 0033:0x7f031b39e6c7 [ 1219.931628][T20737] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.931659][T20737] RSP: 002b:00007f031c1a7f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1219.931688][T20737] RAX: ffffffffffffffda RBX: 00007f031b616180 RCX: 00007f031b39e6c7 [ 1219.931705][T20737] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1219.931737][T20737] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1219.931752][T20737] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 1219.931768][T20737] R13: 00007f031b616218 R14: 00007f031b616180 R15: 00007ffe5fa64e18 [ 1219.931800][T20737] [ 1219.931814][T20737] socket: no more sockets [ 1221.551878][T20753] FAULT_INJECTION: forcing a failure. [ 1221.551878][T20753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.670750][T20753] CPU: 0 UID: 0 PID: 20753 Comm: syz.5.2836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.670791][T20753] Tainted: [L]=SOFTLOCKUP [ 1221.670800][T20753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.670816][T20753] Call Trace: [ 1221.670824][T20753] [ 1221.670834][T20753] dump_stack_lvl+0x100/0x190 [ 1221.670869][T20753] should_fail_ex.cold+0x5/0xa [ 1221.670912][T20753] _copy_from_user+0x2e/0xd0 [ 1221.670950][T20753] do_pages_stat+0x194/0x7f0 [ 1221.670997][T20753] ? __pfx_do_pages_stat+0x10/0x10 [ 1221.671038][T20753] ? find_held_lock+0x2b/0x80 [ 1221.671070][T20753] ? futex_wake+0x4ea/0x5e0 [ 1221.671119][T20753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1221.671157][T20753] ? lockdep_hardirqs_on+0x78/0x100 [ 1221.671197][T20753] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1221.671238][T20753] kernel_move_pages+0xf11/0x14a0 [ 1221.671284][T20753] ? __pfx_do_futex+0x10/0x10 [ 1221.671313][T20753] ? __pfx_kernel_move_pages+0x10/0x10 [ 1221.671353][T20753] ? fdget+0x18b/0x210 [ 1221.671378][T20753] ? __x64_sys_futex+0x34f/0x4d0 [ 1221.671405][T20753] ? __x64_sys_futex+0x358/0x4d0 [ 1221.671437][T20753] ? xfd_validate_state+0x129/0x190 [ 1221.671473][T20753] __x64_sys_move_pages+0xe0/0x1c0 [ 1221.671513][T20753] ? do_syscall_64+0x90/0x840 [ 1221.671535][T20753] ? lockdep_hardirqs_on+0x78/0x100 [ 1221.671590][T20753] do_syscall_64+0x115/0x840 [ 1221.671612][T20753] ? clear_bhb_loop+0x40/0x90 [ 1221.671643][T20753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.671669][T20753] RIP: 0033:0x7fc8d839ce59 [ 1221.671690][T20753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.671715][T20753] RSP: 002b:00007fc8d9195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1221.671739][T20753] RAX: ffffffffffffffda RBX: 00007fc8d8615fa0 RCX: 00007fc8d839ce59 [ 1221.671756][T20753] RDX: 0000000000000000 RSI: 0000000000001001 RDI: 0000000000000000 [ 1221.671771][T20753] RBP: 00007fc8d8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1221.671787][T20753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.671802][T20753] R13: 00007fc8d8616038 R14: 00007fc8d8615fa0 R15: 00007fff722a6c08 [ 1221.671832][T20753] [ 1222.104603][T20768] lo: entered allmulticast mode [ 1222.589619][T18219] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1222.800601][T20783] lo: left allmulticast mode [ 1224.047874][T20769] kexec: Could not allocate control_code_buffer [ 1224.700081][T20825] FAULT_INJECTION: forcing a failure. [ 1224.700081][T20825] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.700162][T20825] CPU: 0 UID: 0 PID: 20825 Comm: syz.6.2849 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.700207][T20825] Tainted: [L]=SOFTLOCKUP [ 1224.700215][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1224.700231][T20825] Call Trace: [ 1224.700239][T20825] [ 1224.700248][T20825] dump_stack_lvl+0x100/0x190 [ 1224.700283][T20825] should_fail_ex.cold+0x5/0xa [ 1224.700316][T20825] should_failslab+0xc2/0x120 [ 1224.700351][T20825] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1224.700387][T20825] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 1224.700429][T20825] krealloc_node_align_noprof+0x321/0x3e0 [ 1224.700470][T20825] snd_pcm_hw_rule_add+0x3b3/0x510 [ 1224.700506][T20825] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 1224.700550][T20825] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1224.700596][T20825] ? mutex_init_lockdep+0xf1/0x120 [ 1224.700624][T20825] ? snd_pcm_attach_substream+0x287/0xd20 [ 1224.700660][T20825] snd_pcm_open_substream+0x54a/0x1850 [ 1224.700691][T20825] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1224.700720][T20825] ? rcu_is_watching+0x12/0xc0 [ 1224.700756][T20825] snd_pcm_open+0x2a3/0x710 [ 1224.700785][T20825] ? __pfx_snd_pcm_open+0x10/0x10 [ 1224.700816][T20825] ? __pfx_default_wake_function+0x10/0x10 [ 1224.700853][T20825] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1224.700881][T20825] snd_pcm_playback_open+0x86/0xe0 [ 1224.700909][T20825] snd_open+0x201/0x450 [ 1224.700943][T20825] ? __pfx_snd_open+0x10/0x10 [ 1224.700977][T20825] chrdev_open+0x234/0x6a0 [ 1224.701003][T20825] ? __pfx_apparmor_file_open+0x10/0x10 [ 1224.701029][T20825] ? __pfx_chrdev_open+0x10/0x10 [ 1224.701057][T20825] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1224.701092][T20825] do_dentry_open+0x6ab/0x14d0 [ 1224.701117][T20825] ? __pfx_chrdev_open+0x10/0x10 [ 1224.701149][T20825] vfs_open+0x82/0x3f0 [ 1224.701185][T20825] path_openat+0x2873/0x4280 [ 1224.701223][T20825] ? __pfx_path_openat+0x10/0x10 [ 1224.701257][T20825] do_file_open+0x20e/0x430 [ 1224.701285][T20825] ? __pfx_do_file_open+0x10/0x10 [ 1224.701331][T20825] ? alloc_fd+0x471/0x7a0 [ 1224.701359][T20825] ? do_getname+0x191/0x390 [ 1224.701393][T20825] do_sys_openat2+0x10f/0x1e0 [ 1224.701427][T20825] ? __pfx_do_sys_openat2+0x10/0x10 [ 1224.701471][T20825] __x64_sys_openat+0x12d/0x210 [ 1224.701506][T20825] ? __pfx___x64_sys_openat+0x10/0x10 [ 1224.701553][T20825] do_syscall_64+0x115/0x840 [ 1224.701579][T20825] ? clear_bhb_loop+0x40/0x90 [ 1224.701616][T20825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.701642][T20825] RIP: 0033:0x7f031b39ce59 [ 1224.701663][T20825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.701688][T20825] RSP: 002b:00007f031c1eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1224.701713][T20825] RAX: ffffffffffffffda RBX: 00007f031b615fa0 RCX: 00007f031b39ce59 [ 1224.701730][T20825] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 1224.701746][T20825] RBP: 00007f031b432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1224.701762][T20825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.701778][T20825] R13: 00007f031b616038 R14: 00007f031b615fa0 R15: 00007ffe5fa64e18 [ 1224.701808][T20825] [ 1225.172234][ T30] audit: type=1800 audit(2147483649.590:68): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2851" name="members" dev="configfs" ino=95898 res=0 errno=0 [ 1225.202138][ T30] audit: type=1800 audit(2147483649.620:69): pid=20834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2852" name="dbroot" dev="configfs" ino=95902 res=0 errno=0 [ 1227.394161][T20861] size and base must be multiples of 4 kiB [ 1227.426067][T20861] CPU: 0 UID: 0 PID: 20861 Comm: syz.1.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.426108][T20861] Tainted: [L]=SOFTLOCKUP [ 1227.426120][T20861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1227.426135][T20861] Call Trace: [ 1227.426143][T20861] [ 1227.426153][T20861] dump_stack_lvl+0x100/0x190 [ 1227.426190][T20861] mtrr_add.cold+0x74/0x87 [ 1227.426217][T20861] mtrr_ioctl+0x25a/0xcf0 [ 1227.426247][T20861] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1227.426282][T20861] ? find_held_lock+0x2b/0x80 [ 1227.426322][T20861] ? __fget_files+0x21f/0x3d0 [ 1227.426347][T20861] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1227.426376][T20861] proc_reg_unlocked_ioctl+0x229/0x320 [ 1227.426400][T20861] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1227.426428][T20861] __x64_sys_ioctl+0x18e/0x210 [ 1227.426466][T20861] do_syscall_64+0x115/0x840 [ 1227.426489][T20861] ? clear_bhb_loop+0x40/0x90 [ 1227.426526][T20861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.426553][T20861] RIP: 0033:0x7fc89b99ce59 [ 1227.426574][T20861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.426599][T20861] RSP: 002b:00007fc89c805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1227.426623][T20861] RAX: ffffffffffffffda RBX: 00007fc89bc16090 RCX: 00007fc89b99ce59 [ 1227.426640][T20861] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1227.426656][T20861] RBP: 00007fc89ba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1227.426671][T20861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.426685][T20861] R13: 00007fc89bc16128 R14: 00007fc89bc16090 R15: 00007ffc8808f788 [ 1227.426715][T20861] [ 1227.777870][T20865] nfs4: Unknown parameter 'Ô-‹H$>¿±§DM(ðåäèãÿì ·ÒXžñäv#ÆW' [ 1228.013243][T20875] Process accounting resumed [ 1228.411815][T20886] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1229.898785][T20903] FAULT_INJECTION: forcing a failure. [ 1229.898785][T20903] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.944909][T20903] CPU: 0 UID: 0 PID: 20903 Comm: syz.0.2864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1229.944951][T20903] Tainted: [L]=SOFTLOCKUP [ 1229.944960][T20903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1229.944975][T20903] Call Trace: [ 1229.944984][T20903] [ 1229.944994][T20903] dump_stack_lvl+0x100/0x190 [ 1229.945031][T20903] should_fail_ex.cold+0x5/0xa [ 1229.945064][T20903] should_failslab+0xc2/0x120 [ 1229.945104][T20903] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1229.945137][T20903] ? mas_preallocate+0x1105/0x14a0 [ 1229.945175][T20903] mas_preallocate+0x1105/0x14a0 [ 1229.945211][T20903] ? __pfx_mas_preallocate+0x10/0x10 [ 1229.945250][T20903] ? anon_vma_name+0x5a/0x250 [ 1229.945293][T20903] __split_vma+0x33d/0xda0 [ 1229.945323][T20903] ? __pfx___split_vma+0x10/0x10 [ 1229.945346][T20903] ? vma_link+0x5ee/0x8d0 [ 1229.945385][T20903] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1229.945418][T20903] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1229.945446][T20903] ? alloc_new_pud+0x217/0x320 [ 1229.945470][T20903] ? get_old_pud+0xd8/0x360 [ 1229.945496][T20903] ? move_page_tables+0x11c/0x4610 [ 1229.945525][T20903] ? __pfx_copy_vma+0x10/0x10 [ 1229.945562][T20903] do_vmi_align_munmap+0x287/0x5f0 [ 1229.945593][T20903] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1229.945668][T20903] do_vmi_munmap+0x1f8/0x3e0 [ 1229.945701][T20903] move_vma+0xe5b/0x1920 [ 1229.945732][T20903] ? __pfx_move_vma+0x10/0x10 [ 1229.945763][T20903] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1229.945813][T20903] ? vrm_set_new_addr+0x204/0x290 [ 1229.945851][T20903] mremap_to+0x234/0x4c0 [ 1229.945877][T20903] ? mas_walk+0x6ef/0x9b0 [ 1229.945899][T20903] ? __pfx_mremap_to+0x10/0x10 [ 1229.945925][T20903] ? check_prep_vma+0x912/0xe60 [ 1229.945958][T20903] __do_sys_mremap+0x88c/0x1850 [ 1229.945995][T20903] ? __pfx___do_sys_mremap+0x10/0x10 [ 1229.946035][T20903] ? ksys_write+0x190/0x250 [ 1229.946066][T20903] ? __pfx_do_futex+0x10/0x10 [ 1229.946104][T20903] ? __x64_sys_futex+0x34f/0x4d0 [ 1229.946149][T20903] do_syscall_64+0x115/0x840 [ 1229.946172][T20903] ? clear_bhb_loop+0x40/0x90 [ 1229.946202][T20903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.946228][T20903] RIP: 0033:0x7f903d39ce59 [ 1229.946267][T20903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.946292][T20903] RSP: 002b:00007f903e22b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1229.946316][T20903] RAX: ffffffffffffffda RBX: 00007f903d615fa0 RCX: 00007f903d39ce59 [ 1229.946333][T20903] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 1229.946348][T20903] RBP: 00007f903d432e6f R08: 0000000100000000 R09: 0000000000000000 [ 1229.946364][T20903] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1229.946379][T20903] R13: 00007f903d616038 R14: 00007f903d615fa0 R15: 00007fffb8f1dfd8 [ 1229.946411][T20903] [ 1231.279863][T20915] FAULT_INJECTION: forcing a failure. [ 1231.279863][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.349475][T20915] CPU: 0 UID: 0 PID: 20915 Comm: syz.1.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.349515][T20915] Tainted: [L]=SOFTLOCKUP [ 1231.349524][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1231.349540][T20915] Call Trace: [ 1231.349549][T20915] [ 1231.349559][T20915] dump_stack_lvl+0x100/0x190 [ 1231.349595][T20915] should_fail_ex.cold+0x5/0xa [ 1231.349627][T20915] should_failslab+0xc2/0x120 [ 1231.349663][T20915] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1231.349697][T20915] ? shmem_alloc_inode+0x25/0x50 [ 1231.349733][T20915] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1231.349769][T20915] shmem_alloc_inode+0x25/0x50 [ 1231.349802][T20915] alloc_inode+0x68/0x250 [ 1231.349835][T20915] new_inode+0x22/0x1c0 [ 1231.349878][T20915] shmem_get_inode+0x1e3/0xf70 [ 1231.349918][T20915] ? __pfx_shmem_get_inode+0x10/0x10 [ 1231.349963][T20915] __shmem_file_setup+0x382/0x460 [ 1231.350002][T20915] ? __pfx___shmem_file_setup+0x10/0x10 [ 1231.350044][T20915] ? vm_area_alloc+0x1f/0x160 [ 1231.350078][T20915] shmem_zero_setup+0x96/0x1b0 [ 1231.350109][T20915] __mmap_region+0x24ef/0x2db0 [ 1231.350142][T20915] ? __pfx___mmap_region+0x10/0x10 [ 1231.350175][T20915] ? do_raw_spin_lock+0x128/0x260 [ 1231.350212][T20915] ? find_held_lock+0x2b/0x80 [ 1231.350243][T20915] ? clockevents_program_event+0x1bf/0x820 [ 1231.350308][T20915] ? clockevents_program_event+0x1bf/0x820 [ 1231.350344][T20915] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 1231.350369][T20915] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 1231.350423][T20915] ? mark_held_locks+0x40/0x70 [ 1231.350467][T20915] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1231.350540][T20915] mmap_region+0x35d/0x620 [ 1231.350569][T20915] ? rcu_is_watching+0x12/0xc0 [ 1231.350600][T20915] ? __pfx_mmap_region+0x10/0x10 [ 1231.350632][T20915] ? cap_mmap_addr+0x4b/0x120 [ 1231.350656][T20915] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1231.350679][T20915] ? security_mmap_addr+0x71/0x1e0 [ 1231.350713][T20915] ? __get_unmapped_area+0x255/0x3e0 [ 1231.350767][T20915] do_mmap+0xc63/0x12f0 [ 1231.350807][T20915] ? __pfx_do_mmap+0x10/0x10 [ 1231.350842][T20915] ? __pfx_down_write_killable+0x10/0x10 [ 1231.350870][T20915] ? __pfx_futex_wait+0x10/0x10 [ 1231.350908][T20915] vm_mmap_pgoff+0x29e/0x470 [ 1231.350948][T20915] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1231.350988][T20915] ? __pfx_do_futex+0x10/0x10 [ 1231.351014][T20915] ? __pfx_do_sys_openat2+0x10/0x10 [ 1231.351053][T20915] ksys_mmap_pgoff+0xe4/0x610 [ 1231.351094][T20915] ? __x64_sys_futex+0x358/0x4d0 [ 1231.351122][T20915] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1231.351157][T20915] ? xfd_validate_state+0x129/0x190 [ 1231.351193][T20915] __x64_sys_mmap+0x125/0x190 [ 1231.351229][T20915] do_syscall_64+0x115/0x840 [ 1231.351251][T20915] ? clear_bhb_loop+0x40/0x90 [ 1231.351282][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.351308][T20915] RIP: 0033:0x7fc89b99ce59 [ 1231.351330][T20915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.351354][T20915] RSP: 002b:00007fc89c7e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1231.351379][T20915] RAX: ffffffffffffffda RBX: 00007fc89bc16180 RCX: 00007fc89b99ce59 [ 1231.351396][T20915] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1231.351411][T20915] RBP: 00007fc89ba32e6f R08: fffffffffffffffa R09: 0000000000008000 [ 1231.351427][T20915] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1231.351442][T20915] R13: 00007fc89bc16218 R14: 00007fc89bc16180 R15: 00007ffc8808f788 [ 1231.351473][T20915] [ 1232.062663][T20925] Process accounting paused [ 1232.221619][T20927] futex_wake_op: syz.0.2872 tries to shift op by -2048; fix this program [ 1232.231073][T20927] 0x000000000001-0x000000020000 : "" [ 1232.329444][T20927] ftl_cs: FTL header corrupt! [ 1235.370033][T20986] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2883'. [ 1235.428183][T20986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.465797][T20986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.561888][T20986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.630352][T20986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.670395][T18219] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1238.248703][T21061] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[11196] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[21061] [ 1238.834537][T21069] FAULT_INJECTION: forcing a failure. [ 1238.834537][T21069] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.082481][T21069] CPU: 0 UID: 0 PID: 21069 Comm: syz.0.2899 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.082522][T21069] Tainted: [L]=SOFTLOCKUP [ 1239.082531][T21069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1239.082548][T21069] Call Trace: [ 1239.082557][T21069] [ 1239.082566][T21069] dump_stack_lvl+0x100/0x190 [ 1239.082603][T21069] should_fail_ex.cold+0x5/0xa [ 1239.082637][T21069] should_failslab+0xc2/0x120 [ 1239.082673][T21069] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1239.082706][T21069] ? ioctx_alloc+0x1b9/0x21a0 [ 1239.082739][T21069] ioctx_alloc+0x1b9/0x21a0 [ 1239.082765][T21069] ? __sock_release+0x184/0x260 [ 1239.082805][T21069] ? find_held_lock+0x2b/0x80 [ 1239.082838][T21069] ? __pfx_ioctx_alloc+0x10/0x10 [ 1239.082874][T21069] __x64_sys_io_setup+0xc9/0x220 [ 1239.082904][T21069] do_syscall_64+0x115/0x840 [ 1239.082927][T21069] ? clear_bhb_loop+0x40/0x90 [ 1239.082957][T21069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.082983][T21069] RIP: 0033:0x7f903d39ce59 [ 1239.083005][T21069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.083029][T21069] RSP: 002b:00007f903e1e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1239.083052][T21069] RAX: ffffffffffffffda RBX: 00007f903d616180 RCX: 00007f903d39ce59 [ 1239.083068][T21069] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1239.083084][T21069] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1239.083104][T21069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.083119][T21069] R13: 00007f903d616218 R14: 00007f903d616180 R15: 00007fffb8f1dfd8 [ 1239.083150][T21069] [ 1239.532977][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.543039][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.757450][T18219] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1240.649169][T21096] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2906'. [ 1241.376361][T21106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1241.501782][T21106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.637422][T21106] bond0 (unregistering): Released all slaves [ 1242.776858][T21130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.838460][T21135] tipc: Started in network mode [ 1242.845751][T21130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.899570][T21135] tipc: Node identity ee00, cluster identity 4711 [ 1243.048955][T21135] tipc: Node number set to 60928 [ 1243.669050][T21153] FAULT_INJECTION: forcing a failure. [ 1243.669050][T21153] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.848680][T21153] CPU: 0 UID: 0 PID: 21153 Comm: syz.0.2917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.848723][T21153] Tainted: [L]=SOFTLOCKUP [ 1243.848733][T21153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1243.848749][T21153] Call Trace: [ 1243.848758][T21153] [ 1243.848768][T21153] dump_stack_lvl+0x100/0x190 [ 1243.848804][T21153] should_fail_ex.cold+0x5/0xa [ 1243.848837][T21153] should_failslab+0xc2/0x120 [ 1243.848873][T21153] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1243.848906][T21153] ? ioctx_alloc+0x1b9/0x21a0 [ 1243.848944][T21153] ioctx_alloc+0x1b9/0x21a0 [ 1243.848971][T21153] ? __sock_release+0x184/0x260 [ 1243.849011][T21153] ? find_held_lock+0x2b/0x80 [ 1243.849044][T21153] ? __pfx_ioctx_alloc+0x10/0x10 [ 1243.849079][T21153] __x64_sys_io_setup+0xc9/0x220 [ 1243.849110][T21153] do_syscall_64+0x115/0x840 [ 1243.849132][T21153] ? clear_bhb_loop+0x40/0x90 [ 1243.849162][T21153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.849188][T21153] RIP: 0033:0x7f903d39ce59 [ 1243.849209][T21153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.849234][T21153] RSP: 002b:00007f903e1e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1243.849258][T21153] RAX: ffffffffffffffda RBX: 00007f903d616180 RCX: 00007f903d39ce59 [ 1243.849275][T21153] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1243.849291][T21153] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1243.849306][T21153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.849321][T21153] R13: 00007f903d616218 R14: 00007f903d616180 R15: 00007fffb8f1dfd8 [ 1243.849352][T21153] [ 1245.500954][T21172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'. [ 1245.850688][T18219] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1249.651028][T18219] Bluetooth: hci0: unexpected event 0x10 length: 124 > 1 [ 1249.654295][T18098] Bluetooth: hci0: hardware error 0x00 [ 1251.752521][T18098] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1252.467102][T21282] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1253.273483][T18097] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 5 with max blocks 9 with error 117 [ 1253.389302][T18097] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1253.389302][T18097] [ 1253.454728][T21301] binder: 21298:21301 ioctl c0046209 ffffffffffffffff returned -22 [ 1253.521802][T21300] binder: 21298:21300 ioctl c0046209 ffffffffffffffff returned -22 [ 1254.107880][ T30] audit: type=1806 audit(2147483678.520:70): xattr="." res=0 [ 1255.832873][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2957'. [ 1256.377270][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2958'. [ 1258.109146][T21369] futex_wake_op: syz.6.2961 tries to shift op by -2048; fix this program [ 1258.171426][T21369] 0x000000000001-0x000000020000 : "" [ 1258.212266][T21369] ftl_cs: FTL header corrupt! [ 1258.563231][T21333] Process accounting paused [ 1258.713630][T19414] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 6 with max blocks 1 with error 117 [ 1258.819454][T19414] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1258.819454][T19414] [ 1259.492957][T21401] FAULT_INJECTION: forcing a failure. [ 1259.492957][T21401] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.693890][T21401] CPU: 0 UID: 0 PID: 21401 Comm: syz.1.2968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.693930][T21401] Tainted: [L]=SOFTLOCKUP [ 1259.693940][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1259.693955][T21401] Call Trace: [ 1259.693964][T21401] [ 1259.693974][T21401] dump_stack_lvl+0x100/0x190 [ 1259.694010][T21401] should_fail_ex.cold+0x5/0xa [ 1259.694044][T21401] should_failslab+0xc2/0x120 [ 1259.694081][T21401] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1259.694113][T21401] ? ioctx_alloc+0x1b9/0x21a0 [ 1259.694146][T21401] ioctx_alloc+0x1b9/0x21a0 [ 1259.694172][T21401] ? __sock_release+0x184/0x260 [ 1259.694211][T21401] ? find_held_lock+0x2b/0x80 [ 1259.694246][T21401] ? __pfx_ioctx_alloc+0x10/0x10 [ 1259.694281][T21401] __x64_sys_io_setup+0xc9/0x220 [ 1259.694311][T21401] do_syscall_64+0x115/0x840 [ 1259.694334][T21401] ? clear_bhb_loop+0x40/0x90 [ 1259.694364][T21401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.694390][T21401] RIP: 0033:0x7fc89b99ce59 [ 1259.694411][T21401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.694436][T21401] RSP: 002b:00007fc89c7e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1259.694460][T21401] RAX: ffffffffffffffda RBX: 00007fc89bc16180 RCX: 00007fc89b99ce59 [ 1259.694477][T21401] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1259.694493][T21401] RBP: 00007fc89ba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1259.694508][T21401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.694524][T21401] R13: 00007fc89bc16218 R14: 00007fc89bc16180 R15: 00007ffc8808f788 [ 1259.694554][T21401] [ 1261.005981][T21420] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1261.150216][T21420] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1261.288894][T21420] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1261.340920][T21420] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1261.380170][T21420] page dumped because: unmovable page [ 1261.394870][T21420] page_owner info is not present (never set?) [ 1261.956125][T21424] futex_wake_op: syz.6.2971 tries to shift op by -2048; fix this program [ 1261.990326][T21424] 0x000000000001-0x000000020000 : "" [ 1262.044031][T21424] ftl_cs: FTL header corrupt! [ 1262.355241][T21417] Process accounting resumed [ 1262.811847][T21430] futex_wake_op: syz.5.2972 tries to shift op by -2048; fix this program [ 1262.864063][T21430] 0x000000000001-0x000000020000 : "" [ 1262.897421][T21430] ftl_cs: FTL header corrupt! [ 1266.267714][ T30] audit: type=1107 audit(2147484713.670:71): pid=21470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1266.407776][ T30] audit: type=1107 audit(2147484713.820:72): pid=21470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1268.192451][ T30] audit: type=1800 audit(2147484715.599:73): pid=21503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2982" name="lu_gp_id" dev="configfs" ino=99791 res=0 errno=0 [ 1268.903180][T21510] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2987'. [ 1273.029318][T18098] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1274.736329][T21611] zswap: compressor not available [ 1274.760746][T21630] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1275.085935][T21619] zswap: compressor not available [ 1276.839735][T21666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3017'. [ 1278.235625][T21680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3021'. [ 1278.337594][T21685] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3021'. [ 1281.607101][T21721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3030'. [ 1282.084046][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1282.688027][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 1284.608312][T21758] FAULT_INJECTION: forcing a failure. [ 1284.608312][T21758] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.716085][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.0.3036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.716126][T21758] Tainted: [L]=SOFTLOCKUP [ 1284.716136][T21758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1284.716151][T21758] Call Trace: [ 1284.716160][T21758] [ 1284.716169][T21758] dump_stack_lvl+0x100/0x190 [ 1284.716206][T21758] should_fail_ex.cold+0x5/0xa [ 1284.716239][T21758] should_failslab+0xc2/0x120 [ 1284.716275][T21758] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1284.716309][T21758] ? ioctx_alloc+0x1b9/0x21a0 [ 1284.716340][T21758] ioctx_alloc+0x1b9/0x21a0 [ 1284.716366][T21758] ? __sock_release+0x184/0x260 [ 1284.716405][T21758] ? find_held_lock+0x2b/0x80 [ 1284.716446][T21758] ? __pfx_ioctx_alloc+0x10/0x10 [ 1284.716489][T21758] __x64_sys_io_setup+0xc9/0x220 [ 1284.716526][T21758] do_syscall_64+0x115/0x840 [ 1284.716549][T21758] ? clear_bhb_loop+0x40/0x90 [ 1284.716579][T21758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.716605][T21758] RIP: 0033:0x7f903d39ce59 [ 1284.716626][T21758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.716651][T21758] RSP: 002b:00007f903e20a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1284.716675][T21758] RAX: ffffffffffffffda RBX: 00007f903d616090 RCX: 00007f903d39ce59 [ 1284.716692][T21758] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1284.716708][T21758] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1284.716723][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.716739][T21758] R13: 00007f903d616128 R14: 00007f903d616090 R15: 00007fffb8f1dfd8 [ 1284.716770][T21758] [ 1285.233718][T18098] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1286.341914][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1286.493244][T21777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3041'. [ 1287.284278][T18098] Bluetooth: hci4: command 0x0406 tx timeout [ 1287.359263][T21786] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 4, inode_bitmap = 141 [ 1287.858781][T18090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1287.876674][T18090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1287.886544][T18090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1287.898859][T18090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1287.906559][T18090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1288.376120][T18090] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 1289.399610][T21810] writing to auto_msgmni has no effect [ 1289.761258][T21817] kafs: addr_prefs: Invalid Command [ 1290.005608][T18098] Bluetooth: hci2: command tx timeout [ 1290.852705][T21792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.885235][T21792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.920950][T21792] bridge_slave_0: entered allmulticast mode [ 1290.965107][T21792] bridge_slave_0: entered promiscuous mode [ 1291.006944][T21792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.049488][T21792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.076327][T21792] bridge_slave_1: entered allmulticast mode [ 1291.095985][T21792] bridge_slave_1: entered promiscuous mode [ 1291.230267][T21792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.292563][T21792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.406805][T21792] team0: Port device team_slave_0 added [ 1291.439822][T21792] team0: Port device team_slave_1 added [ 1291.533740][T21837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1291.555013][T21792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.570241][T21792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.638831][T21792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.672693][T21792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.697742][T21792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.791981][T21792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.983159][T21792] hsr_slave_0: entered promiscuous mode [ 1292.009280][T21792] hsr_slave_1: entered promiscuous mode [ 1292.035851][T21792] debugfs: 'hsr0' already exists in 'hsr' [ 1292.062781][T21792] Cannot create hsr debugfs directory [ 1292.087194][T18098] Bluetooth: hci2: command tx timeout [ 1292.483611][T21848] Process accounting paused [ 1293.343182][T11196] Process accounting resumed [ 1293.922896][T21792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1293.998192][T21792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1294.086782][T21792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1294.136850][T18090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1294.153798][T18090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1294.164483][T18090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1294.171741][T18219] Bluetooth: hci2: command tx timeout [ 1294.190323][T18090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1294.209704][T18090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1294.292038][T21792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1294.383714][T21792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1294.449499][T21792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.515371][T21792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1294.571132][T21792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.964357][T18090] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1295.063630][T21792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.151654][T21792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.205251][T19418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.212482][T19418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.324731][T19418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.331945][T19418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.251470][T18098] Bluetooth: hci2: command tx timeout [ 1296.262555][T18090] Bluetooth: hci5: command tx timeout [ 1296.443457][T18090] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1297.098098][T21902] FAULT_INJECTION: forcing a failure. [ 1297.098098][T21902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1297.140434][T21857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.156559][T21857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.207684][T21857] bridge_slave_0: entered allmulticast mode [ 1297.215697][T21902] CPU: 0 UID: 0 PID: 21902 Comm: syz.0.3061 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.215737][T21902] Tainted: [L]=SOFTLOCKUP [ 1297.215746][T21902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1297.215762][T21902] Call Trace: [ 1297.215771][T21902] [ 1297.215780][T21902] dump_stack_lvl+0x100/0x190 [ 1297.215815][T21902] should_fail_ex.cold+0x5/0xa [ 1297.215844][T21902] ? prepare_alloc_pages+0x16d/0x5f0 [ 1297.215883][T21902] should_fail_alloc_page+0xeb/0x140 [ 1297.215929][T21902] prepare_alloc_pages+0x1f0/0x5f0 [ 1297.215970][T21902] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1297.216006][T21902] ? rcu_is_watching+0x12/0xc0 [ 1297.216037][T21902] ? trace_mm_page_alloc+0x164/0x1c0 [ 1297.216074][T21902] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 1297.216105][T21902] ? find_held_lock+0x2b/0x80 [ 1297.216137][T21902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1297.216169][T21902] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1297.216210][T21902] ? lockdep_hardirqs_on+0x78/0x100 [ 1297.216249][T21902] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1297.216286][T21902] ? stack_depot_save_flags+0x479/0x9d0 [ 1297.216326][T21902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1297.216360][T21902] ? __kasan_slab_alloc+0x89/0x90 [ 1297.216392][T21902] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 1297.216423][T21902] ? alloc_vmap_area+0x182f/0x2bb0 [ 1297.216458][T21902] ? __get_vm_area_node+0x1ca/0x330 [ 1297.216492][T21902] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 1297.216530][T21902] ? __kvmalloc_node_noprof+0x3d3/0x970 [ 1297.216566][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1297.216604][T21902] ? do_syscall_64+0x115/0x840 [ 1297.216626][T21902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.216662][T21902] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 1297.216697][T21902] ? policy_nodemask+0xed/0x4f0 [ 1297.216736][T21902] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1297.216782][T21902] __kasan_populate_vmalloc+0xf0/0x210 [ 1297.216818][T21902] alloc_vmap_area+0x95d/0x2bb0 [ 1297.216859][T21902] ? kasan_save_track+0x14/0x30 [ 1297.216890][T21902] ? __kasan_kmalloc+0xaa/0xb0 [ 1297.216925][T21902] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1297.216959][T21902] ? preempt_schedule_thunk+0x16/0x40 [ 1297.216985][T21902] ? __get_vm_area_node+0x101/0x330 [ 1297.217024][T21902] __get_vm_area_node+0x1ca/0x330 [ 1297.217065][T21902] __vmalloc_node_range_noprof+0x228/0x1630 [ 1297.217105][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1297.217143][T21902] ? __pfx_try_to_wake_up+0x10/0x10 [ 1297.217169][T21902] ? futex_hash+0x311/0x400 [ 1297.217192][T21902] ? futex_hash+0x311/0x400 [ 1297.217220][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1297.217262][T21902] ? alloc_pages_mpol+0x25a/0x540 [ 1297.217301][T21902] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1297.217346][T21902] ? rcu_is_watching+0x12/0xc0 [ 1297.217383][T21902] __kvmalloc_node_noprof+0x3d3/0x970 [ 1297.217414][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1297.217454][T21902] ? _copy_from_user+0x59/0xd0 [ 1297.217488][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1297.217531][T21902] __do_sys_listmount+0x289/0xee0 [ 1297.217577][T21902] ? __pfx_do_futex+0x10/0x10 [ 1297.217605][T21902] ? __pfx_do_sendfile+0x10/0x10 [ 1297.217644][T21902] ? __fget_files+0x21f/0x3d0 [ 1297.217668][T21902] ? __pfx___do_sys_listmount+0x10/0x10 [ 1297.217726][T21902] do_syscall_64+0x115/0x840 [ 1297.217747][T21902] ? clear_bhb_loop+0x40/0x90 [ 1297.217777][T21902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.217802][T21902] RIP: 0033:0x7f903d39ce59 [ 1297.217824][T21902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.217854][T21902] RSP: 002b:00007f903e20a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1297.217879][T21902] RAX: ffffffffffffffda RBX: 00007f903d616090 RCX: 00007f903d39ce59 [ 1297.217895][T21902] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 1297.217911][T21902] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1297.217926][T21902] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1297.217941][T21902] R13: 00007f903d616128 R14: 00007f903d616090 R15: 00007fffb8f1dfd8 [ 1297.217972][T21902] [ 1298.051733][T21904] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[18577] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[21904] [ 1298.067782][T21857] bridge_slave_0: entered promiscuous mode [ 1298.090558][T21902] syz.0.3061: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1298.137050][T21902] CPU: 0 UID: 0 PID: 21902 Comm: syz.0.3061 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.137091][T21902] Tainted: [L]=SOFTLOCKUP [ 1298.137101][T21902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1298.137117][T21902] Call Trace: [ 1298.137125][T21902] [ 1298.137135][T21902] dump_stack_lvl+0x100/0x190 [ 1298.137171][T21902] warn_alloc.cold+0x94/0xa8 [ 1298.137197][T21902] ? __pfx_warn_alloc+0x10/0x10 [ 1298.137223][T21902] ? lockdep_hardirqs_on+0x78/0x100 [ 1298.137271][T21902] ? __get_vm_area_node+0x2cd/0x330 [ 1298.137313][T21902] ? __get_vm_area_node+0x208/0x330 [ 1298.137355][T21902] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1298.137403][T21902] ? __pfx_try_to_wake_up+0x10/0x10 [ 1298.137431][T21902] ? futex_hash+0x311/0x400 [ 1298.137460][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1298.137503][T21902] ? alloc_pages_mpol+0x25a/0x540 [ 1298.137542][T21902] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1298.137588][T21902] ? rcu_is_watching+0x12/0xc0 [ 1298.137625][T21902] __kvmalloc_node_noprof+0x3d3/0x970 [ 1298.137657][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1298.137697][T21902] ? _copy_from_user+0x59/0xd0 [ 1298.137732][T21902] ? __do_sys_listmount+0x289/0xee0 [ 1298.137776][T21902] __do_sys_listmount+0x289/0xee0 [ 1298.137815][T21902] ? __pfx_do_futex+0x10/0x10 [ 1298.137850][T21902] ? __pfx_do_sendfile+0x10/0x10 [ 1298.137889][T21902] ? __fget_files+0x21f/0x3d0 [ 1298.137913][T21902] ? __pfx___do_sys_listmount+0x10/0x10 [ 1298.137972][T21902] do_syscall_64+0x115/0x840 [ 1298.137995][T21902] ? clear_bhb_loop+0x40/0x90 [ 1298.138024][T21902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.138050][T21902] RIP: 0033:0x7f903d39ce59 [ 1298.138071][T21902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.138096][T21902] RSP: 002b:00007f903e20a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1298.138121][T21902] RAX: ffffffffffffffda RBX: 00007f903d616090 RCX: 00007f903d39ce59 [ 1298.138138][T21902] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 1298.138154][T21902] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1298.138169][T21902] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1298.138184][T21902] R13: 00007f903d616128 R14: 00007f903d616090 R15: 00007fffb8f1dfd8 [ 1298.138215][T21902] [ 1298.138360][T21902] Mem-Info: [ 1298.481362][T18090] Bluetooth: hci5: command tx timeout [ 1298.589993][T21857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.598728][T21857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.630289][T21857] bridge_slave_1: entered allmulticast mode [ 1298.647114][T21857] bridge_slave_1: entered promiscuous mode [ 1298.759072][T21857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.797209][T21902] active_anon:10789 inactive_anon:5 isolated_anon:0 [ 1298.797209][T21902] active_file:12 inactive_file:58379 isolated_file:0 [ 1298.797209][T21902] unevictable:768 dirty:556 writeback:0 [ 1298.797209][T21902] slab_reclaimable:11955 slab_unreclaimable:97474 [ 1298.797209][T21902] mapped:38137 shmem:2989 pagetables:1231 [ 1298.797209][T21902] sec_pagetables:0 bounce:0 [ 1298.797209][T21902] kernel_misc_reclaimable:0 [ 1298.797209][T21902] free:1276407 free_pcp:14165 free_cma:0 [ 1298.844130][T21857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.974522][T21857] team0: Port device team_slave_0 added [ 1298.999918][T21857] team0: Port device team_slave_1 added [ 1299.020728][T21902] Node 0 active_anon:42688kB inactive_anon:20kB active_file:48kB inactive_file:232976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152508kB dirty:2220kB writeback:0kB shmem:10420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12000kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1299.103543][T21792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.123071][T21857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.141124][T21902] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1299.180249][T21857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.273722][T21857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.307519][T21902] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.362562][T21857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.392863][T21857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.440753][T21902] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1299.464034][T21902] Node 0 DMA32 free:1159996kB boost:0kB min:34052kB low:42564kB high:51076kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42644kB inactive_anon:20kB active_file:48kB inactive_file:232976kB unevictable:1536kB writepending:2252kB zspages:0kB present:3129332kB managed:2536468kB mlocked:0kB bounce:0kB free_pcp:40100kB local_pcp:40100kB free_cma:0kB [ 1299.511888][T21857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.589706][T21902] lowmem_reserve[]: 0 0 1 1 1 [ 1299.609647][T21902] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1028kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1299.697678][T21857] hsr_slave_0: entered promiscuous mode [ 1299.720063][T21857] hsr_slave_1: entered promiscuous mode [ 1299.739302][T21902] lowmem_reserve[]: 0 0 0 0 0 [ 1299.747662][T21857] debugfs: 'hsr0' already exists in 'hsr' [ 1299.763236][T21902] Node 1 Normal free:3930044kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:540kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111196kB mlocked:0kB bounce:0kB free_pcp:17236kB local_pcp:17236kB free_cma:0kB [ 1299.810518][T21857] Cannot create hsr debugfs directory [ 1299.894645][T21902] lowmem_reserve[]: 0 0 0 0 0 [ 1299.915717][T21902] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1299.977961][T21902] Node 0 DMA32: 5947*4kB (UME) 5263*8kB (UME) 4280*16kB (UME) 3619*32kB (UME) 1901*64kB (UME) 750*128kB (UME) 221*256kB (UME) 44*512kB (UME) 32*1024kB (UME) 9*2048kB (UME) 137*4096kB (M) = 1159300kB [ 1300.068888][T21902] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1300.124861][T21902] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (U) 1*32kB (M) 2*64kB (UM) 4*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 2*2048kB (UM) 958*4096kB (UM) = 3930044kB [ 1300.201041][T21902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.225781][T21902] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1300.267216][T21902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.321353][T21902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.377683][T21902] 61380 total pagecache pages [ 1300.389902][T21792] veth0_vlan: entered promiscuous mode [ 1300.403658][T21902] 4 pages in swap cache [ 1300.429721][T21902] Free swap = 124852kB [ 1300.442680][T21902] Total swap = 124996kB [ 1300.460224][T21792] veth1_vlan: entered promiscuous mode [ 1300.468178][T21902] 2097051 pages RAM [ 1300.484696][T21902] 0 pages HighMem/MovableOnly [ 1300.498444][T18090] Bluetooth: hci5: command tx timeout [ 1300.522036][T21902] 431038 pages reserved [ 1300.541109][T21902] 0 pages cma reserved [ 1300.736319][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.742868][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.010006][T21792] veth0_macvtap: entered promiscuous mode [ 1301.163367][T21792] veth1_macvtap: entered promiscuous mode [ 1301.338256][T21857] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1301.380540][T21857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1301.418663][T21857] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1301.448632][T21857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1301.518782][T21857] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1301.576590][T21857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1301.646093][T21792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.749668][T21857] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1301.800072][T21857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1301.835827][T21792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1302.028875][T19414] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.060399][T19414] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.155747][T19414] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.198368][T19414] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.573004][T18090] Bluetooth: hci5: command tx timeout [ 1302.598367][T19419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.643427][T19419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.767877][T21857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.807727][T19418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.855307][T19418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.873657][T21857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.909789][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.917004][T18097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.993932][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.001107][T18097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.446256][T21939] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1303.524299][T21939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.604231][T21939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.667650][T21939] bond0 (unregistering): Released all slaves [ 1305.340368][T21956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3065'. [ 1305.379858][T21958] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3066'. [ 1305.440473][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.448165][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.990480][T21857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.591350][T21977] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3068'. [ 1307.088586][T21857] veth0_vlan: entered promiscuous mode [ 1307.148043][T21857] veth1_vlan: entered promiscuous mode [ 1307.282936][T21857] veth0_macvtap: entered promiscuous mode [ 1307.329082][T21857] veth1_macvtap: entered promiscuous mode [ 1307.413839][T21857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.485952][T21857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.556886][T19418] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.594836][T19418] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.639141][T19418] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.692624][T19418] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.110844][T18097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.158590][T18097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.265516][T19414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.304491][T19414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.717098][T21986] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1308.932240][T21972] Process accounting resumed [ 1309.521637][T21989] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1311.038796][T18098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1311.059604][T18098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1311.071874][T18098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1311.083099][T18098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1311.106996][T18098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1313.218559][T18098] Bluetooth: hci6: command tx timeout [ 1313.432685][T22068] FAULT_INJECTION: forcing a failure. [ 1313.432685][T22068] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.628384][T22068] CPU: 0 UID: 0 PID: 22068 Comm: syz.8.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.628425][T22068] Tainted: [L]=SOFTLOCKUP [ 1313.628435][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1313.628450][T22068] Call Trace: [ 1313.628459][T22068] [ 1313.628468][T22068] dump_stack_lvl+0x100/0x190 [ 1313.628505][T22068] should_fail_ex.cold+0x5/0xa [ 1313.628538][T22068] should_failslab+0xc2/0x120 [ 1313.628574][T22068] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1313.628607][T22068] ? ioctx_alloc+0x1b9/0x21a0 [ 1313.628639][T22068] ioctx_alloc+0x1b9/0x21a0 [ 1313.628666][T22068] ? __sock_release+0x184/0x260 [ 1313.628705][T22068] ? find_held_lock+0x2b/0x80 [ 1313.628738][T22068] ? __pfx_ioctx_alloc+0x10/0x10 [ 1313.628772][T22068] __x64_sys_io_setup+0xc9/0x220 [ 1313.628802][T22068] do_syscall_64+0x115/0x840 [ 1313.628825][T22068] ? clear_bhb_loop+0x40/0x90 [ 1313.628855][T22068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.628882][T22068] RIP: 0033:0x7feef719ce59 [ 1313.628902][T22068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.628927][T22068] RSP: 002b:00007feef7fe7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1313.628951][T22068] RAX: ffffffffffffffda RBX: 00007feef7416180 RCX: 00007feef719ce59 [ 1313.628968][T22068] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1313.628983][T22068] RBP: 00007feef7232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1313.628998][T22068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.629013][T22068] R13: 00007feef7416218 R14: 00007feef7416180 R15: 00007ffcd7876118 [ 1313.629043][T22068] [ 1315.211027][T22082] futex_wake_op: syz.0.3084 tries to shift op by -2048; fix this program [ 1315.243121][T22082] 0x000000000001-0x000000020000 : "" [ 1315.271186][T22082] ftl_cs: FTL header corrupt! [ 1315.298918][T18098] Bluetooth: hci6: command tx timeout [ 1316.442532][T22033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.492851][T22033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.526849][T22033] bridge_slave_0: entered allmulticast mode [ 1316.576280][T22033] bridge_slave_0: entered promiscuous mode [ 1316.616789][T22033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.667836][T22033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.707144][T22033] bridge_slave_1: entered allmulticast mode [ 1316.718070][T22095] futex_wake_op: syz.7.3085 tries to shift op by -2048; fix this program [ 1316.754294][T22033] bridge_slave_1: entered promiscuous mode [ 1316.780642][T22095] 0x000000000001-0x000000020000 : "" [ 1316.888082][T22095] ftl_cs: FTL header corrupt! [ 1316.986116][T22033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.076064][T22033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.380495][T18098] Bluetooth: hci6: command tx timeout [ 1317.612562][T22033] team0: Port device team_slave_0 added [ 1317.782841][T22033] team0: Port device team_slave_1 added [ 1317.988052][T22033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.027848][T22033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.199347][T22033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.278573][T22033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.323114][T22033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.465731][T22033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.569068][T22107] FAULT_INJECTION: forcing a failure. [ 1318.569068][T22107] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.754164][T22107] CPU: 0 UID: 0 PID: 22107 Comm: syz.8.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.754201][T22107] Tainted: [L]=SOFTLOCKUP [ 1318.754210][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.754224][T22107] Call Trace: [ 1318.754233][T22107] [ 1318.754242][T22107] dump_stack_lvl+0x100/0x190 [ 1318.754277][T22107] should_fail_ex.cold+0x5/0xa [ 1318.754308][T22107] should_failslab+0xc2/0x120 [ 1318.754348][T22107] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1318.754380][T22107] ? __pfx_vsnprintf+0x10/0x10 [ 1318.754419][T22107] ? kasprintf+0xc7/0x100 [ 1318.754461][T22107] kvasprintf+0xbc/0x150 [ 1318.754496][T22107] ? __pfx_kvasprintf+0x10/0x10 [ 1318.754537][T22107] ? __fs_parse+0x278/0x960 [ 1318.754571][T22107] kasprintf+0xc7/0x100 [ 1318.754606][T22107] ? __pfx_kasprintf+0x10/0x10 [ 1318.754643][T22107] ? __pfx_ceph_parse_param+0x10/0x10 [ 1318.754676][T22107] ? __fs_parse+0x278/0x960 [ 1318.754717][T22107] logfc+0x11c/0x4e0 [ 1318.754743][T22107] ? ceph_parse_mount_param+0x158/0x28a0 [ 1318.754774][T22107] ? __pfx_logfc+0x10/0x10 [ 1318.754799][T22107] ? __pfx___mutex_lock+0x10/0x10 [ 1318.754825][T22107] ? __pfx_ceph_parse_mount_param+0x10/0x10 [ 1318.754865][T22107] vfs_parse_fs_param+0x2ee/0x3b0 [ 1318.754895][T22107] __do_sys_fsconfig+0x617/0xcb0 [ 1318.754930][T22107] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1318.754962][T22107] ? fput+0x79/0x100 [ 1318.755040][T22107] do_syscall_64+0x115/0x840 [ 1318.755062][T22107] ? clear_bhb_loop+0x40/0x90 [ 1318.755091][T22107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.755115][T22107] RIP: 0033:0x7feef719ce59 [ 1318.755135][T22107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.755159][T22107] RSP: 002b:00007feef8008028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1318.755181][T22107] RAX: ffffffffffffffda RBX: 00007feef7416090 RCX: 00007feef719ce59 [ 1318.755198][T22107] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1318.755212][T22107] RBP: 00007feef8008090 R08: 0000000000000004 R09: 0000000000000000 [ 1318.755227][T22107] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1318.755242][T22107] R13: 00007feef7416128 R14: 00007feef7416090 R15: 00007ffcd7876118 [ 1318.755272][T22107] [ 1319.003998][T22033] hsr_slave_0: entered promiscuous mode [ 1319.010594][T22033] hsr_slave_1: entered promiscuous mode [ 1319.016951][T22033] debugfs: 'hsr0' already exists in 'hsr' [ 1319.022775][T22033] Cannot create hsr debugfs directory [ 1319.492551][T18090] Bluetooth: hci6: command tx timeout [ 1320.236621][T22033] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.172413][T22128] futex_wake_op: syz.7.3092 tries to shift op by -2048; fix this program [ 1322.239931][T22129] 0x000000000001-0x000000020000 : "" [ 1322.301999][T22129] ftl_cs: FTL header corrupt! [ 1323.452024][T22033] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1323.516456][T22033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1323.557199][T22140] bridge0: port 3(veth1) entered blocking state [ 1323.581753][T22140] bridge0: port 3(veth1) entered disabled state [ 1323.676559][T22140] veth1: entered allmulticast mode [ 1323.748395][T22140] veth1: entered promiscuous mode [ 1323.825118][T22140] bridge0: port 3(veth1) entered blocking state [ 1323.831571][T22140] bridge0: port 3(veth1) entered forwarding state [ 1323.963577][T22033] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1324.011617][T22033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1324.076032][T22033] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1324.147239][T22033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1324.193444][T22033] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1324.247541][T22033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1324.551289][T22158] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1324.795853][T22033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.971981][T22162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1325.161382][T22033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.442480][T19427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.449735][T19427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.890113][T19427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.897389][T19427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.121912][T22173] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3100'. [ 1328.649811][T22194] netlink: 326 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1329.974465][T22033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.040326][T22033] veth0_vlan: entered promiscuous mode [ 1332.100333][T22033] veth1_vlan: entered promiscuous mode [ 1332.314986][T22033] veth0_macvtap: entered promiscuous mode [ 1332.393578][T22033] veth1_macvtap: entered promiscuous mode [ 1332.538556][T22033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.692432][T22033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.861683][T19416] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.921536][T19416] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.994604][T19416] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.091059][T19416] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.664852][T22261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3115'. [ 1333.695816][T19428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.759078][T19428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.806799][T22260] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3115'. [ 1334.233431][T22015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.300669][T22015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.708866][T22287] ubi: mtd0 is already attached to ubi31 [ 1337.355221][T22303] futex_wake_op: syz.7.3124 tries to shift op by -2048; fix this program [ 1337.410120][T22303] 0x000000000001-0x000000020000 : "" [ 1337.462305][T22303] ftl_cs: FTL header corrupt! [ 1339.202246][T22295] Process accounting paused [ 1339.479770][T22328] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 1339.479770][T22328] program syz.8.3128 not setting count and/or reply_len properly [ 1339.709765][T22327] hub 1-0:1.0: USB hub found [ 1339.765929][T22327] hub 1-0:1.0: 1 port detected [ 1340.269514][T19427] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1344 with max blocks 2 with error 117 [ 1340.374792][T19427] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1340.374792][T19427] [ 1341.219249][T18090] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1344.737965][T22392] FAULT_INJECTION: forcing a failure. [ 1344.737965][T22392] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.112385][T22392] CPU: 0 UID: 0 PID: 22392 Comm: syz.7.3142 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.112436][T22392] Tainted: [L]=SOFTLOCKUP [ 1345.112449][T22392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1345.112486][T22392] Call Trace: [ 1345.112495][T22392] [ 1345.112522][T22392] dump_stack_lvl+0x100/0x190 [ 1345.112564][T22392] should_fail_ex.cold+0x5/0xa [ 1345.112596][T22392] should_failslab+0xc2/0x120 [ 1345.112635][T22392] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1345.112680][T22392] ? ioctx_alloc+0x1b9/0x21a0 [ 1345.112726][T22392] ioctx_alloc+0x1b9/0x21a0 [ 1345.112762][T22392] ? __sock_release+0x184/0x260 [ 1345.112813][T22392] ? find_held_lock+0x2b/0x80 [ 1345.112846][T22392] ? __pfx_ioctx_alloc+0x10/0x10 [ 1345.112881][T22392] __x64_sys_io_setup+0xc9/0x220 [ 1345.112911][T22392] do_syscall_64+0x115/0x840 [ 1345.112933][T22392] ? clear_bhb_loop+0x40/0x90 [ 1345.112962][T22392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.112991][T22392] RIP: 0033:0x7ff79cb9ce59 [ 1345.113013][T22392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.113039][T22392] RSP: 002b:00007ff79da52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1345.113062][T22392] RAX: ffffffffffffffda RBX: 00007ff79ce16180 RCX: 00007ff79cb9ce59 [ 1345.113079][T22392] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1345.113095][T22392] RBP: 00007ff79cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1345.113111][T22392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.113126][T22392] R13: 00007ff79ce16218 R14: 00007ff79ce16180 R15: 00007ffd95a1cb58 [ 1345.113157][T22392] [ 1345.583005][T22015] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 5 with max blocks 1 with error 117 [ 1345.648373][T22015] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1345.648373][T22015] [ 1346.885521][T22399] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1348.307798][T22409] Process accounting resumed [ 1350.209129][T18090] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1351.347126][T22443] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3152'. [ 1351.641340][T22443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.773709][T22451] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3154'. [ 1351.953911][T22443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.075037][T22443] bond0 (unregistering): Released all slaves [ 1352.278861][T18098] Bluetooth: hci2: command 0x2016 tx timeout [ 1353.682425][T22467] netlink: 326 bytes leftover after parsing attributes in process `syz.9.3158'. [ 1353.803479][T22467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.811136][T22467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.357808][T18098] Bluetooth: hci2: command 0x2016 tx timeout [ 1354.611427][T22472] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1356.515883][T22498] FAULT_INJECTION: forcing a failure. [ 1356.515883][T22498] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.650196][T22498] CPU: 0 UID: 0 PID: 22498 Comm: syz.7.3163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.650236][T22498] Tainted: [L]=SOFTLOCKUP [ 1356.650245][T22498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1356.650264][T22498] Call Trace: [ 1356.650275][T22498] [ 1356.650285][T22498] dump_stack_lvl+0x100/0x190 [ 1356.650323][T22498] should_fail_ex.cold+0x5/0xa [ 1356.650355][T22498] should_failslab+0xc2/0x120 [ 1356.650457][T22498] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1356.650489][T22498] ? __pfx_map_id_range_down+0x10/0x10 [ 1356.650527][T22498] ? security_inode_alloc+0x3b/0x2c0 [ 1356.650560][T22498] security_inode_alloc+0x3b/0x2c0 [ 1356.650589][T22498] inode_init_always_gfp+0xc77/0xfb0 [ 1356.650619][T22498] alloc_inode+0x8e/0x250 [ 1356.650652][T22498] sock_alloc+0x44/0x280 [ 1356.650683][T22498] ? security_socket_create+0x7f/0x250 [ 1356.650710][T22498] __sock_create+0xc2/0x860 [ 1356.650752][T22498] smc_create_clcsk+0x37/0xd0 [ 1356.650791][T22498] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 1356.650822][T22498] inet6_create+0xb1a/0x12b0 [ 1356.650863][T22498] ? inet6_create+0x7f/0x12b0 [ 1356.650902][T22498] __sock_create+0x339/0x860 [ 1356.650945][T22498] __sys_socket+0x14d/0x260 [ 1356.650985][T22498] ? __pfx___sys_socket+0x10/0x10 [ 1356.651033][T22498] __x64_sys_socket+0x72/0xb0 [ 1356.651070][T22498] ? lockdep_hardirqs_on+0x78/0x100 [ 1356.651108][T22498] do_syscall_64+0x115/0x840 [ 1356.651130][T22498] ? clear_bhb_loop+0x40/0x90 [ 1356.651160][T22498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.651185][T22498] RIP: 0033:0x7ff79cb9ce59 [ 1356.651206][T22498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.651230][T22498] RSP: 002b:00007ff79da73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1356.651254][T22498] RAX: ffffffffffffffda RBX: 00007ff79ce16090 RCX: 00007ff79cb9ce59 [ 1356.651271][T22498] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 1356.651286][T22498] RBP: 00007ff79cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1356.651301][T22498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.651315][T22498] R13: 00007ff79ce16128 R14: 00007ff79ce16090 R15: 00007ffd95a1cb58 [ 1356.651346][T22498] [ 1357.033217][T22498] socket: no more sockets [ 1358.227015][T22529] netlink: 326 bytes leftover after parsing attributes in process `syz.9.3168'. [ 1358.929812][T22515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3165'. [ 1359.731829][ T30] audit: type=1804 audit(2147484807.094:74): pid=22542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3169" name="/newroot/31/file0" dev="tmpfs" ino=179 res=1 errno=0 [ 1362.223866][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.230387][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.521287][T22583] FAULT_INJECTION: forcing a failure. [ 1364.521287][T22583] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.788750][T22583] CPU: 0 UID: 0 PID: 22583 Comm: syz.0.3177 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.788790][T22583] Tainted: [L]=SOFTLOCKUP [ 1364.788799][T22583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1364.788821][T22583] Call Trace: [ 1364.788830][T22583] [ 1364.788840][T22583] dump_stack_lvl+0x100/0x190 [ 1364.788876][T22583] should_fail_ex.cold+0x5/0xa [ 1364.788909][T22583] should_failslab+0xc2/0x120 [ 1364.788944][T22583] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1364.788977][T22583] ? ioctx_alloc+0x1b9/0x21a0 [ 1364.789009][T22583] ioctx_alloc+0x1b9/0x21a0 [ 1364.789035][T22583] ? __sock_release+0x184/0x260 [ 1364.789074][T22583] ? find_held_lock+0x2b/0x80 [ 1364.789106][T22583] ? __pfx_ioctx_alloc+0x10/0x10 [ 1364.789145][T22583] __x64_sys_io_setup+0xc9/0x220 [ 1364.789174][T22583] do_syscall_64+0x115/0x840 [ 1364.789197][T22583] ? clear_bhb_loop+0x40/0x90 [ 1364.789227][T22583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.789252][T22583] RIP: 0033:0x7f903d39ce59 [ 1364.789274][T22583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.789298][T22583] RSP: 002b:00007f903e1e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1364.789321][T22583] RAX: ffffffffffffffda RBX: 00007f903d616180 RCX: 00007f903d39ce59 [ 1364.789338][T22583] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1364.789353][T22583] RBP: 00007f903d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1364.789368][T22583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1364.789383][T22583] R13: 00007f903d616218 R14: 00007f903d616180 R15: 00007fffb8f1dfd8 [ 1364.789414][T22583] [ 1367.321068][T22601] netlink: 326 bytes leftover after parsing attributes in process `syz.8.3181'. [ 1367.446089][T22601] bridge0: port 3(veth1) entered disabled state [ 1367.452740][T22601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.460307][T22601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.880103][T22610] FAULT_INJECTION: forcing a failure. [ 1368.880103][T22610] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1368.944771][T22613] netlink: 'syz.0.3184': attribute type 4 has an invalid length. [ 1368.957972][T22610] CPU: 0 UID: 0 PID: 22610 Comm: syz.9.3183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.958010][T22610] Tainted: [L]=SOFTLOCKUP [ 1368.958019][T22610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.958034][T22610] Call Trace: [ 1368.958041][T22610] [ 1368.958051][T22610] dump_stack_lvl+0x100/0x190 [ 1368.958085][T22610] should_fail_ex.cold+0x5/0xa [ 1368.958117][T22610] should_fail_futex+0x4c/0x60 [ 1368.958145][T22610] __x64_sys_futex+0x1f0/0x4d0 [ 1368.958176][T22610] ? __pfx___x64_sys_futex+0x10/0x10 [ 1368.958215][T22610] do_syscall_64+0x115/0x840 [ 1368.958237][T22610] ? clear_bhb_loop+0x40/0x90 [ 1368.958266][T22610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.958291][T22610] RIP: 0033:0x7f3fd519ce59 [ 1368.958310][T22610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.958334][T22610] RSP: 002b:00007ffe605a5a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1368.958357][T22610] RAX: ffffffffffffffda RBX: 000000000014e1f5 RCX: 00007f3fd519ce59 [ 1368.958373][T22610] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fd5415fac [ 1368.958388][T22610] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 1368.958402][T22610] R10: 00007ffe605a5b50 R11: 0000000000000246 R12: 00007ffe605a5b70 [ 1368.958418][T22610] R13: 00007f3fd5415fac R14: 000000000014e227 R15: 00007ffe605a5b50 [ 1368.958447][T22610] [ 1369.279675][T22613] netlink: 314 bytes leftover after parsing attributes in process `syz.0.3184'. [ 1369.393857][T22613] Process accounting resumed [ 1370.301386][T22627] hub 1-0:1.0: USB hub found [ 1370.402150][T22627] hub 1-0:1.0: 1 port detected [ 1370.680436][T18098] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1372.753837][T22656] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3194'. [ 1373.554350][T18090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1373.575494][T18090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1373.593793][T18090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1373.601801][T18090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1373.615049][T18090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1375.108193][T22676] futex_wake_op: syz.9.3198 tries to shift op by -2048; fix this program [ 1375.156636][T22676] 0x000000000001-0x000000020000 : "" [ 1375.201107][T22676] ftl_cs: FTL header corrupt! [ 1375.648586][T18090] Bluetooth: hci7: command tx timeout [ 1376.421690][T22693] FAULT_INJECTION: forcing a failure. [ 1376.421690][T22693] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.566973][T22693] CPU: 0 UID: 0 PID: 22693 Comm: syz.9.3200 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.567013][T22693] Tainted: [L]=SOFTLOCKUP [ 1376.567022][T22693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1376.567037][T22693] Call Trace: [ 1376.567045][T22693] [ 1376.567055][T22693] dump_stack_lvl+0x100/0x190 [ 1376.567091][T22693] should_fail_ex.cold+0x5/0xa [ 1376.567124][T22693] should_failslab+0xc2/0x120 [ 1376.567161][T22693] __kmalloc_cache_noprof+0x91/0x6c0 [ 1376.567188][T22693] ? percpu_ref_init+0xec/0x3f0 [ 1376.567221][T22693] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 1376.567245][T22693] percpu_ref_init+0xec/0x3f0 [ 1376.567272][T22693] ? __init_waitqueue_head+0xca/0x150 [ 1376.567310][T22693] ioctx_alloc+0x3ee/0x21a0 [ 1376.567346][T22693] ? find_held_lock+0x2b/0x80 [ 1376.567380][T22693] ? __pfx_ioctx_alloc+0x10/0x10 [ 1376.567415][T22693] __x64_sys_io_setup+0xc9/0x220 [ 1376.567445][T22693] do_syscall_64+0x115/0x840 [ 1376.567476][T22693] ? clear_bhb_loop+0x40/0x90 [ 1376.567508][T22693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.567533][T22693] RIP: 0033:0x7f3fd519ce59 [ 1376.567554][T22693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.567579][T22693] RSP: 002b:00007f3fd6016028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1376.567602][T22693] RAX: ffffffffffffffda RBX: 00007f3fd5416180 RCX: 00007f3fd519ce59 [ 1376.567619][T22693] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1376.567635][T22693] RBP: 00007f3fd5232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1376.567651][T22693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.567666][T22693] R13: 00007f3fd5416218 R14: 00007f3fd5416180 R15: 00007ffe605a58e8 [ 1376.567711][T22693] [ 1377.713562][T22662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.729566][T18090] Bluetooth: hci7: command tx timeout [ 1377.746628][T22662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.770465][T22662] bridge_slave_0: entered allmulticast mode [ 1377.797051][T22662] bridge_slave_0: entered promiscuous mode [ 1377.904833][T22662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.931281][T22662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.958946][T22662] bridge_slave_1: entered allmulticast mode [ 1377.977238][T22662] bridge_slave_1: entered promiscuous mode [ 1378.286768][T22662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.342476][T22662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.473724][T22662] team0: Port device team_slave_0 added [ 1378.507527][T22662] team0: Port device team_slave_1 added [ 1378.822980][T22687] Process accounting paused [ 1378.828246][T22662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.888243][T22662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.042953][T22662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.114163][T22708] futex_wake_op: syz.8.3202 tries to shift op by -2048; fix this program [ 1379.124076][T22662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.160999][T22662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.195952][T22708] 0x000000000001-0x000000020000 : "" [ 1379.226888][T22708] ftl_cs: FTL header corrupt! [ 1379.345077][T22662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.449613][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3203'. [ 1379.626534][T22662] hsr_slave_0: entered promiscuous mode [ 1379.658657][T22662] hsr_slave_1: entered promiscuous mode [ 1379.694349][T22662] debugfs: 'hsr0' already exists in 'hsr' [ 1379.737271][T22662] Cannot create hsr debugfs directory [ 1379.810822][T18090] Bluetooth: hci7: command tx timeout [ 1381.728690][T22662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1381.779292][T22662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1381.835356][T22662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1381.890087][T22662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1381.897502][T18090] Bluetooth: hci7: command tx timeout [ 1381.948623][T22662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1381.988477][T22662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1382.030085][T22662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1382.089658][T22662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1382.994430][T22662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.101610][T22662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.180419][T22015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.187676][T22015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.285049][T22741] futex_wake_op: syz.9.3207 tries to shift op by -2048; fix this program [ 1383.310683][T22015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.317926][T22015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.358836][T22741] 0x000000000001-0x000000020000 : "" [ 1383.409486][T22741] ftl_cs: FTL header corrupt! [ 1384.804762][T22760] FAULT_INJECTION: forcing a failure. [ 1384.804762][T22760] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.867304][T22760] CPU: 0 UID: 0 PID: 22760 Comm: syz.9.3210 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.867345][T22760] Tainted: [L]=SOFTLOCKUP [ 1384.867354][T22760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1384.867369][T22760] Call Trace: [ 1384.867378][T22760] [ 1384.867387][T22760] dump_stack_lvl+0x100/0x190 [ 1384.867424][T22760] should_fail_ex.cold+0x5/0xa [ 1384.867457][T22760] should_failslab+0xc2/0x120 [ 1384.867493][T22760] __kmalloc_cache_noprof+0x91/0x6c0 [ 1384.867518][T22760] ? kasan_save_track+0x14/0x30 [ 1384.867549][T22760] ? __kasan_kmalloc+0xaa/0xb0 [ 1384.867580][T22760] ? nfc_allocate_device+0x15b/0x5e0 [ 1384.867611][T22760] nfc_allocate_device+0x15b/0x5e0 [ 1384.867634][T22760] ? __init_swait_queue_head+0xca/0x150 [ 1384.867666][T22760] nci_allocate_device+0x23b/0x410 [ 1384.867701][T22760] virtual_ncidev_open+0x6f/0x220 [ 1384.867741][T22760] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1384.867779][T22760] misc_open+0x26d/0x450 [ 1384.867805][T22760] ? __pfx_misc_open+0x10/0x10 [ 1384.867829][T22760] chrdev_open+0x234/0x6a0 [ 1384.867854][T22760] ? __pfx_apparmor_file_open+0x10/0x10 [ 1384.867882][T22760] ? __pfx_chrdev_open+0x10/0x10 [ 1384.867910][T22760] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1384.867954][T22760] do_dentry_open+0x6ab/0x14d0 [ 1384.867979][T22760] ? __pfx_chrdev_open+0x10/0x10 [ 1384.868012][T22760] vfs_open+0x82/0x3f0 [ 1384.868048][T22760] path_openat+0x2873/0x4280 [ 1384.868087][T22760] ? __pfx_path_openat+0x10/0x10 [ 1384.868121][T22760] do_file_open+0x20e/0x430 [ 1384.868149][T22760] ? __pfx_do_file_open+0x10/0x10 [ 1384.868196][T22760] ? alloc_fd+0x471/0x7a0 [ 1384.868224][T22760] ? do_getname+0x191/0x390 [ 1384.868258][T22760] do_sys_openat2+0x10f/0x1e0 [ 1384.868292][T22760] ? __pfx_do_sys_openat2+0x10/0x10 [ 1384.868327][T22760] ? __fget_files+0x21f/0x3d0 [ 1384.868356][T22760] __x64_sys_openat+0x12d/0x210 [ 1384.868391][T22760] ? __pfx___x64_sys_openat+0x10/0x10 [ 1384.868436][T22760] do_syscall_64+0x115/0x840 [ 1384.868458][T22760] ? clear_bhb_loop+0x40/0x90 [ 1384.868489][T22760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.868514][T22760] RIP: 0033:0x7f3fd519ce59 [ 1384.868536][T22760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.868560][T22760] RSP: 002b:00007f3fd6037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1384.868585][T22760] RAX: ffffffffffffffda RBX: 00007f3fd5416090 RCX: 00007f3fd519ce59 [ 1384.868602][T22760] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1384.868618][T22760] RBP: 00007f3fd5232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1384.868633][T22760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.868648][T22760] R13: 00007f3fd5416128 R14: 00007f3fd5416090 R15: 00007ffe605a58e8 [ 1384.868682][T22760] [ 1386.379484][T22767] FAULT_INJECTION: forcing a failure. [ 1386.379484][T22767] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.520251][T22767] CPU: 0 UID: 0 PID: 22767 Comm: syz.8.3211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.520290][T22767] Tainted: [L]=SOFTLOCKUP [ 1386.520299][T22767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1386.520315][T22767] Call Trace: [ 1386.520323][T22767] [ 1386.520333][T22767] dump_stack_lvl+0x100/0x190 [ 1386.520369][T22767] should_fail_ex.cold+0x5/0xa [ 1386.520401][T22767] should_failslab+0xc2/0x120 [ 1386.520437][T22767] __kmalloc_cache_noprof+0x91/0x6c0 [ 1386.520470][T22767] ? kasan_save_track+0x14/0x30 [ 1386.520501][T22767] ? __kasan_kmalloc+0xaa/0xb0 [ 1386.520531][T22767] ? nfc_allocate_device+0x15b/0x5e0 [ 1386.520562][T22767] nfc_allocate_device+0x15b/0x5e0 [ 1386.520585][T22767] ? __init_swait_queue_head+0xca/0x150 [ 1386.520616][T22767] nci_allocate_device+0x23b/0x410 [ 1386.520651][T22767] virtual_ncidev_open+0x6f/0x220 [ 1386.520690][T22767] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1386.520728][T22767] misc_open+0x26d/0x450 [ 1386.520753][T22767] ? __pfx_misc_open+0x10/0x10 [ 1386.520780][T22767] chrdev_open+0x234/0x6a0 [ 1386.520806][T22767] ? __pfx_apparmor_file_open+0x10/0x10 [ 1386.520833][T22767] ? __pfx_chrdev_open+0x10/0x10 [ 1386.520869][T22767] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1386.520905][T22767] do_dentry_open+0x6ab/0x14d0 [ 1386.520931][T22767] ? __pfx_chrdev_open+0x10/0x10 [ 1386.520963][T22767] vfs_open+0x82/0x3f0 [ 1386.520998][T22767] path_openat+0x2873/0x4280 [ 1386.521037][T22767] ? __pfx_path_openat+0x10/0x10 [ 1386.521071][T22767] do_file_open+0x20e/0x430 [ 1386.521099][T22767] ? __pfx_do_file_open+0x10/0x10 [ 1386.521145][T22767] ? alloc_fd+0x471/0x7a0 [ 1386.521172][T22767] ? do_getname+0x191/0x390 [ 1386.521206][T22767] do_sys_openat2+0x10f/0x1e0 [ 1386.521240][T22767] ? __pfx_do_sys_openat2+0x10/0x10 [ 1386.521276][T22767] ? __fget_files+0x21f/0x3d0 [ 1386.521305][T22767] __x64_sys_openat+0x12d/0x210 [ 1386.521340][T22767] ? __pfx___x64_sys_openat+0x10/0x10 [ 1386.521386][T22767] do_syscall_64+0x115/0x840 [ 1386.521408][T22767] ? clear_bhb_loop+0x40/0x90 [ 1386.521438][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.521464][T22767] RIP: 0033:0x7feef719ce59 [ 1386.521484][T22767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.521509][T22767] RSP: 002b:00007feef8008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1386.521532][T22767] RAX: ffffffffffffffda RBX: 00007feef7416090 RCX: 00007feef719ce59 [ 1386.521549][T22767] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1386.521565][T22767] RBP: 00007feef7232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1386.521581][T22767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.521596][T22767] R13: 00007feef7416128 R14: 00007feef7416090 R15: 00007ffcd7876118 [ 1386.521627][T22767] [ 1387.795641][T22662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.447674][T22662] veth0_vlan: entered promiscuous mode [ 1388.703993][T22662] veth1_vlan: entered promiscuous mode [ 1388.920256][T22662] veth0_macvtap: entered promiscuous mode [ 1388.985767][T22662] veth1_macvtap: entered promiscuous mode [ 1389.127041][T22662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.188966][T22662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.250971][T19426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.282028][T19426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.314687][T19426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.360071][T19426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.626966][T22783] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1389.681297][T19424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.723712][T19424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.884803][T19428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.941496][T19428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.214030][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3216'. [ 1390.591963][T18098] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1390.614368][T18098] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1390.628621][T18098] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1390.648930][T18098] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1390.661454][T18098] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1392.777086][T18098] Bluetooth: hci8: command tx timeout [ 1394.339205][T22825] FAULT_INJECTION: forcing a failure. [ 1394.339205][T22825] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.583453][T22825] CPU: 0 UID: 0 PID: 22825 Comm: syz.3.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.583492][T22825] Tainted: [L]=SOFTLOCKUP [ 1394.583501][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1394.583517][T22825] Call Trace: [ 1394.583525][T22825] [ 1394.583538][T22825] dump_stack_lvl+0x100/0x190 [ 1394.583574][T22825] should_fail_ex.cold+0x5/0xa [ 1394.583607][T22825] should_failslab+0xc2/0x120 [ 1394.583651][T22825] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1394.583684][T22825] ? ioctx_alloc+0x1b9/0x21a0 [ 1394.583716][T22825] ioctx_alloc+0x1b9/0x21a0 [ 1394.583742][T22825] ? __sock_release+0x184/0x260 [ 1394.583782][T22825] ? find_held_lock+0x2b/0x80 [ 1394.583815][T22825] ? __pfx_ioctx_alloc+0x10/0x10 [ 1394.583850][T22825] __x64_sys_io_setup+0xc9/0x220 [ 1394.583881][T22825] do_syscall_64+0x115/0x840 [ 1394.583903][T22825] ? clear_bhb_loop+0x40/0x90 [ 1394.583933][T22825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.583958][T22825] RIP: 0033:0x7f790299ce59 [ 1394.583982][T22825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.584006][T22825] RSP: 002b:00007f79038ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1394.584030][T22825] RAX: ffffffffffffffda RBX: 00007f7902c16180 RCX: 00007f790299ce59 [ 1394.584047][T22825] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1394.584062][T22825] RBP: 00007f7902a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1394.584078][T22825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.584092][T22825] R13: 00007f7902c16218 R14: 00007f7902c16180 R15: 00007ffd8592d0e8 [ 1394.584123][T22825] [ 1395.042486][T18098] Bluetooth: hci8: command tx timeout [ 1397.100380][T18090] Bluetooth: hci8: command tx timeout [ 1397.186752][T22796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.233329][T22796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.284651][T22796] bridge_slave_0: entered allmulticast mode [ 1397.323435][T22796] bridge_slave_0: entered promiscuous mode [ 1397.367912][T22796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.414844][T22796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.467555][T22796] bridge_slave_1: entered allmulticast mode [ 1397.513563][T22796] bridge_slave_1: entered promiscuous mode [ 1397.705542][T22796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.798846][T22796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.034046][T22796] team0: Port device team_slave_0 added [ 1398.097676][T22796] team0: Port device team_slave_1 added [ 1398.311439][T22796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.347229][T22796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.469158][T22796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.745126][T22796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.802267][T22796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.966921][T22796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.182214][T18090] Bluetooth: hci8: command tx timeout [ 1399.324130][T22796] hsr_slave_0: entered promiscuous mode [ 1399.367513][T22796] hsr_slave_1: entered promiscuous mode [ 1399.403225][T22796] debugfs: 'hsr0' already exists in 'hsr' [ 1399.449185][T22796] Cannot create hsr debugfs directory [ 1402.650756][T22879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.898946][T22796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1402.930159][T22796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1403.104269][T22796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1403.129416][T22796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1403.245172][T22796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1403.268964][T22796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1403.368366][T22796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1403.396708][T22796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1403.997774][T22796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.130257][T22900] FAULT_INJECTION: forcing a failure. [ 1404.130257][T22900] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.186024][T22796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.228826][T22900] CPU: 0 UID: 0 PID: 22900 Comm: syz.8.3231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.228867][T22900] Tainted: [L]=SOFTLOCKUP [ 1404.228876][T22900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1404.228892][T22900] Call Trace: [ 1404.228901][T22900] [ 1404.228911][T22900] dump_stack_lvl+0x100/0x190 [ 1404.228948][T22900] should_fail_ex.cold+0x5/0xa [ 1404.228982][T22900] should_failslab+0xc2/0x120 [ 1404.229019][T22900] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1404.229050][T22900] ? stack_trace_save+0x8e/0xc0 [ 1404.229085][T22900] ? alloc_empty_file+0x5b/0x1c0 [ 1404.229122][T22900] alloc_empty_file+0x5b/0x1c0 [ 1404.229155][T22900] path_openat+0xe7/0x4280 [ 1404.229180][T22900] ? kasan_save_track+0x14/0x30 [ 1404.229210][T22900] ? __kasan_slab_alloc+0x89/0x90 [ 1404.229242][T22900] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1404.229272][T22900] ? do_getname+0x35/0x390 [ 1404.229301][T22900] ? do_sys_openat2+0xc7/0x1e0 [ 1404.229332][T22900] ? __x64_sys_open+0xfe/0x1d0 [ 1404.229363][T22900] ? do_syscall_64+0x115/0x840 [ 1404.229394][T22900] ? __pfx_path_openat+0x10/0x10 [ 1404.229435][T22900] do_file_open+0x20e/0x430 [ 1404.229460][T22900] ? __lock_acquire+0x49f/0x1a40 [ 1404.229485][T22900] ? __pfx_do_file_open+0x10/0x10 [ 1404.229530][T22900] ? _raw_spin_unlock+0x28/0x50 [ 1404.229565][T22900] ? alloc_fd+0x471/0x7a0 [ 1404.229599][T22900] do_sys_openat2+0x10f/0x1e0 [ 1404.229632][T22900] ? __pfx_do_sys_openat2+0x10/0x10 [ 1404.229676][T22900] __x64_sys_open+0xfe/0x1d0 [ 1404.229709][T22900] ? __pfx___x64_sys_open+0x10/0x10 [ 1404.229754][T22900] do_syscall_64+0x115/0x840 [ 1404.229775][T22900] ? clear_bhb_loop+0x40/0x90 [ 1404.229805][T22900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.229831][T22900] RIP: 0033:0x7feef719ce59 [ 1404.229852][T22900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.229876][T22900] RSP: 002b:00007feef8008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1404.229900][T22900] RAX: ffffffffffffffda RBX: 00007feef7416090 RCX: 00007feef719ce59 [ 1404.229918][T22900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.229932][T22900] RBP: 00007feef7232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1404.229948][T22900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.229963][T22900] R13: 00007feef7416128 R14: 00007feef7416090 R15: 00007ffcd7876118 [ 1404.229995][T22900] [ 1404.508353][T22796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1404.518824][T22796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1404.907636][T19424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.914894][T19424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.988679][T19424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.995870][T19424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.255330][T22921] FAULT_INJECTION: forcing a failure. [ 1406.255330][T22921] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.532070][T22921] CPU: 0 UID: 0 PID: 22921 Comm: syz.3.3235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.532111][T22921] Tainted: [L]=SOFTLOCKUP [ 1406.532121][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1406.532137][T22921] Call Trace: [ 1406.532145][T22921] [ 1406.532155][T22921] dump_stack_lvl+0x100/0x190 [ 1406.532191][T22921] should_fail_ex.cold+0x5/0xa [ 1406.532231][T22921] should_failslab+0xc2/0x120 [ 1406.532267][T22921] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1406.532301][T22921] ? ioctx_alloc+0x1b9/0x21a0 [ 1406.532333][T22921] ioctx_alloc+0x1b9/0x21a0 [ 1406.532359][T22921] ? __sock_release+0x184/0x260 [ 1406.532398][T22921] ? find_held_lock+0x2b/0x80 [ 1406.532431][T22921] ? __pfx_ioctx_alloc+0x10/0x10 [ 1406.532466][T22921] __x64_sys_io_setup+0xc9/0x220 [ 1406.532497][T22921] do_syscall_64+0x115/0x840 [ 1406.532519][T22921] ? clear_bhb_loop+0x40/0x90 [ 1406.532549][T22921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.532575][T22921] RIP: 0033:0x7f790299ce59 [ 1406.532596][T22921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.532621][T22921] RSP: 002b:00007f79038ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1406.532644][T22921] RAX: ffffffffffffffda RBX: 00007f7902c16180 RCX: 00007f790299ce59 [ 1406.532661][T22921] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1406.532677][T22921] RBP: 00007f7902a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1406.532692][T22921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.532707][T22921] R13: 00007f7902c16218 R14: 00007f7902c16180 R15: 00007ffd8592d0e8 [ 1406.532737][T22921] [ 1407.431924][T22796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.498950][T22932] FAULT_INJECTION: forcing a failure. [ 1407.498950][T22932] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.676375][T22932] CPU: 0 UID: 0 PID: 22932 Comm: syz.9.3236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.676415][T22932] Tainted: [L]=SOFTLOCKUP [ 1407.676425][T22932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1407.676440][T22932] Call Trace: [ 1407.676450][T22932] [ 1407.676459][T22932] dump_stack_lvl+0x100/0x190 [ 1407.676495][T22932] should_fail_ex.cold+0x5/0xa [ 1407.676528][T22932] should_failslab+0xc2/0x120 [ 1407.676564][T22932] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1407.676596][T22932] ? ioctx_alloc+0x1b9/0x21a0 [ 1407.676628][T22932] ioctx_alloc+0x1b9/0x21a0 [ 1407.676655][T22932] ? __sock_release+0x184/0x260 [ 1407.676694][T22932] ? find_held_lock+0x2b/0x80 [ 1407.676727][T22932] ? __pfx_ioctx_alloc+0x10/0x10 [ 1407.676762][T22932] __x64_sys_io_setup+0xc9/0x220 [ 1407.676791][T22932] do_syscall_64+0x115/0x840 [ 1407.676814][T22932] ? clear_bhb_loop+0x40/0x90 [ 1407.676844][T22932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.676870][T22932] RIP: 0033:0x7f3fd519ce59 [ 1407.676891][T22932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.676915][T22932] RSP: 002b:00007f3fd6016028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1407.676938][T22932] RAX: ffffffffffffffda RBX: 00007f3fd5416180 RCX: 00007f3fd519ce59 [ 1407.676955][T22932] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1407.676976][T22932] RBP: 00007f3fd5232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1407.676998][T22932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.677013][T22932] R13: 00007f3fd5416218 R14: 00007f3fd5416180 R15: 00007ffe605a58e8 [ 1407.677044][T22932] [ 1408.361975][T22796] veth0_vlan: entered promiscuous mode [ 1408.672580][T22796] veth1_vlan: entered promiscuous mode [ 1408.837268][T22796] veth0_macvtap: entered promiscuous mode [ 1408.898315][T22796] veth1_macvtap: entered promiscuous mode [ 1409.541318][T22796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.631011][T22796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.700817][T18104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.753488][T18104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.808459][T18104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.859810][T18104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.465485][T18104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.482217][T18098] Bluetooth: hci2: command 0x2016 tx timeout [ 1410.577611][T18104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.913459][T19424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.953876][T19424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.205681][T22931] Process accounting resumed [ 1416.792242][ T30] audit: type=1800 audit(2147484864.135:75): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3245" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1417.477737][T19416] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.894327][T23001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1418.158755][T23001] bond0: (slave bond_slave_0): Releasing backup interface [ 1420.639146][T18090] Bluetooth: hci5: command 0x0406 tx timeout [ 1421.397436][ T30] audit: type=1807 audit(2147484868.733:76): UNKNOWN=ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ [ 1421.404685][ T30] audit: type=1802 audit(2147484868.743:77): pid=23032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.3253" res=0 errno=0 [ 1423.033547][ T31] INFO: task syz.5.3021:21682 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1423.076102][ T31] Tainted: G L syzkaller #0 [ 1423.138818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1423.203517][ T31] task:syz.5.3021 state:D stack:26440 pid:21682 tgid:21677 ppid:11196 task_flags:0x400140 flags:0x00080002 [ 1423.286782][ T31] Call Trace: [ 1423.319872][ T31] [ 1423.339670][ T31] __schedule+0x125c/0x6730 [ 1423.375353][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1423.417923][ T31] ? __pfx___schedule+0x10/0x10 [ 1423.453831][ T31] ? find_held_lock+0x2b/0x80 [ 1423.485304][ T31] ? schedule+0x225/0x2c0 [ 1423.518198][ T31] schedule+0xdd/0x2c0 [ 1423.540276][ T31] schedule_preempt_disabled+0x13/0x30 [ 1423.594330][ T31] __mutex_lock+0xccc/0x1bd0 [ 1423.654398][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1423.686442][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.693247][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.751006][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1423.796799][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1423.834205][ T31] ? net_generic+0xea/0x2a0 [ 1423.864785][ T31] ? net_generic+0xea/0x2a0 [ 1423.887719][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1423.930787][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1423.969902][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1423.997437][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1424.044157][ T31] ? genl_get_cmd+0x3e7/0x760 [ 1424.072273][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1424.105376][ T31] ? security_capable+0x80/0x260 [ 1424.129247][ T31] genl_rcv_msg+0x560/0x800 [ 1424.148332][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1424.172752][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1424.199642][ T31] netlink_rcv_skb+0x159/0x420 [ 1424.221239][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1424.238284][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1424.255859][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1424.282647][ T31] genl_rcv+0x28/0x40 [ 1424.296172][ T31] netlink_unicast+0x585/0x850 [ 1424.323299][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1424.338695][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1424.351770][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1424.369831][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1424.388169][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 1424.408820][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1424.430359][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1424.448043][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1424.462069][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1424.478674][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1424.494948][ T31] __sys_sendmsg+0x160/0x210 [ 1424.501035][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1424.515923][ T31] do_syscall_64+0x115/0x840 [ 1424.527945][ T31] ? clear_bhb_loop+0x40/0x90 [ 1424.542814][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.552169][ T31] RIP: 0033:0x7fc8d839ce59 [ 1424.562747][ T31] RSP: 002b:00007fc8d65d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.583441][ T31] RAX: ffffffffffffffda RBX: 00007fc8d8616270 RCX: 00007fc8d839ce59 [ 1424.605060][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1424.629982][ T31] RBP: 00007fc8d8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1424.640117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.663515][ T31] R13: 00007fc8d8616308 R14: 00007fc8d8616270 R15: 00007fff722a6c08 [ 1424.683439][ T31] [ 1424.701923][ T31] [ 1424.701923][ T31] Showing all locks held in the system: [ 1424.751119][T23034] ima: policy update failed [ 1424.804854][ T31] 1 lock held by khungtaskd/31: [ 1424.820105][ T30] audit: type=1802 audit(2147484872.151:78): pid=23034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.3253" res=0 errno=0 [ 1424.852623][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1424.916648][ T31] 2 locks held by getty/13872: [ 1424.942258][ T31] #0: ffff88803683e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1424.997222][ T31] #1: ffffc900033832e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1425.046490][ T31] 2 locks held by syz-executor/18218: [ 1425.067499][ T31] #0: ffff888057ef80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1425.133012][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1425.173077][ T31] 2 locks held by syz-executor/18577: [ 1425.206401][ T31] #0: ffff88804a7a20d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1425.264492][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1425.315724][ T31] 1 lock held by syz.6.3003/21581: [ 1425.339452][ T31] 2 locks held by syz.5.3021/21678: [ 1425.367002][ T31] #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1425.402822][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1425.462764][ T31] 2 locks held by syz.5.3021/21682: [ 1425.493277][ T31] #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1425.520390][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1425.563259][ T31] 2 locks held by syz-executor/21792: [ 1425.574760][ T31] #0: ffff888032e620d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1425.600862][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1425.623262][ T31] 2 locks held by syz-executor/21857: [ 1425.633946][ T31] #0: ffff8880330ca0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1425.667545][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1425.693438][ T31] 3 locks held by kworker/0:6/21926: [ 1425.704308][ T31] #0: ffff88813fe6b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1425.733359][ T31] #1: ffffc90004bbfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1425.746640][ T31] #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1425.784595][ T31] 1 lock held by syz-executor/22033: [ 1425.791527][ T31] #0: ffff888066e44ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1425.814881][ T31] 3 locks held by syz-executor/22796: [ 1425.823596][ T31] #0: ffff888087438ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1425.844030][ T31] #1: ffff8880874380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 1425.875965][ T31] #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1425.903469][ T31] 1 lock held by syz.3.3256/23044: [ 1425.908868][ T31] #0: ffff88807eadcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1425.939047][ T31] [ 1425.953826][ T31] ============================================= [ 1425.953826][ T31] [ 1425.989434][ T31] NMI backtrace for cpu 0 [ 1425.989459][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.989499][ T31] Tainted: [L]=SOFTLOCKUP [ 1425.989507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1425.989522][ T31] Call Trace: [ 1425.989530][ T31] [ 1425.989539][ T31] dump_stack_lvl+0x100/0x190 [ 1425.989573][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1425.989607][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1425.989638][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1425.989676][ T31] sys_info+0x141/0x190 [ 1425.989703][ T31] watchdog+0xcb1/0x1030 [ 1425.989744][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1425.989781][ T31] ? __pfx_watchdog+0x10/0x10 [ 1425.989817][ T31] ? __kthread_parkme+0x18c/0x230 [ 1425.989853][ T31] ? kthread+0x13a/0x450 [ 1425.989884][ T31] ? __pfx_watchdog+0x10/0x10 [ 1425.989917][ T31] kthread+0x370/0x450 [ 1425.989949][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.989983][ T31] ret_from_fork+0x72b/0xd50 [ 1425.990014][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1425.990045][ T31] ? __switch_to+0x800/0x10f0 [ 1425.990067][ T31] ? __switch_to_asm+0x39/0x70 [ 1425.990101][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.990135][ T31] ret_from_fork_asm+0x1a/0x30 [ 1425.990192][ T31] [ 1426.626109][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1426.633013][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.643728][ T31] Tainted: [L]=SOFTLOCKUP [ 1426.648165][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1426.658249][ T31] Call Trace: [ 1426.661548][ T31] [ 1426.664497][ T31] dump_stack_lvl+0x100/0x190 [ 1426.669213][ T31] vpanic+0x552/0x970 [ 1426.673213][ T31] ? __pfx_vpanic+0x10/0x10 [ 1426.677737][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1426.683947][ T31] panic+0xd1/0xe0 [ 1426.687708][ T31] ? __pfx_panic+0x10/0x10 [ 1426.692158][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1426.698351][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1426.704582][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1426.710772][ T31] ? watchdog.cold+0x1ec/0x234 [ 1426.715569][ T31] ? watchdog+0xcc1/0x1030 [ 1426.720055][ T31] watchdog.cold+0x1fd/0x234 [ 1426.724695][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1426.730558][ T31] ? __pfx_watchdog+0x10/0x10 [ 1426.735281][ T31] ? __kthread_parkme+0x18c/0x230 [ 1426.740404][ T31] ? kthread+0x13a/0x450 [ 1426.744733][ T31] ? __pfx_watchdog+0x10/0x10 [ 1426.749453][ T31] kthread+0x370/0x450 [ 1426.753557][ T31] ? __pfx_kthread+0x10/0x10 [ 1426.758262][ T31] ret_from_fork+0x72b/0xd50 [ 1426.762898][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.768123][ T31] ? __switch_to+0x800/0x10f0 [ 1426.772825][ T31] ? __switch_to_asm+0x39/0x70 [ 1426.777628][ T31] ? __pfx_kthread+0x10/0x10 [ 1426.782246][ T31] ret_from_fork_asm+0x1a/0x30 [ 1426.787052][ T31] [ 1426.790178][ T31] Kernel Offset: disabled [ 1426.794546][ T31] Rebooting in 86400 seconds..