last executing test programs: 3m56.296668018s ago: executing program 1 (id=606): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x80000000) mmap$auto(0xfffffffffffffffc, 0x9, 0xdf, 0xeb1, 0x401, 0xffff) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) (async) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = gettid() sched_getaffinity$auto(r2, 0xd0700000, &(0x7f0000000000)=0x401) read$auto_fops_u64_ro_(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_fops_u64_ro_(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) socket$auto(0xb4, 0x7, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x3, 0x6, 0x2, 0x9b4, 0x0, "7cbc697000", "47b74b2c", "87849101", "2ff43123", ["01040000681b9851136e03a8", "a1679d340ad98fad2453f86d", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyc2\x00', 0x20880, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/veth1_vlan/ignore_routes_with_linkdown\x00', 0x88c42, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/veth1_vlan/ignore_routes_with_linkdown\x00', 0x88c42, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) (async) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5457, 0x0) sched_setaffinity$auto(0x1, 0x1, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) (async) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) (async) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1fd, 0x9, 0x8, 0x1, 0x4}}, 0x92) (async) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1fd, 0x9, 0x8, 0x1, 0x4}}, 0x92) 3m55.767959846s ago: executing program 1 (id=615): r0 = socket(0x2a, 0x80000, 0x2) setsockopt$auto(r0, 0x10000, 0x30, 0x0, 0x10001) syncfs$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x300000, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x100000000008, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x54c8, 0x9) r5 = socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd12\x00', 0x40c301, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf259500000008001001ffff000017001501c338aea97beaad80326a55e7e54ef0bf29e646003e00758008006d00ffffffff331cd5e6996930000000bc1c31d7d6929ce634e1717b3dcf698338bf8d9223063681b39bd3000076001501aa1f2f8503093dd93500772e45ba414a28b68761b6c48a779b892e0fb0360a9adf3d0c52bb819b991135c5d1f37ba92a5e31cf22839fb2f79d6a8945d607003b51f5f66ab5558a82db7b33d9d9d6b28b4d80106e36f90d24d742f4d89b18a1a6c05c0848ebc4bfffb2a0189055deb2e79eb30000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto(r6, 0xc0105303, r6) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, 0x0, 0x9) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xafefa9ff3f168676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, &(0x7f0000000240)="8c4f") 3m54.089597982s ago: executing program 1 (id=609): mmap$auto(0x0, 0x28da, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x2) bind$auto(0x3, 0x0, 0x6d) 3m53.839987798s ago: executing program 1 (id=611): syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x2, 0x0) (async) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) (async) r1 = epoll_create$auto(0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r3, r3) epoll_ctl$auto(0x5, 0x1, r2, 0x0) epoll_wait$auto(r1, 0x0, 0xe007, 0xe8a4e409) fchdir$auto(0xffffffffffffffff) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x9, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) mmap$auto(0x3, 0xa, 0x3, 0x11, 0xfffffffffffffffa, 0xfffffffffffffffe) (async) unshare$auto(0x20000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) 3m52.99482294s ago: executing program 1 (id=613): r0 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/x86/topo/cpus/1\x00', 0x1, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000040)={@inferred=r0, "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"}) r1 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/netdevsim/netdevsim6/psample/enable\x00', 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000001080)="76f1c8afb87034b270a4df9c5277b9015e5a3ca86b706f5d0a3e3d825f31a033", 0x8) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/bus/usb/038/001\x00', 0x490002, 0x0) ioctl$auto_USBDEVFS_REAPURB32(r2, 0x4004550c, &(0x7f0000001100)=0xfffffffa) r3 = prctl$auto_SIGCONT(0x7ff, 0x12, 0x0, 0x8, 0xfffffffffffffff7) unlinkat$auto(r3, &(0x7f0000001140)='./file0\x00', 0x2) r4 = ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000001180)=0x39) r5 = openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r6 = socket(0x2a, 0xa, 0x9) r7 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000001240), r4) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r4, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xd4, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@CIFS_GENL_ATTR_SWN_IP={0x84, 0x4, @rc={0x1f, @none, 0x9}}, @CIFS_GENL_ATTR_SWN_RESOURCE_NAME={0x8, 0xe, '\\+(%'}, @CIFS_GENL_ATTR_SWN_REGISTRATION_ID={0x8, 0x1, 0x1}, @CIFS_GENL_ATTR_SWN_RESOURCE_STATE={0x8, 0xd, 0x40}, @CIFS_GENL_ATTR_SWN_USER_NAME={0x19, 0x9, '/dev/bus/usb/038/001\x00'}, @CIFS_GENL_ATTR_SWN_NET_NAME={0x5, 0x2, '/'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000001400)=0x9) getsockopt$auto_SO_TIMESTAMP_NEW(r1, 0xd, 0x3f, &(0x7f0000001440)='/-%/-\x00', &(0x7f0000001480)=0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000014c0), r3) select$auto(0x7, &(0x7f0000001500)={[0x4, 0x6, 0x8, 0x3c2, 0xbc, 0x4, 0x5, 0x80000000, 0xb, 0xb6, 0x7, 0x81, 0x7, 0x39, 0xfffffffffffffffc]}, &(0x7f0000001580)={[0x2, 0x4, 0x2, 0x6cd7, 0x3ff, 0x6, 0xffffffff7fffffff, 0x4, 0x3, 0x0, 0x6, 0x8, 0x4, 0x10, 0x6, 0x2]}, &(0x7f0000001600)={[0x41b, 0x0, 0x0, 0x37d, 0x2, 0x7, 0x4, 0x4, 0xb10000000000000, 0xffffffffffffff01, 0x77d, 0x1, 0xff, 0x6, 0xb7, 0x400]}, &(0x7f0000001680)={0x2, 0x6}) shmctl$auto_SHM_STAT(0x9, 0xd, &(0x7f00000017c0)={{0x8001, 0xee00, 0x0, 0x7, 0x400, 0x5, 0x2}, 0x0, 0x6, 0x9, 0x0, @raw, @inferred, 0x8, 0x0, &(0x7f00000016c0)="78d41db6ca2dcd3ee79ba4bebfb60eac3ef4a8273e5a6ea6842525d22ce65124f841d298e116bf895444fbc605b5c9285062329232709b97ceeeb286b8819cf370e77b020d0ad6827e48caf91ae6b621efb53f50771049da00d1f4f91f4a03561a84b263a7f84d73d86d036f758aa2a59b3bd9bf5065cfba6289b6381778b5dbab21d97d06d20a6803eb1e859f2c3d7370e2986dc229c84fa3bf21d7f1989ab8", &(0x7f0000001780)="e75df585f796a6af0271019c7bd12c9b6a8030fd132d80391bc8be072dfbb66f26b4b06a"}) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000001a40)={{0x101, 0xffffffffffffffff, 0xee01, 0x9, 0x9, 0x9, 0x7}, 0x1bec, 0x100000001, 0x2, 0x100000000, @inferred, @inferred=0x0, 0x4, 0x0, &(0x7f0000001840)="2972a76a4215db7c21c4ddd299a670fec8cb00381e0896b6fcdd7ce06b14a8457a86155674379a52d413f61966977d7b0b75439deb69dcc42e41ee758be003e5317942c2aa71769838fbdfbdf2573b412eb1c54d0bc3bdada7163f066485a40564bc32c51a0f2fa807a15e04fbeaec005b9738430c4d6c60f72d099258a8caf6435e2597556043e03311bd363b2e8bc1152d265b14ab254fe500942a83abdfbd10f1ae277448c86b1240291fe2f8c32f682a33ddb22997190360e0d68d18d5ce8d51fbb60ea1398fb8f16864e375765538", &(0x7f0000001940)="f4067a6be4057f04f2f4baaf32b1d953723452af2d85179d070731893ee88069c97fcf94ea670588fa8de16c67f5c09495320f706ca28c56b0e752e420c7cb5d47d4c2a7f01c894958f7707af7d7e7d015a84c7c024364f3c771236217d162978269bdd81327f2c9c04634d66416b0340353f9151ab8d6682cd0f987880a574b6fa9fb966fda0b94c1d4b2e090862a78ca03d4eb0e10daa87176001d73f41743ea46b7029f8f83a36c0fd26d6a492690532ac36f5b16367e80a3a283cac8375745e159b75d64e675652e89a2632f189d"}) shmctl$auto_SHM_UNLOCK(0x0, 0xc, &(0x7f0000001cc0)={{0xe4c0, 0xee00, 0xffffffffffffffff, 0xdd067337, 0xffffe810, 0x101, 0xfc17}, 0x2, 0x3, 0x7, 0x8, @inferred=0x0, @raw=0x5ce, 0x59fb, 0x0, &(0x7f0000001ac0)="c9c77bab7678e497ed834d207dd24ad47d368a4b1aedfc193577f25d35478d726d3c06ad0dceb270f532cb202068f8fb70ca335524875cb8ed1f9dbbd54c3fb575a4385f0c77cbb0fab2c18e848478b734b7de2d6744b1a95c876296d29a8be8eb8dba14851e4698fa096db822e109d7b2859c0a038c4e79e08cc37cbc06879e9d04ac0a61a687b5440af901b758f2f05844a368bd69cbd015f465a95ea364f7d6cac5256b3458cafe798c43d4cfd22a15ebf1b91adeeebc5f53cabc2076509335052d264bcb4cabd7b3467f4c928a8e8d71d68a8c759c204a2b961b7db5d13298149b82e0d0c6f92119f4175a", &(0x7f0000001bc0)="60a6c6cbae463661baf9d58b6768d78c145f69ccd7857ed8279df8e12ecd1c53e8de312b5e20edce1d2dbd78549be8b6505382297f06c920adf289ea27b0e57513890a440dde970c9bf15efc4bf0b4526000f8c5c03790ef527881b5cfca45b9e142cc541fb2f098927c57f995512b7594417d10d59ee23c89912d9c0be34f9cce4cde542b38e73618fa918cd676fbf430c97b46e33fd9f1652915901675d221407506307d03e82e920c9079a2fd4dc7ccfbed05771a9efa51fb8ebe687e4ab174d27f3c3b2689a74ce14264d2"}) setresuid$auto(r8, r9, r11) r13 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001d80), r6) sendmsg$auto_TIPC_NL_NODE_GET(r6, &(0x7f0000001f80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x17c, r13, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x168, 0x4, 0x0, 0x1, [@generic="a8945704df88af2d0dcd2cedf766d6c6e530d7289806892d8f15392c0ad458348f09d5e88035c152b71a87eefa8b7a959c6389fe4b11bf5558b73f3166ae49a69d3cbd01b4db554a656fc9d1dbec7c98ae9893fa3283a8bd77cb9897888516ca7877679bfff2cacbc82ac39afb7100848ad25371c1090b528c62faea582b4bc6b1ad3f6ef665fafcd16a6a9c91de84c6d06563b48897e4ad663cf4cf992845cd1efd277504fb83d9", @generic="cc4756d95d25910309329d028c94c25a6d21a1564ffa86b303ae21e84ac35b8dda0129c4a66c64fb072e6f6a76bde7775084da1fdc31b081caf34833176b946edffeefbf9e91252037c54d28b67e655f2e1111874c8eb46314a9cb463d1e119b8a635dd00c64c90ba797148edd5458987998cf1a1d4531c362b6257860b81b8bd64d54ffee500dbfa71a194a5cd597ea4de81ba56eacf7a5565ef2d88a039feda1ec6084d40d05144a1514452121eaeea2f978e55ec67bb5e7e211b4"]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r14 = ioctl$auto_TUNGETVNETLE2(r3, 0x800454dd, &(0x7f0000001fc0)=0x2) r15 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000002040), r4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r14, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002180)={&(0x7f0000002080)={0xec, r15, 0x10, 0x70bd28, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'dvmrp0\x00'}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xe5}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x80000000}, @THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0xd}, @THERMAL_GENL_ATTR_TZ_TRIP={0xa9, 0x4, 0x0, 0x1, [@generic="ee077af353ec1f888bd37757849e3eaa99e4c1464d7800e458dd0d61c814af1d272e8e7bfe13461e35b3512a284e65cd4965a1863cc66b22db35040c724487abdffd5ba8668403ed755bb1ab56cf479f46ec1e2e092c696509f4d2c54253ef4ed8e608cf3fca8e9ea44dee6c3f44ea56c5c23b0cebd298f4fce153ada52b0dd2beee6fc383974e343902da44a06d06a09c60b5cef02784cfa3166e2442c32f87dad6466aa2"]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20044004}, 0x8000) setsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0xf129, 0x52, &(0x7f0000002200)='cifs\x00', 0xbda) poll$auto(&(0x7f0000002240)={r5, 0x7, 0x8}, 0x68f, 0x2) r17 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000022c0), r4) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000003900)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000038c0)={&(0x7f0000002300)={0x15c0, r17, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x87, 0x4, "2dc2f1a9e7d9f00ee3f4f43867021e26f8e974e0e329a949ee3a6ef5740da10961a396ab87c871b522ed84fc52005a7366ccf760752c12163afb3bdf579b17fa9e097ac3f81fa60914312f8ef38b97f5b2cfa30cf44189c03aa3fd2d991ab92ab44663ae1d29d34f2bc8698a881178f05412a473bdcc646d5407fe0c16e8f77c04c75d"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0xc2, 0x4, "323373b2b83c4d4718f587f1f7ae6f6bef317793f28cd1bdff87aa663d2c8a17661df50573f27f4f67c0f7c144ad48bdaf790bf743a6534280c1abefaaf022ea04dc2dd2de972bddb368bff57bc0b2918ed04b2f4ac5c64bdba89b14193329c314cb47cbcd513c7347d85ec010801932bed119153dde42d2de2cde5b5d06395092b59697ef53e361cf137cc43a7975ab96271f7ac7ebef97673b524e511b03d17553b3d3b656edb43533a3320551859cb531c4aadacd995301675ebb8d9f"}, @SEG6_ATTR_HMACINFO={0x1410, 0x7, 0x0, 0x1, [@typed={0x8, 0x11e, 0x0, 0x0, @pid=r12}, @generic="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", @nested={0x1dc, 0x114, 0x0, 0x1, [@nested={0x4, 0x4d}, @generic="b76e7b373820ef7a89a190bda82bd17ff49fa0ffc077622db596da1ab302d1aaeefd9b6842bbb03e83873dc30bed0da7ce14dfe42fc9dc362d2ffbcb4170b455cbb7116d4102fe03a0667fd69b59a3056d02098aeec4d82dd088e5ab9f63a4e4207295ad634ab633fc9b88dab0bfd2e04201a328e0ad5acee71e788df984ee7ceea2331e", @nested={0x4, 0xe6}, @generic="1cb9f6213976a367a44f694c7e9e086099127b1c428f98c4c71bbccbe06b5f32ded7b70233bf9853a26ca6597f6d5724a7bfdd42ccdccc18650716001ed4e4e81708c4f2f11344f5e1a8d37d809c001164d7b0ddd2cfbb2f5608ebd4ad03b86f887e32a6c2c5833b9672194e9a8d715f3a39e42cf866ab0c585d77eb1f033a0951c8f27d1ddaf0f7b2a33595bc6a139c6fe040e8db0d72588dd88d9ca8bea054144e2c9725240631a1", @generic="88b69d51e8590e4f61e8f17e82fe60eae39b07057d4ec74c48f28f6fc032dc118850dea7a504164021cba0a1154cb79c131f128f9aec2d38b13d96f1acacb489903ce8863f612a7ebd2c2792cef86e2e28fce84f1a5318a25a220d63b744da1cc291c2bdc58db784173f678bdf7f24de60756bb5b2c7b1c927cf25ba3fad41f571439e", @typed={0x8, 0xc9, 0x0, 0x0, @pid=r12}, @typed={0x5, 0xb1, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x44}, @nested={0x4, 0x93}, @typed={0x8, 0x10c, 0x0, 0x0, @uid=r9}]}, @nested={0xac, 0x2b, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @uid=r11}, @nested={0x4, 0xe9}, @generic="0bf0527d5c8343a6f6f94e915dfd6c52baa2f87a8868527580b586e83bc27c31ff7eda07e307457d48a5c58ea34f80367b3000b96dbd0e0f2b022ee8e8f0c01e2e6fb7a197380bfd652490f35bf459578d9939dfe27dc89f6087941aa05ec373e28de034c0c8fec5c6507c7b5c440ff0718a1f88", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0xe1}, @generic, @typed={0x4, 0xa9}, @typed={0x8, 0x15d, 0x0, 0x0, @str='\\+(%'}, @typed={0xe, 0x89, 0x0, 0x0, @str='--!&q/&[[\x00'}]}, @typed={0x8, 0x10a, 0x0, 0x0, @uid=r8}, @nested={0xab, 0x7f, 0x0, 0x1, [@generic="dc808722ae54d4d77dbf0cad539f48e6253fed0acde27ee0da2546f7090ac4b0328d177dc371a33e7332a4c22cba2ed434149672f6a3b55d888da09b16a70d0e09cda9780e12235d579a530cef21610ecaf34057348af3567473f2dc4c73dc55ee831d7aea8246ed28d4dd0d30cd84a5bf9f68859e6fa4c9dd909d47fce6253d282632a896d531ca7898dc39164c786df7a4ee3db0d7c5006fa5f792b75c25", @typed={0x8, 0xb4, 0x0, 0x0, @pid=r10}]}, @nested={0xc5, 0xa4, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r16}, @typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="cfdefb6469e181f2fe53e662beb054d3f86e500281fc0f2e302c3c4c86babe3632addd52625ad96d9cdaba7817b6a993e013581c384074646cbf57bb6f2b595dd9617d3507ecb2465541c265e9d5fd2a22f12d9ae5ad98b9e827c38ec3685d3ba83f6ab7bf632d52614750c49bdb80eca406d0ef489f2d7e4e680c85cd5f03fb74110f9f8961cd0280c68270ca1cb8498f6b33edc73262563d", @nested={0x4, 0x3a}, @nested={0x4, 0xc6}, @generic, @nested={0x4, 0x15e}]}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x35}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x15c0}, 0x1, 0x0, 0x0, 0x4094}, 0x4004045) 3m52.680995491s ago: executing program 1 (id=616): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x7fff, 0x400008, 0xe3, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x27) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0x7, 0x3d, 0x5, 0x1000, 0xecb, 0x8, 0x81}, 0x9) io_uring_register$auto(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x1, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0500181d0100000008001000040000000800090006000000"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) umount2$auto(&(0x7f0000000300)='\xc4x\xc2\xcd\xac\xb6\xc5\x04yB\x1cR\xbc\xce\x84\tJ\xa4Hn\x8e%\x8d\xc8_\xcc\x98\xb0\x8c\xc4\x93f\f\xde\x0e{\x95\xfe\xbd\xbd#\x1b\xad \xa3\xc3\x88V\x03\xbe\t\x12\x81\x1b\x8cd!zXF\xbd\xfb\'\x87\xa8\xdb\xf8I\xf4\xd8|E\t\xf9\x82`\xd4\x02~rx\x8e\x8c\x1f\x1bZM\xd1=\x92b\xe3\xd9\x98\x82\xca\xe8+\xc0\x0f\xac\x89mt\x0efI[\xaa\xa44\xbf\x85\x1bo\xa2id\xce\xed\x9c\xb3\v+\x0e\\\x97\x1b\xd1\xc4\xa9\xe7\xbe\v`\x19\x89H\x01\x13{\xe0\x8dA{\x8d\f\xf9\xceW\x05\x8cA\xe7\xae\x90\a\xa7WYf\x02\xd2\xe4\x8c\xe7\x9e\xd5\x8d\xaa\xcas(\xbc\xb02\x13\xcd\x88\xaby\xaa\xd6\xf0,n\xc73z(8\x02\xeel\xad\xf0|\xae)`:\xd5+L\x01\xe2\xad\xf8F\x11r\a\x15`_e\xcb\xdaD\xd1\xe5:\xc0\x00+\a\xc8t\xafJ\xb6\x1b', 0x5) mmap$auto(0x100000000, 0x100000000, 0x4000000000df, 0x40eb1, r6, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0xc, 0xdc, 0xeb1, 0x401, 0x8002) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x5b3e01, 0x0) r7 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r3, 0x10000000084, 0x2, 0x0, 0x7) 3m37.401555149s ago: executing program 32 (id=616): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x7fff, 0x400008, 0xe3, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x27) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0x7, 0x3d, 0x5, 0x1000, 0xecb, 0x8, 0x81}, 0x9) io_uring_register$auto(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x1, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0500181d0100000008001000040000000800090006000000"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) umount2$auto(&(0x7f0000000300)='\xc4x\xc2\xcd\xac\xb6\xc5\x04yB\x1cR\xbc\xce\x84\tJ\xa4Hn\x8e%\x8d\xc8_\xcc\x98\xb0\x8c\xc4\x93f\f\xde\x0e{\x95\xfe\xbd\xbd#\x1b\xad \xa3\xc3\x88V\x03\xbe\t\x12\x81\x1b\x8cd!zXF\xbd\xfb\'\x87\xa8\xdb\xf8I\xf4\xd8|E\t\xf9\x82`\xd4\x02~rx\x8e\x8c\x1f\x1bZM\xd1=\x92b\xe3\xd9\x98\x82\xca\xe8+\xc0\x0f\xac\x89mt\x0efI[\xaa\xa44\xbf\x85\x1bo\xa2id\xce\xed\x9c\xb3\v+\x0e\\\x97\x1b\xd1\xc4\xa9\xe7\xbe\v`\x19\x89H\x01\x13{\xe0\x8dA{\x8d\f\xf9\xceW\x05\x8cA\xe7\xae\x90\a\xa7WYf\x02\xd2\xe4\x8c\xe7\x9e\xd5\x8d\xaa\xcas(\xbc\xb02\x13\xcd\x88\xaby\xaa\xd6\xf0,n\xc73z(8\x02\xeel\xad\xf0|\xae)`:\xd5+L\x01\xe2\xad\xf8F\x11r\a\x15`_e\xcb\xdaD\xd1\xe5:\xc0\x00+\a\xc8t\xafJ\xb6\x1b', 0x5) mmap$auto(0x100000000, 0x100000000, 0x4000000000df, 0x40eb1, r6, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0xc, 0xdc, 0xeb1, 0x401, 0x8002) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x5b3e01, 0x0) r7 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r3, 0x10000000084, 0x2, 0x0, 0x7) 2m49.359573176s ago: executing program 3 (id=750): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = ioctl$auto_TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=0x8) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x1000b5, 0x4010, 0x8, 0x4, r1, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x8001, 0x5, 0xe5, 0x3}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0xc) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x17, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bc2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_ncsi(0x0, r5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r6, 0xc0104d08, r6) poll$auto(&(0x7f0000000400)={r2, 0x1, 0x800}, 0xd116, 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0x7}, 0x1, 0x0, 0xffffffffffffffff, 0x7fff}, 0xe}, 0x3, 0xffffffff) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x9f}}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x44}}, 0x20000000) 2m47.364584027s ago: executing program 3 (id=755): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/default/ignore_routes_with_linkdown\x00', 0x2, 0x0) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f00000005c0)="06d04766bd18746c0ca430bcbb4ee3a09f1b87cd079266e6d5c291b0a347984f3b499c30d64e2ff67f3c94f307ff842e95d80c84cbdfe63d8fe09f3c05a6d03e01e3467e1525da3cb7ac3048f5ddd0604688700d03f510e6d5613ba8712d651eba1354ca90e184fb4daf7ba36ddfc02535636fa629e08ddf8e0dbf75d80ae745b615f33cf80687f487379e934c755a345e170c27f058ec6070feea92958ec46725453665effaa6591877aa7ecc3aedb10928dd122c9f7a26c7560f1d735ff0b262a4d76b7bfdd4b8d6f8fdac13e958b61f4120aa1216b740f312a214a66051071dea137d764cc0110b3d22997b4ffbeb942b29e8a5e8bc09504e3adf95daa98e7f077b2426236a7b4bf0e3f0575489c99b74772a24fa50161104b49be29a22e0e5caaeed2f9b382194a6a67241e57dbe266c9662752f05e64ceb411e37d871a429b8323c8da6d1f34d7f70542f52d32b8d88fa32a1a453a60c0cbbb6a807128cbd6509bb845ce3cf442de68394be21f6a333cf8d4d6068f33c8bc62f0aae2568e1ca33fd5c40e29a1856de7d11b8cc180566e2dbb23b08a5b977c4e57d37eed65900bfacc7344f6dd5d721933e932fa7eeea10f951551bb799c18cf4c47906dc78f3488aed4598c11c74ab4f4ba1248eec958cf859219fd018872c4fc15cdc65dd644ce60d3c17c78b1d784e9176c98480a83fc902889db2ab998bd4fc1f5fac56c835b0d60fc1258a225870b5f097359724b7e5981ea94a4882724c019e8bed8d9a93c556926f3cdfc0f4b3096b67a32a2622212623a5343eeeb4281a96d8db7399be5a91a7a61ad3400c853a103fdb84885cd8e856a747f3d077369974a1dafcd4eeb84b16105f4a3cc877048ca7b1a84532114eea43b992d5de89ca2c0e5d3f4063a6db7c57e730d07ece2e8fdcba40ed4fffdc437d717bb892e423e2f7cdfc4be4f7008d78c051e9c0bac34e97355ec90dc3a2d71b24ce107f93c0a3b1e9ba43b4a1dad55069671565fad4849e3c3fe899726b7b2427cfdcea835a33e6dba3dfd285fee1152707b71a78c41c903b7ce98b3c3ef99c87c575b00edc55deefc9b70d2fc4a9e1b62a5617580eead169d434da62505135887c9940ccd0a6a3fad96e9032e36cd77f43452f86365a55aa2eae44a5db0ed3624f81d59b145b73848e3ea3986de734b07260872f7716826d069c8163424db1f7680e20a15fe39ebfe3ffad83fb52d1f337d6c0ce8a233e3c4e73ff12b29b2d2264fed8ab12276c8d7c563262ac860bd75f38481f6f48ea35c9d6a2d9d5e162a3d372efb6a7a0340673722adca5ae36caf1eb0cc236f70d8456f77d869c533484cc0da069c1d5da549a6885912086a75f52b5941452e199551c8ad0020142c98df42d4470a8f9ed800673e6f5b24e163d7eae59fb3c274beb4185ba85c10786cf9ecc9c98afb2f2ea3b3c9653718e66725ee708eea10cfcccdadab05f84e0607a78b64bdcd115c6495c1dbfc8a7e91252fd27e98c6df4348f8f6666ea54823def076f95f1e213bf320e7b9452e2f3d55e80c7d06612dddff32cce07a6210b9ae049fd34844ed7c2d9353c4c587204733b1ac17ed591f61836e49ae545a2a59d1975aa23c26d1511ccd6e23856a521d80ce258b2e11679ca96b49e77598552bb4ac6136062b548235ece873033817cfc36e4dff729c6e67cb88fd04b12324cf5299b6821a637d8d10a5944afc99cacb37fc19484a5f66987829acc79d47b633f3934303f5f41603ed9958031ac7e592afa5d73fc72ff85b42d6d5572c33830c091f511927ddd34f44837267dba1239c7d8b95f8760e647e851b449ff382b8cb23583de7ac99253f5b7108f7c8a35d549c78fddb11f6070510631f58f2a44cc10e12fe7ab44bf54d0d76e61ec65cb69aa45a621e7590d734e3c1c9ab8d34c7f7b9ad330d5acbbf0cca9aa3afdcc4f02c2c4376155436e1f40970e109e9daaa88cefd55a8d4e7b35f0f1a574cdc8b17925e05fa530591cc2c03f7a1b8814647884288eb7f3c73c89fe59d45837e540ba022dab4d43d87838b52afa50ea7381327364440480560c65a65fb83c534764043f2c005b37abca7614207e59576265c9ce177e994096cc62f603d8cc2f265a873a9f727c50aea72b9508af3759078ee1fcfd6c4d2aa313338c27a0973218716efab17c02d4c875ebb84a40b4ac190e47bd93e559c84935c09c82ba39da20bed2eb05ea17f2ccaa2ca81242e1917ecdfe623ef5d44d59194ef0577918eb42785a0a8e8f89e2e76b0b3f125c29e7ad6c5138491243b9970c005d8a78b2ed2961b3f1d981dc1e77b9b8bda6845b9a81acb07d3a7b833d265835699db4cdd94586bcfb8917bfe6fa43b0c480580c5f214bef692c4ff596136cdbf5cfbb0f6e6b083ad605ef5e1d05a41c7d2b27dcfe58f1db9a4c2adfd191af3a11eb6647a95d77f46e8e26c2da124d259c8bfa9d81f6ec021eb5d6241da4c1db43eb03b7affd843ed6b16f307b561097f9aba25025b47816d100b3d3df06f6cb89648fe06bda838a18e1dd6476f08a8feb1bf8eca965656698961a9ea90ba046f5128ff07e49c5c1c67e286afebeb2bc43364f330d5583fd0c20352976332de9053d93748d10d7f8f8c0b2f1474ddfcd7b5eadecdb247238ecffa02206bf1c60547739d9e4f9e7332af1a899a4a0def45211d378eb18b514e874b8fca5b0caaf70cd3500e6cf56f6780d182ca29e96a93c9b9344f81d12969e2a70c204a64e148733e245712a8bf534104e374ea386bb18126973e3baea83d4aa35c50bd9f571c6286524a84e5bb39fd2ad802340b1efd21ffb04e4530503e443e8b31056473e1741ffc766336f12e27d5b077d3967821bbd068bcc14750966656963f8b8df0ef0ce03d935666e7b447c4ef6ab573eacf584b57a53ec0cf7ef5ce65dba835530efa4574b330e69a59399f1514a7382b567736be753e31394d944186801cb21a9c01c027e5a68dcbe9d7e9d86d81e5fc2f2b575ed7b1cf2d4f6650ddc955a806bf51cf6df044c926dea690274eb7babd4ab942ce6f3f241a4c60f4b71e2d9607a760c4bae98a9eba119d38cabc850dc72c2b3aec77eb4cdb8356ee16686bcec8701b5b37e8770781c252eb353aa70b18e27e45cc9f2dd7cc43f475407ce5aa4e44691c5569d456edb5c5687543cc492b3174a8300a555fed8ee1a55eba67c761a8c87edd44a6b10008dfb03cfae54060cbe6f4d5ee9b122d93e3272f11aea155d51d6cd74f6d44e4c0e55c486699cd45c3917ab0132264109c76e5c20875a9250975bcc5ed7cae17a85151fc07008a8f2bbe941d9412010875a6abd0ff60c4ec5a06a2b1be4d721ea46487593be11621b54626c2832d37eaebf50527c8ccfe9e9268295e1c7fea60ab5d3c984cd1fe96c87ed08a04469b22b030407ac808cc2a0e73b85aa30b8b40723ef794a309596a4b0c64059031ca7f7c14ffd02dff53ae2b055273cd755acc679e76028b3658968e5afa28ea2f9a9641cc550ba13c6d0050560be40c3d910a6b6e8e0f8a7ac4ff6f6190ab06f5359574f15522d05067402804d4a69cffc4b77e50647f88a3d26b2b51fcbe5f25c02af2afebd0775fd688e3fa0b4bf8974a757ea8d69c195a1a62d6fba4ab02fe15723f7441bd0605f0d9a849f3c54508ddae1dc75ef7f61394a656f9260b1b1dccec5be6dc83016b846bf33bbb1a70cb132f305b5713b495d8e6a83a7f6f7305ae18750afac6d4b9e2053ea583ca28ea14ec22a0d46fdd4ca7bdf6edbfce9ced4f695669c318408234fd810de393baeae0f46c4f556521f024129145322d88d434d8d4c3b577a15523e57c0b2449ac1e0da44765ed5d6213fb82c982542a258c929a22c86c4f58234d17f84db8fa6da356794cd1f3a3b35be9b7c9a3146b133047ed7b50159c3d20827c60241c7a2595af4732adcc01b7de17936b52f14c81d9db580e5c76dcdb477c42868699e53566a7927ddde516878268c8f739c69a79c0638e69e3e95381c3985ecbf3411e7f59dbcb4797f995795f21225e4089fe2a94e66c8fc316096fcd753d7ec5c67aa1cc2dd5bc1c23d77841dc4042f811a9a592f8b712578a78c265fbbdf40501cedcb7ea7f0dd1436150a20fb596b955a6ec8d0ab1631862dce58671b133a3a3ad3b3af4f7bab855ca18cb1150bc252b87b5cbf356ab082044c5e6ec8e294406e07afaf2e93d6c1cf168c786e93b92cda776e408e9994c8db61a50a28dfaf2d060aa0ffd3df76f60b92146ca0586c8d7bd4108d606b98d5cbbac7f85f82b81fdc776ae80ca2c62f4b8a5869acd78c429acbbf0051b6c228dea011b8c4298bdc6beb1eca642e6845ef21333edfaad70af7414c00ce95ed2e98642e492c92f031dd2d81adacefce7e363de56b307b05c9e5803a4ff40cc9ccac9e5e09f492722e716edef4c54ccf432aead3228a09f7b84259071e71085a7fcab274ecab04a5e440a40f018675ff8f393d2dcc8d2b9a8a014bce22a19f35f8e5967417ba80f9a7e9aafca3b1878b20068e07a2cc8ba59aebecb081750ee974b57359d27048c773fac52d8fb23a2022bd4daaecd84b898a379e6191377e43832f1bb5accb58ebf6cf6919bd03b9a6dbc5af2c21ea97bbab17d4de96943a7ba77a13b56445b137a6c82a8220d42560ef27ebbc092274d5daf769bab87658dd1daa61dc97c06d8ad0dd5bac9945c81598fe00dfcae55c4fce7ec4b4476c90b52d3a725504bd648566b1d276b4949cb42769ce23c9c5c6c436e31031ff8462f0284209450c3133bccd6c3edb2fc21fe88ae82a80d73faac187f78f0c9475ab133c11de61984af372950b98c380464fe6ace742d9007c1ea00f8bddaa48e724b394c85577b3b84c5fac72f7e98ad61b1ece507a89863d9f88998993f9636badb9ecb702665a7ab8e80c4508ae8edd36d026eb3a901ed7a0cae10e53f4b800d8b2c7aee4ac65cc199ca578021d088114937998393bb00636ee46659739c4d3353fd4a91e16473425d2f57fca842e1240c0d84807c4ca700703ef2125eab78a84a7643b855984ebb6b444e1a719e94b4c19ad3436d94b2b7a9965484b9c3b32d990f0f9a30b08a9948a55d81fc38827e286c0bf4edff65d2af1013ac25fd71f2d727fe231c6824c7de6a0ae4df93da14a913cb29b72f2e4be7657992b3f2de68548c72afae34400cb862d72155970c2def0035e441c414322fe6ad758989216347d7e11158b05926c507d3c0d8a5637b6a3ead1adc1a72ebe15452dad46de97a0e8cb6cae847d19afcefa076888bfaf3bf1e3d78b25f16471702a664c26209638b59ad85f273c227c840b851e547b2d0068eb04dcb03a9067a49ef14625bfa8b60d78100d51f63000ded8f0613aeb4b5f564563b0c1e2d2d9bfbee1304cfa3cfcb4764ba2d93513377bfdb54fb49cf2aaa765b2e57232d07541ebe3433850678fcf48c8e9e3a5a3177068ce61089ff4d9b5569f26c4f59f6440a12ab7b657c2a38a01d474b324a794d0ba2cbde234fc7f1c996b9e3be9f62258dd0a68056f957f683c9d8f33325f6e8e53b345c484f5fb1d46c70ac4c8a14f9905f1275dc601770b2b76b349daa6c989b03c4d0c2c2fca5ce74c34df51cc56a3348e6e0d0fb828dee6f317baf3daeb8c818308dd09fd7f2ad1f5ec85c428db36c58a14fcfe6ac27802c139246fe4d7077bc229cd6d6f7ce49ddcb25fa35bc28b10e82f673c9fe19431417b8f6986f0141695dad1fbdbc6845df399948e95b999686be9c4a698054b0d47ca0b3b9bbae605", 0x1000) sendfile$auto(r0, r0, 0x0, 0x2000007fffe000) r1 = socket(0x2, 0x80802, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x11, 0xa, 0x0, &(0x7f0000000200)=0xfffffffe) lstat$auto(0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/rq_affinity\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) creat$auto(&(0x7f0000000100)='./file0\x00', 0x7) msgctl$auto_MSG_STAT(0x7d, 0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x5, 0xebe, 0x8, 0x5) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x2, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f00000001c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r3 = socket(0x28, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x1b, 0x0, 0x201) socket(0xa, 0xa, 0x5) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) ioctl$auto_RNDADDENTROPY(r4, 0x40085203, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x20001, 0x0) write$auto(r5, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sethostname$auto(0x0, 0x1) mmap$auto(0x0, 0x402000a, 0x101, 0x19, 0x401, 0x8000) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r6, 0x4004510f, 0x0) 2m46.846337593s ago: executing program 3 (id=757): setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x100) socket(0x11, 0xa, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) socket(0x2c, 0x8000f, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x103040, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0100f9"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2m46.136532754s ago: executing program 3 (id=762): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fadvise64$auto_POSIX_FADV_RANDOM(r1, 0x8000000000000000, 0x7, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) pread64$auto(0xffffffffffffffff, 0x0, 0x200, 0x8800000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x4dcf3887}, 0x7) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES16=r1], 0x1ac}}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) socket(0x29, 0x2, 0x0) 2m44.693294722s ago: executing program 3 (id=765): mmap$auto(0x0, 0x28da, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x25, 0xa, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x5d6, 0x19) madvise$auto(0x3, 0x6, 0x15) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0) socket(0x2, 0x4, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1, 0x6, 0x0) bind$auto(0x3, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2m43.086266238s ago: executing program 4 (id=771): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0x7, 0x45, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m42.479881123s ago: executing program 4 (id=773): r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) pread64$auto(r0, 0x0, 0x80, 0x6) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560f, r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002ebd7000ddc35e346000000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000002440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f0000001280)={0x1154, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0xf}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_MAC_HINT={0xeb, 0xc8, "0cf4e5bbfbc0dd11287fed6a3d7bc402576e77ab90df5c12bbe88edfb642e2a41d32328001088992cc10c3acf2df1e52bff48a95314bc68b305792afcfe21a44aecd2e54be66f9745fc66f4841226440486886ddf3e375dfb4d11c14b800f85649de8fbedeef1227803ced1980acfca5c6f5c0bc03504a6222c731f924e776c44751799c7e0f7ff96a4542d42f41d3345799154501a7afa2c507db74c4bfff985ab12f87df7802640d8129137f493b434149a87d42898d71590a22a3523d6566f5fbe1a6b7e931942e1d1b8ef9b86fb59ea07a4e2bb1f3e2d807f2fa5802d8120f718740c07d18"}, @NL80211_ATTR_MAC_MASK={0x18, 0xd7, "9a7ed9e54a0c7be0667d751b7302f69084734a64"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xed9}, @NL80211_ATTR_WIPHY_NAME={0x1f, 0x2, '/proc/thread-self/children\x00'}]}, 0x1154}, 0x1, 0x0, 0x0, 0x1}, 0x40085) r6 = mq_open$auto(&(0x7f0000000080)='!\x00', 0x3e18000, 0x1000, &(0x7f00000000c0)={0x5e4b, 0xfffffffffffff812, 0xa, 0xffffffffffff051e}) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r8 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r8, 0x3b8e, r7) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r9, 0x40104d05, r9) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) read$auto(r10, &(0x7f0000000040)='%]!@.,\xcd[+]%!*,]&', 0x6) r11 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto(r11, &(0x7f0000000180)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dV', 0x5) msgsnd$auto(0x7, &(0x7f0000000100)={0x401, 0xfe}, 0x385000000000000, 0xd) 2m42.034324392s ago: executing program 4 (id=774): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) init_module$auto(0x0, 0xfffff, 0x0) 2m40.057760177s ago: executing program 4 (id=776): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f0000000100)={0xfffffff5, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x5, 0xc5000000, 0x0, 0x9, 0x94b, 0xc3, {0x6, 0x1ff}, 0xb, 0x64d1, 0x7, 0x6, 0x0, 0x2, 0x7f, 0x7f, 0x4, 0xc5, 0x8}) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/cpu0/topology/core_siblings_list\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r5, 0xc0305615, r5) adjtimex$auto(&(0x7f0000000200)={0x1, 0x0, 0xfffffffffffffff8, 0x7, 0x0, 0x4, 0x4, 0x0, 0x1, 0x8, 0x5, {0x6, 0x9}, 0x101, 0x2, 0x144a, 0xfffffffe, 0x0, 0xd, 0x1000, 0xe, 0x400, 0x7, 0x210}) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001080)=""/98, 0x62) 2m38.834581658s ago: executing program 4 (id=778): setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) r0 = prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$auto(0x34, 0x10000, r1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22902, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10003, 0x0) mount$auto(0x0, &(0x7f0000000200)='}[,&*}\x00', 0x0, 0x7ffffff9, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, r2) setrlimit$auto(0x1, &(0x7f0000000000)={0xa, 0xdc1}) 2m38.617534646s ago: executing program 3 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setresuid$auto(0x0, 0x8, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r6, r6, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 2m38.29077812s ago: executing program 4 (id=781): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0x7, 0x45, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m34.937067682s ago: executing program 2 (id=785): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x2020008, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1d, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyp6\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5402, r1) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x44880, 0x0) r2 = io_uring_setup$auto(0xf, &(0x7f0000000080)={0x7fffbfff, 0x7, 0xfc1, 0x4, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0xfffe, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x9, 0x2}, {0xfb, 0x7, 0xd6, 0x7, 0x1, 0xd9, 0x176c3, 0x3, 0xb}}) io_uring_enter$auto(r2, 0x5, 0x820e, 0x6, 0x0, 0x18) sendfile$auto(r3, r2, &(0x7f00000000c0)=0xf, 0x500000000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) 2m34.413276839s ago: executing program 2 (id=786): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x100, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = socket(0xa, 0x1, 0x84) madvise$auto(0x19, 0x5, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$auto_SETALL(0x52, 0xe, 0x11, 0x7) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) open$dir(&(0x7f0000000000)='./file0\x00', 0x4b8bc1, 0x6) mmap$auto(0x1fffffffc, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c03a94c57fc4a5a028952b7505acbb40f754a3975e3cf33f283b254299ec9151386fddfb6842fdae6ea4d29fef08ad5af4869d669516a65580f97e2fdbba838e05b210c136d522e719b3b8cd458956265214a683fc0337c36371182ec10d9f409c11230f0286edd4ebf2d44be7517b2ce0e01487f7a703f152e6c42ce580bf8f36a38a188bbdfad0accda581030000000000000049109a2fd42a7165dc589405", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000841) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fstat$auto(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r1, 0x9, 0xfd, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socketpair$auto(0x1, 0x5, 0x3b, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4605, 0x0) getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2m33.412970299s ago: executing program 2 (id=789): modify_ldt$auto(0x0, &(0x7f0000000180)="64838369409871859b0a951bb01d88efbf1b2e30935780697480c39c380fa3e60754275446eab06b8b6d7aa3e1aefaf3e22da26016a32937ad406f2a81574ec936057145a4ae842320d912e2adc214a7b057ccb665305439b392d4ecfb25aabee22a82fc05edf519c441d434077a1b1e964204c248a5dfc33c09f80625542d33dfbcc0a82a872a2bf17ef640c5777fb36f724314f9187b98bea96900ddc39f0465fda1146a81f905b6f1867e49fbcb663e4bbed8a76733fcf927b9740f821534fb", 0x1) r0 = socket(0x29, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000040)=@generic={0x18, "00010100"}, 0x5c) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x1, 0x2, 0x7f, 0x6a3, 0xfff, 0x7, 0x7, 0x9, 0x5, 0x3, 0x5, 0x2, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x265b5e1d, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r2, 0xc1205531, r1) msgctl$auto_MSG_INFO(0x3, 0xc, &(0x7f0000000480)={{0x5, 0xffffffffffffffff, 0xee00, 0x2, 0x1, 0x9, 0x7fff}, &(0x7f0000000140)=0x4, &(0x7f0000000440)=0x7, 0x3, 0xb, 0x9, 0x37eaef6e, 0x180000000000, 0x237, 0x800, 0xf9, @raw=0x7, @raw=0x9}) r4 = getegid() ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000500)={0x1000, @inferred=r0, @raw=0xdacc, 0x9, 0x3, '\x00', {0x5b7, 0x9, 0x0, r3, r4, 0x1, 0x7fffffff, 0xae5, {0x9, 0x5}, {0x7}, {0x1}, 0x8, 0xfff, 0x4, 0x4, 0x8001, 0x6, 0x1ff, 0x5, 0x1, 0x3, '\x00', 0x4, 0x9, 0x4, 0x8}}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20440, 0x0) ioctl$auto_SNDCTL_TMR_SELECT(r6, 0x40045408, &(0x7f0000000080)="82fe745df4ac52ea0de7c72eec86bb8fd48fe02f620757bbd918ad2e69325cd4f515915d1d22e021abc4aa2b4a1b7533860ae4685d18995bc86a5a779c0c385f256c5e9f738808f8b458629725d7140a9ef682ece43d04eb6d2097a10747b5be") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x29, 0x4, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TUNGETVNETBE2(r1, 0x800454df, &(0x7f0000000380)=0x1) socket(0x11, 0x2, 0x300) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2f2) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x2, 0xc) 2m32.833776691s ago: executing program 2 (id=790): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x80000001) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) sysfs$auto(0x7, 0x4, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 2m31.615876039s ago: executing program 2 (id=791): madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x2, 0x2020009, 0x3, 0x1000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x36) unshare$auto(0x40000080) r0 = socketpair$auto(0x1ff, 0x5, 0xf, &(0x7f0000000000)=0x5) mmap$auto(0x2, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x7fff, 0x7355, 0x10000, 0x0) fcntl$auto(0x3, 0x8, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) poll$auto(&(0x7f00000010c0)={0x3, 0x420c}, 0x1, 0x2e2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) fcntl$auto(r0, 0x100, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) preadv$auto(r2, &(0x7f0000000b40)={0x0, 0x4}, 0xfffffffffffff003, 0x800000000000000, 0xe4) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000180)=""/226, 0xe2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5525, r0) ioctl$auto(r4, 0x5523, r4) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2m30.282350878s ago: executing program 2 (id=793): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffffe, 0x4020009, 0x1, 0x15, r0, 0x7ffd) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x5, 0xfff8, 0x3, 0x9, 0x1, 0x0}) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mmap$auto(0xffffffffffffffff, 0x4005, 0x2, 0x40eb2, r2, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) getcwd$auto(0x0, 0xff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) 2m23.209217378s ago: executing program 33 (id=781): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0x7, 0x45, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m23.10653746s ago: executing program 34 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x10, 0x1, "5e1f970f497f9f23d63e7285"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setresuid$auto(0x0, 0x8, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r6, r6, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 2m15.029423078s ago: executing program 35 (id=793): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffffe, 0x4020009, 0x1, 0x15, r0, 0x7ffd) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x5, 0xfff8, 0x3, 0x9, 0x1, 0x0}) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mmap$auto(0xffffffffffffffff, 0x4005, 0x2, 0x40eb2, r2, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) getcwd$auto(0x0, 0xff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) 2m13.472629202s ago: executing program 0 (id=817): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) sysfs$auto(0x7, 0x4, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 2m12.745740649s ago: executing program 0 (id=818): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) init_module$auto(0x0, 0x1c, 0x0) 2m9.803968074s ago: executing program 0 (id=821): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8, 0x7, 0x4, 0x9b72, 0xffffffffffffffff, 0xf34) socket(0x11, 0x2, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000000c0)={0x1350, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x10b8, 0xa, 0x0, 0x1, [@nested={0xaa, 0x12e, 0x0, 0x1, [@generic="1bda699285a3cf33577e0a576a37b58b558c41de20b6d664484d441eed30b21bbf13c59ff923dac72c5647ca48369fbb5c1205b6fce5427e13b3211421ac929734c7261e788229209fd96c2db0d4e09dd7d75fe5464e8e5a8ce3fe16049c6508ce2c04bf909055aebb0492c2c2c72126d4174757783086cbb3531f7c7a0330850ca6863e47ee21b6cef28b716826e3a16fad68e7ecec918d3bb684a3055e59e8f6020b86d539"]}, @generic="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", @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@local}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xa8, 0x5, "76a82159fc84f23ff70d48ad5014b60144d24e3ccc426d982da7625c8161611e89f022e3d967bb601cdeeeca4805982b99ae4692c143163bc41ebaad6c56bfc84169ce4a4a37cfdec7a9231afd65a7c077aacee4c65157786115b79c76c3d2c94418df9704624499e03b570ebad1835d9701568072fbfc7e4f18b9aa1a491881f350d8e421de54c202f4091323833643fe76a07185d483e9e828ed56aa49e53a8aa58536"}, @OVS_VPORT_ATTR_OPTIONS={0x14e, 0x4, 0x0, 0x1, [@generic="a7ef4abbc124eef53556bd89d2d99569b0739afd5f7bf96e66c73504cfe67ea5409dfb44ecc9dfb0065c8f3c7460d3085e691f593b7c87cf04348c11f73219d031035946d20b7fcfa8ecf018bf9ac5c455123cc81ee544cfd40f1bca59007dde5624384ffe4a59165e9ca219e9c237e563d7492990e78a8166e40aa0a819f19a1b7f99df13e0064a8aa634302b9168a702c0134c17d23fd58f04ea7439b3eb04d9350b726bf6acc1d2f520e8ef114e4289fda781740b39c1848de696cb45fc93fafaeb0f15e4975dc200", @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@empty}, @nested={0x26, 0x10e, 0x0, 0x1, [@generic="8c7032f49582ff9c9a21d6c169d32d55af007e7001f5", @nested={0x4, 0x75}, @nested={0x4, 0x90}, @typed={0x4, 0xf1}]}, @typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x32, 0x132, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="6f56dc55c396a1f4bf5899bacca8255f03d8b38861e26dc9881c3cd009a1d6031b00d95bd45715fc378d"]}]}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_UPCALL_PID={0x1b, 0x5, "5b2af2d0710e387e6492a69279e90e16afba641fdf46c5"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0xf}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x80}, @OVS_VPORT_ATTR_UPCALL_PID={0x57, 0x5, "9ec2907dacca301f10cc1379a15ea7e1dfeaf2f5474f65e085da925c9639080eb0044dea2361235ab44902072ac400463a00f7f6715db19010cc5aff65f1a90fdbbfc7a48c84e2d04aaf5227b75640130a21e9"}]}, 0x1350}, 0x1, 0x0, 0x0, 0x40}, 0xb02d7e779e8dd40d) 2m8.546640046s ago: executing program 0 (id=824): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x1c, r3, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) prctl$auto(0x1000000003b, 0x2000000000010000, r1, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) init_module$auto(0x0, 0xfffff, 0x0) 2m5.484238817s ago: executing program 0 (id=829): bpf$auto(0x0, 0x0, 0xee) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='-', 0x1) mmap$auto(0x7, 0x402000b, 0x8001, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x10) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, 0x0, 0x3) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x5e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) close_range$auto(r0, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x2001, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) readv$auto(r3, 0x0, 0x5) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x2c, r5, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000017c0), r6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010326bd7000ffdbdf25040000005985ae75e49abcfcb4c5bc74062734f1bf9f9cd6d25f1123e4edf577ed1c80eb92a33a480db60afcaacd327076311aada1c69afb3e4fc613d40ae6cc849694be3da3058dddbc0d8c4b0c97f86ab11446e8f0f659888b7f021c1b4c1d726cb151e2f50a76ca53fe93009191b63827148256c551be6ef5c0e12cb6405824"], 0x14}}, 0x4008010) 2m3.962080976s ago: executing program 0 (id=832): r0 = socket(0x2a, 0x80000, 0x2) setsockopt$auto(r0, 0x10000, 0x30, 0x0, 0x10001) syncfs$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x300000, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x100000000008, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x54c8, 0x9) r5 = socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd12\x00', 0x40c301, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec00", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf259500000008001001ffff000017001501c338aea97beaad80326a55e7e54ef0bf29e646003e00758008006d00ffffffff331cd5e6996930000000bc1c31d7d6929ce634e1717b3dcf698338bf8d9223063681b39bd3000076001501aa1f2f8503093dd93500772e45ba414a28b68761b6c48a779b892e0fb0360a9adf3d0c52bb819b991135c5d1f37ba92a5e31cf22839fb2f79d6a8945d607003b51f5f66ab5558a82db7b33d9d9d6b28b4d80106e36f90d24d742f4d89b18a1a6c05c0848ebc4bfffb2a0189055deb2e79eb300"/230], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto(r6, 0xc0105303, r6) write$auto(r1, 0x0, 0x81) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, 0x0, 0x9) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xafefa9ff3f168676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, &(0x7f0000000240)="8c4f") 2m2.265194292s ago: executing program 7 (id=816): setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x100) socket(0x11, 0xa, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) socket(0x2c, 0x8000f, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x103040, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0100f9"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2m1.60816961s ago: executing program 7 (id=836): madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x2, 0x2020009, 0x3, 0x1000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x36) unshare$auto(0x40000080) r0 = socketpair$auto(0x1ff, 0x5, 0xf, &(0x7f0000000000)=0x5) mmap$auto(0x2, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x7fff, 0x7355, 0x10000, 0x0) fcntl$auto(0x3, 0x8, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) poll$auto(&(0x7f00000010c0)={0x3, 0x420c}, 0x1, 0x2e2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) fcntl$auto(r0, 0x100, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) preadv$auto(r2, &(0x7f0000000b40)={0x0, 0x4}, 0xfffffffffffff003, 0x800000000000000, 0xe4) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000180)=""/226, 0xe2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5525, r0) ioctl$auto(r4, 0x5523, r4) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 2m0.82990117s ago: executing program 7 (id=839): sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 1m48.32534831s ago: executing program 36 (id=832): r0 = socket(0x2a, 0x80000, 0x2) setsockopt$auto(r0, 0x10000, 0x30, 0x0, 0x10001) syncfs$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x300000, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x100000000008, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x54c8, 0x9) r5 = socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd12\x00', 0x40c301, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec00", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf259500000008001001ffff000017001501c338aea97beaad80326a55e7e54ef0bf29e646003e00758008006d00ffffffff331cd5e6996930000000bc1c31d7d6929ce634e1717b3dcf698338bf8d9223063681b39bd3000076001501aa1f2f8503093dd93500772e45ba414a28b68761b6c48a779b892e0fb0360a9adf3d0c52bb819b991135c5d1f37ba92a5e31cf22839fb2f79d6a8945d607003b51f5f66ab5558a82db7b33d9d9d6b28b4d80106e36f90d24d742f4d89b18a1a6c05c0848ebc4bfffb2a0189055deb2e79eb300"/230], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto(r6, 0xc0105303, r6) write$auto(r1, 0x0, 0x81) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, 0x0, 0x9) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xafefa9ff3f168676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, &(0x7f0000000240)="8c4f") 1m45.486789672s ago: executing program 37 (id=839): sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 21.966757752s ago: executing program 6 (id=1049): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x80000001) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x28bf571df7b248e2, 0x0) sysfs$auto(0x7, 0x4, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 19.206589602s ago: executing program 6 (id=1055): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0xa, 0x80003, 0x3a) socket(0x18, 0x5, 0x2) r0 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setreuid$auto(0x0, 0x20000000004) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x0, "7e0086cadb3b4092d583e43b7e31af8b95bcbb8a50ce776e958da06a016ccecc", @raw=0x8}) close_range$auto(r1, r1, 0x1) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x600006, 0x2, 0x406b1, 0xffffffffffffffff, 0x300000000000) 18.759826372s ago: executing program 6 (id=1058): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendto$auto(r1, 0x0, 0x13, 0xffffff79, &(0x7f0000000440)=@ethernet={0x6, @multicast}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>9\x1d!\xe0\x00\x94\xf2\xa2\x00\x00', 0x7e) ioctl$auto_SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000380)="83aa1369079e872f7f76eceb70bfa4ed56b5110980916ce17eed9d3b71beff7e07d62eeda0bbac2cb4543e470838a1b04f057e3c7f62ac1e7f0bddd31a52fc67b1e5b6") 18.484955203s ago: executing program 6 (id=1059): bpf$auto(0x0, 0x0, 0xee) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execveat$auto(r0, 0x0, 0x0, 0x0, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-', 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x2001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) bpf$auto(0x2, 0x0, 0x103) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), r4) writev$auto(r3, &(0x7f0000000300)={&(0x7f00000001c0)="7dc53ed3cd47f2466fc39678c7af98e8839d800d694bb7a0908ee42bcbcdf25d33062784fb920d97548ef587380f37101a7d53bd485d11e85dc8f818d650985da27a850a841de47f919b85d48ad3f2c1ad693c6e82918d5a585ad329ddcd81576b505cbd2a46f1cdb3c41121bc733fd7afe817e36adbddc624f68ad324ad8ddc6ba617c0916b0e1cb75996166a1dc29994182e21d63a824a11cf42f3ae14d62591aaa9e8d5e8c231d0447d483c2d45996e7ef1aab0d7cd044fb679b5623213c4d820c3a83fdeba38c6842beb144b9ea9bee32f82e6d9a6c46bac035492a328cf15101fb3b00d090270ea50c5", 0x9}, 0x1) r5 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) readv$auto(r5, 0x0, 0x5) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000017c0), r6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="f70226bd7000ffdbdf0000"], 0x14}}, 0x4008010) 15.847684076s ago: executing program 6 (id=1066): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) (async) socket(0x2b, 0x1, 0x1) (async) capset$auto(0x0, 0x0) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0xfffffff7, 0x9, 0x4000, 0x6, 0x4, 0xa, 0xffffffffffffffff, [0xfffffffd, 0x20], {0x9, 0x2, 0xf, 0x29f, 0x100, 0x7e, 0x101, 0x6, 0x2000}, {0x100, 0x7, 0x50, 0x5, 0x1, 0x3e, 0x104, 0x8, 0xffffffff}}) (async) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000480)='}[,&*}\x00', 0xb37) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) mremap$auto(0xfffffffffefffffe, 0xf06, 0x3fde, 0x3, 0x7fffffffaffc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8040, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) (async) socket(0xa, 0x801, 0x84) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x8001, 0x3, 0x1b, 0xfffffffffffffffa, 0xfffffffffffffff3) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) pipe2$auto(0x0, 0xf) (async) ioctl$auto(0x1, 0x5761, 0x4) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r0 = setfsuid$auto(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r1, &(0x7f0000007b00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007a80)={0x14, r2, 0x311, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) (async) r3 = setfsuid$auto(0xee01) setresuid$auto(r0, r3, r0) 15.462266302s ago: executing program 6 (id=1067): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendto$auto(r1, 0x0, 0x13, 0xffffff79, &(0x7f0000000440)=@ethernet={0x6, @multicast}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>9\x1d!\xe0\x00\x94\xf2\xa2\x00\x00', 0x7e) ioctl$auto_SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000380)="83aa1369079e872f7f76eceb70bfa4ed56b5110980916ce17eed9d3b71beff7e07d62eeda0bbac2cb4543e470838a1b04f057e3c7f62ac1e7f0bddd31a52fc67b1e5b6") 6.379409874s ago: executing program 5 (id=1088): ioperm$auto(0x764, 0x7fc, 0x1000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000001}, 0x4, 0x20000003, 0x401, 0x2d) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose4/statistics/rx_packets\x00', 0x20680, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\b\x00\x00\x00\x00\x00\x00\x00\xc1n+\n|j\xc9\xd0\xad\x82\xb6Q\xddT\b\xcbb\xca5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xd4\\e!\a\x82\t,\xa7\x00', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/swradio15/name\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001280)=""/4124, 0x101c) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40040d4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x404a}, 0x20008000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000100)=""/63, 0x3f) removexattr$auto(0x0, 0x0) mmap$auto(0xb90, 0x203, 0x2, 0x100000000040eb5, r0, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, r3, 0x402) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x6, 0x5) socket(0x22, 0x1, 0x84) 5.916657196s ago: executing program 8 (id=1090): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) adjtimex$auto(&(0x7f0000000780)={0xf, 0x0, 0x2b8, 0x100000001, 0x6, 0xffffffffffffffff, 0x2, 0x0, 0xe, 0xfffffffffffffffc, 0x5, {0x2fa}, 0x7fffffffffffffff, 0x204, 0x5, 0x1, 0x0, 0x6, 0x400000000, 0x7, 0x9, 0x5, 0x801}) adjtimex$auto(&(0x7f00000002c0)={0x8c15, 0x0, 0xfff, 0x7f, 0x1, 0xffffffffffffff16, 0x3, 0x0, 0xb, 0x1, 0x100, {0x10002, 0x4}, 0x8, 0x0, 0x4, 0xffffff62, 0x0, 0x40, 0x1, 0x3, 0xfffffffffffffffe, 0x1000000005, 0x1}) adjtimex$auto(&(0x7f0000000540)={0x72, 0x0, 0xff, 0x800, 0x2, 0xffffffffffffffff, 0xa0c, 0x0, 0x3ffbffffffffff, 0x9536, 0x4007, {0x200, 0x4}, 0x80, 0x80, 0x5, 0x5, 0x0, 0x107000000, 0x21, 0x18d, 0x6, 0xa, 0x2015}) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) open(0x0, 0x261c2, 0xb2) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b68, 0x0) 5.195328004s ago: executing program 8 (id=1091): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x109082, 0x0) ioctl$auto(r0, 0x80204518, r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x1a3401, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptye0\x00', 0x121000, 0x0) ioctl$auto(0x3, 0x402c542d, r2) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@batch={0xf1, 0xb, 0x10000004, 0xb2c, 0x7, 0xffffffffffffffff, 0x8000040000001, 0x5}, 0x7ffb) mmap$auto(0xfffffffffffffffc, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/se401/uevent\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x4) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x101080, 0x0) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r4, &(0x7f0000005e00)={0x10, 0xf1, "03000000000000907500000000000000"}, 0x800000a8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x40, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/renderD128\x00', 0x2200, 0x0) ioctl$auto(0xffffffffffffffff, 0x9, 0xffffffffffffffff) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio9\x00', 0x1f1041, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, r5, 0x8000) mmap$auto(0x0, 0x2020009, 0x51145165, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x3, 0x0, 0x6, &(0x7f00000002c0)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3], 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x8008014) 4.563362024s ago: executing program 8 (id=1092): openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = socket(0x1, 0x5, 0x0) getsockname$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) (async) mmap$auto(0x0, 0x202000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) adjtimex$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0xe8020400, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async) read$auto_bdi_debug_stats_fops_(r1, &(0x7f0000000200)=""/228, 0xe4) (async) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mincore$auto(0x1000, 0x4000000, 0x0) 4.552756345s ago: executing program 9 (id=1093): mmap$auto(0x1, 0x1, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) (async, rerun: 32) pidfd_open$auto(0x0, 0x5) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cb603, 0x0) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r2 = socket(0xa, 0x6, 0x106) getsockopt$auto(r2, 0x6, 0x5, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async, rerun: 32) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (rerun: 32) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0x42000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x1c4, 0x97, 0xa80}]}) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async, rerun: 64) r6 = socket(0x23, 0x2, 0x0) (rerun: 64) getsockname$auto(r6, &(0x7f00000001c0), &(0x7f0000000040)=0xcf) (async) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x9, &(0x7f0000000100)={0x126, 0x0, 0xb5, @raw=0x6}}) (async) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) (async) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) 4.532664961s ago: executing program 5 (id=1094): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000003c0)="46db", 0x2) sendfile$auto(r0, r0, &(0x7f0000000200)=0x5, 0x6) syz_clone(0x28000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 4.235524957s ago: executing program 9 (id=1095): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x100c0, 0x0) ioctl$auto_BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getgroups$auto(0xe, &(0x7f0000000000)=0x4a) write$auto(r1, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2b, 0x800, 0xc5) shutdown$auto(0x200000003, 0x2) setreuid$auto(0x4, 0x8) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) setpriority$auto(0x7, 0x8, 0x8) mremap$auto(0x401, 0x0, 0x7fda, 0x6, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x420040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) 3.841416207s ago: executing program 9 (id=1096): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x6, 0x1b) r1 = seccomp$auto(0xfffffff8, 0x57dc, &(0x7f0000000040)="fd1b15e66d3aee72a49adbd379d11855187b4c607635edbdfe7fc7a1c7789a8aa0f3468da9fac89f25b4fed8a0691640bddef7ca6ff2fa4acd2ef142cccdb48dcbe5117de3151faa5ce893fb00f7a31ea3aff384d425438ba902707bcda2258110519ca3764b3b588b84fa8e3054cb21002647d01b870ee3786d2d4a5d") ioctl$auto(r0, 0x6, r1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 3.809065606s ago: executing program 8 (id=1097): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x515400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x8a8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x800, 0xf) socket(0x2b, 0xa, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, r0, 0x7ffc) r6 = prctl$auto(0x80000001, 0x100, 0x0, 0x2, 0xb) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000180)=@link_update={r6, @new_map_fd=r3, 0x5, @old_prog_fd=r1}, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.757743565s ago: executing program 5 (id=1098): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) (async) r0 = socketpair$auto(0xffffffff, 0xd08, 0x7, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x800000000000eb1, r0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) (async) timer_create$auto(0x2, 0x0, 0x0) socket(0x29, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5da929bd7000fcdbdf2502000000040002000800048000000800"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x5) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0xe5a, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) (async) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0x5) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) write$auto(r1, &(0x7f0000000000)='/\x10\t\xe1', 0x80000000) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) 3.331644613s ago: executing program 5 (id=1099): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x93, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x7ffd, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x1, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 3.299493856s ago: executing program 9 (id=1100): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) (async) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000004, 0xfffffffffffff6bc}) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) (async) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000100)='\x044\x01\xafn\xff\xf7\xf8{\x00\x00\x00\x002\xc7S\b[u\x85E\x9c\xaf\xa5\x92\xb3\x89mB\x18\x1e\xc2\x03\x00\x00\x00\x13\r{\xad\x9f\xa7\x14W\xbd\x0e!\xe8\xa6#8\x10\xef\x82\x01Q\x8eL\xcc\xb6\xbb=\xc6\xad\x0f\xc7\xbb\t\xc2\x14\xafWU~;\xbbj\xf4\x15+\xa9]\xf9<\xa4\xba\x9e\xd3\xd9\t\x7f\xcc\x9a\x98\x80%h\x878}\xaa\xf8(\xc1h\x9b\x91\x9b\xd8O\xa9Q\xea\xf3C\xc2\'o\xe6\x85\v\x8e\x81\x1e~I1\x06\x16*b\xad6\xbf\x85K\x8c\x14\xae\xa9M\xeb\xe1\x8c:\xe9\xf1\xbb\xdd]\xeaJ9\xab\x02\xe7\xa6S\v\xc5\xbc\x83\xcc\x82\x99\x99BXgd\xb6\x88\x97`Z\xa4\x81:]\xee\xb1\'Bd\xd6\xdc\x06\xb4S\xb9d\r\xd0h!r\xed\xf9]]a\xc8\xe1\xedx\x81\x90\xd7\t\xd5\x9f\xed\xe06+\xde\x8c\xe6\n:\xe8\xff\x9f\xf5\xec\xe9qof\xf3P\xb4\xf2\xcd\xda\xe9\x1c\x8c\xb6\x84k\x00'/252, 0x2d9) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x3, 0x200000df, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000080)={0x0, 0x1003}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x7, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x80000001, 0x1, 0x80000000, 0x100, 0x0, 0x100, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x2, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f6e3fef497c029b61208f4342190a", 0x1d) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) r3 = socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x4, 0x100007, 0x6, 0x2, 0x9, 0x3, 0x6, 0x2000000004, 0xb2, 0xdb7, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x9d, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7]}, 0x202, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0xb9, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x5, 0x59ad, 0x7, 0x89, 0x29, 0x4, 0x1ffffffffffe, 0x5, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff00, 0x6, 0x401, 0x22402, 0x9, 0xfffffffd, 0x84, 0x4, 0x0, 0x6, 0x0, 0x0, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x0, 0x8, 0x138c8000000, 0x2, 0x100000, 0x10004, 0x5, 0x7, 0x1fc, 0x20000000, 0x10000000000001, 0x3, 0x0, 0x46, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x3, 0x0, 0x0, 0xa53, 0xbd9, 0xfffffffffffffffd]}, 0x7, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 2.639741317s ago: executing program 5 (id=1101): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80002, 0x73) sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, &(0x7f0000000180)={&(0x7f00000000c0), 0x434b}, 0x9, &(0x7f00000001c0), 0x3ff, 0x24000000}, 0xb6}, 0x2, 0x2) mkdir$auto(0x0, 0x5) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) r3 = wait4$auto(0x0, &(0x7f0000000080)=0x401, 0x7, &(0x7f00000000c0)={{0x7, 0xfffffffffffffffe}, {0x7, 0xfffffffffffffffb}, 0x8, 0x2, 0x2, 0xc51, 0x672b, 0x0, 0x2, 0x8, 0x4e, 0x100, 0x0, 0x800, 0x6, 0x3}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x5, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000000080)={0x1260, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1233, 0x3, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @u32=0x4}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0x2}, @generic="6798edcf665494162e06489a2d870a37d1fcdbe21796d513325fc462c145ae0635983404a7340e2c591554f786601e31584a02fd5501899ee5451723499b", @nested={0x30, 0x145, 0x0, 0x1, [@nested={0x4, 0x11c}, @nested={0x4, 0x115}, @typed={0x14, 0x151, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x6086}, @typed={0x4, 0x6f}, @nested={0x4, 0xdc}]}, @nested={0xce, 0x23, 0x0, 0x1, [@generic="bb7898061e989e0a31b398d6be45bc093857e7e2b89cc1499828d0db0e6ac395bafdf054589632bc89c2224dbd0783a392af9b43f49dc80093c693c4f35342510b8e5fe0e759c5d15da2c4ffa475beadaf9d3c7401a8d6838a6a9f5fa6bc869104294c3177800842775259bc6708517ae111f82e7b1098e137bb2ab4b14ab6edb6aba96b2233356e2f589ac3dc63273c9b9e56f0a084ddec122a8b671e812ce5648857ae8ee63c2144205a052fc86005871bfa4c26f9f4797df8", @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x2d9}, @nested={0x4, 0xbc}, @nested={0x4, 0x150}]}, @typed={0x8, 0xbf, 0x0, 0x0, @pid=r4}, @nested={0x1028, 0x4, 0x0, 0x1, [@nested={0x4, 0x14}, @generic="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", @typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x95}, @typed={0x8, 0x12b, 0x0, 0x0, @uid=r5}]}, @generic="35e78f8b49930ded701fbbbabbc034dcc36464368f87d74a116c3f1a5889d3182782073d757edb514bd548c724b5df5f4fe7bf032606a04f639739625a049c246596000461e3667e9a63427b12ec852709ac172960684b43b160c83de5de735daa345a367320dc234c71baed128104d5eda90654752142e2547b436952ba5673bb2352", @generic="4dccc1b78e3d17e50a2a80914a0663a9a53b78fc60ffe53027ca934c9bdd6da94bf1daf4a61c0b6f7b22"]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x40}, 0x320b8c7b5262f2e2) shmctl$auto_IPC_RMID(0xd8, 0x0, &(0x7f0000000200)={{0x2d, 0x0, 0xee01, 0x8, 0x81, 0x3, 0xf}, 0x1, 0x1, 0x7, 0x4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000180)="d834a5db10a4649285c577728fc6b0f96653ce83c0b73cbbf73957a526027f89d5c14ef680b11603f20b88a9b236e105f5e73dc335baeda1c893a7e85ab24cfb", &(0x7f00000001c0)="94d7711a275848083a136b0ca4b807e0f3e26c3e29cf9b16e9b4fec25fc0"}) syz_clone3(&(0x7f0000000440)={0x28200280, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300), {0x1a}, &(0x7f0000001e40)=""/38, 0x26, &(0x7f0000000380)=""/83, &(0x7f0000000400)=[0x0], 0x1}, 0x58) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x24, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000) r9 = fsopen$auto(0x0, 0x1) fsconfig$auto(r9, 0x8, 0x0, 0x0, 0x0) r10 = waitid$auto(0x8, r9, &(0x7f0000000080)={@_si_pad}, 0xa, &(0x7f0000000100)={{0x9, 0x7}, {0x4, 0x9f5}, 0x3, 0x5, 0x0, 0x0, 0x7, 0x8001, 0x5, 0x4, 0x0, 0x1, 0xfff, 0xffffffffffff3dcb, 0x80000000}) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001e80)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008810) getsockopt$auto_SO_NOFCS(r8, 0x10, 0x2b, &(0x7f0000001dc0)='\x00', &(0x7f0000001e00)=0x8001) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r8, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x200}, @THERMAL_GENL_ATTR_TZ={0x18, 0x1, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r10}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x3}]}, @THERMAL_GENL_ATTR_TZ_GOV={0xcd, 0xc, 0x0, 0x1, [@generic="cfcb162806c36a096aa15a5a41a8193b276cdc9bd47420168af4db06627f1e3225ad669edaacbca79284b6f1c19b926c33f335c7ad3ec72cb4fa9cc8e6e34c8e16be54e687d4d69c932e0b3969822a0c9856de6edd123fb116515d9451317bc7fd3d67685d917af6c7af5d72e333047523dee7cf6cd347176b170ee3727b973d0944261ca57dc779d31327f6034cdd5bd4369d22f99c1defbb9ce3544e6528df22633f9e4744bb5d0066bf37ac2977fc2a421ed359e1322bc50fc3e1949ca1d3115aae9f7a933ee47a"]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000800}, 0x40000000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001e80)={0xa3c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x108, 0x2, 0x0, 0x1, [@nested={0xd4, 0xb8, 0x0, 0x1, [@generic="abfbbf90a17b14266cc06620d45c4eac5fd236f47054d757cfa57f31068c87cc5e3f2b49e8bd817616aab657062858f2165b034aca727ad3b1e21b6aea1f7caa0fb3e94a30f778012f944787ddc692aa3cf97d7a32e582fd0a099360a924002c21f352341a08fd0825c0ef09fee89bd78ce1018b4b6d58e23b0e6b55c0ad871d1364a24853068cb57e4cc555edc2ae2c9a80ab1733d18c5dbbce06d5f5196b26b11973c966c52162a595d179681c0e6338b2db98d7e6944edc1c76a1bc9a40f96c220ea805ccbc5f", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="19ab03aa20da427c0587958737a45033d1127f044e2b87426085970e"]}, @MACSEC_ATTR_RXSC_CONFIG={0x706, 0x2, 0x0, 0x1, [@nested={0x216, 0x12c, 0x0, 0x1, [@nested={0x4, 0x126}, @generic="a42ce2fc1f68cc3abebf76d4180942e3d1f61e08227d8dcd16ac624783eab37bac23033ccc65300847530c27b1ae99dcee6a6fb6eeadf753e85b0abd7f025e960b4aa1efabfc98ded18008f86bc281112d0a9064ee9eed7899ee7fddcce0962411cd30789deefbe0cd7ae394e5382b463b81576220db205a58f6758aeea21c16a599ee4573863846c82aec032cb4aeecb7d47c93dbb0fd4dde4a5ae047af41a2a04c4080c7c2071db85c9267f37ecd0f0a763c014f02ae08133ef95205f07a52993cd24d7c235b07a2a4722843172e59d477a14f3d82713122717037ab59c96c4fa257720c33d8432202220ed04ee768018c23d9e2", @generic="6563941ca7e1b36b93694c864256bf9ce8a4d8dd11d4c3dce771f79c0635a8b6f068c6da29787e1fa58a0c989b368f7916818a28379e738663326f913b3f6708ac1b385023f18a6288ea29ff5769c21dbfa8c22b92dc510bf5dd81956000d4f0ad760039fff8494e706d36d94cac20648f43a5d7e4f439883b6dd17b430f69ce92b0964d7f05b4d656ee6ba29317532189ec3dfd67b434c6539f16687858093650d2be4cac50b4da0dab27b1ade3ad06729e3964df2f4b182e814d", @nested={0x4, 0x7f}, @nested={0x4, 0x6d}, @generic="40c79ea7ec1ae8ea814eb0b9c370ab471d5c82550beeea6ab503a4d3d6b842eaa0c8672ca4017def49f3c7261f3f79c4ca6a8ee1d5249bccdeaed8a02ec873e564cab92b72be1e39c8d31eabd775", @nested={0x4, 0x72}, @nested={0x4, 0x31}]}, @nested={0xcb, 0x146, 0x0, 0x1, [@generic="e1d30cfa4039a3a38079b0af76a8fc4dac8d391897bfefbb224687923eab9560d2f637d7daa0fe2d3a92af234b184242db1a458e755856d9793610f18b28c1976fe6ab3eaa9ee07317b0219fd847fb19e1a340c6a55a4f8b6a3c7d94aabd00c64a3f11f48fc2641136dab759cb290e2e62e2e49d0f164f9b5c47f4f27b054476545ce55ffaeabac615e8643c5bad2053e8416d7ad1396075b0e759fceaf1f15cde4441da5f5b71b99479e4af74d8fbcb493a2a8781c61ab350821d31998a9a", @typed={0x8, 0xa8, 0x0, 0x0, @pid=r3}]}, @nested={0x339, 0xe0, 0x0, 0x1, [@nested={0x4, 0x139}, @generic="1acfe5de487cc4cc5aeffb39867c698d69c5fdc411a929e5", @typed={0x8, 0x128, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xf4, 0x0, 0x0, @u64=0x9}, @generic="ff8fcab7da3dfa2394a799fa89dbb2d42a3f30d81c6551b3973ad397fa51a6252331e35842d8b47aefe54ca2fb2029b0a656e551382fa9c8b9c320569579bae5f99989c6b04d7acd3b69484a9ace0e49839c0771957a405df03d4ce2775a407587096d4f308de90edc9f32fc92bb8a8113a3b6df6213e486ea5b2d76bdcb", @nested={0x4, 0x9a}, @generic="dd726fc1b51dfc07fafcb3d02e848dae502a30e842db2bfe15c067ad34593080d647ff8e73d593c70a8e18332869451f0e5cb3e0854408bdb89464fcf847df253e746d82a9082acd595473895fc12c734302ec49e513b5822428b4b9e65830bc24eb549d6c480817f733881dfdcbb0079dd0d60dfe72c162c473cd363ca610dc16c28bf66864aace7456bbb111d4b647714285f493776a05d6336cf0bbf014ce7e55fa17f0643425721ba7e9eb54a63f17cc0a4e8c928bf4f56788ca060faeb59b5cd9ef0e41dff883b16b13", @generic="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", @typed={0x3a, 0x1b, 0x0, 0x0, @binary="8cd8092f0128c626051261976f7f181389d502b389cb5eacf6d98ac0153b7dc59e5a34042dd6a110376c7c0b70fd04d4cad4f77e9ae5"}, @generic="e83082c7af62dee0ebcfa65ed3e2ee62cb60e1a66b512af8caf19a477ffa5557ee9e0c96d3c1ab8ea8384f9a2f7faa8e4c36bbca333efca9872b18e134877a8dda4f9d2026a55f1b3663d463"]}, @generic="a28f63674f4680f8285f213fbb3da58c38ea1214656f848c06089b4259fe8cd756e7a3a8262830c46744", @typed={0x8, 0x114, 0x0, 0x0, @pid=r4}, @generic="53084e2b9b861ec60b186c85d02dd5ca8a49addddce73f41c63342dbaf3af09c234259d71aae4e1df6656037b4edd56645e7983078fade8196dbe89baa7518e680c683567c03bb219f3cbd9529b24a0310a2a57a1f455608462703d0ccece6737d11a9d4fc4e57bae5c9575c3dee83eb33a5dd0dfe9653cf52813b2d7ee9b10788911c19f3b48e7a293afb3e2e80d4358a1439d775455785b0ba3ccdb056b957af5be64973421af6760c49bf6ecd7ca1"]}, @MACSEC_ATTR_RXSC_CONFIG={0x1ce, 0x2, 0x0, 0x1, [@generic, @typed={0x8, 0xad, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x11f, 0x0, 0x0, @pid=r7}, @nested={0xb1, 0x60, 0x0, 0x1, [@generic="b1a742774515cc52401820166694186e4888d0abbae4b991c12b9e275849ce0cce00be3725967e8dfb233617f655a2e73f664d707e0093285209932407f17840c82708cbc28699f5bb43bea9137d8f821111418ccdca1fd43dfaa6f0b2f8fa649c017b6585d64eb894479995309bbff28ee93a62dc6040425fa87efc706f7e8915fad89d16a9dd4082538cfa9463a632401716e7caf51a47ec2389fe349cc3164d41871f610a695939", @nested={0x4, 0x4b}]}, @typed={0x3f, 0x29, 0x0, 0x0, @binary="6f94ba9798bc743842de17984251ea41212b7b725292a2ce88bf4d24685deeed3a7eceaa318f1b7916303f5f6f4cae30cbcf5c579cd4e348df669a"}, @generic="360288d26fab24dcbb006c8d0ccfa153bad52c4c", @generic="92aec118db51e6e863a242c9b32f44723c829b4929f83364c5fe6230ad4b50cecae83ec41608ad4cb0eae2aab9ee0a5164bb5bbf9d151581f467715c5e59ad6d17e4784cc743c28e6b365aed44fd3a5985314d907559660a7c064c4a907cc5cfc65cf95a37e72a1c1a42ad671210282e457e6cff", @typed={0x8, 0x81, 0x0, 0x0, @pid=r10}, @generic="f120272a7014b98953dd79d3d4437d8d6156fc25365b4b2ff052894db60755ad20d52de4fb84b31c2fe2792fbc80e1604393a2ff3250"]}, @MACSEC_ATTR_RXSC_CONFIG={0x47, 0x2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x9}, @generic="4b77798436a70e64d081aa0dc40b0aa75b7b07", @typed={0xc, 0x148, 0x0, 0x0, @str='[%/$.,\xdf\x00'}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1000}]}]}, 0xa3c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2.397822362s ago: executing program 5 (id=1102): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) write$auto(r0, &(0x7f0000000240)='\x00', 0x30000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x274d, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x83}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)='8', 0x1) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x40001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) chdir$auto(&(0x7f0000000040)='./cgroup\x00') 1.382736156s ago: executing program 9 (id=1103): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r1, 0x40086602, &(0x7f0000000180)="f9b614d22aa4a460cfb56a95fe2004332cbcbb0ce134b2747fcbdf6ebd276a04e2fd612f6669e487ab52b2a827737588c833b38a8a8ab7a7147d9ebdf91b73fc35fdcc8548bd41b43e43f35716724de2624e51d44c499d4ff7c6e7535c376eaad9bbfef22d356a2115e4c9617145b4ffe47ce6") write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) ptrace$auto(0x8001, r3, 0x6, 0xa41d) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="158f4a2b") r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r4, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92d, 0x285, 0xf8, r1, 0x6) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) 1.364683185s ago: executing program 8 (id=1104): mmap$auto(0x0, 0x3, 0xfffffffb, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x18b202, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) (async) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) setsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async, rerun: 64) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async, rerun: 64) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/mcfilter\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x86\xdd\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(r2, r2, 0x0, 0x1000200) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'gre0\x00'}) (async) pread64$auto(r1, 0x0, 0x3fc, 0x3) 301.67409ms ago: executing program 38 (id=1067): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendto$auto(r1, 0x0, 0x13, 0xffffff79, &(0x7f0000000440)=@ethernet={0x6, @multicast}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>9\x1d!\xe0\x00\x94\xf2\xa2\x00\x00', 0x7e) ioctl$auto_SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000380)="83aa1369079e872f7f76eceb70bfa4ed56b5110980916ce17eed9d3b71beff7e07d62eeda0bbac2cb4543e470838a1b04f057e3c7f62ac1e7f0bddd31a52fc67b1e5b6") 163.843047ms ago: executing program 8 (id=1106): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffd, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) r0 = socketpair$auto(0x1, 0x5, 0x8, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0x800000000000eb1, r0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffe, 0x200000000d55f, 0x6, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) socket(0x1, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) bind$auto(r0, &(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd2/hctx0/sched_tags_bitmap\x00', 0xa2140, 0x0) pread64$auto(r4, 0x0, 0x1ff, 0x81) sendfile$auto(r3, r3, 0x0, 0x2) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) acct$auto(&(0x7f0000000140)='/dev/ptmx\x00') recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf25010000000c00020001000000000000000c00080006000000000000000c0007800800368004008d800c00080001010000000000000800010008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x2}, {0x0, 0x83}}, 0x0) memfd_create$auto(0x0, 0x5) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x6, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x4000000000000) landlock_restrict_self$auto(r5, 0x1) 0s ago: executing program 9 (id=1107): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi18\x00', 0x0, 0x0) ioctl$auto(r0, 0x80845663, r0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101c01, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r3, 0x400454d9, 0x38) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, 0x0, 0x44000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 4 phy0 wpan0: encryption failed: -22 [ 255.949316][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.073123][ T8010] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 257.137506][ T7202] Bluetooth: hci1: command 0x2016 tx timeout [ 257.359477][ T5625] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 257.887841][ T8043] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 258.102605][ T5625] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 258.433639][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 260.202134][ T8074] Invalid ELF header magic: != ELF [ 260.255003][ T7202] Bluetooth: hci2: command 0x2016 tx timeout [ 260.664798][ T8080] vivid-011: ================= START STATUS ================= [ 260.698285][ T8080] vivid-011: Radio HW Seek Mode: Bounded [ 260.750449][ T8080] vivid-011: Radio Programmable HW Seek: false [ 260.782795][ T8080] vivid-011: RDS Rx I/O Mode: Block I/O [ 260.809597][ T8080] vivid-011: Generate RBDS Instead of RDS: false [ 260.861707][ T8080] vivid-011: RDS Reception: true [ 260.893163][ T8080] vivid-011: RDS Program Type: 0 inactive [ 260.928700][ T8080] vivid-011: RDS PS Name: inactive [ 260.957500][ T8080] vivid-011: RDS Radio Text: inactive [ 260.982812][ T8080] vivid-011: RDS Traffic Announcement: false inactive [ 261.012136][ T8080] vivid-011: RDS Traffic Program: false inactive [ 261.040171][ T8080] vivid-011: RDS Music: false inactive [ 261.076569][ T8080] vivid-011: ================== END STATUS ================== [ 261.725193][ T8092] netlink: 504 bytes leftover after parsing attributes in process `syz.0.430'. [ 262.334304][ T5625] Bluetooth: hci2: command 0x2016 tx timeout [ 264.202114][ T8127] futex_wake_op: syz.1.435 tries to shift op by -2048; fix this program [ 264.268956][ T8132] 0x000000000001-0x000000020000 : "" [ 264.426450][ T8132] ftl_cs: FTL header corrupt! [ 264.631657][ T8138] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 264.668645][ T8136] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 264.757466][ T8138] netlink: 33 bytes leftover after parsing attributes in process `syz.0.436'. [ 264.798287][ T8136] netlink: 33 bytes leftover after parsing attributes in process `syz.0.436'. [ 265.599209][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 265.917786][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 266.008130][ T8159] FAULT_INJECTION: forcing a failure. [ 266.008130][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 266.096126][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT(full) [ 266.096160][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 266.096174][ T8159] Call Trace: [ 266.096181][ T8159] [ 266.096190][ T8159] dump_stack_lvl+0x100/0x190 [ 266.096221][ T8159] should_fail_ex.cold+0x5/0xa [ 266.096248][ T8159] should_failslab+0xc2/0x120 [ 266.096282][ T8159] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 266.096312][ T8159] ? __d_alloc+0x35/0xa50 [ 266.096340][ T8159] __d_alloc+0x35/0xa50 [ 266.096366][ T8159] d_alloc+0x4a/0x1e0 [ 266.096390][ T8159] lookup_one_qstr_excl+0x171/0x250 [ 266.096422][ T8159] start_dirop+0x59/0xb0 [ 266.096458][ T8159] simple_start_creating+0xf9/0x110 [ 266.096496][ T8159] ? __pfx_simple_start_creating+0x10/0x10 [ 266.096535][ T8159] ? mntput+0x70/0xa0 [ 266.096573][ T8159] ? simple_pin_fs+0xa3/0x190 [ 266.096608][ T8159] debugfs_start_creating.part.0+0x82/0x170 [ 266.096641][ T8159] __debugfs_create_file+0xb3/0x4f0 [ 266.096677][ T8159] debugfs_create_file_full+0x41/0x60 [ 266.096712][ T8159] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 266.096749][ T8159] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 266.096784][ T8159] ? ida_alloc_range+0x70d/0x830 [ 266.096828][ T8159] ? kasan_save_track+0x14/0x30 [ 266.096855][ T8159] ? __kasan_kmalloc+0xaa/0xb0 [ 266.096883][ T8159] ? lockdep_init_map_type+0x5c/0x250 [ 266.096931][ T8159] preinit_net.part.0+0x252/0x920 [ 266.096963][ T8159] copy_net_ns+0x339/0x7c0 [ 266.096998][ T8159] create_new_namespaces+0x3ea/0xac0 [ 266.097046][ T8159] unshare_nsproxy_namespaces+0xf2/0x220 [ 266.097072][ T8159] ksys_unshare+0x438/0xab0 [ 266.097103][ T8159] ? __pfx_ksys_unshare+0x10/0x10 [ 266.097142][ T8159] __x64_sys_unshare+0x31/0x40 [ 266.097170][ T8159] do_syscall_64+0x115/0x840 [ 266.097191][ T8159] ? clear_bhb_loop+0x40/0x90 [ 266.097220][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.097245][ T8159] RIP: 0033:0x7f259cb9de59 [ 266.097265][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.097288][ T8159] RSP: 002b:00007f259da71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.097311][ T8159] RAX: ffffffffffffffda RBX: 00007f259ce26090 RCX: 00007f259cb9de59 [ 266.097327][ T8159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 266.097341][ T8159] RBP: 00007f259cc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 266.097355][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.097369][ T8159] R13: 00007f259ce26128 R14: 00007f259ce26090 R15: 00007ffdc6007068 [ 266.097400][ T8159] [ 266.367418][ T8145] kfence: disabled [ 267.796766][ T8164] netlink: 504 bytes leftover after parsing attributes in process `syz.2.441'. [ 267.930016][ T8169] random: crng reseeded on system resumption [ 268.557988][ T7202] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 270.897871][ T8218] random: crng reseeded on system resumption [ 271.075076][ T8190] Process accounting resumed [ 272.459480][ T8237] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.444613][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 273.684702][ T8260] cifs: Unknown parameter 'knjeRaBt$Mi' [ 273.773271][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 274.307322][ T7202] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 275.405119][ T8278] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 275.555949][ T8278] pci 0000:00:01.3: PCI INT A: no GSI [ 276.430003][ T8303] kafs: addr_prefs: Invalid Command [ 277.120569][ T8305] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.042285][ T8340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.761787][ T8340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.976659][ T8340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.205092][ T8340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.577842][ T8366] Invalid ELF header magic: != ELF [ 285.462888][ T8388] netlink: 504 bytes leftover after parsing attributes in process `syz.2.485'. [ 287.019293][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 287.641364][ T8433] FAULT_INJECTION: forcing a failure. [ 287.641364][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 287.689953][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.1.494 Not tainted syzkaller #0 PREEMPT(full) [ 287.689988][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 287.690002][ T8433] Call Trace: [ 287.690010][ T8433] [ 287.690019][ T8433] dump_stack_lvl+0x100/0x190 [ 287.690057][ T8433] should_fail_ex.cold+0x5/0xa [ 287.690083][ T8433] should_failslab+0xc2/0x120 [ 287.690115][ T8433] kmem_cache_alloc_noprof+0x91/0x6a0 [ 287.690141][ T8433] ? __proc_create+0xc1/0x8f0 [ 287.690179][ T8433] ? __proc_create+0xc1/0x8f0 [ 287.690215][ T8433] ? __proc_create+0x247/0x8f0 [ 287.690257][ T8433] __proc_create+0x247/0x8f0 [ 287.690296][ T8433] ? __pfx___proc_create+0x10/0x10 [ 287.690346][ T8433] _proc_mkdir+0xb9/0x210 [ 287.690368][ T8433] ? __pfx__proc_mkdir+0x10/0x10 [ 287.690392][ T8433] ? proc_net_ns_init+0x42/0x420 [ 287.690418][ T8433] proc_net_ns_init+0x273/0x420 [ 287.690441][ T8433] ? __pfx_proc_net_ns_init+0x10/0x10 [ 287.690463][ T8433] ops_init+0x1e2/0x5f0 [ 287.690496][ T8433] setup_net+0x118/0x3a0 [ 287.690526][ T8433] ? __pfx_setup_net+0x10/0x10 [ 287.690555][ T8433] ? mutex_init_lockdep+0xf1/0x120 [ 287.690598][ T8433] copy_net_ns+0x46f/0x7c0 [ 287.690632][ T8433] create_new_namespaces+0x3ea/0xac0 [ 287.690679][ T8433] unshare_nsproxy_namespaces+0xf2/0x220 [ 287.690706][ T8433] ksys_unshare+0x438/0xab0 [ 287.690736][ T8433] ? __pfx_ksys_unshare+0x10/0x10 [ 287.690775][ T8433] __x64_sys_unshare+0x31/0x40 [ 287.690803][ T8433] do_syscall_64+0x115/0x840 [ 287.690825][ T8433] ? clear_bhb_loop+0x40/0x90 [ 287.690854][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.690878][ T8433] RIP: 0033:0x7f1b17b9de59 [ 287.690898][ T8433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.690921][ T8433] RSP: 002b:00007f1b189b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.690943][ T8433] RAX: ffffffffffffffda RBX: 00007f1b17e25fa0 RCX: 00007f1b17b9de59 [ 287.690959][ T8433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 287.690973][ T8433] RBP: 00007f1b17c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 287.690987][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.691000][ T8433] R13: 00007f1b17e26038 R14: 00007f1b17e25fa0 R15: 00007fff212ae468 [ 287.691030][ T8433] [ 288.644634][ T8446] netlink: 504 bytes leftover after parsing attributes in process `syz.0.496'. [ 289.089369][ T8458] vivid-007: ================= START STATUS ================= [ 289.175248][ T8458] vivid-007: Enable Output Cropping: true grabbed [ 289.284024][ T8458] vivid-007: Enable Output Composing: true grabbed [ 289.393669][ T8458] vivid-007: Enable Output Scaler: true grabbed [ 289.440847][ T8460] netlink: 330 bytes leftover after parsing attributes in process `syz.2.499'. [ 289.469863][ T8458] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 289.543562][ T8458] vivid-007: Transmit Mode: HDMI grabbed [ 289.618837][ T8458] vivid-007: Hotplug Present: 0x00000000 [ 289.663051][ T8458] vivid-007: RxSense Present: 0x00000000 [ 289.663105][ T8458] vivid-007: EDID Present: 0x00000000 [ 289.663131][ T8458] vivid-007: ================== END STATUS ================== [ 289.816468][ T7202] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 290.531295][ T8475] ima: policy update failed [ 290.567087][ T29] audit: type=1802 audit(4294967303.323:9): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.502" res=0 errno=0 [ 291.376949][ T8489] netlink: 504 bytes leftover after parsing attributes in process `syz.3.506'. [ 291.864254][ T5625] Bluetooth: hci0: command 0x2016 tx timeout [ 293.938417][ T5625] Bluetooth: hci0: command 0x2016 tx timeout [ 294.531760][ T7202] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 294.849035][ T5625] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 296.003375][ T50] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 296.578336][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 296.896925][ T5625] Bluetooth: hci1: command 0x2016 tx timeout [ 298.655865][ T7202] Bluetooth: hci0: command 0x2016 tx timeout [ 298.976365][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 299.229200][ T5625] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 300.231680][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 300.604774][ T5625] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 302.389891][ T8655] Process accounting paused [ 302.569220][ T8670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 302.655658][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 302.934778][ T8679] ubi0: attaching mtd0 [ 303.032070][ T8679] ubi0: scanning is finished [ 303.053767][ T8679] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 303.292755][ T8687] vivid-007: ================= START STATUS ================= [ 303.344337][ T8687] vivid-007: Generate PTS: true [ 303.384587][ T8687] vivid-007: Generate SCR: true [ 303.412469][ T8687] tpg source WxH: 320x240 (Y'CbCr) [ 303.447842][ T8687] tpg field: 1 [ 303.502381][ T8687] tpg crop: (0,0)/320x240 [ 303.564343][ T8687] tpg compose: (0,0)/320x240 [ 303.592380][ T8687] tpg colorspace: 8 [ 303.610394][ T8687] tpg transfer function: 0/0 [ 303.645052][ T8687] tpg Y'CbCr encoding: 0/0 [ 303.671585][ T8687] tpg quantization: 0/0 [ 303.702887][ T8687] tpg RGB range: 0/2 [ 303.720021][ T8687] vivid-007: ================== END STATUS ================== [ 303.891155][ T8679] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 304.064146][ T8698] FAULT_INJECTION: forcing a failure. [ 304.064146][ T8698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.129913][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.2.543 Not tainted syzkaller #0 PREEMPT(full) [ 304.129947][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 304.129965][ T8698] Call Trace: [ 304.129972][ T8698] [ 304.129981][ T8698] dump_stack_lvl+0x100/0x190 [ 304.130014][ T8698] should_fail_ex.cold+0x5/0xa [ 304.130036][ T8698] ? prepare_alloc_pages+0x16d/0x5f0 [ 304.130072][ T8698] should_fail_alloc_page+0xeb/0x140 [ 304.130105][ T8698] prepare_alloc_pages+0x1f0/0x5f0 [ 304.130142][ T8698] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 304.130178][ T8698] ? __lock_acquire+0x49f/0x1a40 [ 304.130219][ T8698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 304.130261][ T8698] ? is_bpf_text_address+0x8a/0x1a0 [ 304.130293][ T8698] ? is_bpf_text_address+0x8a/0x1a0 [ 304.130325][ T8698] ? bpf_ksym_find+0x124/0x1c0 [ 304.130349][ T8698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.130382][ T8698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 304.130417][ T8698] ? policy_nodemask+0xed/0x4f0 [ 304.130451][ T8698] alloc_pages_mpol+0x1fb/0x540 [ 304.130484][ T8698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 304.130532][ T8698] folio_alloc_mpol_noprof+0x36/0x260 [ 304.130572][ T8698] shmem_alloc_folio+0x135/0x160 [ 304.130609][ T8698] shmem_alloc_and_add_folio+0x371/0xd40 [ 304.130656][ T8698] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 304.130699][ T8698] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 304.130747][ T8698] shmem_get_folio_gfp+0x6ad/0x1910 [ 304.130790][ T8698] ? __lock_acquire+0x49f/0x1a40 [ 304.130826][ T8698] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 304.130874][ T8698] shmem_fault+0x1f9/0xa20 [ 304.130895][ T8698] ? rcu_is_watching+0x12/0xc0 [ 304.130923][ T8698] ? __pfx_shmem_fault+0x10/0x10 [ 304.130963][ T8698] ? rcu_read_unlock+0x17/0x60 [ 304.130996][ T8698] ? find_held_lock+0x2b/0x80 [ 304.131023][ T8698] ? rcu_read_unlock+0x17/0x60 [ 304.131056][ T8698] ? rcu_read_unlock+0x17/0x60 [ 304.131097][ T8698] ? __pfx_filemap_map_pages+0x10/0x10 [ 304.131133][ T8698] __do_fault+0x10b/0x440 [ 304.131161][ T8698] do_fault+0x2db/0x1750 [ 304.131192][ T8698] ? __pmd_alloc+0x3fb/0x950 [ 304.131227][ T8698] __handle_mm_fault+0x187d/0x2a00 [ 304.131274][ T8698] ? mt_find+0x45e/0x8e0 [ 304.131302][ T8698] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.131339][ T8698] ? __pfx_mt_find+0x10/0x10 [ 304.131380][ T8698] ? find_vma+0xbf/0x140 [ 304.131408][ T8698] ? __pfx_find_vma+0x10/0x10 [ 304.131439][ T8698] handle_mm_fault+0x37b/0xa30 [ 304.131483][ T8698] do_user_addr_fault+0x74c/0x12f0 [ 304.131561][ T8698] exc_page_fault+0x6f/0xd0 [ 304.131600][ T8698] asm_exc_page_fault+0x26/0x30 [ 304.131624][ T8698] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 304.131657][ T8698] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 304.131680][ T8698] RSP: 0018:ffffc900035bfd68 EFLAGS: 00050216 [ 304.131705][ T8698] RAX: 000040000007d000 RBX: 0000000000000020 RCX: 0000000000000020 [ 304.131720][ T8698] RDX: 0000000000000001 RSI: ffffc900035bfdd0 RDI: 0000000000000000 [ 304.131734][ T8698] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520006b7fbd [ 304.131748][ T8698] R10: ffffc900035bfdef R11: 0000000000000000 R12: ffffc900035bfdd0 [ 304.131763][ T8698] R13: 0000000000000020 R14: 00007ffffffff000 R15: 0000000000000000 [ 304.131793][ T8698] _copy_to_user+0xa4/0xd0 [ 304.131828][ T8698] ksys_msgctl.constprop.0+0x2cc/0x340 [ 304.131866][ T8698] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 304.131901][ T8698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.131965][ T8698] do_syscall_64+0x115/0x840 [ 304.131986][ T8698] ? clear_bhb_loop+0x40/0x90 [ 304.132015][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.132039][ T8698] RIP: 0033:0x7febc679de59 [ 304.132058][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.132080][ T8698] RSP: 002b:00007febc75b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 304.132100][ T8698] RAX: ffffffffffffffda RBX: 00007febc6a25fa0 RCX: 00007febc679de59 [ 304.132116][ T8698] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000000049e1 [ 304.132129][ T8698] RBP: 00007febc6833e6f R08: 0000000000000000 R09: 0000000000000000 [ 304.132143][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.132157][ T8698] R13: 00007febc6a26038 R14: 00007febc6a25fa0 R15: 00007ffe729c8748 [ 304.132187][ T8698] [ 304.703991][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 305.187187][ T50] Bluetooth: hci0: Malformed Event: 0x2f [ 305.192948][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 306.314086][ T8721] tipc: Started in network mode [ 306.356679][ T8721] tipc: Node identity ee00, cluster identity 4711 [ 306.423630][ T8721] tipc: Node number set to 60928 [ 307.551453][ T8711] Invalid ELF header magic: != ELF [ 307.704177][ T5625] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 308.625837][ T8754] netlink: 342 bytes leftover after parsing attributes in process `syz.3.558'. [ 308.729939][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 309.546915][ T8756] blktrace: Concurrent blktraces are not allowed on nbd5 [ 310.100909][ T8776] ICMPv6: process `syz.3.562' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 311.093351][ T8793] netlink: 504 bytes leftover after parsing attributes in process `syz.3.566'. [ 311.809099][ T8800] bond0: option arp_interval: invalid value () [ 311.837332][ T8800] bond0: option arp_interval: allowed values 0 - 2147483647 [ 312.450224][ T8801] Invalid ELF header magic: != ELF [ 312.528351][ T5625] Bluetooth: hci3: Malformed Event: 0x2f [ 313.062263][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 315.344698][ T8853] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.994516][ T8832] kexec: Could not allocate control_code_buffer [ 316.910574][ T5625] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 317.321569][ T8880] netlink: 504 bytes leftover after parsing attributes in process `syz.0.587'. [ 317.380100][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.387399][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.469171][ T8909] sd 0:0:1:0: PR command failed: 1026 [ 318.588732][ T8909] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 318.708027][ T8909] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 320.756881][ T5625] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3 [ 321.045362][ T8947] FAULT_INJECTION: forcing a failure. [ 321.045362][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 321.194600][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 321.194633][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 321.194647][ T8947] Call Trace: [ 321.194655][ T8947] [ 321.194663][ T8947] dump_stack_lvl+0x100/0x190 [ 321.194695][ T8947] should_fail_ex.cold+0x5/0xa [ 321.194728][ T8947] should_failslab+0xc2/0x120 [ 321.194760][ T8947] __kmalloc_cache_noprof+0x91/0x6c0 [ 321.194799][ T8947] ? do_raw_spin_lock+0x128/0x260 [ 321.194822][ T8947] ? alloc_fdtable+0xbd/0x2d0 [ 321.194941][ T8947] alloc_fdtable+0xbd/0x2d0 [ 321.195000][ T8947] dup_fd+0x995/0xd10 [ 321.195042][ T8947] ? apparmor_task_alloc+0x2c1/0x3b0 [ 321.195085][ T8947] copy_process+0x2c94/0x8030 [ 321.195128][ T8947] ? __pfx_copy_process+0x10/0x10 [ 321.195154][ T8947] ? rcu_is_watching+0x12/0xc0 [ 321.195180][ T8947] ? vfs_writev+0x1d5/0xdd0 [ 321.195226][ T8947] kernel_clone+0x176/0x9d0 [ 321.195254][ T8947] ? __pfx_kernel_clone+0x10/0x10 [ 321.195296][ T8947] __do_sys_clone+0xd9/0x120 [ 321.195323][ T8947] ? __pfx___do_sys_clone+0x10/0x10 [ 321.195350][ T8947] ? __fget_files+0x21f/0x3d0 [ 321.195407][ T8947] do_syscall_64+0x115/0x840 [ 321.195429][ T8947] ? clear_bhb_loop+0x40/0x90 [ 321.195464][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.195489][ T8947] RIP: 0033:0x7f1b17b9de59 [ 321.195510][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.195533][ T8947] RSP: 002b:00007f1b18990fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.195556][ T8947] RAX: ffffffffffffffda RBX: 00007f1b17e26090 RCX: 00007f1b17b9de59 [ 321.195572][ T8947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.195585][ T8947] RBP: 00007f1b17c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.195600][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.195614][ T8947] R13: 00007f1b17e26128 R14: 00007f1b17e26090 R15: 00007fff212ae468 [ 321.195644][ T8947] [ 321.739884][ T8951] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 323.562981][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'. [ 323.658308][ T8989] netlink: 342 bytes leftover after parsing attributes in process `syz.1.603'. [ 323.717540][ T8985] netlink: zone id is out of range [ 323.751633][ T8985] netlink: zone id is out of range [ 323.778499][ T8985] netlink: zone id is out of range [ 323.808920][ T8985] netlink: zone id is out of range [ 323.855567][ T8985] netlink: zone id is out of range [ 323.902727][ T8985] netlink: zone id is out of range [ 323.927251][ T8985] netlink: zone id is out of range [ 323.959593][ T8985] netlink: zone id is out of range [ 323.983609][ T8985] netlink: zone id is out of range [ 324.027608][ T8985] netlink: zone id is out of range [ 325.060009][ T5625] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 327.052586][ T9037] Invalid ELF header magic: != ELF [ 327.128243][ T7202] Bluetooth: hci3: command 0x2016 tx timeout [ 327.724616][ T9063] FAULT_INJECTION: forcing a failure. [ 327.724616][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 327.828406][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.2.614 Not tainted syzkaller #0 PREEMPT(full) [ 327.828438][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 327.828452][ T9063] Call Trace: [ 327.828459][ T9063] [ 327.828467][ T9063] dump_stack_lvl+0x100/0x190 [ 327.828497][ T9063] should_fail_ex.cold+0x5/0xa [ 327.828523][ T9063] should_failslab+0xc2/0x120 [ 327.828553][ T9063] __kmalloc_cache_noprof+0x91/0x6c0 [ 327.828590][ T9063] ? net_alloc_generic+0x1e/0x70 [ 327.828618][ T9063] ? copy_net_ns+0x135/0x7c0 [ 327.828653][ T9063] copy_net_ns+0x135/0x7c0 [ 327.828682][ T9063] ? copy_cgroup_ns+0x71/0x970 [ 327.828719][ T9063] create_new_namespaces+0x3ea/0xac0 [ 327.828764][ T9063] unshare_nsproxy_namespaces+0xf2/0x220 [ 327.828797][ T9063] ksys_unshare+0x438/0xab0 [ 327.828826][ T9063] ? __pfx_ksys_unshare+0x10/0x10 [ 327.828864][ T9063] __x64_sys_unshare+0x31/0x40 [ 327.828890][ T9063] do_syscall_64+0x115/0x840 [ 327.828911][ T9063] ? clear_bhb_loop+0x40/0x90 [ 327.828939][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.828963][ T9063] RIP: 0033:0x7febc679de59 [ 327.828981][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.829003][ T9063] RSP: 002b:00007febc75b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 327.829025][ T9063] RAX: ffffffffffffffda RBX: 00007febc6a25fa0 RCX: 00007febc679de59 [ 327.829040][ T9063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 327.829054][ T9063] RBP: 00007febc6833e6f R08: 0000000000000000 R09: 0000000000000000 [ 327.829067][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.829081][ T9063] R13: 00007febc6a26038 R14: 00007febc6a25fa0 R15: 00007ffe729c8748 [ 327.829110][ T9063] [ 329.206019][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 330.284933][ T9091] netlink: 'syz.2.619': attribute type 8 has an invalid length. [ 331.877468][ T9118] Invalid ELF header magic: != ELF [ 333.314098][ T7202] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 333.507882][ T9138] Process accounting resumed [ 334.949714][ T9162] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 335.367194][ T5625] Bluetooth: hci2: command 0x2016 tx timeout [ 337.449804][ T5625] Bluetooth: hci2: command 0x2016 tx timeout [ 337.508570][ T7202] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 337.621759][ T9194] Invalid ELF header magic: != ELF [ 339.629750][ T9207] syz.3.641 uses obsolete (PF_INET,SOCK_PACKET) [ 339.824048][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 340.093146][ T9212] netlink: 2152 bytes leftover after parsing attributes in process `syz.3.641'. [ 340.495027][ T9207] : entered promiscuous mode [ 342.204375][ T9220] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 342.318792][ T9234] futex_wake_op: syz.3.644 tries to shift op by -2048; fix this program [ 342.489771][ T9234] futex_wake_op: syz.3.644 tries to shift op by -2048; fix this program [ 342.873531][ T9240] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 342.986339][ T9240] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 343.085775][ T9240] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 343.878877][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.890868][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.903116][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.915523][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.936002][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.895545][ T9281] futex_wake_op: syz.3.650 tries to shift op by -1; fix this program [ 346.006579][ T5625] Bluetooth: hci1: command tx timeout [ 348.094635][ T5625] Bluetooth: hci1: command tx timeout [ 348.881081][ T9304] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 349.412377][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.459058][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.514232][ T9254] bridge_slave_0: entered allmulticast mode [ 349.562481][ T9254] bridge_slave_0: entered promiscuous mode [ 349.609263][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.643333][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.678593][ T9254] bridge_slave_1: entered allmulticast mode [ 349.724063][ T9254] bridge_slave_1: entered promiscuous mode [ 349.964995][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.022082][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.166149][ T5625] Bluetooth: hci1: command tx timeout [ 350.192302][ T9254] team0: Port device team_slave_0 added [ 350.225771][ T9254] team0: Port device team_slave_1 added [ 350.376068][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.408772][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.520378][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.593215][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.629466][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.737983][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.046478][ T9254] hsr_slave_0: entered promiscuous mode [ 351.052088][ T9254] hsr_slave_1: entered promiscuous mode [ 351.058614][ T9254] debugfs: 'hsr0' already exists in 'hsr' [ 351.058645][ T9254] Cannot create hsr debugfs directory [ 351.602055][ T9339] net_ratelimit: 14 callbacks suppressed [ 351.602078][ T9339] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 352.094872][ T5625] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 352.245602][ T5625] Bluetooth: hci1: command tx timeout [ 352.967527][ T9254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.023339][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.311017][ T9355] FAULT_INJECTION: forcing a failure. [ 353.311017][ T9355] name failslab, interval 1, probability 0, space 0, times 0 [ 353.351674][ T9254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.410119][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) [ 353.410152][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 353.410166][ T9355] Call Trace: [ 353.410243][ T9355] [ 353.410252][ T9355] dump_stack_lvl+0x100/0x190 [ 353.410336][ T9355] should_fail_ex.cold+0x5/0xa [ 353.410376][ T9355] should_failslab+0xc2/0x120 [ 353.410424][ T9355] __kmalloc_noprof+0xfc/0x820 [ 353.410458][ T9355] ? unix_create_addr+0x24/0x100 [ 353.410568][ T9355] unix_create_addr+0x24/0x100 [ 353.410603][ T9355] unix_bind+0x434/0x1650 [ 353.410624][ T9355] ? __might_fault+0xc5/0x140 [ 353.410652][ T9355] ? __might_fault+0xc5/0x140 [ 353.410677][ T9355] ? __pfx_unix_bind+0x10/0x10 [ 353.410725][ T9355] ? apparmor_socket_bind+0x12e/0x1e0 [ 353.410810][ T9355] __sys_bind+0x1a9/0x260 [ 353.410909][ T9355] ? __pfx___sys_bind+0x10/0x10 [ 353.410956][ T9355] ? __pfx_ksys_write+0x10/0x10 [ 353.411023][ T9355] __x64_sys_bind+0x72/0xb0 [ 353.411058][ T9355] ? lockdep_hardirqs_on+0x78/0x100 [ 353.411166][ T9355] do_syscall_64+0x115/0x840 [ 353.411186][ T9355] ? clear_bhb_loop+0x40/0x90 [ 353.411223][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.411247][ T9355] RIP: 0033:0x7febc679de59 [ 353.411266][ T9355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.411288][ T9355] RSP: 002b:00007febc75b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 353.411337][ T9355] RAX: ffffffffffffffda RBX: 00007febc6a25fa0 RCX: 00007febc679de59 [ 353.411353][ T9355] RDX: 000000000000006d RSI: 0000000000000000 RDI: 0000000000000003 [ 353.411366][ T9355] RBP: 00007febc75b0090 R08: 0000000000000000 R09: 0000000000000000 [ 353.411379][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.411394][ T9355] R13: 00007febc6a26038 R14: 00007febc6a25fa0 R15: 00007ffe729c8748 [ 353.411423][ T9355] [ 353.619358][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.627508][ T9254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.992127][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.003274][ T9254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.012583][ T9362] random: crng reseeded on system resumption [ 354.017444][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.218005][ T9368] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78000 [ 354.402218][ T9368] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 354.482996][ T9368] raw: 00fff00000000000 dead000000000040 ffff88802a7b1000 0000000000000000 [ 354.520743][ T9368] raw: ffff888000000000 0000000000000002 00000001ffffffff 0000000000000000 [ 354.554918][ T9368] page dumped because: unmovable page [ 354.595458][ T9368] page_owner tracks the page as allocated [ 354.663514][ T9368] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5288, tgid 5288 (dhcpcd), ts 66352192786, free_ts 58317771631 [ 354.716747][ T9368] post_alloc_hook+0xfd/0x120 [ 354.748666][ T9368] get_page_from_freelist+0xf48/0x3530 [ 354.798372][ T9368] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 354.817522][ T9368] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 354.838173][ T9368] __page_pool_alloc_netmems_slow+0x1c6/0xa60 [ 354.861326][ T9368] page_pool_alloc_netmems+0xc4/0x1a0 [ 354.877361][ T9368] page_pool_alloc_frag_netmem+0x21d/0xa10 [ 354.898390][ T9368] try_fill_recv+0x909/0x2950 [ 354.913776][ T9368] virtnet_open+0x2d5/0x9a0 [ 354.930145][ T9368] __dev_open+0x3ad/0x8f0 [ 354.946343][ T9368] __dev_change_flags+0x596/0x850 [ 354.968549][ T9368] netif_change_flags+0x8d/0x160 [ 354.986395][ T9368] dev_change_flags+0xba/0x260 [ 355.000690][ T9368] devinet_ioctl+0x110b/0x1f10 [ 355.015996][ T9368] inet_ioctl+0x3aa/0x3f0 [ 355.031990][ T9368] sock_do_ioctl+0x118/0x280 [ 355.046657][ T9368] page last free pid 15 tgid 15 stack trace: [ 355.070105][ T9368] __free_frozen_pages+0x79f/0x1090 [ 355.086817][ T9368] tlb_remove_table_rcu+0x2cf/0x380 [ 355.106439][ T9368] rcu_core+0x5a2/0x10d0 [ 355.120278][ T9368] handle_softirqs+0x1ea/0x9b0 [ 355.138832][ T9368] run_ksoftirqd+0x38/0x60 [ 355.153054][ T9368] smpboot_thread_fn+0x3d3/0xaa0 [ 355.171131][ T9368] kthread+0x370/0x450 [ 355.189716][ T9368] ret_from_fork+0x72b/0xd50 [ 355.204505][ T9368] ret_from_fork_asm+0x1a/0x30 [ 356.412536][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.564253][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.648683][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.655936][ T7235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.768967][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.776214][ T7235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.291401][ T9391] ubi0: attaching mtd0 [ 357.383875][ T9391] ubi0: scanning is finished [ 357.416734][ T9391] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 357.854820][ T9391] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 359.090593][ T9382] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 360.371820][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.701278][ T9254] veth0_vlan: entered promiscuous mode [ 361.750370][ T9254] veth1_vlan: entered promiscuous mode [ 361.885406][ T9254] veth0_macvtap: entered promiscuous mode [ 361.956173][ T9254] veth1_macvtap: entered promiscuous mode [ 362.057672][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.120733][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.182044][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.222781][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.257087][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.293798][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.557100][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.598014][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.904787][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.986251][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.612648][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 363.738203][ T9451] hsr_slave_0 (unregistering): left promiscuous mode [ 364.024096][ T9451] Process accounting paused [ 364.701725][ T9473] netlink: 330 bytes leftover after parsing attributes in process `syz.0.691'. [ 364.770689][ T9473] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 365.095614][ T9477] Invalid ELF header magic: != ELF [ 367.894753][ T9496] FAULT_INJECTION: forcing a failure. [ 367.894753][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 368.002480][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.2.695 Not tainted syzkaller #0 PREEMPT(full) [ 368.002512][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 368.002526][ T9496] Call Trace: [ 368.002533][ T9496] [ 368.002542][ T9496] dump_stack_lvl+0x100/0x190 [ 368.002572][ T9496] should_fail_ex.cold+0x5/0xa [ 368.002598][ T9496] should_failslab+0xc2/0x120 [ 368.002628][ T9496] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 368.002656][ T9496] ? __kasan_kmalloc+0xaa/0xb0 [ 368.002682][ T9496] ? __request_module+0x2d5/0x6a0 [ 368.002743][ T9496] kstrdup+0x51/0xe0 [ 368.002768][ T9496] __request_module+0x2d5/0x6a0 [ 368.002791][ T9496] ? __pfx___request_module+0x10/0x10 [ 368.002823][ T9496] ? find_held_lock+0x2b/0x80 [ 368.002856][ T9496] ? __get_fs_type+0xd9/0x200 [ 368.002888][ T9496] ? __get_fs_type+0xd9/0x200 [ 368.002911][ T9496] ? find_filesystem+0xf7/0x130 [ 368.002939][ T9496] get_fs_type+0xd7/0x190 [ 368.002963][ T9496] __x64_sys_fsopen+0xca/0x220 [ 368.003066][ T9496] do_syscall_64+0x115/0x840 [ 368.003087][ T9496] ? clear_bhb_loop+0x40/0x90 [ 368.003114][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.003138][ T9496] RIP: 0033:0x7febc679de59 [ 368.003156][ T9496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.003178][ T9496] RSP: 002b:00007febc75b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 368.003200][ T9496] RAX: ffffffffffffffda RBX: 00007febc6a25fa0 RCX: 00007febc679de59 [ 368.003215][ T9496] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 368.003228][ T9496] RBP: 00007febc6833e6f R08: 0000000000000000 R09: 0000000000000000 [ 368.003242][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.003255][ T9496] R13: 00007febc6a26038 R14: 00007febc6a25fa0 R15: 00007ffe729c8748 [ 368.003284][ T9496] [ 370.202908][ T9517] netlink: 330 bytes leftover after parsing attributes in process `syz.4.701'. [ 370.256473][ T9517] mac80211_hwsim hwsim18 : renamed from wlan0 (while UP) [ 370.386237][ T9527] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 371.272930][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 371.399436][ T9528] blktrace: Concurrent blktraces are not allowed on loop2 [ 371.530107][ T9525] openvswitch: HfR: Dropping previously announced user features [ 376.752367][ T9594] FAULT_INJECTION: forcing a failure. [ 376.752367][ T9594] name failslab, interval 1, probability 0, space 0, times 0 [ 376.893463][ T9594] CPU: 0 UID: 0 PID: 9594 Comm: syz.4.715 Not tainted syzkaller #0 PREEMPT(full) [ 376.893495][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 376.893510][ T9594] Call Trace: [ 376.893517][ T9594] [ 376.893526][ T9594] dump_stack_lvl+0x100/0x190 [ 376.893558][ T9594] should_fail_ex.cold+0x5/0xa [ 376.893585][ T9594] should_failslab+0xc2/0x120 [ 376.893616][ T9594] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 376.893645][ T9594] ? __kasan_kmalloc+0xaa/0xb0 [ 376.893672][ T9594] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 376.893805][ T9594] kstrdup+0x51/0xe0 [ 376.893832][ T9594] vidtv_psi_network_name_desc_init+0x183/0x310 [ 376.893877][ T9594] vidtv_psi_nit_table_init+0x291/0x5f0 [ 376.893927][ T9594] vidtv_channel_si_init+0xccf/0x18f0 [ 376.893966][ T9594] vidtv_mux_init+0x522/0xbf0 [ 376.894001][ T9594] vidtv_start_feed+0x34e/0x500 [ 376.894039][ T9594] ? __pfx_vidtv_start_feed+0x10/0x10 [ 376.894077][ T9594] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 376.894138][ T9594] dmx_section_feed_start_filtering+0x3a8/0x660 [ 376.894241][ T9594] dvb_dmxdev_filter_start+0x767/0xdd0 [ 376.894287][ T9594] dvb_demux_do_ioctl+0xe64/0x1200 [ 376.894333][ T9594] dvb_usercopy+0x167/0x340 [ 376.894364][ T9594] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 376.894402][ T9594] ? __pfx_dvb_usercopy+0x10/0x10 [ 376.894445][ T9594] ? __fget_files+0x21f/0x3d0 [ 376.894488][ T9594] dvb_demux_ioctl+0x29/0x40 [ 376.894520][ T9594] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 376.894553][ T9594] __x64_sys_ioctl+0x18e/0x210 [ 376.894587][ T9594] do_syscall_64+0x115/0x840 [ 376.894609][ T9594] ? clear_bhb_loop+0x40/0x90 [ 376.894638][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.894663][ T9594] RIP: 0033:0x7f457c19de59 [ 376.894682][ T9594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.894715][ T9594] RSP: 002b:00007f457d0f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.894738][ T9594] RAX: ffffffffffffffda RBX: 00007f457c426090 RCX: 00007f457c19de59 [ 376.894754][ T9594] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 376.894769][ T9594] RBP: 00007f457c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 376.894783][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.894797][ T9594] R13: 00007f457c426128 R14: 00007f457c426090 R15: 00007ffc74631448 [ 376.894828][ T9594] [ 377.604124][ T9594] netlink: 346 bytes leftover after parsing attributes in process `syz.4.715'. [ 378.805627][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.819435][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.227734][ T5625] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 381.279774][ T7202] Bluetooth: hci1: command 0x2016 tx timeout [ 381.674484][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 382.292465][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.727'. [ 383.363713][ T7202] Bluetooth: hci1: command 0x2016 tx timeout [ 383.776746][ T9660] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 384.040837][ T9661] smpboot: CPU 1 is now offline [ 384.511542][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 385.008583][ T29] audit: type=1804 audit(8277292050.400:10): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.729" name="/newroot/182/file0" dev="tmpfs" ino=972 res=1 errno=0 [ 385.456484][ T9683] FAULT_INJECTION: forcing a failure. [ 385.456484][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 385.545227][ T9683] CPU: 0 UID: 0 PID: 9683 Comm: syz.2.733 Not tainted syzkaller #0 PREEMPT(full) [ 385.545260][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 385.545274][ T9683] Call Trace: [ 385.545282][ T9683] [ 385.545291][ T9683] dump_stack_lvl+0x100/0x190 [ 385.545326][ T9683] should_fail_ex.cold+0x5/0xa [ 385.545353][ T9683] should_failslab+0xc2/0x120 [ 385.545385][ T9683] __kmalloc_noprof+0xfc/0x820 [ 385.545413][ T9683] ? sock_kmalloc+0x111/0x170 [ 385.545527][ T9683] sock_kmalloc+0x111/0x170 [ 385.545563][ T9683] ipv6_renew_options+0x3a2/0xbe0 [ 385.545627][ T9683] ? __might_fault+0xc5/0x140 [ 385.545651][ T9683] ? __pfx_ipv6_renew_options+0x10/0x10 [ 385.545687][ T9683] do_ipv6_setsockopt+0x2243/0x43a0 [ 385.545738][ T9683] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 385.545768][ T9683] ? plist_del+0x308/0x510 [ 385.545824][ T9683] ? find_held_lock+0x2b/0x80 [ 385.545852][ T9683] ? futex_wake+0x4ea/0x5e0 [ 385.545898][ T9683] ? __pfx___might_resched+0x10/0x10 [ 385.545956][ T9683] ? aa_sk_perm+0x309/0xaa0 [ 385.546010][ T9683] ? __pfx_aa_sk_perm+0x10/0x10 [ 385.546041][ T9683] ? ipv6_setsockopt+0xcb/0x170 [ 385.546063][ T9683] ipv6_setsockopt+0xcb/0x170 [ 385.546090][ T9683] udpv6_setsockopt+0x64/0xb0 [ 385.546120][ T9683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.546158][ T9683] do_sock_setsockopt+0xf3/0x1d0 [ 385.546194][ T9683] __sys_setsockopt+0x119/0x190 [ 385.546225][ T9683] __x64_sys_setsockopt+0xbd/0x160 [ 385.546251][ T9683] ? do_syscall_64+0x90/0x840 [ 385.546271][ T9683] ? lockdep_hardirqs_on+0x78/0x100 [ 385.546309][ T9683] do_syscall_64+0x115/0x840 [ 385.546329][ T9683] ? clear_bhb_loop+0x40/0x90 [ 385.546359][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.546384][ T9683] RIP: 0033:0x7febc679de59 [ 385.546404][ T9683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.546427][ T9683] RSP: 002b:00007febc75b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.546450][ T9683] RAX: ffffffffffffffda RBX: 00007febc6a25fa0 RCX: 00007febc679de59 [ 385.546467][ T9683] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000007 [ 385.546481][ T9683] RBP: 00007febc6833e6f R08: 0000000000000110 R09: 0000000000000000 [ 385.546496][ T9683] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 385.546511][ T9683] R13: 00007febc6a26038 R14: 00007febc6a25fa0 R15: 00007ffe729c8748 [ 385.546542][ T9683] [ 386.141856][ T9683] ubi0: attaching mtd0 [ 386.162542][ T9683] ubi0: scanning is finished [ 386.199048][ T9683] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 386.901410][ T9683] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 387.060642][ T9709] futex_wake_op: syz.0.735 tries to shift op by -2048; fix this program [ 387.241051][ T9709] futex_wake_op: syz.0.735 tries to shift op by -2048; fix this program [ 388.140048][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 391.741187][ T9786] FAULT_INJECTION: forcing a failure. [ 391.741187][ T9786] name failslab, interval 1, probability 0, space 0, times 0 [ 391.918803][ T9786] CPU: 0 UID: 0 PID: 9786 Comm: syz.3.750 Not tainted syzkaller #0 PREEMPT(full) [ 391.918836][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 391.918850][ T9786] Call Trace: [ 391.918858][ T9786] [ 391.918867][ T9786] dump_stack_lvl+0x100/0x190 [ 391.918901][ T9786] should_fail_ex.cold+0x5/0xa [ 391.918928][ T9786] should_failslab+0xc2/0x120 [ 391.918961][ T9786] __kmalloc_cache_noprof+0x91/0x6c0 [ 391.919000][ T9786] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 391.919111][ T9786] ? sctp_endpoint_new+0xfc/0xb20 [ 391.919186][ T9786] sctp_endpoint_new+0xfc/0xb20 [ 391.919218][ T9786] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 391.919248][ T9786] ? lockdep_init_map_type+0x5c/0x250 [ 391.919293][ T9786] ? lockdep_init_map_type+0x5c/0x250 [ 391.919330][ T9786] ? lockdep_init_map_type+0x5c/0x250 [ 391.919371][ T9786] sctp_init_sock+0xe2b/0x1300 [ 391.919418][ T9786] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 391.919448][ T9786] sctp_v6_init_sock+0x16/0x70 [ 391.919474][ T9786] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 391.919502][ T9786] inet6_create+0xb1a/0x12b0 [ 391.919564][ T9786] ? inet6_create+0x7f/0x12b0 [ 391.919603][ T9786] __sock_create+0x339/0x860 [ 391.919644][ T9786] __sys_socket+0x14d/0x260 [ 391.919681][ T9786] ? __pfx___sys_socket+0x10/0x10 [ 391.919738][ T9786] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 391.919782][ T9786] __x64_sys_socket+0x72/0xb0 [ 391.919821][ T9786] ? lockdep_hardirqs_on+0x78/0x100 [ 391.919860][ T9786] do_syscall_64+0x115/0x840 [ 391.919880][ T9786] ? clear_bhb_loop+0x40/0x90 [ 391.919909][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.919933][ T9786] RIP: 0033:0x7f79b1b9de59 [ 391.919954][ T9786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.919976][ T9786] RSP: 002b:00007f79b2ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 391.919999][ T9786] RAX: ffffffffffffffda RBX: 00007f79b1e26090 RCX: 00007f79b1b9de59 [ 391.920018][ T9786] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 391.920032][ T9786] RBP: 00007f79b1c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 391.920046][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.920059][ T9786] R13: 00007f79b1e26128 R14: 00007f79b1e26090 R15: 00007ffcf6e403e8 [ 391.920089][ T9786] [ 393.109267][ T5625] Bluetooth: hci0: Unable to find connection for big 0xe0 [ 394.272977][ T9840] Process accounting resumed [ 394.719369][ T9842] ubi0: attaching mtd0 [ 394.864548][ T9841] Invalid ELF header magic: != ELF [ 394.870486][ T9842] ubi0: scanning is finished [ 394.928264][ T9842] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 395.208803][ T9842] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 395.491448][ T7202] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 397.041231][ T7202] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 397.393978][ T9882] netlink: 504 bytes leftover after parsing attributes in process `syz.4.771'. [ 397.808796][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 399.115785][ T5625] Bluetooth: hci0: command 0x2016 tx timeout [ 399.424562][ T9902] Invalid ELF header magic: != ELF [ 401.195863][ T7202] Bluetooth: hci0: command 0x2016 tx timeout [ 402.469664][ T9919] Invalid ELF header magic: != ELF [ 403.873335][ T5625] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 404.352122][ T7202] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 404.360412][ T7202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 404.369974][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 404.370006][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 404.370032][ T7202] Workqueue: hci3 hci_rx_work [ 404.370148][ T7202] Call Trace: [ 404.370156][ T7202] [ 404.370165][ T7202] dump_stack_lvl+0x100/0x190 [ 404.370194][ T7202] sysfs_warn_dup.cold+0x1c/0x28 [ 404.370241][ T7202] sysfs_create_dir_ns+0x24b/0x2b0 [ 404.370322][ T7202] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 404.370353][ T7202] ? find_held_lock+0x2b/0x80 [ 404.370380][ T7202] ? kobject_add_internal+0x25f/0x930 [ 404.370443][ T7202] ? kobject_add_internal+0x25f/0x930 [ 404.370476][ T7202] ? do_raw_spin_unlock+0x145/0x1e0 [ 404.370502][ T7202] kobject_add_internal+0x2c8/0x930 [ 404.370537][ T7202] kobject_add+0x16a/0x1e0 [ 404.370567][ T7202] ? __pfx_kobject_add+0x10/0x10 [ 404.370596][ T7202] ? class_to_subsys+0x10f/0x150 [ 404.370706][ T7202] ? kobject_put+0xb9/0x640 [ 404.370732][ T7202] ? _raw_spin_unlock+0x28/0x50 [ 404.370772][ T7202] device_add+0x294/0x1970 [ 404.370818][ T7202] ? __pfx_dev_set_name+0x10/0x10 [ 404.370874][ T7202] ? __pfx_device_add+0x10/0x10 [ 404.370908][ T7202] ? mgmt_send_event_skb+0x2fb/0x460 [ 404.370991][ T7202] hci_conn_add_sysfs+0x1a3/0x260 [ 404.371035][ T7202] le_conn_complete_evt+0x11eb/0x1f60 [ 404.371120][ T7202] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 404.371157][ T7202] ? __pfx_bt_warn+0x10/0x10 [ 404.371183][ T7202] ? hci_event_packet+0x186/0xcd0 [ 404.371230][ T7202] hci_le_conn_complete_evt+0x23c/0x3a0 [ 404.371270][ T7202] ? skb_pull_data+0x15f/0x1e0 [ 404.371309][ T7202] hci_le_meta_evt+0x34a/0x5f0 [ 404.371333][ T7202] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 404.371376][ T7202] hci_event_packet+0x51c/0xcd0 [ 404.371414][ T7202] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 404.371439][ T7202] ? __pfx_hci_event_packet+0x10/0x10 [ 404.371480][ T7202] ? kcov_remote_start+0x384/0x670 [ 404.371521][ T7202] ? lockdep_hardirqs_on+0x78/0x100 [ 404.371566][ T7202] hci_rx_work+0x451/0xfc0 [ 404.371609][ T7202] process_one_work+0xa23/0x1940 [ 404.371663][ T7202] ? __pfx_process_one_work+0x10/0x10 [ 404.371705][ T7202] ? __pfx_hci_rx_work+0x10/0x10 [ 404.371745][ T7202] worker_thread+0x5ef/0xe50 [ 404.371786][ T7202] ? __pfx_worker_thread+0x10/0x10 [ 404.371820][ T7202] ? kthread+0x13a/0x450 [ 404.371847][ T7202] ? __pfx_worker_thread+0x10/0x10 [ 404.371878][ T7202] kthread+0x370/0x450 [ 404.371906][ T7202] ? __pfx_kthread+0x10/0x10 [ 404.371938][ T7202] ret_from_fork+0x72b/0xd50 [ 404.371967][ T7202] ? __pfx_ret_from_fork+0x10/0x10 [ 404.371996][ T7202] ? __switch_to+0x800/0x10f0 [ 404.372039][ T7202] ? __switch_to_asm+0x39/0x70 [ 404.372070][ T7202] ? __pfx_kthread+0x10/0x10 [ 404.372102][ T7202] ret_from_fork_asm+0x1a/0x30 [ 404.372148][ T7202] [ 404.372205][ T7202] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 404.690421][ T7202] Bluetooth: hci3: failed to register connection device [ 405.916158][ T7202] Bluetooth: hci3: command 0x2016 tx timeout [ 406.420929][ T9957] Console: switching to colour VGA+ 80x25 [ 406.970917][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 407.996551][ T7202] Bluetooth: hci3: command 0x2016 tx timeout [ 409.990024][ T9978] raw_sendmsg: syz.0.792 forgot to set AF_INET. Fix it! [ 410.080307][ T7202] Bluetooth: hci3: command 0x2016 tx timeout [ 410.644914][ T9983] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 411.063557][ T9987] FAULT_INJECTION: forcing a failure. [ 411.063557][ T9987] name fail_futex, interval 1, probability 0, space 0, times 0 [ 411.076623][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.0.795 Not tainted syzkaller #0 PREEMPT(full) [ 411.076673][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 411.076693][ T9987] Call Trace: [ 411.076705][ T9987] [ 411.076717][ T9987] dump_stack_lvl+0x100/0x190 [ 411.076762][ T9987] should_fail_ex.cold+0x5/0xa [ 411.076801][ T9987] get_futex_key+0x1d2/0x14f0 [ 411.076860][ T9987] ? __pfx_get_futex_key+0x10/0x10 [ 411.076928][ T9987] futex_wake+0xf4/0x5e0 [ 411.076974][ T9987] ? __pfx_futex_wake+0x10/0x10 [ 411.077019][ T9987] ? lockdep_init_map_type+0x5c/0x250 [ 411.077074][ T9987] ? lockdep_init_map_type+0x5c/0x250 [ 411.077133][ T9987] do_futex+0x2b2/0x440 [ 411.077168][ T9987] ? __pfx_do_futex+0x10/0x10 [ 411.077212][ T9987] __x64_sys_futex+0x34f/0x4d0 [ 411.077248][ T9987] ? fd_install+0x223/0x580 [ 411.077298][ T9987] ? __pfx___x64_sys_futex+0x10/0x10 [ 411.077349][ T9987] do_syscall_64+0x115/0x840 [ 411.077379][ T9987] ? clear_bhb_loop+0x40/0x90 [ 411.077420][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.077454][ T9987] RIP: 0033:0x7f259cb9de59 [ 411.077481][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.077512][ T9987] RSP: 002b:00007f259da920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 411.077551][ T9987] RAX: ffffffffffffffda RBX: 00007f259ce25fa8 RCX: 00007f259cb9de59 [ 411.077573][ T9987] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f259ce25fac [ 411.077593][ T9987] RBP: 00007f259ce25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 411.077612][ T9987] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 411.077630][ T9987] R13: 00007f259ce26038 R14: 00007ffdc6006f80 R15: 00007ffdc6007068 [ 411.077671][ T9987] [ 411.407071][ T5625] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 412.157782][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 413.439346][ T7202] Bluetooth: hci0: command 0x2016 tx timeout [ 413.756055][ T5625] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 414.629489][T10013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 415.496629][T10017] FAULT_INJECTION: forcing a failure. [ 415.496629][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 415.510600][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.0.801 Not tainted syzkaller #0 PREEMPT(full) [ 415.510639][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 415.510656][T10017] Call Trace: [ 415.510666][T10017] [ 415.510677][T10017] dump_stack_lvl+0x100/0x190 [ 415.510717][T10017] should_fail_ex.cold+0x5/0xa [ 415.510751][T10017] _copy_to_user+0x32/0xd0 [ 415.510915][T10017] simple_read_from_buffer+0xcb/0x170 [ 415.510965][T10017] proc_fail_nth_read+0x1af/0x230 [ 415.511042][T10017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.511091][T10017] ? rw_verify_area+0xce/0x6d0 [ 415.511132][T10017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.511170][T10017] vfs_read+0x1e4/0xb40 [ 415.511219][T10017] ? __pfx_vfs_read+0x10/0x10 [ 415.511263][T10017] ? __fget_files+0x215/0x3d0 [ 415.511317][T10017] ? __fget_files+0x21f/0x3d0 [ 415.511374][T10017] ksys_read+0x12a/0x250 [ 415.511419][T10017] ? __pfx_ksys_read+0x10/0x10 [ 415.511475][T10017] do_syscall_64+0x115/0x840 [ 415.511504][T10017] ? clear_bhb_loop+0x40/0x90 [ 415.511542][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.511573][T10017] RIP: 0033:0x7f259cb5e68e [ 415.511599][T10017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.511629][T10017] RSP: 002b:00007f259da91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.511659][T10017] RAX: ffffffffffffffda RBX: 00007f259da926c0 RCX: 00007f259cb5e68e [ 415.511680][T10017] RDX: 000000000000000f RSI: 00007f259da920a0 RDI: 0000000000000004 [ 415.511699][T10017] RBP: 00007f259da92090 R08: 0000000000000000 R09: 0000000000000000 [ 415.511718][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.511736][T10017] R13: 00007f259ce26038 R14: 00007f259ce25fa0 R15: 00007ffdc6007068 [ 415.511779][T10017] [ 415.710072][ T5625] Bluetooth: hci0: command 0x2016 tx timeout [ 415.792604][ T7202] Bluetooth: hci0: Unable to find connection for big 0xe0 [ 417.324852][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.337784][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.351570][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.363739][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.375928][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.412215][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.431785][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.458757][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.468346][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.481147][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.251946][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.420443][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.540720][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.638944][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.138677][ T48] bridge_slave_1: left allmulticast mode [ 419.145945][ T48] bridge_slave_1: left promiscuous mode [ 419.161084][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.189110][ T48] bridge_slave_0: left allmulticast mode [ 419.194845][ T48] bridge_slave_0: left promiscuous mode [ 419.205832][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.515494][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.515695][ T50] Bluetooth: hci5: command tx timeout [ 419.532628][ T5625] Bluetooth: hci4: command tx timeout [ 419.551081][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.562718][ T48] bond0 (unregistering): Released all slaves [ 420.178437][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.192172][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.199825][T10035] bridge_slave_0: entered allmulticast mode [ 420.208315][T10035] bridge_slave_0: entered promiscuous mode [ 420.217902][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.225260][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.232738][T10033] bridge_slave_0: entered allmulticast mode [ 420.242077][T10033] bridge_slave_0: entered promiscuous mode [ 420.251392][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.258801][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.266333][T10033] bridge_slave_1: entered allmulticast mode [ 420.274476][T10033] bridge_slave_1: entered promiscuous mode [ 420.325804][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.333480][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.341262][T10035] bridge_slave_1: entered allmulticast mode [ 420.352837][T10035] bridge_slave_1: entered promiscuous mode [ 420.514607][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.552715][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.575980][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.608183][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.664000][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 420.706987][T10035] team0: Port device team_slave_0 added [ 420.715280][T10035] team0: Port device team_slave_1 added [ 420.735701][T10033] team0: Port device team_slave_0 added [ 420.744121][T10033] team0: Port device team_slave_1 added [ 420.755446][ T48] hsr_slave_0: left promiscuous mode [ 420.763332][ T48] hsr_slave_1: left promiscuous mode [ 420.777355][ T48] veth1_macvtap: left promiscuous mode [ 420.784393][ T48] veth0_macvtap: left promiscuous mode [ 420.790323][ T48] veth1_vlan: left promiscuous mode [ 420.796667][ T48] veth0_vlan: left promiscuous mode [ 421.046105][ T48] team0 (unregistering): Port device team_slave_1 removed [ 421.063561][ T48] team0 (unregistering): Port device team_slave_0 removed [ 421.203088][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.212014][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.241233][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.290236][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.298057][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.324553][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.347133][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.365016][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.395217][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.408385][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.415407][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.441426][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.574062][T10035] hsr_slave_0: entered promiscuous mode [ 421.582650][T10035] hsr_slave_1: entered promiscuous mode [ 421.590635][T10035] debugfs: 'hsr0' already exists in 'hsr' [ 421.602703][T10035] Cannot create hsr debugfs directory [ 421.608509][ T50] Bluetooth: hci5: command tx timeout [ 421.613997][ T50] Bluetooth: hci4: command tx timeout [ 421.719935][T10033] hsr_slave_0: entered promiscuous mode [ 421.735084][T10033] hsr_slave_1: entered promiscuous mode [ 421.752274][T10033] debugfs: 'hsr0' already exists in 'hsr' [ 421.765586][T10033] Cannot create hsr debugfs directory [ 422.467874][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 422.562337][T10035] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.622768][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.646329][T10035] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.659539][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.679568][T10035] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.701292][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.709766][T10035] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.722920][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.270265][T10033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.297208][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.324259][T10033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.372746][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.399608][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 423.407082][T10033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.426367][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.439936][T10033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.450852][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.687897][ T50] Bluetooth: hci4: command tx timeout [ 423.695479][ T5625] Bluetooth: hci5: command tx timeout [ 423.819028][T10035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.927391][T10035] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.973150][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.980446][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.041663][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.048944][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.067351][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.162783][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.231761][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.239155][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.300121][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.307565][ T7234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.632071][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 425.131559][T10169] Invalid ELF header magic: != ELF [ 425.550442][T10035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.564240][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.583357][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.593671][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.612102][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.620753][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.755170][ T5625] Bluetooth: hci4: command tx timeout [ 425.755184][ T50] Bluetooth: hci5: command tx timeout [ 425.789931][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.342437][T10035] veth0_vlan: entered promiscuous mode [ 426.392522][T10035] veth1_vlan: entered promiscuous mode [ 426.517010][T10035] veth0_macvtap: entered promiscuous mode [ 426.552901][T10035] veth1_macvtap: entered promiscuous mode [ 426.648830][T10035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.684411][T10035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.736199][ T7235] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.746412][ T7235] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.770905][ T7235] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.782680][ T7235] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.025363][T10033] veth0_vlan: entered promiscuous mode [ 427.179681][T10033] veth1_vlan: entered promiscuous mode [ 427.252770][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.281175][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.565458][ T7218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.604253][ T7218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.675718][ T50] Bluetooth: hci6: command tx timeout [ 427.805415][T10033] veth0_macvtap: entered promiscuous mode [ 427.956516][T10033] veth1_macvtap: entered promiscuous mode [ 428.091616][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.121545][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.136822][T10194] bridge_slave_0: entered allmulticast mode [ 428.150767][T10194] bridge_slave_0: entered promiscuous mode [ 428.177723][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.187855][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.196178][T10194] bridge_slave_1: entered allmulticast mode [ 428.206974][T10194] bridge_slave_1: entered promiscuous mode [ 428.262978][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.311877][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.337671][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.396878][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.483244][ T7234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.501685][T10194] team0: Port device team_slave_0 added [ 428.518805][ T7234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.551435][T10194] team0: Port device team_slave_1 added [ 428.569154][ T7234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.586448][ T7234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.704848][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.723512][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.787962][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.885474][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.904147][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.976239][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.275954][T10194] hsr_slave_0: entered promiscuous mode [ 429.288751][T10194] hsr_slave_1: entered promiscuous mode [ 429.297625][T10194] debugfs: 'hsr0' already exists in 'hsr' [ 429.305401][T10194] Cannot create hsr debugfs directory [ 429.398517][ T7218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.416073][ T7218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.564334][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.585449][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.754134][ T50] Bluetooth: hci6: command tx timeout [ 430.132339][ T50] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 430.310472][T10194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.347443][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.383328][T10194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.410955][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.451276][T10194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.475576][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.554645][T10194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.580560][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.656846][T10278] Invalid ELF header magic: != ELF [ 431.804516][T10194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.832875][ T5625] Bluetooth: hci6: command tx timeout [ 431.848003][T10194] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.917752][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.925607][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.995886][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.003290][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.153927][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 432.505234][T10294] netlink: 'syz.6.826': attribute type 1 has an invalid length. [ 433.036417][T10303] Invalid ELF header magic: != ELF [ 433.154114][T10305] ubi31: attaching mtd0 [ 433.220433][T10305] ubi31: scanning is finished [ 433.260065][T10305] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 433.571009][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.777062][T10305] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 433.913132][ T50] Bluetooth: hci6: command tx timeout [ 434.149381][T10311] Invalid ELF header magic: != ELF [ 434.232865][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 434.715179][T10194] veth0_vlan: entered promiscuous mode [ 434.954780][T10194] veth1_vlan: entered promiscuous mode [ 435.166845][T10194] veth0_macvtap: entered promiscuous mode [ 435.256152][T10194] veth1_macvtap: entered promiscuous mode [ 435.654656][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.764555][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.906374][ T7235] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.932487][ T7235] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.284776][ T7235] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.302140][ T7235] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.911203][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.921305][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.393957][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.428643][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.814517][T10380] FAULT_INJECTION: forcing a failure. [ 438.814517][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 438.878280][T10380] CPU: 1 UID: 0 PID: 10380 Comm: syz.6.837 Not tainted syzkaller #0 PREEMPT(full) [ 438.878326][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 438.878346][T10380] Call Trace: [ 438.878358][T10380] [ 438.878369][T10380] dump_stack_lvl+0x100/0x190 [ 438.878421][T10380] should_fail_ex.cold+0x5/0xa [ 438.878461][T10380] should_failslab+0xc2/0x120 [ 438.878508][T10380] kmem_cache_alloc_noprof+0x91/0x6a0 [ 438.878548][T10380] ? do_epoll_ctl_file+0x2375/0x3640 [ 438.878657][T10380] do_epoll_ctl_file+0x2375/0x3640 [ 438.878705][T10380] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 438.878750][T10380] ? __fget_files+0x215/0x3d0 [ 438.878807][T10380] ? __fget_files+0x21f/0x3d0 [ 438.878866][T10380] ? do_epoll_ctl+0xfd/0x1a0 [ 438.878898][T10380] do_epoll_ctl+0xfd/0x1a0 [ 438.878934][T10380] ? __pfx_do_epoll_ctl+0x10/0x10 [ 438.878971][T10380] ? rep_movs_alternative+0x30/0xa0 [ 438.879027][T10380] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 438.879065][T10380] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 438.879114][T10380] do_syscall_64+0x115/0x840 [ 438.879144][T10380] ? clear_bhb_loop+0x40/0x90 [ 438.879185][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.879220][T10380] RIP: 0033:0x7f9bfa79de59 [ 438.879249][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.879283][T10380] RSP: 002b:00007f9bf89f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 438.879316][T10380] RAX: ffffffffffffffda RBX: 00007f9bfaa25fa0 RCX: 00007f9bfa79de59 [ 438.879338][T10380] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000008 [ 438.879358][T10380] RBP: 00007f9bfa833e6f R08: 0000000000000000 R09: 0000000000000000 [ 438.879378][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.879408][T10380] R13: 00007f9bfaa26038 R14: 00007f9bfaa25fa0 R15: 00007ffcf07e4f78 [ 438.879454][T10380] [ 440.235202][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.248636][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.442481][T10410] smpboot: CPU 1 is now offline [ 442.585720][T10447] Invalid ELF header magic: != ELF [ 442.628994][T10454] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 444.166621][T10469] FAULT_INJECTION: forcing a failure. [ 444.166621][T10469] name failslab, interval 1, probability 0, space 0, times 0 [ 444.224332][T10469] CPU: 0 UID: 0 PID: 10469 Comm: syz.5.851 Not tainted syzkaller #0 PREEMPT(full) [ 444.224364][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 444.224379][T10469] Call Trace: [ 444.224386][T10469] [ 444.224397][T10469] dump_stack_lvl+0x100/0x190 [ 444.224430][T10469] should_fail_ex.cold+0x5/0xa [ 444.224458][T10469] should_failslab+0xc2/0x120 [ 444.224490][T10469] kmem_cache_alloc_noprof+0x91/0x6a0 [ 444.224516][T10469] ? __lock_acquire+0x49f/0x1a40 [ 444.224552][T10469] ? ep_ptable_queue_proc+0x5b/0x280 [ 444.224658][T10469] ep_ptable_queue_proc+0x5b/0x280 [ 444.224698][T10469] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 444.224737][T10469] snd_seq_oss_readq_poll+0x56/0xa0 [ 444.224809][T10469] snd_seq_oss_poll+0x122/0x1d0 [ 444.224879][T10469] ? __pfx_odev_poll+0x10/0x10 [ 444.224929][T10469] odev_poll+0x4a/0x90 [ 444.224961][T10469] ep_item_poll+0x141/0x1f0 [ 444.225004][T10469] do_epoll_ctl_file+0x1e6b/0x3640 [ 444.225039][T10469] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 444.225067][T10469] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 444.225107][T10469] ? __fget_files+0x215/0x3d0 [ 444.225147][T10469] ? __fget_files+0x21f/0x3d0 [ 444.225190][T10469] ? do_epoll_ctl+0xfd/0x1a0 [ 444.225212][T10469] do_epoll_ctl+0xfd/0x1a0 [ 444.225238][T10469] ? __pfx_do_epoll_ctl+0x10/0x10 [ 444.225263][T10469] ? rep_movs_alternative+0x30/0xa0 [ 444.225301][T10469] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 444.225328][T10469] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 444.225362][T10469] do_syscall_64+0x115/0x840 [ 444.225383][T10469] ? clear_bhb_loop+0x40/0x90 [ 444.225412][T10469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.225436][T10469] RIP: 0033:0x7f0cf079de59 [ 444.225456][T10469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.225479][T10469] RSP: 002b:00007f0cf16da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 444.225503][T10469] RAX: ffffffffffffffda RBX: 00007f0cf0a25fa0 RCX: 00007f0cf079de59 [ 444.225520][T10469] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000008 [ 444.225535][T10469] RBP: 00007f0cf0833e6f R08: 0000000000000000 R09: 0000000000000000 [ 444.225550][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.225564][T10469] R13: 00007f0cf0a26038 R14: 00007f0cf0a25fa0 R15: 00007ffe27cd56d8 [ 444.225595][T10469] [ 445.231182][T10037] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 447.007512][T10492] Invalid ELF header magic: != ELF [ 447.268964][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 447.733379][T10501] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 449.346741][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 451.188280][T10037] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 452.301112][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 452.317894][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 452.331218][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 452.341329][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 452.352971][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 453.269570][ T50] Bluetooth: hci5: command 0x2016 tx timeout [ 454.463910][ T5625] Bluetooth: hci7: command tx timeout [ 455.018553][T10578] vivid-007: ================= START STATUS ================= [ 455.125141][T10578] vivid-007: Generate PTS: true [ 455.132217][T10546] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.164723][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.181545][T10578] vivid-007: Generate SCR: true [ 455.197409][T10037] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 455.215308][T10037] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 455.226052][T10037] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 455.241138][T10037] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 455.248981][T10037] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 455.304395][T10546] bridge_slave_0: entered allmulticast mode [ 455.331722][T10578] tpg source WxH: 320x240 (Y'CbCr) [ 455.345140][T10546] bridge_slave_0: entered promiscuous mode [ 455.362454][ T50] Bluetooth: hci5: command 0x2016 tx timeout [ 455.401673][T10578] tpg field: 1 [ 455.415979][T10546] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.428391][T10578] tpg crop: (0,0)/320x240 [ 455.445967][T10578] tpg compose: (0,0)/320x240 [ 455.457282][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.481745][T10578] tpg colorspace: 8 [ 455.492894][T10546] bridge_slave_1: entered allmulticast mode [ 455.512076][T10578] tpg transfer function: 0/0 [ 455.529010][T10546] bridge_slave_1: entered promiscuous mode [ 455.564321][T10578] tpg Y'CbCr encoding: 0/0 [ 455.620413][T10578] tpg quantization: 0/0 [ 455.661840][T10578] tpg RGB range: 0/2 [ 455.700719][T10546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.720473][T10578] vivid-007: ================== END STATUS ================== [ 455.745563][T10546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.020675][T10546] team0: Port device team_slave_0 added [ 456.066715][T10546] team0: Port device team_slave_1 added [ 456.217468][T10546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.252173][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.371201][T10546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.467260][T10546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.518359][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.557663][ T50] Bluetooth: hci7: command tx timeout [ 456.632223][T10546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.859095][T10546] hsr_slave_0: entered promiscuous mode [ 456.907468][T10546] hsr_slave_1: entered promiscuous mode [ 456.937701][T10546] debugfs: 'hsr0' already exists in 'hsr' [ 456.963238][T10546] Cannot create hsr debugfs directory [ 457.347316][ T50] Bluetooth: hci8: command tx timeout [ 457.616730][ T50] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 458.623246][T10037] Bluetooth: hci7: command tx timeout [ 459.004987][T10546] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.023910][T10546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.037758][T10546] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.063739][T10546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.157820][T10546] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.185531][T10546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.204582][T10546] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.216843][T10546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.226110][T10585] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.234084][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.242662][T10585] bridge_slave_0: entered allmulticast mode [ 459.256534][T10585] bridge_slave_0: entered promiscuous mode [ 459.291138][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.315833][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.334846][T10585] bridge_slave_1: entered allmulticast mode [ 459.354766][T10585] bridge_slave_1: entered promiscuous mode [ 459.425666][T10037] Bluetooth: hci8: command tx timeout [ 459.615963][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.664349][T10037] Bluetooth: hci4: command 0x2016 tx timeout [ 459.680944][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.837083][T10585] team0: Port device team_slave_0 added [ 459.910516][T10585] team0: Port device team_slave_1 added [ 460.013845][T10585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.040547][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.134670][T10585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.260974][T10585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.278843][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.342116][T10585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.704777][ T50] Bluetooth: hci7: command tx timeout [ 461.279217][T10585] hsr_slave_0: entered promiscuous mode [ 461.298791][T10585] hsr_slave_1: entered promiscuous mode [ 461.320725][T10585] debugfs: 'hsr0' already exists in 'hsr' [ 461.344282][T10585] Cannot create hsr debugfs directory [ 461.502069][ T50] Bluetooth: hci8: command tx timeout [ 461.741991][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 462.076812][T10546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.289392][T10546] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.550577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.559336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.785521][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.792759][ T7228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.988696][T10658] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 463.040469][T10585] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.107607][T10659] smpboot: CPU 1 is now offline [ 463.584953][T10037] Bluetooth: hci8: command tx timeout [ 465.144949][T10585] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.228474][T10585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.283421][T10585] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 465.350048][T10585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.382156][T10585] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 465.449635][T10585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.500892][T10585] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 465.580143][T10585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.728009][T10546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.804246][T10688] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 465.988911][T10689] smpboot: CPU 1 is now offline [ 466.116851][T10585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.220008][T10585] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.288358][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.295653][ T7229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.380841][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.388127][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.145584][T10546] veth0_vlan: entered promiscuous mode [ 467.215276][T10546] veth1_vlan: entered promiscuous mode [ 467.409115][T10546] veth0_macvtap: entered promiscuous mode [ 467.484655][T10546] veth1_macvtap: entered promiscuous mode [ 467.624296][T10546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.699148][T10546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.773323][ T7229] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.814943][ T7229] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.903507][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 467.926296][ T7229] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.963609][ T7229] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.339265][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.392751][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.419233][T10716] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 468.612466][T10718] smpboot: CPU 1 is now offline [ 468.685596][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.726036][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.848516][T10585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.077900][T10585] veth0_vlan: entered promiscuous mode [ 470.184286][T10585] veth1_vlan: entered promiscuous mode [ 470.366072][T10585] veth0_macvtap: entered promiscuous mode [ 470.406140][T10585] veth1_macvtap: entered promiscuous mode [ 470.494385][T10585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.529355][T10585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.564776][ T7235] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.564952][ T7235] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.564992][ T7235] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.565030][ T7235] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.904245][ T7235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.904271][ T7235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.077867][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.077890][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.541938][T10759] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 471.784540][T10760] smpboot: CPU 1 is now offline [ 473.294984][T10772] Invalid ELF header magic: != ELF [ 474.205582][T10789] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 474.969504][T10787] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 475.162762][T10791] smpboot: CPU 1 is now offline [ 477.822370][T10829] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 478.361810][T10037] Bluetooth: hci8: Unable to find connection for big 0xe0 [ 480.845556][T10037] Bluetooth: hci5: Unable to find connection for big 0xe0 [ 481.276341][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.6.915'. [ 483.155872][T10900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 484.333652][T10915] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 484.571105][T10917] smpboot: CPU 1 is now offline [ 484.919818][T10932] random: crng reseeded on system resumption [ 485.229217][T10037] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 485.520788][T10918] Invalid ELF header magic: != ELF [ 486.348515][T10949] program syz.8.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.512741][T10949] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 487.259670][ T50] Bluetooth: hci7: command 0x2016 tx timeout [ 489.339815][ T50] Bluetooth: hci7: command 0x2016 tx timeout [ 489.671879][T10989] Invalid ELF header magic: != ELF [ 489.943801][T10995] binder: 10993:10995 unknown command 10 [ 489.976248][T10987] Invalid ELF header magic: != ELF [ 490.031250][T10995] binder: 10993:10995 ioctl c0306201 0 returned -22 [ 490.906899][T11004] nvme_fabrics: missing parameter 'transport=%s' [ 490.933688][T11004] nvme_fabrics: missing parameter 'nqn=%s' [ 491.684025][T11016] FAULT_INJECTION: forcing a failure. [ 491.684025][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 492.896397][T11016] CPU: 0 UID: 0 PID: 11016 Comm: syz.5.942 Not tainted syzkaller #0 PREEMPT(full) [ 492.896431][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 492.896446][T11016] Call Trace: [ 492.896454][T11016] [ 492.896463][T11016] dump_stack_lvl+0x100/0x190 [ 492.896495][T11016] should_fail_ex.cold+0x5/0xa [ 492.896522][T11016] should_failslab+0xc2/0x120 [ 492.896554][T11016] kmem_cache_alloc_noprof+0x91/0x6a0 [ 492.896583][T11016] ? do_epoll_ctl_file+0x2375/0x3640 [ 492.896615][T11016] do_epoll_ctl_file+0x2375/0x3640 [ 492.896649][T11016] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 492.896684][T11016] ? __fget_files+0x215/0x3d0 [ 492.896729][T11016] ? __fget_files+0x21f/0x3d0 [ 492.896772][T11016] ? do_epoll_ctl+0xfd/0x1a0 [ 492.896795][T11016] do_epoll_ctl+0xfd/0x1a0 [ 492.896820][T11016] ? __pfx_do_epoll_ctl+0x10/0x10 [ 492.896846][T11016] ? rep_movs_alternative+0x30/0xa0 [ 492.896883][T11016] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 492.896910][T11016] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 492.896945][T11016] do_syscall_64+0x115/0x840 [ 492.896965][T11016] ? clear_bhb_loop+0x40/0x90 [ 492.896995][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.897019][T11016] RIP: 0033:0x7f0cf079de59 [ 492.897039][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.897063][T11016] RSP: 002b:00007f0cf1698028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 492.897086][T11016] RAX: ffffffffffffffda RBX: 00007f0cf0a26180 RCX: 00007f0cf079de59 [ 492.897102][T11016] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000008 [ 492.897116][T11016] RBP: 00007f0cf0833e6f R08: 0000000000000000 R09: 0000000000000000 [ 492.897130][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.897145][T11016] R13: 00007f0cf0a26218 R14: 00007f0cf0a26180 R15: 00007ffe27cd56d8 [ 492.897175][T11016] [ 493.900216][T11023] FAULT_INJECTION: forcing a failure. [ 493.900216][T11023] name failslab, interval 1, probability 0, space 0, times 0 [ 493.967956][T11023] CPU: 0 UID: 0 PID: 11023 Comm: syz.5.944 Not tainted syzkaller #0 PREEMPT(full) [ 493.967989][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 493.968003][T11023] Call Trace: [ 493.968011][T11023] [ 493.968019][T11023] dump_stack_lvl+0x100/0x190 [ 493.968051][T11023] should_fail_ex.cold+0x5/0xa [ 493.968076][T11023] should_failslab+0xc2/0x120 [ 493.968107][T11023] __kvmalloc_node_noprof+0x116/0x970 [ 493.968133][T11023] ? __lock_acquire+0x49f/0x1a40 [ 493.968170][T11023] ? traverse.part.0.constprop.0+0x397/0x650 [ 493.968212][T11023] traverse.part.0.constprop.0+0x397/0x650 [ 493.968256][T11023] seq_read_iter+0x93f/0x1270 [ 493.968291][T11023] ? aa_file_perm+0x7f3/0x14d0 [ 493.968332][T11023] seq_read+0x344/0x4d0 [ 493.968365][T11023] ? __pfx_seq_read+0x10/0x10 [ 493.968416][T11023] ? __pfx_seq_read+0x10/0x10 [ 493.968449][T11023] proc_reg_read+0x240/0x330 [ 493.968485][T11023] ? __pfx_proc_reg_read+0x10/0x10 [ 493.968524][T11023] vfs_read+0x1e4/0xb40 [ 493.968562][T11023] ? __pfx_vfs_read+0x10/0x10 [ 493.968595][T11023] ? find_held_lock+0x2b/0x80 [ 493.968620][T11023] ? __fget_files+0x215/0x3d0 [ 493.968659][T11023] ? __fget_files+0x215/0x3d0 [ 493.968698][T11023] ? __fget_files+0x21f/0x3d0 [ 493.968740][T11023] __x64_sys_pread64+0x1eb/0x250 [ 493.968778][T11023] ? __pfx___x64_sys_pread64+0x10/0x10 [ 493.968823][T11023] do_syscall_64+0x115/0x840 [ 493.968845][T11023] ? clear_bhb_loop+0x40/0x90 [ 493.968873][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.968897][T11023] RIP: 0033:0x7f0cf079de59 [ 493.968916][T11023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.968938][T11023] RSP: 002b:00007f0cf16da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 493.968960][T11023] RAX: ffffffffffffffda RBX: 00007f0cf0a25fa0 RCX: 00007f0cf079de59 [ 493.968976][T11023] RDX: 0000100000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 493.968990][T11023] RBP: 00007f0cf16da090 R08: 0000000000000000 R09: 0000000000000000 [ 493.969005][T11023] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 493.969018][T11023] R13: 00007f0cf0a26038 R14: 00007f0cf0a25fa0 R15: 00007ffe27cd56d8 [ 493.969048][T11023] [ 494.494014][T10037] Bluetooth: hci8: Unable to find connection for big 0xe0 [ 499.022971][T10037] Bluetooth: hci7: Unable to find connection for big 0xe0 [ 499.885176][T11079] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 500.077947][T11086] smpboot: CPU 1 is now offline [ 500.955469][T11100] netlink: 334 bytes leftover after parsing attributes in process `syz.8.961'. [ 501.231959][T10037] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 501.660203][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.671238][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.009218][ T50] Bluetooth: hci8: Unable to find connection for big 0xe0 [ 503.249880][T10037] Bluetooth: hci4: command 0x2016 tx timeout [ 504.050375][T11138] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 504.272238][T11139] smpboot: CPU 1 is now offline [ 505.331845][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 506.084512][T11170] netlink: 342 bytes leftover after parsing attributes in process `syz.8.978'. [ 507.445764][T11188] FAULT_INJECTION: forcing a failure. [ 507.445764][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 508.037760][T11188] CPU: 0 UID: 0 PID: 11188 Comm: syz.5.981 Not tainted syzkaller #0 PREEMPT(full) [ 508.037793][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 508.037808][T11188] Call Trace: [ 508.037815][T11188] [ 508.037825][T11188] dump_stack_lvl+0x100/0x190 [ 508.037856][T11188] should_fail_ex.cold+0x5/0xa [ 508.037884][T11188] should_failslab+0xc2/0x120 [ 508.037915][T11188] kmem_cache_alloc_noprof+0x91/0x6a0 [ 508.037944][T11188] ? ep_ptable_queue_proc+0x5b/0x280 [ 508.037989][T11188] ep_ptable_queue_proc+0x5b/0x280 [ 508.038028][T11188] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 508.038066][T11188] snd_seq_pool_poll_wait+0x5b/0x160 [ 508.038106][T11188] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 508.038142][T11188] snd_seq_oss_poll+0x17d/0x1d0 [ 508.038181][T11188] ? __pfx_odev_poll+0x10/0x10 [ 508.038220][T11188] odev_poll+0x4a/0x90 [ 508.038250][T11188] ep_item_poll+0x141/0x1f0 [ 508.038292][T11188] do_epoll_ctl_file+0x1e6b/0x3640 [ 508.038327][T11188] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 508.038356][T11188] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 508.038395][T11188] ? __fget_files+0x215/0x3d0 [ 508.038443][T11188] ? __fget_files+0x21f/0x3d0 [ 508.038486][T11188] ? do_epoll_ctl+0xfd/0x1a0 [ 508.038509][T11188] do_epoll_ctl+0xfd/0x1a0 [ 508.038535][T11188] ? __pfx_do_epoll_ctl+0x10/0x10 [ 508.038568][T11188] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 508.038596][T11188] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 508.038632][T11188] do_syscall_64+0x115/0x840 [ 508.038654][T11188] ? clear_bhb_loop+0x40/0x90 [ 508.038683][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.038708][T11188] RIP: 0033:0x7f0cf079de59 [ 508.038727][T11188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.038751][T11188] RSP: 002b:00007f0cf1698028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 508.038774][T11188] RAX: ffffffffffffffda RBX: 00007f0cf0a26180 RCX: 00007f0cf079de59 [ 508.038791][T11188] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000008 [ 508.038805][T11188] RBP: 00007f0cf0833e6f R08: 0000000000000000 R09: 0000000000000000 [ 508.038820][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.038834][T11188] R13: 00007f0cf0a26218 R14: 00007f0cf0a26180 R15: 00007ffe27cd56d8 [ 508.038865][T11188] [ 510.268278][T11195] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 510.541648][T11207] smpboot: CPU 1 is now offline [ 510.922290][T10037] Bluetooth: hci4: Unable to find connection for big 0xe0 [ 510.941258][T11214] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 511.161501][T11212] ima: policy update failed [ 511.290553][ T29] audit: type=1802 audit(4294967302.952:11): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.987" res=0 errno=0 [ 513.360695][T11255] Invalid ELF header magic: != ELF [ 513.850981][T11262] FAULT_INJECTION: forcing a failure. [ 513.850981][T11262] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.374791][T11262] CPU: 0 UID: 0 PID: 11262 Comm: syz.9.995 Not tainted syzkaller #0 PREEMPT(full) [ 514.374825][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 514.374840][T11262] Call Trace: [ 514.374848][T11262] [ 514.374857][T11262] dump_stack_lvl+0x100/0x190 [ 514.374891][T11262] should_fail_ex.cold+0x5/0xa [ 514.374919][T11262] get_futex_key+0x1d2/0x14f0 [ 514.374963][T11262] ? __pfx_get_futex_key+0x10/0x10 [ 514.375004][T11262] ? do_epoll_ctl_file+0x672/0x3640 [ 514.375037][T11262] futex_wake+0xf4/0x5e0 [ 514.375066][T11262] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 514.375093][T11262] ? __pfx_futex_wake+0x10/0x10 [ 514.375133][T11262] do_futex+0x2b2/0x440 [ 514.375158][T11262] ? __pfx_do_futex+0x10/0x10 [ 514.375182][T11262] ? do_epoll_ctl+0x12e/0x1a0 [ 514.375215][T11262] __x64_sys_futex+0x34f/0x4d0 [ 514.375244][T11262] ? __pfx___x64_sys_futex+0x10/0x10 [ 514.375269][T11262] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 514.375304][T11262] do_syscall_64+0x115/0x840 [ 514.375326][T11262] ? clear_bhb_loop+0x40/0x90 [ 514.375355][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.375380][T11262] RIP: 0033:0x7f500059de59 [ 514.375399][T11262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.375423][T11262] RSP: 002b:00007f4ffe7b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 514.375447][T11262] RAX: ffffffffffffffda RBX: 00007f5000826188 RCX: 00007f500059de59 [ 514.375463][T11262] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f500082618c [ 514.375478][T11262] RBP: 00007f5000826180 R08: 0000000000000001 R09: 0000000000000000 [ 514.375493][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.375507][T11262] R13: 00007f5000826218 R14: 00007ffcb07010e0 R15: 00007ffcb07011c8 [ 514.375537][T11262] [ 518.537819][T11308] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 518.695516][T11309] smpboot: CPU 1 is now offline [ 519.700632][T11333] FAULT_INJECTION: forcing a failure. [ 519.700632][T11333] name fail_futex, interval 1, probability 0, space 0, times 0 [ 519.700671][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.9.1007 Not tainted syzkaller #0 PREEMPT(full) [ 519.700700][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 519.700715][T11333] Call Trace: [ 519.700722][T11333] [ 519.700730][T11333] dump_stack_lvl+0x100/0x190 [ 519.700761][T11333] should_fail_ex.cold+0x5/0xa [ 519.700788][T11333] get_futex_key+0x1d2/0x14f0 [ 519.700831][T11333] ? __pfx_get_futex_key+0x10/0x10 [ 519.700871][T11333] ? do_epoll_ctl_file+0x672/0x3640 [ 519.700903][T11333] futex_wake+0xf4/0x5e0 [ 519.700932][T11333] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 519.700959][T11333] ? __pfx_futex_wake+0x10/0x10 [ 519.701000][T11333] do_futex+0x2b2/0x440 [ 519.701025][T11333] ? __pfx_do_futex+0x10/0x10 [ 519.701049][T11333] ? do_epoll_ctl+0x12e/0x1a0 [ 519.701078][T11333] __x64_sys_futex+0x34f/0x4d0 [ 519.701107][T11333] ? __pfx___x64_sys_futex+0x10/0x10 [ 519.701132][T11333] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 519.701175][T11333] do_syscall_64+0x115/0x840 [ 519.701198][T11333] ? clear_bhb_loop+0x40/0x90 [ 519.701227][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.701252][T11333] RIP: 0033:0x7f500059de59 [ 519.701271][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.701295][T11333] RSP: 002b:00007f4ffe7b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 519.701318][T11333] RAX: ffffffffffffffda RBX: 00007f5000826188 RCX: 00007f500059de59 [ 519.701334][T11333] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f500082618c [ 519.701349][T11333] RBP: 00007f5000826180 R08: 0000000000000001 R09: 0000000000000000 [ 519.701365][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.701379][T11333] R13: 00007f5000826218 R14: 00007ffcb07010e0 R15: 00007ffcb07011c8 [ 519.701409][T11333] [ 523.428837][T11368] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 523.753711][T11369] smpboot: CPU 1 is now offline [ 523.818882][T11379] FAULT_INJECTION: forcing a failure. [ 523.818882][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 523.912952][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.9.1018 Not tainted syzkaller #0 PREEMPT(full) [ 523.912985][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 523.912999][T11379] Call Trace: [ 523.913007][T11379] [ 523.913016][T11379] dump_stack_lvl+0x100/0x190 [ 523.913050][T11379] should_fail_ex.cold+0x5/0xa [ 523.913076][T11379] should_failslab+0xc2/0x120 [ 523.913108][T11379] __kmalloc_noprof+0xfc/0x820 [ 523.913135][T11379] ? copy_splice_read+0x1a3/0xbb0 [ 523.913179][T11379] copy_splice_read+0x1a3/0xbb0 [ 523.913214][T11379] ? __mutex_lock+0x26d/0x1bd0 [ 523.913237][T11379] ? pipe_lock+0x69/0x80 [ 523.913270][T11379] ? __lock_acquire+0x49f/0x1a40 [ 523.913309][T11379] ? __pfx_copy_splice_read+0x10/0x10 [ 523.913360][T11379] ? __fget_files+0x215/0x3d0 [ 523.913397][T11379] ? __pfx_copy_splice_read+0x10/0x10 [ 523.913434][T11379] do_splice_read+0x285/0x370 [ 523.913475][T11379] splice_file_to_pipe+0x82/0x120 [ 523.913501][T11379] do_sendfile+0x366/0xe20 [ 523.913540][T11379] ? __pfx_do_sendfile+0x10/0x10 [ 523.913571][T11379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 523.913613][T11379] ? __fget_files+0x21f/0x3d0 [ 523.913655][T11379] __x64_sys_sendfile64+0x1d8/0x220 [ 523.913678][T11379] ? ksys_write+0x1ac/0x250 [ 523.913712][T11379] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 523.913745][T11379] do_syscall_64+0x115/0x840 [ 523.913764][T11379] ? clear_bhb_loop+0x40/0x90 [ 523.913793][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.913816][T11379] RIP: 0033:0x7f500059de59 [ 523.913834][T11379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.913892][T11379] RSP: 002b:00007f4ffe7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 523.913915][T11379] RAX: ffffffffffffffda RBX: 00007f5000825fa0 RCX: 00007f500059de59 [ 523.913930][T11379] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 523.913944][T11379] RBP: 00007f4ffe7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.913958][T11379] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 523.913972][T11379] R13: 00007f5000826038 R14: 00007f5000825fa0 R15: 00007ffcb07011c8 [ 523.914002][T11379] [ 524.564312][T11381] FAULT_INJECTION: forcing a failure. [ 524.564312][T11381] name failslab, interval 1, probability 0, space 0, times 0 [ 524.590791][T11381] CPU: 0 UID: 0 PID: 11381 Comm: syz.6.1019 Not tainted syzkaller #0 PREEMPT(full) [ 524.590825][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 524.590840][T11381] Call Trace: [ 524.590848][T11381] [ 524.590857][T11381] dump_stack_lvl+0x100/0x190 [ 524.590889][T11381] should_fail_ex.cold+0x5/0xa [ 524.590915][T11381] ? __pfx_filemap_map_pages+0x10/0x10 [ 524.590953][T11381] should_failslab+0xc2/0x120 [ 524.590985][T11381] kmem_cache_alloc_noprof+0x91/0x6a0 [ 524.591014][T11381] ? ptlock_alloc+0x1f/0x70 [ 524.591056][T11381] ? __pfx_filemap_map_pages+0x10/0x10 [ 524.591092][T11381] ptlock_alloc+0x1f/0x70 [ 524.591128][T11381] pte_alloc_one+0x82/0x3d0 [ 524.591165][T11381] __do_fault+0x26c/0x440 [ 524.591194][T11381] do_fault+0xa99/0x1750 [ 524.591225][T11381] ? __pmd_alloc+0x3fb/0x950 [ 524.591260][T11381] __handle_mm_fault+0x187d/0x2a00 [ 524.591303][T11381] ? mt_find+0x45e/0x8e0 [ 524.591332][T11381] ? __pfx___handle_mm_fault+0x10/0x10 [ 524.591368][T11381] ? __pfx_mt_find+0x10/0x10 [ 524.591410][T11381] ? find_vma+0xbf/0x140 [ 524.591437][T11381] ? __pfx_find_vma+0x10/0x10 [ 524.591468][T11381] handle_mm_fault+0x37b/0xa30 [ 524.591512][T11381] do_user_addr_fault+0x74c/0x12f0 [ 524.591552][T11381] exc_page_fault+0x6f/0xd0 [ 524.591592][T11381] asm_exc_page_fault+0x26/0x30 [ 524.591616][T11381] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 524.591649][T11381] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 524.591673][T11381] RSP: 0018:ffffc900058d7e38 EFLAGS: 00050202 [ 524.591692][T11381] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 524.591714][T11381] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900058d7e90 [ 524.591729][T11381] RBP: 000000000000000c R08: 0000000000000001 R09: fffff52000b1afd3 [ 524.591743][T11381] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 524.591757][T11381] R13: ffffc900058d7e90 R14: 0000000000000001 R15: 0000000000000007 [ 524.591791][T11381] _copy_from_user+0x98/0xd0 [ 524.591829][T11381] __x64_sys_epoll_ctl+0x131/0x1e0 [ 524.591857][T11381] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 524.591892][T11381] do_syscall_64+0x115/0x840 [ 524.591914][T11381] ? clear_bhb_loop+0x40/0x90 [ 524.591943][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.591968][T11381] RIP: 0033:0x7f9bfa79de59 [ 524.591987][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.592010][T11381] RSP: 002b:00007f9bf89f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 524.592031][T11381] RAX: ffffffffffffffda RBX: 00007f9bfaa25fa0 RCX: 00007f9bfa79de59 [ 524.592047][T11381] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 524.592061][T11381] RBP: 00007f9bfa833e6f R08: 0000000000000000 R09: 0000000000000000 [ 524.592075][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.592090][T11381] R13: 00007f9bfaa26038 R14: 00007f9bfaa25fa0 R15: 00007ffcf07e4f78 [ 524.592120][T11381] [ 525.499254][T10037] Bluetooth: hci8: Unable to find connection for big 0xe0 [ 525.798226][ T29] audit: type=1800 audit(4294967297.280:12): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1024" name="version" dev="configfs" ino=43863 res=0 errno=0 [ 529.098323][T11422] Invalid ELF header magic: != ELF [ 529.957568][T10037] Bluetooth: hci4: Unable to find connection for big 0xe0 [ 530.377400][T11436] Invalid ELF header magic: != ELF [ 531.028950][T11451] FAULT_INJECTION: forcing a failure. [ 531.028950][T11451] name failslab, interval 1, probability 0, space 0, times 0 [ 531.096441][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz.8.1036 Not tainted syzkaller #0 PREEMPT(full) [ 531.096478][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 531.096493][T11451] Call Trace: [ 531.096500][T11451] [ 531.096509][T11451] dump_stack_lvl+0x100/0x190 [ 531.096541][T11451] should_fail_ex.cold+0x5/0xa [ 531.096568][T11451] should_failslab+0xc2/0x120 [ 531.096601][T11451] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 531.096634][T11451] ? debugfs_create_symlink+0x29/0x220 [ 531.096673][T11451] kstrdup+0x51/0xe0 [ 531.096702][T11451] debugfs_create_symlink+0x29/0x220 [ 531.096737][T11451] ref_tracker_dir_symlink+0x257/0x3b0 [ 531.096777][T11451] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 531.096852][T11451] ? __pfx_net_ns_net_init+0x10/0x10 [ 531.096883][T11451] net_ns_net_init+0x7e/0x120 [ 531.096913][T11451] ops_init+0x1e2/0x5f0 [ 531.096945][T11451] setup_net+0x118/0x3a0 [ 531.096975][T11451] ? __pfx_setup_net+0x10/0x10 [ 531.097005][T11451] ? mutex_init_lockdep+0xf1/0x120 [ 531.097048][T11451] copy_net_ns+0x46f/0x7c0 [ 531.097083][T11451] create_new_namespaces+0x3ea/0xac0 [ 531.097130][T11451] unshare_nsproxy_namespaces+0xf2/0x220 [ 531.097157][T11451] ksys_unshare+0x438/0xab0 [ 531.097188][T11451] ? __pfx_ksys_unshare+0x10/0x10 [ 531.097227][T11451] __x64_sys_unshare+0x31/0x40 [ 531.097255][T11451] do_syscall_64+0x115/0x840 [ 531.097283][T11451] ? clear_bhb_loop+0x40/0x90 [ 531.097314][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.097338][T11451] RIP: 0033:0x7fc07839de59 [ 531.097357][T11451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.097381][T11451] RSP: 002b:00007fc079210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 531.097405][T11451] RAX: ffffffffffffffda RBX: 00007fc078625fa0 RCX: 00007fc07839de59 [ 531.097421][T11451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 531.097435][T11451] RBP: 00007fc078433e6f R08: 0000000000000000 R09: 0000000000000000 [ 531.097450][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.097464][T11451] R13: 00007fc078626038 R14: 00007fc078625fa0 R15: 00007fff4274dd08 [ 531.097494][T11451] [ 531.879445][T10037] Bluetooth: hci4: unexpected event 0x10 length: 124 > 1 [ 531.882324][T10037] Bluetooth: hci4: hardware error 0x00 [ 533.775239][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1040'. [ 534.221888][T11467] ecryptfs_miscdev_write: Invalid packet size [6080] [ 534.362727][T10037] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 535.768543][T11479] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 536.099460][T11480] smpboot: CPU 1 is now offline [ 538.093071][T10037] Bluetooth: hci8: Unable to find connection for big 0xe0 [ 538.755148][T11518] random: crng reseeded on system resumption [ 539.814995][T11532] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 540.012472][T11538] smpboot: CPU 1 is now offline [ 540.157947][T11524] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 540.381838][T11528] smpboot: CPU 1 is now offline [ 541.117118][T11550] netlink: 'syz.6.1055': attribute type 1 has an invalid length. [ 541.178718][T11550] netlink: 'syz.6.1055': attribute type 6 has an invalid length. [ 541.537127][T10037] Bluetooth: hci5: Unable to find connection for big 0xe0 [ 542.784535][T11567] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[10033] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11567] [ 544.351171][T11599] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 544.611712][T11601] smpboot: CPU 1 is now offline [ 544.681711][T10037] Bluetooth: hci5: command 0x2016 tx timeout [ 546.614921][T11632] netlink: 'syz.5.1073': attribute type 1 has an invalid length. [ 547.859534][T11643] FAULT_INJECTION: forcing a failure. [ 547.859534][T11643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.957207][T11643] CPU: 0 UID: 0 PID: 11643 Comm: syz.8.1075 Not tainted syzkaller #0 PREEMPT(full) [ 547.957241][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 547.957271][T11643] Call Trace: [ 547.957278][T11643] [ 547.957287][T11643] dump_stack_lvl+0x100/0x190 [ 547.957318][T11643] should_fail_ex.cold+0x5/0xa [ 547.957341][T11643] ? prepare_alloc_pages+0x16d/0x5f0 [ 547.957377][T11643] should_fail_alloc_page+0xeb/0x140 [ 547.957410][T11643] prepare_alloc_pages+0x1f0/0x5f0 [ 547.957442][T11643] ? is_bpf_text_address+0x8a/0x1a0 [ 547.957479][T11643] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 547.957505][T11643] ? is_bpf_text_address+0x94/0x1a0 [ 547.957537][T11643] ? kernel_text_address+0x8d/0x100 [ 547.957571][T11643] ? find_held_lock+0x2b/0x80 [ 547.957598][T11643] ? __kernel_text_address+0xd/0x30 [ 547.957680][T11643] ? unwind_get_return_address+0x59/0xa0 [ 547.957716][T11643] ? arch_stack_walk+0xa6/0xf0 [ 547.957756][T11643] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.957785][T11643] ? __pfx_stack_trace_save+0x10/0x10 [ 547.957818][T11643] ? stack_depot_save_flags+0x27/0x9d0 [ 547.957863][T11643] ? kasan_save_stack+0x3f/0x50 [ 547.957890][T11643] ? kasan_save_stack+0x30/0x50 [ 547.957919][T11643] ? handle_mm_fault+0x37b/0xa30 [ 547.957955][T11643] ? __get_user_pages+0x1178/0x32a0 [ 547.957986][T11643] ? populate_vma_page_range+0x267/0x3f0 [ 547.958019][T11643] ? __mm_populate+0x107/0x3a0 [ 547.958050][T11643] ? vm_mmap_pgoff+0x37f/0x470 [ 547.958077][T11643] ? ksys_mmap_pgoff+0xe4/0x610 [ 547.958106][T11643] ? __x64_sys_mmap+0x125/0x190 [ 547.958131][T11643] ? do_syscall_64+0x115/0x840 [ 547.958152][T11643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.958179][T11643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.958214][T11643] ? policy_nodemask+0xed/0x4f0 [ 547.958249][T11643] alloc_pages_mpol+0x1fb/0x540 [ 547.958283][T11643] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 547.958324][T11643] alloc_pages_noprof+0x1a/0x160 [ 547.958361][T11643] pte_alloc_one+0x1c/0x3d0 [ 547.958397][T11643] __pte_alloc+0x6d/0x3e0 [ 547.958425][T11643] ? __pfx___pte_alloc+0x10/0x10 [ 547.958454][T11643] ? do_raw_spin_lock+0x128/0x260 [ 547.958478][T11643] ? find_held_lock+0x2b/0x80 [ 547.958507][T11643] do_anonymous_page+0x13ae/0x2080 [ 547.958550][T11643] ? __pmd_alloc+0x3fb/0x950 [ 547.958584][T11643] __handle_mm_fault+0x1d2c/0x2a00 [ 547.958633][T11643] ? mt_find+0x45e/0x8e0 [ 547.958661][T11643] ? __pfx___handle_mm_fault+0x10/0x10 [ 547.958698][T11643] ? __pfx_mt_find+0x10/0x10 [ 547.958747][T11643] handle_mm_fault+0x37b/0xa30 [ 547.958792][T11643] __get_user_pages+0x1178/0x32a0 [ 547.958835][T11643] ? __pfx___get_user_pages+0x10/0x10 [ 547.958875][T11643] populate_vma_page_range+0x267/0x3f0 [ 547.958911][T11643] ? __pfx_populate_vma_page_range+0x10/0x10 [ 547.958944][T11643] ? __pfx_find_vma_intersection+0x10/0x10 [ 547.958976][T11643] ? do_mmap+0x93f/0x12f0 [ 547.959010][T11643] __mm_populate+0x107/0x3a0 [ 547.959045][T11643] ? __pfx___mm_populate+0x10/0x10 [ 547.959081][T11643] ? up_write+0x2e5/0x5c0 [ 547.959106][T11643] vm_mmap_pgoff+0x37f/0x470 [ 547.959140][T11643] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 547.959175][T11643] ? __pfx_do_futex+0x10/0x10 [ 547.959204][T11643] ksys_mmap_pgoff+0xe4/0x610 [ 547.959235][T11643] ? __x64_sys_futex+0x358/0x4d0 [ 547.959260][T11643] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 547.959290][T11643] ? xfd_validate_state+0x129/0x190 [ 547.959321][T11643] __x64_sys_mmap+0x125/0x190 [ 547.959351][T11643] do_syscall_64+0x115/0x840 [ 547.959372][T11643] ? clear_bhb_loop+0x40/0x90 [ 547.959401][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.959427][T11643] RIP: 0033:0x7fc07839de59 [ 547.959448][T11643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.959472][T11643] RSP: 002b:00007fc079210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 547.959495][T11643] RAX: ffffffffffffffda RBX: 00007fc078625fa0 RCX: 00007fc07839de59 [ 547.959511][T11643] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 547.959525][T11643] RBP: 00007fc078433e6f R08: 0000000000000002 R09: 0000000000008000 [ 547.959540][T11643] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 547.959555][T11643] R13: 00007fc078626038 R14: 00007fc078625fa0 R15: 00007fff4274dd08 [ 547.959585][T11643] [ 549.799537][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 551.499288][T11692] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 551.912701][ T29] audit: type=1800 audit(4294967299.021:13): pid=11700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1084" name="dbroot" dev="configfs" ino=45637 res=0 errno=0 [ 552.510752][T11709] binder: 11701:11709 ioctl c0306201 200000000000 returned -14 [ 552.865606][T11706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.927583][T11706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 552.962450][T11706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.014890][T11706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.072412][T11706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 553.166728][T11706] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 553.193071][T11706] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 553.241518][T11706] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 553.271823][T11706] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 553.290493][T11706] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 553.342588][T11706] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 553.385822][T11706] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 553.419074][T11706] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 553.447602][T11706] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 553.475990][T11706] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 554.672115][T10037] Bluetooth: hci0: command 0x2016 tx timeout [ 554.992627][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 554.998928][T10037] Bluetooth: hci3: command 0x2016 tx timeout [ 555.072787][T10037] Bluetooth: hci1: command 0x2016 tx timeout [ 555.232205][T10037] Bluetooth: hci5: command 0x2016 tx timeout [ 555.312373][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 555.318688][T10037] Bluetooth: hci7: command 0x2016 tx timeout [ 555.474511][T10037] Bluetooth: hci8: command 0x0c1a tx timeout [ 555.671651][T10037] Bluetooth: hci7: unexpected event for opcode 0x7c89 [ 556.129998][T11755] zswap: compressor F not available [ 557.029460][T10037] Bluetooth: hci8: unexpected event 0x34 length: 726 > 6 [ 557.060374][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1099'. [ 557.151771][T10037] Bluetooth: hci1: command 0x2016 tx timeout [ 557.275087][T11785] macsec0: entered promiscuous mode [ 557.294451][T11785] macsec0: entered allmulticast mode [ 557.311530][ T50] Bluetooth: hci5: command 0x2016 tx timeout [ 557.328544][T11785] veth1_macvtap: entered allmulticast mode [ 557.393842][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 557.551698][ T50] Bluetooth: hci8: command 0x0c1a tx timeout [ 559.134000][T11812] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 559.282253][T11816] smpboot: CPU 1 is now offline [ 559.631964][ T50] Bluetooth: hci8: command 0x0c1a tx timeout [ 560.382894][T10037] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 560.404624][T10037] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 560.417612][T10037] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 560.428668][T10037] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 560.442461][T10037] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 560.509831][ T30] INFO: task syz-executor:5632 blocked for more than 143 seconds. [ 560.509861][ T30] Not tainted syzkaller #0 [ 560.509875][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.509885][ T30] task:syz-executor state:D stack:22664 pid:5632 tgid:5632 ppid:1 task_flags:0x400140 flags:0x00080002 [ 560.509962][ T30] Call Trace: [ 560.509971][ T30] [ 560.509984][ T30] __schedule+0x125c/0x6730 [ 560.510040][ T30] ? do_raw_spin_lock+0x128/0x260 [ 560.510076][ T30] ? __pfx___schedule+0x10/0x10 [ 560.510110][ T30] ? find_held_lock+0x2b/0x80 [ 560.510139][ T30] ? schedule+0x225/0x2c0 [ 560.510177][ T30] schedule+0xdd/0x2c0 [ 560.510212][ T30] schedule_preempt_disabled+0x13/0x30 [ 560.510249][ T30] __mutex_lock+0xccc/0x1bd0 [ 560.510273][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 560.510304][ T30] ? __lock_acquire+0x49f/0x1a40 [ 560.510343][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 560.510377][ T30] ? net_generic+0xea/0x2a0 [ 560.510400][ T30] ? net_generic+0xea/0x2a0 [ 560.510429][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 560.510456][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 560.510484][ T30] nfsd_umount+0x3b/0x60 [ 560.510515][ T30] deactivate_locked_super+0xc1/0x1b0 [ 560.510551][ T30] deactivate_super+0xe7/0x110 [ 560.510587][ T30] cleanup_mnt+0x21f/0x450 [ 560.510626][ T30] task_work_run+0x150/0x240 [ 560.510661][ T30] ? __pfx_task_work_run+0x10/0x10 [ 560.510703][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 560.510742][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.510773][ T30] do_syscall_64+0x652/0x840 [ 560.510795][ T30] ? clear_bhb_loop+0x40/0x90 [ 560.510825][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.510851][ T30] RIP: 0033:0x7febc679f097 [ 560.510871][ T30] RSP: 002b:00007ffe729c79b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 560.510896][ T30] RAX: 0000000000000000 RBX: 00007febc68332ca RCX: 00007febc679f097 [ 560.510912][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe729c7a70 [ 560.510928][ T30] RBP: 00007ffe729c7a70 R08: 00007ffe729c8a70 R09: 00000000ffffffff [ 560.510945][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe729c8b00 [ 560.510961][ T30] R13: 00007febc68332ca R14: 000000000006403b R15: 00007ffe729c8b40 [ 560.510992][ T30] [ 560.511023][ T30] INFO: task syz-executor:9254 blocked for more than 143 seconds. [ 560.511040][ T30] Not tainted syzkaller #0 [ 560.511053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.511063][ T30] task:syz-executor state:D stack:23608 pid:9254 tgid:9254 ppid:1 task_flags:0x400140 flags:0x00080002 [ 560.511136][ T30] Call Trace: [ 560.511145][ T30] [ 560.511157][ T30] __schedule+0x125c/0x6730 [ 560.511201][ T30] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 560.511272][ T30] ? __pfx___schedule+0x10/0x10 [ 560.511306][ T30] ? find_held_lock+0x2b/0x80 [ 560.511335][ T30] ? schedule+0x225/0x2c0 [ 560.511374][ T30] schedule+0xdd/0x2c0 [ 560.511408][ T30] schedule_preempt_disabled+0x13/0x30 [ 560.511444][ T30] __mutex_lock+0xccc/0x1bd0 [ 560.511467][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 560.511495][ T30] ? __lock_acquire+0x49f/0x1a40 [ 560.511535][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 560.511568][ T30] ? net_generic+0xea/0x2a0 [ 560.511591][ T30] ? net_generic+0xea/0x2a0 [ 560.511621][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 560.511649][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 560.511678][ T30] nfsd_umount+0x3b/0x60 [ 560.511707][ T30] deactivate_locked_super+0xc1/0x1b0 [ 560.511742][ T30] deactivate_super+0xe7/0x110 [ 560.511777][ T30] cleanup_mnt+0x21f/0x450 [ 560.511815][ T30] task_work_run+0x150/0x240 [ 560.511849][ T30] ? __pfx_task_work_run+0x10/0x10 [ 560.511891][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 560.511929][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.511959][ T30] do_syscall_64+0x652/0x840 [ 560.511981][ T30] ? clear_bhb_loop+0x40/0x90 [ 560.512011][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.512041][ T30] RIP: 0033:0x7f457c19f097 [ 560.512060][ T30] RSP: 002b:00007ffc746306b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 560.512084][ T30] RAX: 0000000000000000 RBX: 00007f457c2332ca RCX: 00007f457c19f097 [ 560.512100][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc74630770 [ 560.512116][ T30] RBP: 00007ffc74630770 R08: 00007ffc74631770 R09: 00000000ffffffff [ 560.512133][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc74631800 [ 560.512148][ T30] R13: 00007f457c2332ca R14: 00000000000620f7 R15: 00007ffc74631840 [ 560.512179][ T30] [ 560.512235][ T30] [ 560.512235][ T30] Showing all locks held in the system: [ 560.512251][ T30] 1 lock held by khungtaskd/30: [ 560.512265][ T30] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 560.512344][ T30] 2 locks held by kworker/u8:4/59: [ 560.512358][ T30] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 560.512428][ T30] #1: ffffc9000200fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 560.512516][ T30] 2 locks held by getty/5382: [ 560.512529][ T30] #0: ffff888037fae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 560.512589][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 560.512660][ T30] 2 locks held by syz-executor/5623: [ 560.512674][ T30] #0: ffff88802b6c00d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 560.512748][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 560.512810][ T30] 3 locks held by udevd/5624: [ 560.512824][ T30] 2 locks held by syz-executor/5632: [ 560.512838][ T30] #0: ffff888079af00d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 560.512911][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 560.512973][ T30] 1 lock held by udevd/5636: [ 560.512992][ T30] 2 locks held by syz-executor/9254: [ 560.513006][ T30] #0: ffff88807b9860d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 560.513086][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 560.513150][ T30] 2 locks held by syz.3.779/9917: [ 560.513164][ T30] #0: ffffffff90b4d848 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 560.513222][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 560.513292][ T30] 2 locks held by syz-executor/10035: [ 560.513306][ T30] #0: ffff888033a860d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 560.513379][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 560.513443][ T30] 2 locks held by syz-executor/10194: [ 560.513457][ T30] #0: ffff8880360e00d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 560.513530][ T30] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 560.513598][ T30] 2 locks held by syz.8.1106/11822: [ 560.513612][ T30] 2 locks held by syz.8.1106/11823: [ 560.513627][ T30] 2 locks held by syz.8.1106/11824: [ 560.513641][ T30] 3 locks held by syz.9.1107/11826: [ 560.513654][ T30] 1 lock held by syz.9.1107/11827: [ 560.513668][ T30] 3 locks held by kworker/u8:4/11833: [ 560.513683][ T30] [ 560.513688][ T30] ============================================= [ 560.513688][ T30] [ 560.513709][ T30] NMI backtrace for cpu 0 [ 560.513722][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.513748][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 560.513761][ T30] Call Trace: [ 560.513768][ T30] [ 560.513776][ T30] dump_stack_lvl+0x100/0x190 [ 560.513801][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 560.513830][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.513858][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 560.513893][ T30] sys_info+0x141/0x190 [ 560.513926][ T30] watchdog+0xcb1/0x1030 [ 560.513962][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.513997][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.514035][ T30] ? __kthread_parkme+0x18c/0x230 [ 560.514062][ T30] ? kthread+0x13a/0x450 [ 560.514088][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.514118][ T30] kthread+0x370/0x450 [ 560.514146][ T30] ? __pfx_kthread+0x10/0x10 [ 560.514176][ T30] ret_from_fork+0x72b/0xd50 [ 560.514203][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 560.514231][ T30] ? __switch_to+0x800/0x10f0 [ 560.514265][ T30] ? __switch_to_asm+0x39/0x70 [ 560.514295][ T30] ? __pfx_kthread+0x10/0x10 [ 560.514325][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.514370][ T30] [ 560.514391][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 560.514405][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.514431][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 560.514445][ T30] Call Trace: [ 560.514453][ T30] [ 560.514461][ T30] dump_stack_lvl+0x100/0x190 [ 560.514487][ T30] vpanic+0x552/0x970 [ 560.514509][ T30] ? __pfx_vpanic+0x10/0x10 [ 560.514532][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 560.514565][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.514595][ T30] panic+0xd1/0xe0 [ 560.514616][ T30] ? __pfx_panic+0x10/0x10 [ 560.514640][ T30] ? nmi_cpu_backtrace+0x79/0x200 [ 560.514674][ T30] ? nmi_trigger_cpumask_backtrace+0x203/0x2a0 [ 560.514706][ T30] ? watchdog.cold+0x1ec/0x234 [ 560.514732][ T30] ? watchdog+0xcc1/0x1030 [ 560.514764][ T30] watchdog.cold+0x1fd/0x234 [ 560.514796][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.514832][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.514865][ T30] ? __kthread_parkme+0x18c/0x230 [ 560.514892][ T30] ? kthread+0x13a/0x450 [ 560.514920][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.514950][ T30] kthread+0x370/0x450 [ 560.514978][ T30] ? __pfx_kthread+0x10/0x10 [ 560.515010][ T30] ret_from_fork+0x72b/0xd50 [ 560.515042][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 560.515071][ T30] ? __switch_to+0x800/0x10f0 [ 560.515104][ T30] ? __switch_to_asm+0x39/0x70 [ 560.515135][ T30] ? __pfx_kthread+0x10/0x10 [ 560.515167][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.515211][ T30] [ 560.515274][ T30] Kernel Offset: disabled