last executing test programs: 2m39.664506395s ago: executing program 2 (id=105): mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) r1 = io_uring_setup$auto(0x8967, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd6\x00', 0x147602, 0x0) (async) r2 = socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x3, 0xfff, 0xffffffffffffdc31, r0, 0x1) (async) r3 = socket(0x2b, 0x1, 0x1) (async) capset$auto(0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r4, 0x0, 0x7ff) getsockopt$auto(r3, 0xfd, 0xba98, 0x0, 0x0) (async) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) write$auto(0x3, 0x0, 0x1) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffffff, &(0x7f0000000140)=""/96, 0x60) (async) modify_ldt$auto(0x1, &(0x7f00000000c0)="811ac2937dd0a049ac30f25cf77a61eb3dc03dc005bd24aa01c8108d90c33607827ca50d0c433f8011eead91c1f0deeadb9369a247acd8c7a7ebcc80187a6968b282749322ff", 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xe) 2m37.799034407s ago: executing program 2 (id=107): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10b402, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x4, &(0x7f0000000000)='/dev/bus/usb/016/001\x00', &(0x7f0000000140)="c4ea680cec6ef1ca6e1d7707d84da4455e6764d206c668a9d423ac74ed751d49606ed5fb3eec058d89e43004b6ade2a501631f3f88f9fc0aa64e5450bf12de35e417f8f68f", 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) r2 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r2, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) ioctl$auto_USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 2m35.860513437s ago: executing program 2 (id=112): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x400, 0x0) ioctl$auto_MEMISLOCKED(r0, 0x80084d17, &(0x7f0000000040)={0x91, 0x4}) (async) r1 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$auto_proc_pid_set_comm_operations_base(r1, &(0x7f0000000080)="0e411b28bd0c76460a1eded770ea05a90c8608220f9ccec7197acf31a16d701082bd2b0267ff2add440279e86c1083c333f5a777805619d2dea6ed4b811c9755853c198139f26dcb53a40f603b63daac2f7c42dbb971b56c9b0ec48adc542b26d2dacc5b6aa2", 0x66) close_range$auto(r1, r1, 0x8) r2 = ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x8001, 0x3, 0xfffffffffffffff4}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async, rerun: 64) r5 = waitid$auto_P_ALL(0x0, 0x3ab, &(0x7f00000002c0)={@siginfo_0_0={0x8, 0xc1af, 0x7, @_sigchld={0x0, 0xee00, 0x2, 0xff00000000000, 0xd}}}, 0x7, &(0x7f0000000340)={{0x4d9, 0x8aa}, {0x6f99}, 0xffffffffffffff8c, 0x26a7, 0x97, 0x2, 0x2, 0x2, 0x8, 0x5, 0x4, 0x8, 0x8, 0xfffffffffffffffc, 0x5}) (rerun: 64) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r1, &(0x7f0000001c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000000400)={0x1800, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1376, 0x2b, 0x0, 0x1, [@generic="dcb0a765d774a31269f38bc0b72d09fae8c404be27a57ed68e8d72229cc4d0689ec55fac2ade554996ffcf4bab38565a33c612060a434237ecdb356b6ad491bd6d95d98d981ebe33b73cd8b484a9f26979f86a183bdda77ce26124ae1ba34efc1070f4715c370e05f17b59ad9308858b089879069acba309e47169d6e6e9b022be1be8aec4689bc9e33aa904f816528a58a908cc6c0b1e9850f6dd63bb43c3f980f929e3379f513943a90a59cb5ef86414c7d7a5d549f9964001c15246b918f3d6cb2cf30c825c7b2b607c61fb5e9e86c2e8c4390cca5769c5f3a0b7e556372ec42d043b625963b46c2e2015f7fdffe1181e4a6d8b00f5", @generic="af483cdf77d03a32c9fa5435738d66b8d9eae39e95162b114b0a079ba5a452913ffa57c9fc0991c970", @nested={0x10d4, 0x55, 0x0, 0x1, [@nested={0x4, 0x163}, @generic="3a3b30455d0d2bf5aa43af6479184e6728ab247cd6f4b6562a347ac25ab78bf494f713857e733b4b7a7643fbdcf3dfbd11be0c922d2073c33738e2367ed3960019094f3b8e217d1b21bcdbc317562268", @generic="43580230fd5a099536dfb86533792d3688264ba8257dd405ec05a1ee9897ef1f53d3f63fa2425b38d1a405ca6ffcb90309bf8e4f1235fe07cc04dee4bb9a054f74da14bddaf32bb3ebb8ce993c16b26452f4bfc06d7cc6c29dd5bc9063cf738bbb88494f52b71d696ebf88470c726ab035d57b0a63c313cb", @generic="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", @nested={0x4, 0x165}]}, @nested={0x65, 0xfb, 0x0, 0x1, [@generic, @typed={0x8, 0x9b, 0x0, 0x0, @binary="aec9035b"}, @typed={0x8, 0xe1, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xd7, 0x0, 0x0, @fd=r0}, @generic="35c8f50bfadc646bc1f9a67cded747d9079d1fe905a841933664d90109acd916057da871bf971e119df26011f0a073389e815c1cae", @nested={0x4, 0x132}, @nested={0x4, 0xf1}, @nested={0x4, 0x4e}, @nested={0x4, 0xe8}, @typed={0x4, 0x126}]}, @typed={0xc4, 0xf1, 0x0, 0x0, @binary="e4967fd747a0977e666b6c2cb7f343c5d18a328d4a1da05a4047b3895d6e0afb4997e82691408231c6c2ae98409fa32354677ed01fd0549ad25bc5998e097cba414f8237c8b111edfb49ee4c269b98f6fb85bc0b532735d88309441314d8af4c15592c4b0eba8e70a7ee31f455e26d0d090c00e0f78ce71826a7d65d249909786268599c522e0d90bbf892f8a50bf5676766fe25566633bfe28803055bb5afdc58058ad75768e13259fdb610f9550cecfdc7854a8ff6867d1416d467602034b6"}, @generic="3ff2a4406ff8c92fbdc59a314e6466f88eb5196e1817a74796f95a478187a6290f8ef8c499dfb1a20e72dec0101ad4f1fabf399f972ab3919aa1a71909b5b4bf86a185ba3d607a0a0723fe3fd425e912adea"]}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x9}, @NL802154_ATTR_SEC_KEY={0x45b, 0x30, 0x0, 0x1, [@generic="edc4ccbde8d35d90ba6e0b50b960c7a1761878578d8ff6bece9702e85ff0070efabd0c922e3ea488b6667e21c382686c735490fd2995068605f6dede3d01dda2d5a950624c61ea73abf6550cb03c47f8e6046c8acefa9901a59e77518bd4b02e51ba1fff4a161599ece9437c97154d4a8f41", @nested={0x8d, 0xfb, 0x0, 0x1, [@typed={0x4, 0xe5}, @generic="116a840727d7500a2145626bfd00c8c9eb41156df6285e5972fba590b4ffb6fbd0f9436f60d4f221da67bf93851eddd361e5a070", @generic="212e2872e1bb4fe889e33db88b948819d1d791f83ba3320dda459b65d26295be5e6c425b639d7fda9f2a09f52302c86c60745cdf2de2a705eb9d71ef9537d8ed4a95ddc0fd8264dc95cab19a107a33ce96"]}, @generic="dc63c7b3eeac08acfb4ee060c40bcaa8448787e5415da41094aa11b56d5ac1e6950c9bfabe71305769dcb9106264e9d98698c5c966e9d3931223980bec95f93004a4c6c906d5c124a0565f9b33a7f40bcc233266196c31ec456004e61384dc72929a0956e36877333560f65ee9596fea36579b3deeb1317f7bad68fd1b9cd97c951935f26110ef3ffef7e17f69fc75766231238894447a87e357eb6aa1b0861c661dfaf550aaa320b77b25e0c374436277e25e383c0952de2c4ed83e22c7eea84caf0e2dccaf12119d30a63ef219705a6701310f01b711553afece640c8a21631a0cee8e6fedb1b8e1db788c03", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xc2}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x15d, 0x0, 0x0, @uid=0xee00}, @nested={0x1b8, 0x48, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @pid=r5}, @generic="8ad75fea0632fed0c2a4dabc4237208944a0af63320d95c4ebf6e6ffda56564ab2f47e26da5e701a14240c43ff279a56707591da90d14fca43f1089ff9e7a4794fee8dd28c50d0d11c77ee7b8caebf24beafff36a9cb3362f3ed09d39fa9d8858cda5ffdaa209a1058a13e24a28ad42c292cbdbf5a098b4a0a5e9ffbc0e90268c44b6b9ac05f4e17bc2f1aa28383c5261bdd6b76facccf1737faeaf3ccc85126a21d098ca2932f61e410b702f945f54c5951ba8a58060f20107f3f399bd027ea", @generic="59f89b4bda7fd4f1a163575a8a90db35730790a4afde935bc8613afe0f4bcb976da6b0070dca58be7e31312e840eea1311507ba42434855afd3de00520667c6b48dcd78bf780c2c89a179c237bddf0f55adf56dda2f0791fff9d05ac63ebbb830d9c6e17e7a21745bf3efc1d44", @typed={0x8, 0x10b, 0x0, 0x0, @u32=0xfffffff9}, @generic="c3e9928861207df0d6030571c5dd69fa7c61fc3e8289fe52660790d48200c0fc6c5bc2e4d828c49fed482e0ce47acf7705e231aca54bc40f6c8354c83ce3be21293cc2b6bef43d142b3c9bb915566ccfc7488fb359a6c35fe934c69a6f3ab416471425e8d0d675bcd2cecff14ef0d4168f1638b80108d5"]}, @nested={0x7e, 0xb8, 0x0, 0x1, [@generic="712bde633039ec2fcfdb308c4a6c47e54a10a2070cc88ca2e96cda43d1ee7135bd184fc1b49e02948013a4c3b2340105a0344617dd85597a9ad278134baf67830e0e85f77e349b8d6a8d0eed26846a1a881d400c70c5ba6c1746a2a39617013b9cc27c70a43d6641a3bc24456378b9f4f8b8", @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0xf, 0xd8, 0x0, 0x0, @binary="668b68d1cf2aeb4af9c5fc"}]}]}, 0x1800}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000880) (async) clock_gettime$auto(0x7, &(0x7f0000001c80)={0xd, 0x3ff}) (async) fsmount$auto(r2, 0x1ff, 0x0) (async) r7 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000001cc0)='/proc/thread-self/comm\x00', 0x2, 0x0) mq_notify$auto(r7, &(0x7f0000001dc0)={@sival_ptr=&(0x7f0000001d00)="dcbde0495b7ba7557d2850d2c0afb14810a246fa5520de3bac70641052def4e46fd011279e4d32a1b17b3b75f0eb9884031564b2268bd1eea78055e3d40fa106a830a70c1b8a05c4a4b289a04757e195e6155736405cd3d1b3cb555dd01a5bcf78024d4820c8a61f63e2d7e70689715ee9ef79bea363ca504b474cbaaa343ac7e0cef78addaaa34d", @inferred=r1, 0x6}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001e00), r3) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0x9, 0x7, "91d829e714"}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x1}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) write$auto(r3, &(0x7f0000001f40)='\x00', 0xc000000000) pwrite64$auto(r0, &(0x7f0000001f80)='+{\\@]&\x00', 0x3, 0x4) (async) ioctl$auto_FS_IOC_UNRESVSP64(r7, 0x4030582b, 0x76d7ff38) (async) poll$auto(&(0x7f0000001fc0)={r1, 0x5, 0x666}, 0x5, 0x1a674114) (async) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r0, 0x6, 0x44, &(0x7f0000002000)='(+[/\\\x00', 0x8) (async) getsockopt$auto_SO_ERROR(r3, 0x8, 0x4, &(0x7f0000002040)='+{\\@]&\x00', &(0x7f0000002080)=0x4) r9 = setfsgid$auto(0xee00) statx$auto(r2, &(0x7f00000020c0)='./file0\x00', 0x9, 0x10001, &(0x7f0000002100)={0xcb, 0xffffff00, 0x82, 0x9, r6, r9, 0x8, 0x8, 0x2, 0x5, 0xea, 0xfea, {0x1, 0xfffffff9}, {0x729e2edf, 0x13}, {0x8, 0x2}, {0xf, 0x3}, 0x401, 0x8, 0x1, 0x436e, 0x1, 0x4, 0xfddf, 0x7, 0x2, 0x40c, 0xfffffffb, 0x21, [0x23e6ffa3, 0x800000000000000, 0x8a79, 0xe05, 0x8, 0x14000000, 0x6, 0x400, 0x2]}) (async) ioctl$auto_I2C_SLAVE_FORCE(r3, 0x706, &(0x7f0000002200)="d42be7d499c65ecca581892e1a4a0927c2016b01ab318ebdeb26b5ebe5a160e60f09a4588d22d9a3396a68123995960bd460aae3b4986aebc4e28cbed9d28818b0fb9f5ba12f781ecb756c806724fe08929586042a051c4d4475db46db1758e7e3148c507c6dd6c7f8559b01e3d206b1e156e3fa9b5a3d5afee6b00f31ae028e694d73156f06e1508beb2edeb7903ef467c01cc3b134f8cd858a0cc6500604a96a07d4ea427f493dfbfe7171cc3ee8b94ddd524fc3997a088cd8a76033758d8cf9d27e0d11451c5b007b25be5cf5369935c9f739abf51b6a63299f6e279a848f2eba05f3f3839b2d7283efbd20") (async) select$auto(0x6, &(0x7f0000002300)={[0x7ff, 0x7, 0xd400000000000000, 0x7fffffff, 0x804, 0x5, 0x3, 0x6, 0xffffffffffffffff, 0xffffffff, 0x400000, 0x2, 0x7, 0x2, 0xfffffffffffffffe, 0x7ff]}, &(0x7f0000002380)={[0x6, 0x8001, 0xd9c8, 0x1ff, 0x6, 0x5, 0x6, 0x1000, 0xe98, 0xff, 0xfffffffffffffffc, 0x6944c8db, 0x9, 0x9, 0x1, 0x2]}, &(0x7f0000002400)={[0x3, 0x7, 0x1, 0x0, 0x62, 0x8000000000000001, 0x7, 0x10, 0x80000001, 0x7, 0x2, 0x4, 0xffffffffffffff80, 0x7c8, 0xff, 0x8000000000000000]}, &(0x7f0000002480)={0x3, 0xfffffffffffffff9}) r10 = fcntl$auto_F_RDLCK(0xffffffffffffffff, 0x781, 0x0) (async) r11 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002500), r2) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) fdatasync$auto(r10) 2m35.479573206s ago: executing program 2 (id=116): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2, 0x1, 0xdf, 0x9b72, 0x2, 0x8001) madvise$auto(0x110c230000, 0x1fffffe, 0x9) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) socket(0x6, 0x6, 0x9) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x15bc02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0xeda5, 0xc86) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="e5b725bd7000fcfbdd2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x48, 0x1}]}) sendmsg$auto_ETHTOOL_MSG_MM_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="ba74aca2ae17b4bd61d7acc23ae379e8e5ce7bb6cc484e61ce871fd8aa1cce1e43f3d70cad341ea4efe2c9e1117f8948b07298c61b4f67147ec81fa579a510130b42fbf12550a0deddf9984a73301486b75926689f48baa4a2d83baab22c0826674e01b44699de99ff26c5ea689a4a44708a10eae7e0246e0d7b290df459e912a3d908010ecf1a2daaaed98ac06c3983b76061dfa3b22a34293ce415eebec6c3becbb2573c693bc07890a75deb208bfe18e689fafaec1b50aecaf956", @ANYBLOB="000228bd7000fedbdf252b0000000800090002000000"], 0x1c}}, 0x40000c0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x800008) 2m32.625577549s ago: executing program 2 (id=126): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x44102, 0x0) fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) ioctl$auto(r0, 0x9000643b, 0xcd) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x1e1500, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r3 = socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async, rerun: 32) capset$auto(&(0x7f00000003c0)={0x20080522}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) write$auto(r4, 0x0, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async, rerun: 32) socket(0x11, 0x80003, 0x300) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x00!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) (async) sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r3, 0x8946, 0x24) 2m32.483284187s ago: executing program 0 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0xb) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1001}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001242}, 0x4, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x120, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x102, 0x11, '\x01\x00\x13jE\f\xf9r\xf5\xa3\xd2\x84 \x8b?\x8cy\xf9\x97\xc5S\xf6\xc84x\xb0\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\x9fd\x7f\xafnA\x8c\xb5\xfb\x0f\xf5&\xc0\vSt>\xdah\x19\xbb\x1a\xb6\x9f\xbf2\xdb\xe55\xa84\xaa|\xec\x88]\xc9I\x83t\xdb\xc8}X\xd2\xd6\xb08\xef\xad9-Y\xe0Q\xe0\x8er\xa1c\x84E\x9e\xccJ\xd4N\x1cv:=\xb8@NK\\y\x92B\x1b\xb6\xa4\xba\\\xa0\xe3\xc8\x10n\xeb\x9dE?O\xf8T\xf4x\x9a\xc3\xb2\xd2=k\f\x9e\xd2\xb0\xe8\x98=\x13\xd2\xf5\xd0\x7f\xf7wD\xc9\x18Ka\xca\x94\x9dbP\x981\vr*\x02r\x90jV\x03\xd67\x92_\xe7\xc9+\x92|\x85(\xde\b6\x97{JnL\xf0\xa3\xd7\xd0;\xbe7\xaf\x14!\xd7\xd5n(\xe0\xc8\xb13\xe2\x16\xb1\xda\x81\x0e\xec\xf0?I*U\x81d\x8dM<\xe17T\xdcS\xd5N\xd1\x8f\xa3\x91-\x96$:\x8c\xc7\x06\xb8b'}, @HWSIM_ATTR_PMSR_SUPPORT={0x8, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) (async) setrlimit$auto(0x2, &(0x7f0000000040)={0x0, 0x20000000000006}) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) 2m31.273462886s ago: executing program 0 (id=130): socket(0xa, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x0, 0x3f, 0x7fff, 0x20000000005, 0x80000000007, 0x1, 0x6, 0xff, 0x0, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) socket(0x2, 0x1, 0x0) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) 2m30.947043053s ago: executing program 2 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250600000014000180100001005e11970f497f9f23d63e7285"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) mmap$auto(0x7, 0x400007, 0xa, 0x100000013, r0, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x6f29, 0x0) ustat$auto(0x801, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setresuid$auto(0x0, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x40d0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2m30.692098437s ago: executing program 0 (id=132): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/udp6\x00', 0x48280, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = fcntl$auto_F_UNLCK(r1, 0xfffffffa, 0x2) write$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) 2m30.512301333s ago: executing program 0 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0x16) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYBLOB="0800010048665200080002"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(0x0, 0x80) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd6\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5b725bd7000fcfbdd2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) sendfile$auto(r5, 0x3, 0x0, 0x40000000c07) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r5) mmap$auto(0x6, 0x408008, 0x5, 0x10, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon13\x00', 0x400001, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0xc, 0x9, 0x16, 0x8001}, 0x101) close_range$auto(0x2, 0x8, 0x0) write$auto(r7, 0x0, 0x100082) 2m29.857462371s ago: executing program 0 (id=136): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x45) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x2000000000000003, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r2, 0x101) mkdir$auto(0x0, 0x8001) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/tracing/trace_options\x00', 0x80442, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c429b4b", 0x35) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r4, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @inferred, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) 2m28.476009073s ago: executing program 0 (id=141): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x7ffffffd}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r5 = openat$auto(r4, 0x0, 0xcfa8, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, r3, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_DEL(r6, 0x0, 0x40) bpf$auto(0xfffffffa, &(0x7f0000000580)=@bpf_attr_3={0x6, 0x3, 0x5, 0x2, 0xd8, 0x4009, 0x8, 0x83, 0x3, "3c613428fddff21e9bf9849577e2694e", 0x0, 0x8, r5, 0x6, 0x6, 0x10002, 0x5, 0x7, 0x8, 0x4, @attach_prog_fd=r2, 0xfffffff7, 0x1, 0x400, 0x7, 0xc8, r1, r3}, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m27.082470681s ago: executing program 3 (id=145): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x9, 0x2003f2, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0x4008884) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x90) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffe, 0xfa, 0x2, 0xa, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cd) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f1, 0x24) 2m26.097180958s ago: executing program 3 (id=147): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810804, 0x400000000ff7, 0x8000000008011, 0x3, 0x800008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0xfa9b, 0xfffffffffffffff9, 0x7ffffffffffffffe, 0x4, 0x7fffffffffffffff, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, r1, 0x0, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x200740, 0x0) lsm_get_self_attr$auto(0x68, 0x0, 0x0, 0x0) 2m25.190931627s ago: executing program 3 (id=148): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000140)="22edd92f", 0x4) sendfile$auto(r1, r1, 0x0, 0x2) r2 = io_uring_setup$auto(0x6, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x100000000000080, 0x7ff, 0x3, 0x11, r2, 0x8000) fcntl$auto_F_GET_RW_HINT(r0, 0x40b, 0x4bf060d9) write$auto(r0, 0x0, 0x5334) mmap$auto(0x9, 0x200000000400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffefffffffffffd) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000480)=""/104, 0x68) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) write$auto(r4, &(0x7f00000002c0)='0T\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyua/power/runtime_suspended_time\x00', 0x0, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000500)={@raw, "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"}) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r6 = epoll_create$auto(0x4) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/v4l-subdev4\x00', 0x18a041, 0x0) epoll_ctl$auto(r6, 0x1, r7, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x28) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) 2m24.455579051s ago: executing program 3 (id=150): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) removexattr$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bc, 0xaf1e, 0xc, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x202, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x2, 0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x5e57b2cc, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) read$auto_bm_status_operations_binfmt_misc(r3, &(0x7f0000000100)=""/213, 0xd5) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd708c02b14c1465768c0008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x20008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, r6, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) connect$auto(r7, &(0x7f0000000000)=@llc={0x1a, 0x323, 0x10, 0x80, 0x2, 0x7, @broadcast}, 0x39) sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00') r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r9) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r10, 0x311, 0x70bd2c, 0x25dfdc01, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) 2m23.443007906s ago: executing program 3 (id=153): unshare$auto(0x40000080) r0 = clone$auto(0x7, 0x40000008, 0x0, 0x0, 0xfffffffc) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000100)={@sival_int=0x7cb4, @raw=0x7f172694, 0x4, @_tid=r0}, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x40009, 0x694, 0x200000000009b72, r2, 0x100000000028000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x4001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) fsopen$auto(&(0x7f0000000080)='@\x00', 0x1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x17, 0x0, 0x4) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) 2m22.340684036s ago: executing program 3 (id=154): socket(0x2, 0xa, 0x80000001) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x0) (async, rerun: 64) r0 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x43, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000100)={@_si_pad}, 0x641e, &(0x7f0000000180)={{0x1, 0x5}, {0x2, 0x7f}, 0xf, 0x5234, 0x10001, 0x7, 0x3, 0x9, 0x2, 0x5, 0x10, 0x7, 0xfffffffffffffff8, 0x7, 0x3, 0x8001}) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xc00caee0, r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) r5 = socket(0x18, 0x4, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000240), r5) 2m15.784472149s ago: executing program 32 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250600000014000180100001005e11970f497f9f23d63e7285"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) mmap$auto(0x7, 0x400007, 0xa, 0x100000013, r0, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x6f29, 0x0) ustat$auto(0x801, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setresuid$auto(0x0, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x40d0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2m13.053569792s ago: executing program 33 (id=141): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x7ffffffd}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r5 = openat$auto(r4, 0x0, 0xcfa8, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, r3, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_DEL(r6, 0x0, 0x40) bpf$auto(0xfffffffa, &(0x7f0000000580)=@bpf_attr_3={0x6, 0x3, 0x5, 0x2, 0xd8, 0x4009, 0x8, 0x83, 0x3, "3c613428fddff21e9bf9849577e2694e", 0x0, 0x8, r5, 0x6, 0x6, 0x10002, 0x5, 0x7, 0x8, 0x4, @attach_prog_fd=r2, 0xfffffff7, 0x1, 0x400, 0x7, 0xc8, r1, r3}, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m7.105039714s ago: executing program 34 (id=154): socket(0x2, 0xa, 0x80000001) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x0) (async, rerun: 64) r0 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x43, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000100)={@_si_pad}, 0x641e, &(0x7f0000000180)={{0x1, 0x5}, {0x2, 0x7f}, 0xf, 0x5234, 0x10001, 0x7, 0x3, 0x9, 0x2, 0x5, 0x10, 0x7, 0xfffffffffffffff8, 0x7, 0x3, 0x8001}) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xc00caee0, r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) r5 = socket(0x18, 0x4, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000240), r5) 2m4.912406465s ago: executing program 4 (id=174): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x184) epoll_ctl$auto(r1, 0xfffffffd, r0, 0x0) epoll_ctl$auto(0x5, 0x4, r0, 0x0) 2m4.699802148s ago: executing program 4 (id=176): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1ec, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1e8, 0x5, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x513}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xd, 0x1, "01901a723ce1840925"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xed, 0x1, "5ecc9e6eefbc2e652745faa3366fe384b219606e4c1b8df1aaf7f2910afbc05b4787d92cecbef4f58766d0c4b73267c2440cf9436a50389b0309afdeab74cdc75f6d8ec07cf121dbfa58715eee351a0bd90b1c681d4aa29298bf12af9e3b03c29459054f427dac4f0037830f98fc20f3c1eb6e032e3952e5ae9563ea4d967e2e8fb71443de7289bd556087e54914b08e48d6b8f452e75cd467f077e811bbf6df31d8d66fdd9069422b32c1155332106e905f8765fbf27dd2a4a3fecd72805cbb6ae8aeff53ea433b88a39e25fcbc608c16ef6d32226338506ee8ca5f6997fb23a6f2aed63c97b10b28"}, @NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4085}, 0x240180d1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4b564d01, 0x4, 0x1}]}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 2m4.231220338s ago: executing program 4 (id=177): r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0) r4 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) write$auto(r4, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/bdi/252:0/power/runtime_status\x00', 0x43102, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000000000001) write$auto(r2, &(0x7f0000000240)='/sys/kernel/debug/split_huge_pages\x00', 0x9) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_UBI_IOCATT(r7, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x6, 0x1, 0x5, 0x5, 0x77}) sendfile$auto(r3, r3, 0x0, 0x4f64a1d5) r8 = waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@siginfo_0_0={0x0, 0x9, 0x7}}, 0x9, &(0x7f0000000340)={{0x0, 0x3935}, {0x4, 0x80000001}, 0x648, 0x0, 0x10001, 0x9aa, 0xffffffffffffffff, 0x2, 0x8, 0xd3f, 0x8, 0xc, 0x7, 0x6, 0x8001, 0xffffffffffffffff}) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x182b02, 0x0) sendfile$auto(r9, r9, 0x0, 0x3) ptrace$auto(0x7, r8, 0x1, 0x9) mmap$auto(0x4, 0x400007, 0x49e, 0x17, 0xffffffffffffffff, 0xb8fc) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyt5/power/runtime_status\x00', 0x4240, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb0, 0x404, 0x8000) getpid() 2m1.778763104s ago: executing program 4 (id=180): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x6222a3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x57) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto_PTRACE_SETSIGINFO(0x4203, r1, 0x2, 0x3) fcntl$auto(0x3, 0x6, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sched_getscheduler$auto(r1) semctl$auto(0x80001ff, 0x20802, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) msgctl$auto_MSG_STAT_ANY(0x53, 0xd, &(0x7f0000000300)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x8, 0x2, 0x2}, &(0x7f00000001c0)=0xc9, &(0x7f0000000240)=0x5, 0xd, 0x4, 0x5, 0xee4, 0x5, 0x200, 0x4, 0x4, @inferred, @inferred=0xffffffffffffffff}) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) io_setup$auto(0x2, &(0x7f0000000000)=0xa) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x10, 0x3, 0xfffffffc) quotactl_fd$auto(r4, 0x401, 0xfffffffb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) 1m59.420156228s ago: executing program 4 (id=184): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/admmidi2\x00', 0x28101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0xe9, 0x3, 0x7fff, 0x9, "8a37545bcc428fe9f7f5557bf66df1f3905f15b73c0b158f0294e9cfeb4f5c00"}) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x0, 0xffffffffffffffff}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x35, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, 0x0, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r4, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 1m58.14868588s ago: executing program 4 (id=185): mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) unshare$auto(0x40000080) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0x0, 0x7b, 0x100) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) socket(0x2, 0x801, 0x106) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_REUSEADDR(r1, 0x1, 0x2, 0x0, &(0x7f0000000100)=0xffff8000) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) 1m54.340035326s ago: executing program 6 (id=170): socket(0xa, 0x2, 0x0) r0 = socket(0x18, 0x80000, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/psample/enable\x00', 0x14000, 0x0) write$auto_nsim_psample_enable_fops_psample(r2, &(0x7f0000000300)="5913f84c9d438920efbd5c7f837c670d45cfe1636e2ba1442a9fd758c491a4f4dc53454d8922a52b36f35fcd2d585092f7e2cd1fe517b3bad1a01f715fa8c0dc712c4dc83a75001646388430ae497daea54f8cd67300", 0x56) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) socket(0x10, 0x2, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2000d, 0x5f890d6a, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf25040000008c000380850004804cf5c2317fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f00000008000100", @ANYRES32=0x0, @ANYBLOB="19597f814dd481ac7a101762575e656d8d211c96986cc016859dc00db54bbde321d2b9149b1fbe5e2c77940bc7fef393ce5548ee7d8631d54cabd69bab533b46d26de1b7edeb48e2cd96ab2d276a167346c37dbfb1a9ef1998269c0a42cfeda9df56b95fbec3b15b4c1e54af8dc17d18d9486a35f907b15cf594ef2a2e4ee76ff6e2cefb42f3251fb07f76c7849f7456a776cfcf3145acaf0560c115a89808082bb58e55014fed83718b0e8cd4861ae977551aa8d8"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x1d, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20b42, 0x0) r6 = io_uring_setup$auto(0x6, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x183800, 0x0) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x4c8) getdents$auto(r8, 0x0, 0x400018) ioctl$auto(r7, 0xc1205531, r6) getpid() prctl$auto(0x4, 0x0, 0x0, 0x1, 0x80000000) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r0) 1m53.990738772s ago: executing program 6 (id=194): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10) 1m53.809653563s ago: executing program 6 (id=195): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x45, 0x0) r0 = fsopen$auto(0x0, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0) ioctl$auto(r2, 0xc0585611, r2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x81) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000040)={"73b6ff080e863c5d87496166b4be4d7753c8a88fbbac0080166ee359b218a77f", 0x4, 0x27, 0xfffffffc, 0x5b94, 0x0, 0xffffffffffffffff}) prctl$auto_PR_SYS_DISPATCH_ON(0x1, 0x1, r3, 0xffffffffffffffff, 0xffffffffffffffff) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x800000, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0xd77788e09d994e03, 0x408) getdents$auto(r4, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x80000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, 0x80000004, 0x8001, 0x3f, 0x6, 0xe4, 0x0, 0x5, 0x2, 0x0, 0x6}) chdir$auto(&(0x7f0000000180)='}[,&*}\x00') close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m53.249330887s ago: executing program 6 (id=198): r0 = open(&(0x7f0000000000)='./file0\x00', 0x70b040, 0x4e) close_range$auto(0x2, r0, 0x2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r2) sendmsg$auto_SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000020e5446a6c12e6350bc3b446d463b1117b5f2bac14526783b04506c331a864ca52934bf0f2b12057b8c66bd1490825", @ANYRES64=r3, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0xe70, 0x9}}, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x2, 0xffffffffffff0005, 0xc01) r6 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x101002, 0x0) write$auto(r6, &(0x7f0000001f40)='!+*\x00', 0x8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05082dbd7040fbdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r4) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="90010000", @ANYRES8, @ANYRES32=r5, @ANYRES32=r3, @ANYRESDEC=0x0], 0x190}}, 0x8050) madvise$auto(0x800080007fff, 0xf5a8, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000540)={@_si_pad}, 0x6, &(0x7f0000000680)={{0x4, 0x6}, {0x4, 0x271}, 0x71af1020, 0xffff, 0xb23d, 0x7, 0xc, 0x3, 0x8c85, 0x6, 0x7, 0x3, 0x6, 0x5, 0x0, 0x6}) process_vm_readv$auto(r7, 0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, 0x0, 0xc004) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x21, 0x10, 0x8008006) 1m42.824606103s ago: executing program 35 (id=185): mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) unshare$auto(0x40000080) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0x0, 0x7b, 0x100) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) socket(0x2, 0x801, 0x106) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_REUSEADDR(r1, 0x1, 0x2, 0x0, &(0x7f0000000100)=0xffff8000) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) 1m38.13927899s ago: executing program 36 (id=198): r0 = open(&(0x7f0000000000)='./file0\x00', 0x70b040, 0x4e) close_range$auto(0x2, r0, 0x2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r2) sendmsg$auto_SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000020e5446a6c12e6350bc3b446d463b1117b5f2bac14526783b04506c331a864ca52934bf0f2b12057b8c66bd1490825", @ANYRES64=r3, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0xe70, 0x9}}, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x2, 0xffffffffffff0005, 0xc01) r6 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x101002, 0x0) write$auto(r6, &(0x7f0000001f40)='!+*\x00', 0x8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05082dbd7040fbdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r4) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="90010000", @ANYRES8, @ANYRES32=r5, @ANYRES32=r3, @ANYRESDEC=0x0], 0x190}}, 0x8050) madvise$auto(0x800080007fff, 0xf5a8, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000540)={@_si_pad}, 0x6, &(0x7f0000000680)={{0x4, 0x6}, {0x4, 0x271}, 0x71af1020, 0xffff, 0xb23d, 0x7, 0xc, 0x3, 0x8c85, 0x6, 0x7, 0x3, 0x6, 0x5, 0x0, 0x6}) process_vm_readv$auto(r7, 0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, 0x0, 0xc004) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x21, 0x10, 0x8008006) 18.550630364s ago: executing program 8 (id=406): mmap$auto(0x100000000000002, 0x8010000000009, 0x1, 0x7ff, 0xffffffffffffffff, 0xfffffffffffffffd) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop11\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) fdatasync$auto(r0) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2a15d46935384c28, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) r4 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r4, 0x0, 0x10001, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) getdents64$auto(r2, &(0x7f00000000c0)={0x8b7, 0x10001, 0xf, 0x93, "98926d09103960d20df0ba9d16ae893e3741690ae4481076201fa4bb8b303e86fa9a71398cdbf8d199433c6fb654c503820757f8"}, 0xa224) madvise$auto(0xfffffffffffffffe, 0x2003f2, 0x13) mmap$auto(0x8, 0x302000f, 0x0, 0xeb1, r3, 0xc) madvise$auto(0x8a, 0x5, 0x8) sysfs$auto(0x2, 0x100000000000039, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) socketpair$auto(0xf, 0x7, 0x7, &(0x7f0000000400)=0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_0={0x1, 0xb9, 0xd, 0x7, 0x400004, 0xffffffffffffffff, 0x3, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) bpf$auto(0x1a, &(0x7f0000000280)=@task_fd_query={0x0, 0xffffffffffffffff, 0x1, 0xc4, 0x7, 0x1000, r6, 0x5, 0x8}, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0xc2f02, 0x0) mmap$auto(0xffffffffffffffff, 0x810000, 0xff8, 0x8000000008011, 0x3, 0x8000) 17.317877194s ago: executing program 8 (id=408): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x10000, 0xdcf1, 0x6000000000df, 0x14, r1, 0x2fffffffffff) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/030/001\x00', 0x2901, 0x0) ioctl$auto(r2, 0x40085511, r2) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) write$auto(0x3, 0x0, 0x100082) r4 = socket(0x28, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r5 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r5, 0x0, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x8, 0x10, 0x2fc) unshare$auto(0x40000080) r6 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x3, 0x14, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) socket(0xa, 0x3, 0x6) 15.922922334s ago: executing program 1 (id=412): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0xdc98, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000100), 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) fchown$auto(r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_check_wx_fops_(r2, &(0x7f0000000100)=""/192, 0xc0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5429, 0x0) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0x4, 0x15, 0x5) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0xe2, 0xc}, 0xb, 0x0) mmap$auto(0x7, 0x4020009, 0x10000df, 0xeb1, 0x401, 0x8000) landlock_restrict_self$auto(r3, 0x8) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename$auto(0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 15.554685647s ago: executing program 8 (id=413): connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040851) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r0) r3 = semctl$auto_GETPID(0x200, 0x7, 0xb, 0xa8) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_DEVKEY={0x7, 0x2f, 0x0, 0x1, [@generic="576bbc"]}, @NL802154_ATTR_COORDINATOR={0x1d, 0x1e, 0x0, 0x1, [@generic="93ecc76457215a7b97c62fc77af90fa53f", @typed={0x8, 0x112, 0x0, 0x0, @pid=r3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8080) write$auto(0xffffffffffffffff, &(0x7f0000000300)='@[,-%[%$\x00', 0x8) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptya2\x00', 0x80000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, &(0x7f0000000380)="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") preadv$auto(r0, &(0x7f0000000580)={&(0x7f0000000480)="4d73522ea0ae0937a30879ecb2c5d3f1e639c9fd74d209ba1251a5feb2b0938682b249ce201ef3e929fb1e3eb892ee31ae895cc4d14cb59ee6c2d25ae88a06f0432011e42ce69df71468fc1e89c0f4aed0813ffec5884a75f450b0984fb73dd2e82ae1e20098cb7638408f32a601e13e94ebfcccf9c8ab791139e6cb3c6076329374120197d4fecebb5ad1eff1dea5fb1991b55dc26cdccbc7cfe0c76e2b1aebda8cc3c6453413a06cc60cdc1d023e8ccdcc7822d07e9c2142047f68018d7f54abbf", 0x5}, 0x1, 0xa, 0x10000) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000600), r0) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x944b}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x10000}, @GTPA_FLOW={0x6, 0x6, 0x7f}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x6}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000740), r6) r7 = open(&(0x7f0000000780)='./file0\x00', 0x4100, 0xc2) read$auto_transaction_log_fops_(0xffffffffffffffff, &(0x7f00000007c0)=""/43, 0x2b) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sg0\x00', 0x4000, 0x0) r8 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000840)=0x4) getsockopt$auto(r7, 0x917b, 0x9, &(0x7f0000000880)='{H&\x00', &(0x7f00000008c0)=0x5) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r3) r9 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000940), r7) shmctl$auto(0xa1d0, 0x87d, &(0x7f0000000ac0)={{0x9, 0xffffffffffffffff, 0xee01, 0x1, 0x489a, 0x4, 0x8}, 0x9, 0x4, 0x2, 0x10, @raw=0x7, @inferred=r3, 0x2, 0x0, &(0x7f0000000980)="84e8fa82dc5f26ef1c89162d8a0c71f476daf93531f158104cb8305af38e23df7ab76cb1f3bb9ab54da2646420855f5dd070b7b06e377dd0bd333f91a6483edac68f40958bef24cb6d3d85eb3db95cef560b2a8ee1c537251b818012e88c4ecd0bc4a2662a49520ea740d7d0c3657a9cc9f84fe8c38df5d429d3058edfccc76fc9c8fb4d5afbe7a1f0756750d3c281e7025664ea02cf460415c008c669698f70b2ad1271a3542b871112a83fef4903301113e122ffbad6dfc0b2b9ab99a74723feec36548102c3f30204b0f9a6ce017e6064f8e2cb3f5556d10d402fe7ba110cc564922e38e6ed43fe411d78db417f", &(0x7f0000000a80)="34b07cf15ff0f23ff377e4fe13e948055e3e10ece8a4b650c325c81d"}) sendmsg$auto_SEG6_CMD_SETHMAC(r8, &(0x7f00000040c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004080)={&(0x7f0000000b40)={0x3504, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_HMACINFO={0x134e, 0x7, 0x0, 0x1, [@generic="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", @nested={0x4a, 0x7b, 0x0, 0x1, [@nested={0x4, 0x18}, @nested={0x4, 0x162}, @generic="480407c2a651a59004ede8f4b95e1c594df7363c4308366e6687c8fa2d017fe9ffecd930fac3", @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x4e}, @typed={0x8, 0x43, 0x0, 0x0, @fd}, @typed={0x4, 0x13e}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x54, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xf, 0x142, 0x0, 0x0, @str='/dev/ptya2\x00'}, @nested={0x17c, 0x5b, 0x0, 0x1, [@generic="be0ffde82edac72a2c771a883c0403c2db1f77cc665f05370178efc5050fcdba85c7205e48837f2cdcfbb2d0aed12e480a4edf5694", @generic="1376bd85ff6f6c4a61e71bc2ebf6ef4d4a07cbd517cb12dd9887f560a71d9c6f389c7b85f48287d911a96cf48eca93df0f6aa96a46a306e7ccd5b15ca3c91026ebc30a5d854035a50f6c799c8e2ea5f15a2d3895d03c40735f75c899e25a783c", @generic="21abd7be6d56c6d810687666282eda131c171eb7a427b52f9f5b7958b19aa57bdb34074ed75a2ea5bd739402f0a56a2a618ab6de259dee2dcf164d69163c3b2561590c444a2bcad9b818472e7871ece8a911a6de1e0b6720c877c5ea9583aa0d6de433e930ba0cf124c72d8fa5824fb0dd7d02dd1a82d56bdcc5b27d4548613ba1b473a2f22ff4d3af386801c5d885a3ed27c7b2d363be67ff1ee526255ab921259fb388ec95a3b12fa486b30b8dd6007933b7354c229f7aa4db2d62c2ab12231b8bf433633de5326d7af48ea42bd89ca7ef516e7ef2f374a986007cf5cfcf", @nested={0x4, 0x5f}]}, @generic="e3028eb6fe8a77b667a911f9a5daca9899cf8b62e2aa95072e9215bbc0d31db9a1c90b40bf467bb3a99f63931f4a8426423a651c267a4b785bc0a449614d6af8c2d5292b3e8a1b62641424fa5cfc1da7ea136077900f20609f81e7ea9b9eaaf482b24d049eaf02e9ccba8a30e272a41342d4d67fb8c587cc567962e81ba726892f18378703a2caf93dda358d2b5209de06ef69193cd861707f3d860d8e32172491307411c38b3171769a97beb42f98d70142ae2fc1a4a4d9ef645ebc8bfc336aec8f7b49e1bd062b2096fd4f51da222710dceeacedf35c1f87a87ea2588f39c69b5f1f8fb70e82b5b299cd802c901c1b9ea2", @typed={0x8, 0x95, 0x0, 0x0, @uid=r10}, @nested={0x5f, 0xa8, 0x0, 0x1, [@generic="6d4952eda81f795dc8513cdd368ff295761a096e58d67810fa540804ae0f778e8f", @typed={0x4, 0x90}, @generic="575f3a6611287f268ecebfeff0d3efdb685ed823c5b5bec338dc385e565791a052d699613e054f46f17898d7590e58c707449506d284"]}, @nested={0x8, 0x116, 0x0, 0x1, [@nested={0x4, 0xf4}, @generic]}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9a}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_SECRET={0x93, 0x4, "a857869ba4428695b5f7da91fcb99e64d0885ddd833313fec562f7cf72726faff6ebf3ae571e1722bf34653edec69f7dde8f76afe0899aadb8474349a233b7d6e9deff725bdb7eb2de1034d7864bbe75c0665dad7e0a5e8a2cc06895a3dde8539fb4871b42d54f57e3553c80f00bc718d1027b0d5a6b2dd402c56aa1197a04578cec61ae070fbe27c7a596825ef1b4"}, @SEG6_ATTR_HMACINFO={0x20c4, 0x7, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @pid=r3}, @nested={0x1095, 0xb5, 0x0, 0x1, [@generic="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", @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@mcast1}, @generic="febc17bed4eba136a13d7ceed3c6c14a156a1d664ed7eff0241ed27f87ff1e05cefb9969954d2ecf065ab0cf29032dacc5806e578c11fc8aba1feba3029cca237f7e06dcf1bde90c3cca099994ee64c756062bfefc263322a36141a16e43d36060d731c2d93f9b2117ea7ac25f3e7e1bf9c98af3d4fed683d36d60df8c"]}, @nested={0x1017, 0x107, 0x0, 0x1, [@generic="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", @generic="27e7f6187c3b18b1bf276e6037aa4c5f9d3962"]}, @typed={0x6, 0x3e, 0x0, 0x0, @str='-\x00'}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}]}, 0x3504}}, 0x20040001) getsockopt$auto_SO_TIMESTAMP_OLD(r4, 0x7, 0x1d, &(0x7f0000004100)='gtp\x00', &(0x7f0000004140)=0x6) sysfs$auto(0x1, 0x3, 0x8) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000004180)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x101200, 0x0) unshare$auto(0xffffffffffffffff) socketpair$auto(0x6, 0x5, 0x88bb, &(0x7f00000041c0)=0x8001) eventfd$auto(0xa52d) 15.057645597s ago: executing program 8 (id=414): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240)='4', 0x1) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x8200, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000100)) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) 12.61977549s ago: executing program 1 (id=415): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810804, 0x400000000ff7, 0x8000000008011, 0x3, 0x800008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close$auto(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r1, 0x0, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) lsm_get_self_attr$auto(0x68, 0x0, 0x0, 0x0) 12.433300406s ago: executing program 5 (id=416): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xed85, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/kvm_amd/parameters/avic\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x8) semctl$auto(0xffffffc0, 0x5, 0x80000001, 0x8) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000)="c941c1615476fb4431f0bc4aff98ebf11adb70ef07974bac83", 0x1) (async) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000)="c941c1615476fb4431f0bc4aff98ebf11adb70ef07974bac83", 0x1) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) ioctl$auto(r2, 0x5522, 0xf15) (async) ioctl$auto(r2, 0x5522, 0xf15) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r3, 0x0, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x40000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0x38) ioctl$auto_OSS_GETVERSION(r3, 0x80044d76, &(0x7f00000000c0)="63afed8d275f53200651c466fd582f4a083ad2cee9350f815893b842980a3668692580") clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) acct$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b03, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b03, 0x0) socket(0xa, 0x1, 0x84) (async) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r6, 0x84, 0x76d5bcaa, 0x0, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) (async) sendfile$auto(r5, r5, 0x0, 0x3) 12.142498172s ago: executing program 8 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x4, 0xe, 0x1, 0x345a, 0x7, 0xffffffffffffffff}) prctl$auto(0xc44, 0x8, r2, 0x80, 0xfffffffffffffffa) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010329bd7000fedbdf250c000000080004"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) socket(0x18, 0x80003, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = socket(0x10, 0x2, 0xf) r4 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r3, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r4, 0x98}, 0x5) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D0c\x00', 0x80842, 0x0) mmap$auto(0x0, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x82000000) acct$auto(&(0x7f00000000c0)='netdev\x00') 11.786452295s ago: executing program 5 (id=419): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) unshare$auto(0x40000080) r1 = socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(r3, &(0x7f0000000340)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\xff\xcf\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44o\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\x03\x00@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xbb\x7f\xa5\x87\x02\x87\xbbR\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcau6^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1Tz\xc1;Pw!\x8b\xf5{\xc7Zf/7\xf7h\xe2f\x1d\xa2\x11U\x91v\xf8Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VEv\xeb>\xffY\xe7\xc7\xe1,\xe7`\xe3\xc4\x95\xe52\x9d\x1e`#\xd8\xd7M\xc7\x15\x00\x00\x00\x00\x00\x00E\xd0e\x0eM\xa9Q\xac\x0eX]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x00'/551, 0xcd) r4 = getpgid(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x110, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x34, 0x19, 0x0, 0x1, [@generic="fe299241fa553feeac4e5eff22e525ca52fb2e3433f687c02078af4871ce672ca5ced5b9a624e6c970b3fe0badd977b7"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5e}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xa8, 0x19, 0x0, 0x1, [@nested={0x9c, 0xc9, 0x0, 0x1, [@typed={0x4, 0x151}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r4}, @generic="a2ed79076256ccbf2f31aacfd32ca9a8005456fa9bb7d8", @generic, @nested={0x4, 0x60}, @nested={0x4, 0x3f}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@remote}, @generic="26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a0882da110a7ad5d2cf750b5219e5cf8e27", @nested={0x4, 0x113}]}, @typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080) r5 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r5, &(0x7f0000000180)='!:-', 0x3) r6 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x20000, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r6, &(0x7f0000000140)=""/136, 0x88) r7 = getpid() ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r7, 0x80) prctl$auto(0x3e, 0x5, r7, 0x1, 0x6a02) socket(0x2, 0xa, 0x80000001) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) 11.339200894s ago: executing program 1 (id=420): r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) write$auto(r1, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, &(0x7f0000000180)="77579da420441caed830544e706d0851d383773aa96595cb6ec38858fb1bfeea25784133db5f2a149e719a60758ffdce075c69caf27d8b67c07cc65bf146e57a80cb515b90b62e3f3b0b42885d82d4a115c0") brk$auto(0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xab, 0xdf, 0xeb1, r3, 0x8000) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) 9.80645584s ago: executing program 8 (id=421): r0 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) ioctl$auto(r2, 0x4b41, r2) r3 = getpid() r4 = gettid() r5 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r5, 0x11) rt_tgsigqueueinfo$auto(r3, r4, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r3}}}) tee$auto(r1, r0, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchownat$auto(0x2, 0x0, 0x0, 0x8001, 0x1000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x62, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000500)="b4", 0x1) sendmsg$auto_NL80211_CMD_SET_MPATH(r1, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41010800}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r8 = socket(0xa, 0x801, 0x106) sendmsg$auto_NL80211_CMD_DISCONNECT(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) recvmmsg$auto(r8, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) recvmmsg$auto(r7, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) r9 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000080), r7) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000004", @ANYRES16=r9, @ANYBLOB="000228bd7000fcdbdf2501000000080002000400000008000200050000000600010000100000080002000400000006000100711a00000c00030006000000000000000800020004000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) gettid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) write$auto(0x3, 0x0, 0x6) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) 8.941869407s ago: executing program 5 (id=423): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/rose5/tx_queue_len\x00', 0x462803, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1add40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4b564d01, 0x4, 0x1}]}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 8.401812668s ago: executing program 5 (id=424): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0xe, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(r1, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x8000000000000000, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x800, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.322901083s ago: executing program 1 (id=425): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async, rerun: 64) socket(0x10, 0x2, 0x0) (rerun: 64) socket(0x34, 0xa, 0x84) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x2, 0x0) ioctl$auto(r1, 0x64c7, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0xb2d) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async, rerun: 64) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/version\x00', 0x4001, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) madvise$auto(0x0, 0x1, 0x2) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) 6.715725921s ago: executing program 7 (id=427): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1) sendmsg$auto_NFC_CMD_SE_IO(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000009deed9903310cf18b704c344cc93f15b58ec389e2a324659a84ec3e2ee3b156322c0c7bca517360a81e2ca57bc32c55b18ead42a4c2b144fdc8faa4ac46a870e6faddda9a003ae16d8c07", @ANYRES16=r3, @ANYBLOB="00032abd7000ffdbdf251b00000005000f0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000040)={0x1104, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x7}, @NFC_ATTR_SE_APDU={0xdb, 0x19, "9cb9fe80d648e4ce2bccdf6a7d158e9c47a251dc90f1e08a6c6bf9116004956c706a6b9229f78978a532f5a280716dfefa3b5431a0b4a7a40d71ca7fb783ac0a4fad43e08ede694671a51a2b63e0677cbe0f1166ee8a874a6329fbd0e9cb763755c1faa034dfd751a56160cc5b64a6efb0fb8453cdfaec1b88613c183a4b5be403a723b74efd91f02349bca7bfd45b1d1533aea823743f2c142a9cd6cc36ea56de5170cb34c26e0b32ccdd0c38ae5d325229abec8ba46cdfa68f31e59ab8fdd6c114ce149b3fd91f7261fd89ba79e2f2aefcf5907f1496"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x91fd}]}, 0x1104}, 0x1, 0x0, 0x0, 0x54}, 0x80) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000006200)={0x1c, r4, 0xd03, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) poll$auto(0x0, 0x1, 0x5) 5.586624959s ago: executing program 5 (id=428): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\b\x00\x00\x00\x00\x00\x00\x00\xc1n+\n|j\xc9\xd0\xad\x82\xb6Q\xddT\b\xcbb\xca5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xd4\\e!\a\x82\t,\xa7\x00', 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB="010005000000fddbdf2500000000080008000500000008000100e0e4516508ff000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) mmap$auto(0x859e, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ptrace$auto(0xb, 0x0, 0x1, 0x7ff) ptrace$auto(0xffffffffffffffff, 0x0, 0x81, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto_SO_WIFI_STATUS(r2, 0x8, 0x29, &(0x7f0000000240)='/\x00', 0xd) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x404f}, 0x20008000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) removexattr$auto(0x0, 0x0) mmap$auto(0xb90, 0x203, 0x2, 0x100000000040eb5, r0, 0x7) prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, r2, 0x402) r6 = socket(0xb, 0x3, 0x4005) socket(0x22, 0x1, 0x84) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r6) prctl$auto(0x23, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 5.20546184s ago: executing program 7 (id=429): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop10\x00', 0x82500, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video6\x00', 0x280, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) fsconfig$auto_FSCONFIG_CMD_CREATE(r0, 0x6, &(0x7f00000001c0)='/dev/bus/usb/006/001\x00', &(0x7f0000000200)="c73273f6c91d3f8584b308fab2b9e988a0a9de883c44c78d52f7dc46e280dd4ec4b5584bbcee819620a19d8167316a349ee81b474e493559289d8c523e341124015e10f33108ce4a43530ac656231964e493ec53f6f01c247474efddcede76d802d6649a12419ee2d500d6bd57663d680a3ef556e31ce839429fc931508f592828592c63d912a57bbea9f18bb80dc325a78fa460caa516b95f96dc8e89c0be2f3e12fb7cd6a5941eeb373e144683d53e407aeeac9f0df5600a447b6084ecb264327867876bb62ad3a663", 0xffffffff) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec18\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) getsockopt$auto(r2, 0x84, 0x6, 0x0, &(0x7f0000000000)=0x5bb) ioctl$auto_SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000001c0)) 4.344588567s ago: executing program 7 (id=430): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_table1\x00', 0x408041, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0xffffffffffffffff, r1, 0xfffffffe) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x1dd, r3) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x1a, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x80, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x10040) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = eventfd$auto(0x4) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4008af20, r5) 3.479013493s ago: executing program 1 (id=431): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4eabc2, 0x0) close_range$auto(r0, r0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, r0, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa505}, 0xffffffff}, 0x7, 0x4008) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0c/sub3/info\x00', 0x404103, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3}, 0xfffffffffffffff8) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(r0, 0xae41, r1) ioctl$auto(0x3, 0xae41, r0) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/failslab/probability\x00', 0xa2540, 0x0) read$auto_stat_fops_per_vm_kvm_main(r3, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0xcf, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) unshare$auto(0x4a) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) recvmmsg$auto(r2, 0x0, 0x10000, 0x80b, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r2) socket(0xa, 0x3, 0x8) open(0x0, 0x369b80, 0x100) memfd_create$auto(0x0, 0xe) fsconfig$auto_FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0xbe5, 0x0) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) write$auto_proc_mem_operations_base(r4, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x272302, 0x0) 3.391889151s ago: executing program 7 (id=432): mmap$auto(0xc, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x8, 0x19, 0xffffffffffffffff, 0x41) close_range$auto(r0, r0, 0x8) r1 = socket(0x2, 0x3, 0x100) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) prctl$auto(0x50, 0x9, 0xffffffffffffffff, 0x7ffffffd, 0x21a9) socket(0x1d, 0x2, 0x7) r2 = socket(0x28, 0x1, 0x0) getsockopt$auto_SO_TXTIME(r1, 0x1005, 0x3d, &(0x7f0000000040)='vcan0\x00', &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000280)=@can={0x1d, r3}, 0x6a) mmap$auto(0x1000000000008, 0x4402000c, 0xdb, 0xebf, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000000)=""/42, 0x2a) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x2000, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) getsockopt$auto_SO_BUSY_POLL(r4, 0x0, 0x2e, &(0x7f0000000100)='-\\,-\\))%^:\x00', &(0x7f0000000180)=0x80000001) sendmmsg$auto(0x3, 0x0, 0x9e6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) sendmmsg$auto(0x3, 0x0, 0x9, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2.708487353s ago: executing program 7 (id=433): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0xb, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x181c02, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0) write$auto(r1, 0x0, 0x2) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x3, 0x2, 0xfffffffc, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x82142, 0x0) pread64$auto(r2, 0x0, 0x9, 0x900000000007) write$auto(r3, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) getsockopt$auto_SO_INCOMING_NAPI_ID(r3, 0xffffffff, 0x38, &(0x7f0000000040)='TIPCv2\x00', &(0x7f00000000c0)=0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x1, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r4) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000003200)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) 1.866126953s ago: executing program 5 (id=434): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(r1, 0xc040564a, r0) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) write$auto_rfkill_fops_core(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x9, 0x0, 0x0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x44e222, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff, 0x524ba7bf2bc406c6}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x1) mmap$auto(0x12000, 0x2020009, 0x3, 0xeb2, r2, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) 1.068790874s ago: executing program 7 (id=435): lsm_list_modules$auto(&(0x7f0000000000)=0x2, &(0x7f0000000040)=0x1, 0x7) socket(0x18, 0x8000c, 0x0) mmap$auto(0x0, 0x20009, 0xffffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r0, 0x0, 0x9) socket(0x25, 0x3, 0xbf) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x40000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x7, 0x37, &(0x7f00000002c0)='\x00\x00l\xcd\xee\xf9yv\x9a\x8b\fx\xb6Z\x8a^r\xda\xaf\v\xc6T\x0fO\xf5*\xa7Pv\x9b\x8cf\xea\x7f\x17\xcc\xe7\xed\x96\xd4\x81\x1a\xdc\xe5\x89n\xc6\vp\xaf!\t\x9a\xe1D\xbb\x01\x01\x00\x00\x00\x00\x00\x00\x90Z\xde\x8d\xa3U\xab\xe6\xd8\xa9D^>k\xf7\x0e\"\xaa\x01d\v\x94\xfd\xb9T\x04h3\x0e|$\xa6\x87\x10N6VjDL\xf2\xa0\xae\x04\xf7\xda\xc4\xf8\xb43\xdb\x95[}z=\xb6@NdY\x90\x0e\xdbKN\x18\n 1 [ 106.711500][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.720762][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.735074][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.743663][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.751588][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.755672][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.768227][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.780433][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.791710][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.801113][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.809360][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.815832][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.825497][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.837152][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.847475][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.861206][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.874139][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.886755][ T4944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.894695][ T4944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.779404][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.787872][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.796133][ T5633] bridge_slave_0: entered allmulticast mode [ 108.804021][ T5633] bridge_slave_0: entered promiscuous mode [ 108.826063][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.833401][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.840742][ T5633] bridge_slave_1: entered allmulticast mode [ 108.849007][ T5633] bridge_slave_1: entered promiscuous mode [ 108.884313][ T5642] Bluetooth: hci0: command tx timeout [ 108.932934][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.940440][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.947834][ T5639] bridge_slave_0: entered allmulticast mode [ 108.955681][ T5639] bridge_slave_0: entered promiscuous mode [ 108.964547][ T50] Bluetooth: hci2: command tx timeout [ 108.964889][ T4944] Bluetooth: hci1: command tx timeout [ 108.971728][ T5642] Bluetooth: hci3: command tx timeout [ 109.007405][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.015284][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.023655][ T5636] bridge_slave_0: entered allmulticast mode [ 109.031885][ T5636] bridge_slave_0: entered promiscuous mode [ 109.040686][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.048474][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.056804][ T5639] bridge_slave_1: entered allmulticast mode [ 109.065938][ T5639] bridge_slave_1: entered promiscuous mode [ 109.085052][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.096212][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.105260][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.114801][ T5636] bridge_slave_1: entered allmulticast mode [ 109.122804][ T5636] bridge_slave_1: entered promiscuous mode [ 109.157853][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.261752][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.287974][ T5633] team0: Port device team_slave_0 added [ 109.297235][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.311026][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.322419][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.330327][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.337940][ T5640] bridge_slave_0: entered allmulticast mode [ 109.346715][ T5640] bridge_slave_0: entered promiscuous mode [ 109.356893][ T5633] team0: Port device team_slave_1 added [ 109.366991][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.389194][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.399117][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.407737][ T5640] bridge_slave_1: entered allmulticast mode [ 109.416509][ T5640] bridge_slave_1: entered promiscuous mode [ 109.466124][ T5639] team0: Port device team_slave_0 added [ 109.517789][ T5639] team0: Port device team_slave_1 added [ 109.555182][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.562976][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.589672][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.605989][ T5636] team0: Port device team_slave_0 added [ 109.615995][ T5636] team0: Port device team_slave_1 added [ 109.644861][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.656830][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.664712][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.695529][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.727156][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.734419][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.761832][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.780729][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.818412][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.825546][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.854780][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.894638][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.903626][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.931014][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.955129][ T5640] team0: Port device team_slave_0 added [ 109.961805][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.968899][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.995129][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.035696][ T5640] team0: Port device team_slave_1 added [ 110.070998][ T5633] hsr_slave_0: entered promiscuous mode [ 110.078099][ T5633] hsr_slave_1: entered promiscuous mode [ 110.129315][ T5639] hsr_slave_0: entered promiscuous mode [ 110.135944][ T5639] hsr_slave_1: entered promiscuous mode [ 110.142835][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 110.148899][ T5639] Cannot create hsr debugfs directory [ 110.157487][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.164845][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.191271][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.204407][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.211519][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.238270][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.312978][ T5636] hsr_slave_0: entered promiscuous mode [ 110.319757][ T5636] hsr_slave_1: entered promiscuous mode [ 110.326521][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 110.332471][ T5636] Cannot create hsr debugfs directory [ 110.499118][ T5640] hsr_slave_0: entered promiscuous mode [ 110.506481][ T5640] hsr_slave_1: entered promiscuous mode [ 110.514096][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 110.519940][ T5640] Cannot create hsr debugfs directory [ 110.963409][ T5642] Bluetooth: hci0: command tx timeout [ 110.992220][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.016901][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.026724][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.040397][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.047544][ T50] Bluetooth: hci2: command tx timeout [ 111.051081][ T4944] Bluetooth: hci1: command tx timeout [ 111.056841][ T5642] Bluetooth: hci3: command tx timeout [ 111.071300][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.084479][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.095188][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.107123][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.205902][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.218170][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.228631][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.242361][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.261770][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.275830][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.301285][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.312359][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.405557][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.420370][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.430084][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.441175][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.449963][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.462207][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.470905][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.481479][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.666958][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.681288][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.703636][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.716263][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.735645][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.748245][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.760551][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.778303][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.839930][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.925589][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.937914][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.964763][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.972121][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.024013][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.031275][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.069983][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.103565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.110771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.140426][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.154858][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.162140][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.227558][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.263996][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.271205][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.315816][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.323084][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.368028][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.474814][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.531111][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.538408][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.612019][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.619386][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.043709][ T5642] Bluetooth: hci0: command tx timeout [ 113.134608][ T5642] Bluetooth: hci3: command tx timeout [ 113.139727][ T50] Bluetooth: hci2: command tx timeout [ 113.140198][ T5642] Bluetooth: hci1: command tx timeout [ 113.429235][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.631456][ T5633] veth0_vlan: entered promiscuous mode [ 113.681792][ T5633] veth1_vlan: entered promiscuous mode [ 113.745698][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.851405][ T5633] veth0_macvtap: entered promiscuous mode [ 113.869744][ T5633] veth1_macvtap: entered promiscuous mode [ 113.904751][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.958999][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.969178][ T5636] veth0_vlan: entered promiscuous mode [ 113.986567][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.001907][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.018017][ T5636] veth1_vlan: entered promiscuous mode [ 114.047374][ T3289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.057277][ T3289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.074169][ T3289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.104415][ T3289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.150637][ T5640] veth0_vlan: entered promiscuous mode [ 114.202624][ T5640] veth1_vlan: entered promiscuous mode [ 114.245175][ T5636] veth0_macvtap: entered promiscuous mode [ 114.280266][ T5636] veth1_macvtap: entered promiscuous mode [ 114.333829][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.342684][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.355016][ T5639] veth0_vlan: entered promiscuous mode [ 114.387634][ T5639] veth1_vlan: entered promiscuous mode [ 114.429301][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.450239][ T5640] veth0_macvtap: entered promiscuous mode [ 114.461715][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.477437][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.488142][ T5640] veth1_macvtap: entered promiscuous mode [ 114.493884][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.514747][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.526100][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.549861][ T111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.559714][ T111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.623504][ T5639] veth0_macvtap: entered promiscuous mode [ 114.652520][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.670026][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.712582][ T5639] veth1_macvtap: entered promiscuous mode [ 114.732491][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.855053][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.865726][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.876344][ T3289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.887017][ T3289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.907068][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.917380][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.938046][ T5777] random: crng reseeded on system resumption [ 114.956936][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.985503][ T5777] random: crng reseeded on system resumption [ 114.998167][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.080276][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.092322][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.120709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.132224][ T5642] Bluetooth: hci0: command tx timeout [ 115.147900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.163617][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.173849][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.203932][ T4944] Bluetooth: hci3: command tx timeout [ 115.204697][ T50] Bluetooth: hci1: command tx timeout [ 115.209593][ T5642] Bluetooth: hci2: command tx timeout [ 115.338560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.368575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.561115][ T3262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.571035][ T3262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.621517][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.640105][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.744880][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.774285][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.440711][ T5793] FAULT_INJECTION: forcing a failure. [ 116.440711][ T5793] name failslab, interval 1, probability 0, space 0, times 1 [ 116.476933][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: syz.0.5 Not tainted syzkaller #0 PREEMPT(full) [ 116.476978][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 116.477008][ T5793] Call Trace: [ 116.477019][ T5793] [ 116.477032][ T5793] dump_stack_lvl+0x100/0x190 [ 116.477089][ T5793] should_fail_ex.cold+0x5/0xa [ 116.477127][ T5793] should_failslab+0xc2/0x120 [ 116.477178][ T5793] kmem_cache_alloc_noprof+0x91/0x6a0 [ 116.477219][ T5793] ? do_getname+0x35/0x390 [ 116.477263][ T5793] do_getname+0x35/0x390 [ 116.477306][ T5793] do_sys_openat2+0xc7/0x1e0 [ 116.477348][ T5793] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.477403][ T5793] __x64_sys_openat+0x12d/0x210 [ 116.477446][ T5793] ? __pfx___x64_sys_openat+0x10/0x10 [ 116.477503][ T5793] do_syscall_64+0x115/0x840 [ 116.477537][ T5793] ? clear_bhb_loop+0x40/0x90 [ 116.477584][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.477618][ T5793] RIP: 0033:0x7f8ee479de99 [ 116.477653][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.477685][ T5793] RSP: 002b:00007f8ee56aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.477722][ T5793] RAX: ffffffffffffffda RBX: 00007f8ee4a25fa0 RCX: 00007f8ee479de99 [ 116.477744][ T5793] RDX: 0000000000020080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 116.477765][ T5793] RBP: 00007f8ee4833eaf R08: 0000000000000000 R09: 0000000000000000 [ 116.477785][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.477804][ T5793] R13: 00007f8ee4a26038 R14: 00007f8ee4a25fa0 R15: 00007fff5d33f208 [ 116.477847][ T5793] [ 116.918219][ T5642] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 117.311202][ T5809] hub 1-0:1.0: USB hub found [ 117.326318][ T5809] hub 1-0:1.0: 1 port detected [ 118.171974][ T5822] base or size exceeds the MTRR width [ 118.775783][ T5823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.792780][ T5823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.840802][ T5823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.860622][ T5823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.872974][ T5823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.890215][ T5823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.911996][ T5823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.942890][ T5823] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.966307][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 118.966689][ T5823] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.010891][ T5823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.018576][ T5823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.050771][ T5823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.245608][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.623907][ T5869] process 'syz.2.17' launched './file0' with NULL argv: empty string added [ 120.885449][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.963642][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.051966][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 122.323807][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.938979][ T5925] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[5925] [ 122.963213][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.005888][ T31] audit: type=1400 audit(1784357681.276:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5924 comm="syz.0.26" [ 123.043493][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.123507][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 124.097293][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.216589][ T5936] bridge0: port 3(vlan1) entered blocking state [ 124.309016][ T5936] bridge0: port 3(vlan1) entered disabled state [ 124.390774][ T5936] vlan1: entered allmulticast mode [ 124.403296][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.457759][ T5936] veth0_vlan: entered allmulticast mode [ 124.523065][ T5936] vlan1: entered promiscuous mode [ 124.589911][ T5936] bridge0: port 3(vlan1) entered blocking state [ 124.597596][ T5936] bridge0: port 3(vlan1) entered forwarding state [ 124.704010][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 125.043269][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.098729][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.107412][ T5942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.123595][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.154364][ T5942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.171887][ T5942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.951160][ T5958] FAULT_INJECTION: forcing a failure. [ 125.951160][ T5958] name failslab, interval 1, probability 0, space 0, times 0 [ 126.040141][ T5958] CPU: 1 UID: 0 PID: 5958 Comm: syz.3.32 Not tainted syzkaller #0 PREEMPT(full) [ 126.040191][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 126.040213][ T5958] Call Trace: [ 126.040225][ T5958] [ 126.040239][ T5958] dump_stack_lvl+0x100/0x190 [ 126.040287][ T5958] should_fail_ex.cold+0x5/0xa [ 126.040330][ T5958] should_failslab+0xc2/0x120 [ 126.040380][ T5958] kmem_cache_alloc_noprof+0x91/0x6a0 [ 126.040423][ T5958] ? trace_kmem_cache_alloc+0xdd/0x100 [ 126.040471][ T5958] ? security_file_alloc+0x34/0x2c0 [ 126.040526][ T5958] security_file_alloc+0x34/0x2c0 [ 126.040573][ T5958] init_file+0x95/0x480 [ 126.040613][ T5958] alloc_empty_file+0x79/0x1c0 [ 126.040668][ T5958] alloc_file_pseudo+0x183/0x290 [ 126.040717][ T5958] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 126.040763][ T5958] ? alloc_fd+0x471/0x7a0 [ 126.040829][ T5958] sock_alloc_file+0x50/0x210 [ 126.040880][ T5958] __sys_socket+0x1c0/0x260 [ 126.040915][ T5958] ? __pfx___sys_socket+0x10/0x10 [ 126.040963][ T5958] __x64_sys_socket+0x72/0xb0 [ 126.040996][ T5958] ? lockdep_hardirqs_on+0x78/0x100 [ 126.041035][ T5958] do_syscall_64+0x115/0x840 [ 126.041071][ T5958] ? clear_bhb_loop+0x40/0x90 [ 126.041117][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.041156][ T5958] RIP: 0033:0x7ff36f39de99 [ 126.041186][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.041226][ T5958] RSP: 002b:00007ff36d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 126.041263][ T5958] RAX: ffffffffffffffda RBX: 00007ff36f626090 RCX: 00007ff36f39de99 [ 126.041288][ T5958] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 126.041309][ T5958] RBP: 00007ff36f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 126.041331][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.041352][ T5958] R13: 00007ff36f626128 R14: 00007ff36f626090 R15: 00007fff65480e88 [ 126.041398][ T5958] [ 127.123315][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.123326][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.209541][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 127.209573][ T5642] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.810118][ T5985] device-mapper: ioctl: name not supplied when creating device [ 130.696187][ T6012] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[6012] [ 131.076153][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 131.572843][ T6034] __vm_enough_memory: pid: 6034, comm: syz.0.48, bytes: 4398046457856 not enough memory for the allocation [ 132.677973][ T6049] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET) [ 133.645669][ T6038] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 135.457113][ T6094] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.210892][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 137.454083][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 138.981999][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.001711][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.076151][ T6152] random: crng reseeded on system resumption [ 139.334977][ T6153] futex_wake_op: syz.3.75 tries to shift op by -1; fix this program [ 139.629232][ T6153] futex_wake_op: syz.3.75 tries to shift op by -1; fix this program [ 139.828219][ T6153] futex_wake_op: syz.3.75 tries to shift op by -1; fix this program [ 141.029368][ T6166] netlink: 25 bytes leftover after parsing attributes in process `syz.2.80'. [ 144.757513][ T6241] netlink: 326 bytes leftover after parsing attributes in process `syz.2.94'. [ 144.852055][ T6241] Zero length message leads to an empty skb [ 146.639816][ T6276] block2mtd: illegal erase size [ 146.709868][ T6282] FAULT_INJECTION: forcing a failure. [ 146.709868][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 146.757706][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.2.101 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.757760][ T6282] Tainted: [L]=SOFTLOCKUP [ 146.757772][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 146.757791][ T6282] Call Trace: [ 146.757802][ T6282] [ 146.757832][ T6282] dump_stack_lvl+0x100/0x190 [ 146.757877][ T6282] should_fail_ex.cold+0x5/0xa [ 146.757919][ T6282] should_failslab+0xc2/0x120 [ 146.757966][ T6282] __kmalloc_cache_noprof+0x91/0x6c0 [ 146.758023][ T6282] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 146.758088][ T6282] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 146.758148][ T6282] ? rcu_is_watching+0x12/0xc0 [ 146.758187][ T6282] ? trace_contention_end+0x126/0x160 [ 146.758245][ T6282] ? snd_pcm_oss_sync+0x243/0x840 [ 146.758296][ T6282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.758343][ T6282] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 146.758406][ T6282] ? task_work_add+0x201/0x3b0 [ 146.758450][ T6282] ? __pfx___mutex_lock+0x10/0x10 [ 146.758483][ T6282] ? __pfx_task_work_add+0x10/0x10 [ 146.758534][ T6282] ? __fsnotify_parent+0x2b4/0xd00 [ 146.758577][ T6282] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 146.758631][ T6282] snd_pcm_oss_sync+0x265/0x840 [ 146.758695][ T6282] snd_pcm_oss_release+0x238/0x300 [ 146.758749][ T6282] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 146.758806][ T6282] __fput+0x3ff/0xb50 [ 146.758853][ T6282] task_work_run+0x150/0x240 [ 146.758901][ T6282] ? __pfx_task_work_run+0x10/0x10 [ 146.758965][ T6282] exit_to_user_mode_loop+0x1d8/0x6f0 [ 146.759017][ T6282] ? rcu_is_watching+0x12/0xc0 [ 146.759056][ T6282] do_syscall_64+0x652/0x840 [ 146.759087][ T6282] ? clear_bhb_loop+0x40/0x90 [ 146.759128][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.759161][ T6282] RIP: 0033:0x7f386c79de99 [ 146.759189][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.759220][ T6282] RSP: 002b:00007f386a9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 146.759251][ T6282] RAX: 0000000000000000 RBX: 00007f386ca25fa0 RCX: 00007f386c79de99 [ 146.759271][ T6282] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 146.759289][ T6282] RBP: 00007f386c833eaf R08: 0000000000000000 R09: 0000000000000000 [ 146.759308][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.759327][ T6282] R13: 00007f386ca26038 R14: 00007f386ca25fa0 R15: 00007ffcbe276c58 [ 146.759368][ T6282] [ 148.508282][ T6318] ubi0: attaching mtd0 [ 148.546313][ T6318] ubi0: scanning is finished [ 148.552239][ T6318] ubi0: empty MTD device detected [ 149.051348][ T6318] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 149.946406][ T6332] FAULT_INJECTION: forcing a failure. [ 149.946406][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 149.961248][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.2.107 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.961302][ T6332] Tainted: [L]=SOFTLOCKUP [ 149.961314][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 149.961334][ T6332] Call Trace: [ 149.961346][ T6332] [ 149.961358][ T6332] dump_stack_lvl+0x100/0x190 [ 149.961405][ T6332] should_fail_ex.cold+0x5/0xa [ 149.961446][ T6332] should_failslab+0xc2/0x120 [ 149.961494][ T6332] __kmalloc_flags_noprof+0x115/0x890 [ 149.961551][ T6332] ? find_held_lock+0x2b/0x80 [ 149.961591][ T6332] ? __pcs_replace_empty_main+0x13e/0x680 [ 149.961660][ T6332] ? __pcs_replace_empty_main+0x41a/0x680 [ 149.961725][ T6332] __pcs_replace_empty_main+0x41a/0x680 [ 149.961789][ T6332] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 149.961836][ T6332] ? __lock_acquire+0x49f/0x1a40 [ 149.961888][ T6332] ? sctp_get_port_local+0x828/0x1630 [ 149.961942][ T6332] sctp_get_port_local+0x828/0x1630 [ 149.961999][ T6332] ? __pfx_sctp_get_port_local+0x10/0x10 [ 149.962052][ T6332] ? sctp_bind_addr_match+0x19d/0x300 [ 149.962097][ T6332] sctp_do_bind+0x2b9/0x760 [ 149.962158][ T6332] sctp_connect_new_asoc+0x5e7/0x770 [ 149.962216][ T6332] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.962275][ T6332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.962333][ T6332] __sctp_connect+0x3e7/0xc70 [ 149.962397][ T6332] ? __pfx___sctp_connect+0x10/0x10 [ 149.962454][ T6332] ? __pfx_sctp_inet_connect+0x10/0x10 [ 149.962522][ T6332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.962570][ T6332] ? __pfx_sctp_inet_connect+0x10/0x10 [ 149.962625][ T6332] sctp_inet_connect+0x15f/0x220 [ 149.962677][ T6332] __sys_connect_file+0x141/0x1a0 [ 149.962720][ T6332] __sys_connect+0x141/0x170 [ 149.962755][ T6332] ? __pfx___sys_connect+0x10/0x10 [ 149.962815][ T6332] __x64_sys_connect+0x72/0xb0 [ 149.962847][ T6332] ? lockdep_hardirqs_on+0x78/0x100 [ 149.962882][ T6332] do_syscall_64+0x115/0x840 [ 149.962916][ T6332] ? clear_bhb_loop+0x40/0x90 [ 149.962958][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.962992][ T6332] RIP: 0033:0x7f386c79de99 [ 149.963021][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.963054][ T6332] RSP: 002b:00007f386a9b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 149.963087][ T6332] RAX: ffffffffffffffda RBX: 00007f386ca26180 RCX: 00007f386c79de99 [ 149.963107][ T6332] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 149.963127][ T6332] RBP: 00007f386c833eaf R08: 0000000000000000 R09: 0000000000000000 [ 149.963147][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.963165][ T6332] R13: 00007f386ca26218 R14: 00007f386ca26180 R15: 00007ffcbe276c58 [ 149.963207][ T6332] [ 150.736177][ T5642] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 151.497630][ T31] audit: type=1800 audit(1784357709.776:3): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.110" name="version" dev="configfs" ino=11490 res=0 errno=0 [ 151.681658][ T6378] __vm_enough_memory: pid: 6378, comm: syz.0.115, bytes: 4398046457856 not enough memory for the allocation [ 151.807060][ T31] audit: type=1800 audit(1784357710.086:4): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name="members" dev="configfs" ino=11554 res=0 errno=0 [ 151.870131][ T6364] zswap: compressor not available [ 153.106037][ T6408] FAULT_INJECTION: forcing a failure. [ 153.106037][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 153.155286][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.0.119 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.155344][ T6408] Tainted: [L]=SOFTLOCKUP [ 153.155357][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 153.155378][ T6408] Call Trace: [ 153.155389][ T6408] [ 153.155402][ T6408] dump_stack_lvl+0x100/0x190 [ 153.155450][ T6408] should_fail_ex.cold+0x5/0xa [ 153.155490][ T6408] should_failslab+0xc2/0x120 [ 153.155538][ T6408] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 153.155582][ T6408] ? xas_create+0x1f4/0x14e0 [ 153.155623][ T6408] ? kvasprintf_const+0x66/0x1a0 [ 153.155682][ T6408] kvasprintf+0xbc/0x150 [ 153.155732][ T6408] ? __pfx_kvasprintf+0x10/0x10 [ 153.155784][ T6408] ? ida_alloc_range+0x70d/0x830 [ 153.155823][ T6408] ? rcu_is_watching+0x12/0xc0 [ 153.155860][ T6408] ? ida_alloc_range+0x70d/0x830 [ 153.155898][ T6408] ? kfree+0x1e5/0x6c0 [ 153.155957][ T6408] kvasprintf_const+0x66/0x1a0 [ 153.156011][ T6408] kobject_set_name_vargs+0x5a/0x140 [ 153.156061][ T6408] dev_set_name+0xc7/0x100 [ 153.156095][ T6408] ? __pfx_dev_set_name+0x10/0x10 [ 153.156143][ T6408] ? kasan_save_track+0x14/0x30 [ 153.156193][ T6408] ? __kasan_kmalloc+0xaa/0xb0 [ 153.156255][ T6408] nfc_allocate_device+0x206/0x5e0 [ 153.156299][ T6408] nci_allocate_device+0x23b/0x410 [ 153.156351][ T6408] virtual_ncidev_open+0x6f/0x220 [ 153.156417][ T6408] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 153.156468][ T6408] misc_open+0x26d/0x450 [ 153.156501][ T6408] ? __pfx_misc_open+0x10/0x10 [ 153.156534][ T6408] chrdev_open+0x234/0x6a0 [ 153.156565][ T6408] ? __pfx_apparmor_file_open+0x10/0x10 [ 153.156601][ T6408] ? __pfx_chrdev_open+0x10/0x10 [ 153.156706][ T6408] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 153.156754][ T6408] do_dentry_open+0x6ab/0x14d0 [ 153.156810][ T6408] ? __pfx_chrdev_open+0x10/0x10 [ 153.156854][ T6408] vfs_open+0x82/0x3f0 [ 153.156900][ T6408] path_openat+0x2873/0x4280 [ 153.156951][ T6408] ? __pfx_path_openat+0x10/0x10 [ 153.156996][ T6408] do_file_open+0x20e/0x430 [ 153.157032][ T6408] ? __pfx_do_file_open+0x10/0x10 [ 153.157096][ T6408] ? alloc_fd+0x471/0x7a0 [ 153.157154][ T6408] ? do_getname+0x191/0x390 [ 153.157198][ T6408] do_sys_openat2+0x10f/0x1e0 [ 153.157242][ T6408] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.157310][ T6408] __x64_sys_openat+0x12d/0x210 [ 153.157356][ T6408] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.157415][ T6408] do_syscall_64+0x115/0x840 [ 153.157450][ T6408] ? clear_bhb_loop+0x40/0x90 [ 153.157493][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.157530][ T6408] RIP: 0033:0x7f8ee479de99 [ 153.157559][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.157593][ T6408] RSP: 002b:00007f8ee5668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.157639][ T6408] RAX: ffffffffffffffda RBX: 00007f8ee4a26180 RCX: 00007f8ee479de99 [ 153.157664][ T6408] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 153.157686][ T6408] RBP: 00007f8ee4833eaf R08: 0000000000000000 R09: 0000000000000000 [ 153.157707][ T6408] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 153.157728][ T6408] R13: 00007f8ee4a26218 R14: 00007f8ee4a26180 R15: 00007fff5d33f208 [ 153.157775][ T6408] [ 154.700467][ T6440] FAULT_INJECTION: forcing a failure. [ 154.700467][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 154.770014][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.0.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.770063][ T6440] Tainted: [L]=SOFTLOCKUP [ 154.770073][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 154.770091][ T6440] Call Trace: [ 154.770102][ T6440] [ 154.770114][ T6440] dump_stack_lvl+0x100/0x190 [ 154.770156][ T6440] should_fail_ex.cold+0x5/0xa [ 154.770193][ T6440] should_failslab+0xc2/0x120 [ 154.770237][ T6440] kmem_cache_alloc_noprof+0x91/0x6a0 [ 154.770278][ T6440] ? __kernfs_new_node+0xd2/0xa10 [ 154.770335][ T6440] __kernfs_new_node+0xd2/0xa10 [ 154.770385][ T6440] ? kernfs_add_one+0x611/0xaa0 [ 154.770436][ T6440] ? __pfx___kernfs_new_node+0x10/0x10 [ 154.770497][ T6440] ? find_held_lock+0x2b/0x80 [ 154.770533][ T6440] ? kernfs_root+0xee/0x2a0 [ 154.770576][ T6440] ? kernfs_root+0xee/0x2a0 [ 154.770630][ T6440] kernfs_new_node+0x117/0x150 [ 154.770686][ T6440] __kernfs_create_file+0x53/0x350 [ 154.770726][ T6440] sysfs_add_file_mode_ns+0x207/0x3c0 [ 154.770780][ T6440] sysfs_create_file_ns+0x145/0x1e0 [ 154.770825][ T6440] ? rcu_is_watching+0x12/0xc0 [ 154.770861][ T6440] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 154.770913][ T6440] ? __pfx___up_read+0x10/0x10 [ 154.770944][ T6440] ? acpi_device_notify+0x464/0x500 [ 154.770991][ T6440] ? kobject_put+0xb9/0x640 [ 154.771039][ T6440] device_create_file+0xf2/0x1d0 [ 154.771093][ T6440] device_add+0x2cb/0x1970 [ 154.771142][ T6440] ? __pfx_device_add+0x10/0x10 [ 154.771187][ T6440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.771235][ T6440] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 154.771282][ T6440] wiphy_register+0x2151/0x3110 [ 154.771344][ T6440] ? __pfx_wiphy_register+0x10/0x10 [ 154.771393][ T6440] ? __asan_memset+0x23/0x50 [ 154.771425][ T6440] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 154.771480][ T6440] ieee80211_register_hw+0x3053/0x4580 [ 154.771538][ T6440] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 154.771576][ T6440] ? __pfx___debug_object_init+0x10/0x10 [ 154.771629][ T6440] ? find_held_lock+0x2b/0x80 [ 154.771668][ T6440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.771713][ T6440] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 154.771744][ T6440] ? __hrtimer_setup+0x208/0x330 [ 154.771788][ T6440] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 154.771857][ T6440] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 154.771905][ T6440] ? hwsim_new_radio_nl+0xbcf/0x13f0 [ 154.771951][ T6440] hwsim_new_radio_nl+0xc6b/0x13f0 [ 154.771995][ T6440] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 154.772046][ T6440] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 154.772084][ T6440] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 154.772132][ T6440] genl_family_rcv_msg_doit+0x214/0x300 [ 154.772172][ T6440] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 154.772208][ T6440] ? genl_get_cmd+0x3e7/0x760 [ 154.772247][ T6440] ? bpf_lsm_capable+0x9/0x10 [ 154.772277][ T6440] ? security_capable+0x80/0x260 [ 154.772327][ T6440] ? ns_capable+0xd2/0xf0 [ 154.772359][ T6440] genl_rcv_msg+0x560/0x800 [ 154.772399][ T6440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.772436][ T6440] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 154.772491][ T6440] netlink_rcv_skb+0x159/0x420 [ 154.772521][ T6440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.772560][ T6440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.772608][ T6440] ? netlink_deliver_tap+0x1ae/0xcc0 [ 154.772665][ T6440] genl_rcv+0x28/0x40 [ 154.772696][ T6440] netlink_unicast+0x585/0x850 [ 154.772755][ T6440] ? __pfx_netlink_unicast+0x10/0x10 [ 154.772821][ T6440] netlink_sendmsg+0x8b0/0xda0 [ 154.772881][ T6440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.772973][ T6440] ? apparmor_socket_sendmsg+0x15b/0x270 [ 154.773033][ T6440] ____sys_sendmsg+0xa4d/0xbe0 [ 154.773080][ T6440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.773133][ T6440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.773202][ T6440] ___sys_sendmsg+0x190/0x1e0 [ 154.773254][ T6440] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.773300][ T6440] ? __lock_acquire+0x49f/0x1a40 [ 154.773398][ T6440] __sys_sendmsg+0x160/0x210 [ 154.773440][ T6440] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.773505][ T6440] do_syscall_64+0x115/0x840 [ 154.773537][ T6440] ? clear_bhb_loop+0x40/0x90 [ 154.773576][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.773610][ T6440] RIP: 0033:0x7f8ee479de99 [ 154.773637][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.773668][ T6440] RSP: 002b:00007f8ee5689028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.773699][ T6440] RAX: ffffffffffffffda RBX: 00007f8ee4a26090 RCX: 00007f8ee479de99 [ 154.773720][ T6440] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 154.773739][ T6440] RBP: 00007f8ee4833eaf R08: 0000000000000000 R09: 0000000000000000 [ 154.773757][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.773775][ T6440] R13: 00007f8ee4a26128 R14: 00007f8ee4a26090 R15: 00007fff5d33f208 [ 154.773815][ T6440] [ 155.879396][ T6452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.695719][ T6463] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 156.834167][ T6463] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 157.260590][ T6484] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.927426][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 161.867179][ T6535] random: crng reseeded on system resumption [ 162.032324][ T6535] hub 1-0:1.0: USB hub found [ 162.052021][ T6535] hub 1-0:1.0: 1 port detected [ 162.751672][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 162.777222][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 170.421841][ T6493] syz.1.138 (6493) used greatest stack depth: 20144 bytes left [ 170.666884][ T6578] FAULT_INJECTION: forcing a failure. [ 170.666884][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 170.691162][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.1.158 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.691215][ T6578] Tainted: [L]=SOFTLOCKUP [ 170.691227][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 170.691246][ T6578] Call Trace: [ 170.691257][ T6578] [ 170.691270][ T6578] dump_stack_lvl+0x100/0x190 [ 170.691314][ T6578] should_fail_ex.cold+0x5/0xa [ 170.691353][ T6578] should_failslab+0xc2/0x120 [ 170.691398][ T6578] __kmalloc_noprof+0xfc/0x820 [ 170.691439][ T6578] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 170.691505][ T6578] vb2_core_allocated_buffers_storage+0x184/0x220 [ 170.691563][ T6578] vb2_core_reqbufs+0x382/0xf30 [ 170.691626][ T6578] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 170.691687][ T6578] ? kasan_save_track+0x14/0x30 [ 170.691727][ T6578] ? __kasan_kmalloc+0xaa/0xb0 [ 170.691774][ T6578] ? __vb2_init_fileio+0x18f/0x1000 [ 170.691837][ T6578] __vb2_init_fileio+0x32d/0x1000 [ 170.691892][ T6578] ? aa_file_perm+0x7f3/0x14d0 [ 170.691961][ T6578] __vb2_perform_fileio+0x9ba/0x1380 [ 170.692030][ T6578] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 170.692084][ T6578] ? __pfx___might_resched+0x10/0x10 [ 170.692147][ T6578] vb2_fop_read+0x211/0x520 [ 170.692206][ T6578] v4l2_read+0x229/0x2c0 [ 170.692254][ T6578] ? __pfx_v4l2_read+0x10/0x10 [ 170.692302][ T6578] vfs_read+0x1e4/0xb40 [ 170.692362][ T6578] ? __pfx_vfs_read+0x10/0x10 [ 170.692409][ T6578] ? find_held_lock+0x2b/0x80 [ 170.692447][ T6578] ? __fget_files+0x215/0x3d0 [ 170.692498][ T6578] ? __fget_files+0x215/0x3d0 [ 170.692565][ T6578] ? __fget_files+0x21f/0x3d0 [ 170.692628][ T6578] ksys_read+0x12a/0x250 [ 170.692679][ T6578] ? __pfx_ksys_read+0x10/0x10 [ 170.692741][ T6578] do_syscall_64+0x115/0x840 [ 170.692777][ T6578] ? clear_bhb_loop+0x40/0x90 [ 170.692821][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.692852][ T6578] RIP: 0033:0x7fb74519de99 [ 170.692876][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.692904][ T6578] RSP: 002b:00007fb74600c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.692941][ T6578] RAX: ffffffffffffffda RBX: 00007fb745425fa0 RCX: 00007fb74519de99 [ 170.692961][ T6578] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 170.692978][ T6578] RBP: 00007fb745233eaf R08: 0000000000000000 R09: 0000000000000000 [ 170.692996][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.693013][ T6578] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 170.693050][ T6578] [ 171.466259][ T6514] syz.1.143 (6514) used greatest stack depth: 19768 bytes left [ 171.599011][ T6588] usbcore.quirks: string doesn't fit in 127 chars. [ 171.610653][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.622210][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.637583][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.651015][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.661823][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.757677][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.776120][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.792344][ T6589] bridge_slave_0: entered allmulticast mode [ 172.810160][ T6589] bridge_slave_0: entered promiscuous mode [ 172.837312][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.851283][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.872227][ T6589] bridge_slave_1: entered allmulticast mode [ 172.894668][ T6589] bridge_slave_1: entered promiscuous mode [ 172.968320][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.991239][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.056368][ T6589] team0: Port device team_slave_0 added [ 173.072704][ T6589] team0: Port device team_slave_1 added [ 173.134239][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.143579][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.189470][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.215842][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.228232][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.269489][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.369902][ T6589] hsr_slave_0: entered promiscuous mode [ 173.382894][ T6589] hsr_slave_1: entered promiscuous mode [ 173.395516][ T6589] debugfs: 'hsr0' already exists in 'hsr' [ 173.414385][ T6589] Cannot create hsr debugfs directory [ 173.764707][ T5642] Bluetooth: hci4: command tx timeout [ 173.829759][ T6589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.855793][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.865361][ T6589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.899027][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.917057][ T6589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.959672][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.979809][ T6589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.998581][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.293705][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.307050][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.320474][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.330699][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.341659][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.457103][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.533182][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.564232][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.571625][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.664052][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.671823][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.848523][ T50] Bluetooth: hci4: command tx timeout [ 176.405384][ T50] Bluetooth: hci5: command tx timeout [ 176.706182][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.190969][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.198808][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.208573][ T6628] bridge_slave_0: entered allmulticast mode [ 177.217768][ T6628] bridge_slave_0: entered promiscuous mode [ 177.358723][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.379476][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.396549][ T6628] bridge_slave_1: entered allmulticast mode [ 177.418289][ T6628] bridge_slave_1: entered promiscuous mode [ 177.543318][ T6628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.578110][ T6628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.718321][ T6628] team0: Port device team_slave_0 added [ 177.749920][ T6628] team0: Port device team_slave_1 added [ 177.857286][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.864921][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.898033][ T6628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.915125][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.925485][ T50] Bluetooth: hci4: command tx timeout [ 177.932982][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.964056][ T6628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.183085][ T6628] hsr_slave_0: entered promiscuous mode [ 178.190755][ T6628] hsr_slave_1: entered promiscuous mode [ 178.199391][ T6628] debugfs: 'hsr0' already exists in 'hsr' [ 178.211064][ T6628] Cannot create hsr debugfs directory [ 178.486698][ T50] Bluetooth: hci5: command tx timeout [ 178.532819][ T6589] veth0_vlan: entered promiscuous mode [ 178.653315][ T6589] veth1_vlan: entered promiscuous mode [ 178.831372][ T6589] veth0_macvtap: entered promiscuous mode [ 178.854792][ T6628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.891415][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.910088][ T6628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.928157][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.980953][ T6717] openvswitch: netlink: Duplicate key (type 15). [ 179.067975][ T6628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.126964][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.176917][ T6628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.207485][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.230159][ T6589] veth1_macvtap: entered promiscuous mode [ 179.373086][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.423981][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.483281][ T5897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.530263][ T5897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.578674][ T5897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.594757][ T5897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.932499][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.955749][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.967131][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.006618][ T50] Bluetooth: hci4: command tx timeout [ 180.142412][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.156608][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.189031][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.213977][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.222011][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.249844][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.272094][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.289311][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.309380][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.323572][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.427325][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.435713][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.502560][ T6733] mmap: syz.1.171 (6733) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.566412][ T5642] Bluetooth: hci5: command tx timeout [ 181.001743][ T6743] FAULT_INJECTION: forcing a failure. [ 181.001743][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 181.041948][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.1.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.042009][ T6743] Tainted: [L]=SOFTLOCKUP [ 181.042022][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 181.042045][ T6743] Call Trace: [ 181.042057][ T6743] [ 181.042071][ T6743] dump_stack_lvl+0x100/0x190 [ 181.042120][ T6743] should_fail_ex.cold+0x5/0xa [ 181.042162][ T6743] should_failslab+0xc2/0x120 [ 181.042214][ T6743] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 181.042267][ T6743] ? kasprintf+0xc7/0x100 [ 181.042352][ T6743] kvasprintf+0xbc/0x150 [ 181.042408][ T6743] ? __pfx_kvasprintf+0x10/0x10 [ 181.042478][ T6743] kasprintf+0xc7/0x100 [ 181.042531][ T6743] ? __pfx_kasprintf+0x10/0x10 [ 181.042589][ T6743] ? rcu_is_watching+0x12/0xc0 [ 181.042633][ T6743] ? lockdep_init_map_type+0x5c/0x250 [ 181.042702][ T6743] drm_debugfs_clients_add+0x48/0x210 [ 181.042764][ T6743] drm_file_alloc+0x5c6/0xb40 [ 181.042824][ T6743] drm_open_helper+0x1fc/0x540 [ 181.042891][ T6743] drm_open+0x1a0/0x3e0 [ 181.042934][ T6743] ? __pfx_drm_open+0x10/0x10 [ 181.042979][ T6743] drm_stub_open+0x20f/0x380 [ 181.043026][ T6743] ? __pfx_drm_stub_open+0x10/0x10 [ 181.043071][ T6743] chrdev_open+0x234/0x6a0 [ 181.043105][ T6743] ? __pfx_apparmor_file_open+0x10/0x10 [ 181.043144][ T6743] ? __pfx_chrdev_open+0x10/0x10 [ 181.043179][ T6743] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 181.043224][ T6743] do_dentry_open+0x6ab/0x14d0 [ 181.043279][ T6743] ? __pfx_chrdev_open+0x10/0x10 [ 181.043320][ T6743] vfs_open+0x82/0x3f0 [ 181.043379][ T6743] path_openat+0x2873/0x4280 [ 181.043430][ T6743] ? __pfx_path_openat+0x10/0x10 [ 181.043477][ T6743] do_file_open+0x20e/0x430 [ 181.043513][ T6743] ? __pfx_do_file_open+0x10/0x10 [ 181.043577][ T6743] ? alloc_fd+0x471/0x7a0 [ 181.043637][ T6743] ? do_getname+0x191/0x390 [ 181.043683][ T6743] do_sys_openat2+0x10f/0x1e0 [ 181.043850][ T6743] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.043898][ T6743] ? __fget_files+0x21f/0x3d0 [ 181.043962][ T6743] __x64_sys_openat+0x12d/0x210 [ 181.044008][ T6743] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.044070][ T6743] do_syscall_64+0x115/0x840 [ 181.044109][ T6743] ? clear_bhb_loop+0x40/0x90 [ 181.044157][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.044196][ T6743] RIP: 0033:0x7fb74519de99 [ 181.044307][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.044344][ T6743] RSP: 002b:00007fb74600c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.044380][ T6743] RAX: ffffffffffffffda RBX: 00007fb745425fa0 RCX: 00007fb74519de99 [ 181.044403][ T6743] RDX: 0000000000008000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 181.044427][ T6743] RBP: 00007fb745233eaf R08: 0000000000000000 R09: 0000000000000000 [ 181.044449][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.044470][ T6743] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 181.044517][ T6743] [ 181.461011][ T6748] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.67108862), cmd(12) [ 182.406032][ T5642] Bluetooth: hci6: command tx timeout [ 182.460639][ T6767] __vm_enough_memory: pid: 6767, comm: syz.1.175, bytes: 4398046457856 not enough memory for the allocation [ 182.558740][ T31] audit: type=1800 audit(4294967318.709:5): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.175" name="members" dev="configfs" ino=14944 res=0 errno=0 [ 182.601679][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.644693][ T5642] Bluetooth: hci5: command tx timeout [ 183.085189][ T6778] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 183.567730][ T6769] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 184.486226][ T5642] Bluetooth: hci6: command tx timeout [ 184.769078][ T6628] veth0_vlan: entered promiscuous mode [ 184.827893][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.843710][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.856683][ T6729] bridge_slave_0: entered allmulticast mode [ 184.867455][ T6729] bridge_slave_0: entered promiscuous mode [ 184.895070][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.907630][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.931482][ T6729] bridge_slave_1: entered allmulticast mode [ 184.958711][ T6729] bridge_slave_1: entered promiscuous mode [ 185.009985][ T6628] veth1_vlan: entered promiscuous mode [ 185.162973][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.242407][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.630072][ T6729] team0: Port device team_slave_0 added [ 185.677057][ T6628] veth0_macvtap: entered promiscuous mode [ 185.743244][ T6729] team0: Port device team_slave_1 added [ 185.761778][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 185.943893][ T6628] veth1_macvtap: entered promiscuous mode [ 185.976982][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.999564][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.081135][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.148463][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.169444][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.291154][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.568589][ T5642] Bluetooth: hci6: command tx timeout [ 186.623707][ T6729] hsr_slave_0: entered promiscuous mode [ 186.665389][ T6729] hsr_slave_1: entered promiscuous mode [ 186.707794][ T6729] debugfs: 'hsr0' already exists in 'hsr' [ 186.737355][ T6729] Cannot create hsr debugfs directory [ 186.813552][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.006013][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.252503][ T6826] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 187.327140][ T6809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.399229][ T6809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.412256][ T6809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.522463][ T6809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.628370][ T6835] __vm_enough_memory: pid: 6835, comm: syz.1.183, bytes: 4398046457856 not enough memory for the allocation [ 187.791187][ T31] audit: type=1800 audit(4294967323.939:6): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.183" name="members" dev="configfs" ino=15248 res=0 errno=0 [ 188.645414][ T5642] Bluetooth: hci6: command tx timeout [ 188.689060][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.712576][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.047210][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.082047][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.121145][ T6729] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.151688][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.178997][ T6729] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.204880][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.230258][ T6729] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.259250][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.272176][ T6729] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.308163][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.466585][ T6838] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 189.511225][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.557646][ T6729] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.583274][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.590580][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.669137][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.679390][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.747752][ T6859] futex_wake_op: syz.5.163 tries to shift op by -2048; fix this program [ 189.984474][ T6860] kfence: disabled [ 190.460847][ T6874] __vm_enough_memory: pid: 6874, comm: syz.5.188, bytes: 4398046457856 not enough memory for the allocation [ 190.523202][ T31] audit: type=1800 audit(4294967326.669:7): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.188" name="members" dev="configfs" ino=16654 res=0 errno=0 [ 191.055744][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.730780][ T6876] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 191.767118][ T6729] veth0_vlan: entered promiscuous mode [ 191.784236][ T6729] veth1_vlan: entered promiscuous mode [ 191.869627][ T6729] veth0_macvtap: entered promiscuous mode [ 191.887385][ T6729] veth1_macvtap: entered promiscuous mode [ 191.917304][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.948939][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.982340][ T5894] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.003470][ T5894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.028258][ T5894] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.059099][ T5894] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.240510][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.264472][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.320661][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.344970][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.067272][ T31] audit: type=1800 audit(4294967330.219:8): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.199" name="members" dev="configfs" ino=17601 res=0 errno=0 [ 194.935971][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.205'. [ 195.068281][ T6950] HfR: entered promiscuous mode [ 196.501897][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.210'. [ 196.523904][ T6971] openvswitch: HfR: Dropping previously announced user features [ 196.853055][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.211'. [ 196.921824][ T6977] netlink: 'syz.5.211': attribute type 1 has an invalid length. [ 196.931916][ T6977] netlink: 33 bytes leftover after parsing attributes in process `syz.5.211'. [ 198.592708][ T7007] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 199.160758][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 200.108875][ T7033] netlink: 342 bytes leftover after parsing attributes in process `syz.5.222'. [ 200.413891][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.423154][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.699242][ T7073] __vm_enough_memory: pid: 7073, comm: syz.5.229, bytes: 4398046457856 not enough memory for the allocation [ 202.825111][ T31] audit: type=1800 audit(4294967338.959:9): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.229" name="members" dev="configfs" ino=18530 res=0 errno=0 [ 202.869984][ T7073] FAULT_INJECTION: forcing a failure. [ 202.869984][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 202.900796][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.5.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.900844][ T7073] Tainted: [L]=SOFTLOCKUP [ 202.900854][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 202.900877][ T7073] Call Trace: [ 202.900886][ T7073] [ 202.900899][ T7073] dump_stack_lvl+0x100/0x190 [ 202.900955][ T7073] should_fail_ex.cold+0x5/0xa [ 202.900991][ T7073] should_failslab+0xc2/0x120 [ 202.901034][ T7073] __kmalloc_noprof+0xfc/0x820 [ 202.901069][ T7073] ? rcu_is_watching+0x12/0xc0 [ 202.901105][ T7073] ? tomoyo_encode2+0xfb/0x3c0 [ 202.901157][ T7073] tomoyo_encode2+0xfb/0x3c0 [ 202.901207][ T7073] tomoyo_encode+0x29/0x50 [ 202.901248][ T7073] tomoyo_realpath_from_path+0x18c/0x690 [ 202.901302][ T7073] tomoyo_path_number_perm+0x23c/0x580 [ 202.901339][ T7073] ? tomoyo_path_number_perm+0x22e/0x580 [ 202.901380][ T7073] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.901418][ T7073] ? __pfx__kstrtoull+0x10/0x10 [ 202.901507][ T7073] ? from_kgid+0x8f/0xd0 [ 202.901560][ T7073] ? __pfx_from_kgid+0x10/0x10 [ 202.901612][ T7073] tomoyo_path_chown+0x14b/0x1b0 [ 202.901661][ T7073] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 202.901713][ T7073] ? from_vfsuid+0xea/0x140 [ 202.901755][ T7073] ? __pfx_from_vfsuid+0x10/0x10 [ 202.901803][ T7073] security_path_chown+0x12a/0x2d0 [ 202.901841][ T7073] chown_common+0x3da/0x6e0 [ 202.901887][ T7073] ? __pfx_chown_common+0x10/0x10 [ 202.901927][ T7073] ? mnt_get_write_access+0x52/0x2f0 [ 202.901975][ T7073] ? mnt_get_write_access+0x1e9/0x2f0 [ 202.902022][ T7073] vfs_fchown+0xcd/0x110 [ 202.902059][ T7073] __x64_sys_fchown+0xad/0x130 [ 202.902098][ T7073] do_syscall_64+0x115/0x840 [ 202.902130][ T7073] ? clear_bhb_loop+0x40/0x90 [ 202.902171][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.902205][ T7073] RIP: 0033:0x7f6df459de99 [ 202.902232][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.902261][ T7073] RSP: 002b:00007f6df54e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 202.902292][ T7073] RAX: ffffffffffffffda RBX: 00007f6df4825fa0 RCX: 00007f6df459de99 [ 202.902313][ T7073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 202.902331][ T7073] RBP: 00007f6df54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 202.902348][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.902363][ T7073] R13: 00007f6df4826038 R14: 00007f6df4825fa0 R15: 00007fff78f24c58 [ 202.902397][ T7073] [ 202.902561][ T7073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.002163][ T7075] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 204.442241][ T7084] FAULT_INJECTION: forcing a failure. [ 204.442241][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 204.538427][ T7084] CPU: 1 UID: 60928 PID: 7084 Comm: syz.5.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.538514][ T7084] Tainted: [L]=SOFTLOCKUP [ 204.538533][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.538566][ T7084] Call Trace: [ 204.538577][ T7084] [ 204.538590][ T7084] dump_stack_lvl+0x100/0x190 [ 204.538642][ T7084] should_fail_ex.cold+0x5/0xa [ 204.538681][ T7084] should_failslab+0xc2/0x120 [ 204.538735][ T7084] kmem_cache_alloc_noprof+0x91/0x6a0 [ 204.538777][ T7084] ? prepare_creds+0x2c/0x950 [ 204.538833][ T7084] prepare_creds+0x2c/0x950 [ 204.538885][ T7084] __sys_setuid+0x9c/0x440 [ 204.538916][ T7084] do_syscall_64+0x115/0x840 [ 204.538950][ T7084] ? clear_bhb_loop+0x40/0x90 [ 204.538991][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.539024][ T7084] RIP: 0033:0x7f6df459de99 [ 204.539068][ T7084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.539099][ T7084] RSP: 002b:00007f6df54c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 204.539150][ T7084] RAX: ffffffffffffffda RBX: 00007f6df4826090 RCX: 00007f6df459de99 [ 204.539172][ T7084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.539190][ T7084] RBP: 00007f6df4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 204.539209][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.539228][ T7084] R13: 00007f6df4826128 R14: 00007f6df4826090 R15: 00007fff78f24c58 [ 204.539270][ T7084] [ 204.753397][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 204.776788][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 204.795301][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 204.805353][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 204.813272][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 205.248376][ T7100] __vm_enough_memory: pid: 7100, comm: syz.1.234, bytes: 4398046457856 not enough memory for the allocation [ 205.343979][ T31] audit: type=1800 audit(4294967341.489:10): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.234" name="members" dev="configfs" ino=18159 res=0 errno=0 [ 205.481380][ T7099] bridge0: port 3(team0) entered blocking state [ 205.542951][ T7099] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 205.611942][ T7099] bridge0: port 3(team0) entered disabled state [ 205.654675][ T7099] team0: entered allmulticast mode [ 205.696486][ T7099] team_slave_0: entered allmulticast mode [ 205.734765][ T7099] team_slave_1: entered allmulticast mode [ 205.761786][ T7099] team0: entered promiscuous mode [ 205.814448][ T7099] team_slave_0: entered promiscuous mode [ 205.821189][ T7099] team_slave_1: entered promiscuous mode [ 205.845747][ T7099] bridge0: port 3(team0) entered blocking state [ 205.852634][ T7099] bridge0: port 3(team0) entered forwarding state [ 206.603560][ T7100] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 206.886361][ T50] Bluetooth: hci7: command tx timeout [ 206.926481][ T7126] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 207.152379][ T7126] netlink: 346 bytes leftover after parsing attributes in process `syz.1.237'. [ 207.484790][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.492919][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.500993][ T7091] bridge_slave_0: entered allmulticast mode [ 207.513245][ T7091] bridge_slave_0: entered promiscuous mode [ 207.532595][ T7138] WARNING! power/level is deprecated; use power/control instead [ 207.723686][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.743764][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.762603][ T7091] bridge_slave_1: entered allmulticast mode [ 207.778978][ T7091] bridge_slave_1: entered promiscuous mode [ 208.118602][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.215422][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.296640][ T7091] team0: Port device team_slave_0 added [ 208.306738][ T7091] team0: Port device team_slave_1 added [ 208.389594][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.404600][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.447357][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.466307][ T7143] __vm_enough_memory: pid: 7143, comm: syz.1.239, bytes: 4398046457856 not enough memory for the allocation [ 208.483674][ T7143] FAULT_INJECTION: forcing a failure. [ 208.483674][ T7143] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.483793][ T31] audit: type=1800 audit(4294967344.629:11): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="members" dev="configfs" ino=18238 res=0 errno=0 [ 208.513803][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.1.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.513951][ T7143] Tainted: [L]=SOFTLOCKUP [ 208.513975][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 208.514030][ T7143] Call Trace: [ 208.514061][ T7143] [ 208.514093][ T7143] dump_stack_lvl+0x100/0x190 [ 208.514210][ T7143] should_fail_ex.cold+0x5/0xa [ 208.514307][ T7143] _copy_to_user+0x32/0xd0 [ 208.514455][ T7143] simple_read_from_buffer+0xcb/0x170 [ 208.514602][ T7143] proc_fail_nth_read+0x1af/0x230 [ 208.514751][ T7143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.514914][ T7143] ? rw_verify_area+0xce/0x6d0 [ 208.515031][ T7143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.515145][ T7143] vfs_read+0x1e4/0xb40 [ 208.515290][ T7143] ? __pfx_vfs_read+0x10/0x10 [ 208.515417][ T7143] ? __fget_files+0x215/0x3d0 [ 208.515572][ T7143] ? __fget_files+0x21f/0x3d0 [ 208.515738][ T7143] ksys_read+0x12a/0x250 [ 208.515876][ T7143] ? __pfx_ksys_read+0x10/0x10 [ 208.516042][ T7143] do_syscall_64+0x115/0x840 [ 208.516139][ T7143] ? clear_bhb_loop+0x40/0x90 [ 208.516286][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.516370][ T7143] RIP: 0033:0x7fb74515e6ce [ 208.516447][ T7143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.516535][ T7143] RSP: 002b:00007fb74600bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.516615][ T7143] RAX: ffffffffffffffda RBX: 00007fb74600c6c0 RCX: 00007fb74515e6ce [ 208.516670][ T7143] RDX: 000000000000000f RSI: 00007fb74600c0a0 RDI: 0000000000000005 [ 208.516760][ T7143] RBP: 00007fb74600c090 R08: 0000000000000000 R09: 0000000000000000 [ 208.516814][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.516871][ T7143] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 208.516990][ T7143] [ 208.707143][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.757027][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.859123][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.965242][ T50] Bluetooth: hci7: command tx timeout [ 209.030011][ T7149] netlink: get zone limit has 8 unknown bytes [ 209.097225][ T7091] hsr_slave_0: entered promiscuous mode [ 209.119377][ T7091] hsr_slave_1: entered promiscuous mode [ 209.138945][ T7091] debugfs: 'hsr0' already exists in 'hsr' [ 209.160954][ T7091] Cannot create hsr debugfs directory [ 209.356834][ T5642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 209.375792][ T5642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 209.385372][ T5642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 209.393951][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 209.402058][ T5642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 209.494462][ T7153] FAULT_INJECTION: forcing a failure. [ 209.494462][ T7153] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 209.605594][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.1.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.605635][ T7153] Tainted: [L]=SOFTLOCKUP [ 209.605644][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 209.605661][ T7153] Call Trace: [ 209.605669][ T7153] [ 209.605678][ T7153] dump_stack_lvl+0x100/0x190 [ 209.605711][ T7153] should_fail_ex.cold+0x5/0xa [ 209.605735][ T7153] ? prepare_alloc_pages+0x16d/0x5f0 [ 209.605772][ T7153] should_fail_alloc_page+0xeb/0x140 [ 209.605811][ T7153] prepare_alloc_pages+0x1f0/0x5f0 [ 209.605850][ T7153] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 209.605881][ T7153] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 209.605918][ T7153] ? pte_offset_map_lock+0x174/0x320 [ 209.605948][ T7153] ? find_held_lock+0x2b/0x80 [ 209.605976][ T7153] ? rcu_read_unlock+0x2d/0xb0 [ 209.605999][ T7153] ? rcu_read_unlock+0x2d/0xb0 [ 209.606023][ T7153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.606054][ T7153] ? finish_fault+0xa12/0x1400 [ 209.606101][ T7153] ? do_fault+0x644/0x1750 [ 209.606139][ T7153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.606175][ T7153] ? policy_nodemask+0xed/0x4f0 [ 209.606211][ T7153] alloc_pages_mpol+0x1fb/0x540 [ 209.606246][ T7153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.606278][ T7153] ? __pfx___css_rstat_updated+0x10/0x10 [ 209.606340][ T7153] folio_alloc_mpol_noprof+0x36/0x260 [ 209.606382][ T7153] shmem_alloc_folio+0x135/0x160 [ 209.606422][ T7153] shmem_alloc_and_add_folio+0x371/0xd40 [ 209.606471][ T7153] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 209.606517][ T7153] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 209.606541][ T7153] ? __bpf_trace_sched_exit_tp+0xb0/0xc0 [ 209.606584][ T7153] shmem_get_folio_gfp+0x6ad/0x1910 [ 209.606616][ T7153] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 209.606649][ T7153] shmem_write_begin+0x1a4/0x420 [ 209.606678][ T7153] ? __pfx_shmem_write_begin+0x10/0x10 [ 209.606705][ T7153] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 209.606740][ T7153] generic_perform_write+0x292/0xa40 [ 209.606787][ T7153] ? __pfx_generic_perform_write+0x10/0x10 [ 209.606828][ T7153] ? file_update_time_flags+0x373/0x500 [ 209.606860][ T7153] shmem_file_write_iter+0x10e/0x140 [ 209.606893][ T7153] vfs_write+0x6ac/0x1050 [ 209.606933][ T7153] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 209.606967][ T7153] ? __pfx_vfs_write+0x10/0x10 [ 209.607024][ T7153] ksys_write+0x12a/0x250 [ 209.607062][ T7153] ? __pfx_ksys_write+0x10/0x10 [ 209.607108][ T7153] do_syscall_64+0x115/0x840 [ 209.607134][ T7153] ? clear_bhb_loop+0x40/0x90 [ 209.607164][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.607190][ T7153] RIP: 0033:0x7fb74519de99 [ 209.607211][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.607234][ T7153] RSP: 002b:00007fb74600c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.607258][ T7153] RAX: ffffffffffffffda RBX: 00007fb745425fa0 RCX: 00007fb74519de99 [ 209.607274][ T7153] RDX: 00000000fffffdf1 RSI: 0000000000000000 RDI: 0000000000000005 [ 209.607295][ T7153] RBP: 00007fb745233eaf R08: 0000000000000000 R09: 0000000000000000 [ 209.607310][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.607325][ T7153] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 209.607356][ T7153] [ 210.371491][ T7091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.426892][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.441683][ T7091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.498170][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.525649][ T7091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.558172][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.579484][ T7091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.600046][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.919894][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.011505][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.046817][ T50] Bluetooth: hci7: command tx timeout [ 211.090916][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.100876][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.183853][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.191722][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.455298][ T50] Bluetooth: hci8: command tx timeout [ 213.125080][ T50] Bluetooth: hci7: command tx timeout [ 213.276161][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.313503][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.347404][ T7154] bridge_slave_0: entered allmulticast mode [ 213.379397][ T7154] bridge_slave_0: entered promiscuous mode [ 213.416344][ T7154] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.427009][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.441377][ T7154] bridge_slave_1: entered allmulticast mode [ 213.495683][ T7154] bridge_slave_1: entered promiscuous mode [ 213.524463][ T50] Bluetooth: hci8: command tx timeout [ 213.896424][ T7154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.939831][ T7154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.152274][ T7154] team0: Port device team_slave_0 added [ 214.178212][ T7154] team0: Port device team_slave_1 added [ 214.305371][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.313575][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.344876][ T7154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.382661][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.410697][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.484236][ T7154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.566672][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.854877][ T7154] hsr_slave_0: entered promiscuous mode [ 214.872481][ T7225] netlink: 342 bytes leftover after parsing attributes in process `syz.1.251'. [ 214.881959][ T7154] hsr_slave_1: entered promiscuous mode [ 214.890201][ T7154] debugfs: 'hsr0' already exists in 'hsr' [ 214.914567][ T7154] Cannot create hsr debugfs directory [ 215.615994][ T50] Bluetooth: hci8: command tx timeout [ 216.241699][ T7154] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 216.273043][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.290877][ T7154] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 216.343358][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.359603][ T7154] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 216.379665][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.411670][ T7154] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 216.450159][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.477683][ T7091] veth0_vlan: entered promiscuous mode [ 216.555346][ T7091] veth1_vlan: entered promiscuous mode [ 216.744890][ T7091] veth0_macvtap: entered promiscuous mode [ 216.792135][ T7091] veth1_macvtap: entered promiscuous mode [ 216.942199][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.019731][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.051602][ T7154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.103207][ T7154] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.149880][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.157594][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.175811][ T5903] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.188233][ T5903] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.219899][ T5903] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.236206][ T5903] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.257116][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.266204][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.685609][ T50] Bluetooth: hci8: command tx timeout [ 218.049443][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.095143][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.277625][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.340285][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.005018][ T7263] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[7263] [ 219.266221][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 220.511567][ T7274] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 220.841743][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.947504][ T7293] zswap: compressor not available [ 222.228690][ T7295] vivid-007: ================= START STATUS ================= [ 222.262134][ T7295] vivid-007: Generate PTS: true [ 222.287418][ T7295] vivid-007: Generate SCR: true [ 222.316654][ T7295] tpg source WxH: 320x240 (Y'CbCr) [ 222.341219][ T7295] tpg field: 1 [ 222.349502][ T7295] tpg crop: (0,0)/320x240 [ 222.359633][ T7295] tpg compose: (0,0)/320x240 [ 222.390687][ T7295] tpg colorspace: 8 [ 222.404769][ T7295] tpg transfer function: 0/0 [ 222.414179][ T7295] tpg Y'CbCr encoding: 0/0 [ 222.422594][ T7295] tpg quantization: 0/0 [ 222.430804][ T7295] tpg RGB range: 0/2 [ 222.437044][ T7295] vivid-007: ================== END STATUS ================== [ 223.428960][ T7154] veth0_vlan: entered promiscuous mode [ 223.531385][ T7154] veth1_vlan: entered promiscuous mode [ 223.658643][ T7154] veth0_macvtap: entered promiscuous mode [ 223.724889][ T7154] veth1_macvtap: entered promiscuous mode [ 223.773521][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.265'. [ 223.785707][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.812457][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.860111][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.884472][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.903933][ T7324] openvswitch: HfR: Dropping previously announced user features [ 223.929934][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.956004][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.260525][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.294819][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.375930][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.398030][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.372513][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.269'. [ 231.117269][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.8.279'. [ 231.265887][ T31] audit: type=1107 audit(4294967367.419:12): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 231.353994][ T31] audit: type=1107 audit(4294967367.499:13): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 231.590046][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.7.281'. [ 232.075511][ T7413] bond0: (slave bond_slave_0): Releasing backup interface [ 232.189456][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.283'. [ 232.251245][ T7421] HfR: entered promiscuous mode [ 232.272401][ T7423] random: crng reseeded on system resumption [ 234.744534][ T7463] scsi_dev_info_list_add_str: bad dev info string 'oU`uS]GO#Rw8lg(͵qMa[8)' '' '' [ 235.397141][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 235.533977][ T7467] HfR: entered promiscuous mode [ 235.969501][ T7479] FAULT_INJECTION: forcing a failure. [ 235.969501][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 236.059997][ T7472] kexec: Could not allocate control_code_buffer [ 236.078303][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.1.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.078343][ T7479] Tainted: [L]=SOFTLOCKUP [ 236.078352][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 236.078379][ T7479] Call Trace: [ 236.078388][ T7479] [ 236.078397][ T7479] dump_stack_lvl+0x100/0x190 [ 236.078430][ T7479] should_fail_ex.cold+0x5/0xa [ 236.078458][ T7479] should_failslab+0xc2/0x120 [ 236.078497][ T7479] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 236.078527][ T7479] ? sget_fc+0xef6/0x1d80 [ 236.078562][ T7479] ? mqueue_alloc_inode+0x25/0x50 [ 236.078603][ T7479] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 236.078645][ T7479] mqueue_alloc_inode+0x25/0x50 [ 236.078683][ T7479] alloc_inode+0x68/0x250 [ 236.078714][ T7479] new_inode+0x22/0x1c0 [ 236.078742][ T7479] ? refcount_dec_not_one+0x136/0x1c0 [ 236.078780][ T7479] mqueue_get_inode+0x2e/0xe00 [ 236.078817][ T7479] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 236.078857][ T7479] ? __kasan_kmalloc+0xaa/0xb0 [ 236.078889][ T7479] ? __pfx_mqueue_fill_super+0x10/0x10 [ 236.078927][ T7479] mqueue_fill_super+0x14d/0x260 [ 236.078970][ T7479] get_tree_nodev+0xdd/0x190 [ 236.079029][ T7479] mqueue_get_tree+0xf1/0x130 [ 236.079069][ T7479] vfs_get_tree+0x92/0x320 [ 236.079103][ T7479] fc_mount_longterm+0x1a/0x270 [ 236.079140][ T7479] mq_init_ns+0x482/0x820 [ 236.079169][ T7479] copy_ipcs+0x3dd/0x7e0 [ 236.079198][ T7479] create_new_namespaces+0x20a/0xac0 [ 236.079224][ T7479] ? security_capable+0x80/0x260 [ 236.079269][ T7479] copy_namespaces+0x468/0x5e0 [ 236.079295][ T7479] copy_process+0x385f/0x8030 [ 236.079346][ T7479] ? __pfx_copy_process+0x10/0x10 [ 236.079383][ T7479] ? _copy_from_user+0x59/0xd0 [ 236.079423][ T7479] kernel_clone+0x176/0x9d0 [ 236.079454][ T7479] ? __pfx_kernel_clone+0x10/0x10 [ 236.079505][ T7479] __do_sys_clone3+0x214/0x290 [ 236.079534][ T7479] ? __pfx___do_sys_clone3+0x10/0x10 [ 236.079603][ T7479] do_syscall_64+0x115/0x840 [ 236.079630][ T7479] ? clear_bhb_loop+0x40/0x90 [ 236.079661][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.079688][ T7479] RIP: 0033:0x7fb74519de99 [ 236.079709][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.079733][ T7479] RSP: 002b:00007fb74600bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 236.079758][ T7479] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb74519de99 [ 236.079774][ T7479] RDX: 00007fb74600bf10 RSI: 0000000000000058 RDI: 00007fb74600bf10 [ 236.079790][ T7479] RBP: 00007fb745233eaf R08: 0000000000000000 R09: 0000000000000058 [ 236.079806][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.079821][ T7479] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 236.079854][ T7479] [ 236.594101][ T7481] zram: Removed device: zram0 [ 239.557961][ T7494] Process accounting resumed [ 239.827334][ T7513] syz.7.300 (7513) used greatest stack depth: 18592 bytes left [ 241.980590][ T7544] FAULT_INJECTION: forcing a failure. [ 241.980590][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 242.027094][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.1.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.027162][ T7544] Tainted: [L]=SOFTLOCKUP [ 242.027174][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 242.027195][ T7544] Call Trace: [ 242.027206][ T7544] [ 242.027219][ T7544] dump_stack_lvl+0x100/0x190 [ 242.027267][ T7544] should_fail_ex.cold+0x5/0xa [ 242.027307][ T7544] should_failslab+0xc2/0x120 [ 242.027361][ T7544] __kmalloc_cache_noprof+0x91/0x6c0 [ 242.027428][ T7544] ? erofs_init_fs_context+0x94/0x360 [ 242.027500][ T7544] erofs_init_fs_context+0x94/0x360 [ 242.027566][ T7544] alloc_fs_context+0x60c/0xf40 [ 242.027637][ T7544] __x64_sys_fsopen+0xed/0x220 [ 242.027684][ T7544] do_syscall_64+0x115/0x840 [ 242.027726][ T7544] ? clear_bhb_loop+0x40/0x90 [ 242.027769][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.027805][ T7544] RIP: 0033:0x7fb74519de99 [ 242.027833][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.027876][ T7544] RSP: 002b:00007fb74600c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 242.027909][ T7544] RAX: ffffffffffffffda RBX: 00007fb745425fa0 RCX: 00007fb74519de99 [ 242.027932][ T7544] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 242.027952][ T7544] RBP: 00007fb745233eaf R08: 0000000000000000 R09: 0000000000000000 [ 242.027973][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.027998][ T7544] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 242.028046][ T7544] [ 242.354174][ T7545] netlink: 74 bytes leftover after parsing attributes in process `syz.1.307'. [ 243.347299][ T7556] netlink: 330 bytes leftover after parsing attributes in process `syz.7.310'. [ 243.452990][ T7557] cifs: Unknown parameter 'knjeRaBt$Mi' [ 244.286472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 245.538494][ T31] audit: type=1800 audit(4294967381.689:14): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.313" name="members" dev="configfs" ino=21803 res=0 errno=0 [ 246.642602][ T7572] zram: Added device: zram0 [ 247.317135][ T7579] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 247.475221][ T7581] __vm_enough_memory: pid: 7581, comm: syz.5.314, bytes: 4398046457856 not enough memory for the allocation [ 247.570840][ T31] audit: type=1800 audit(4294967383.719:15): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.314" name="members" dev="configfs" ino=21851 res=0 errno=0 [ 248.120603][ T7573] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 248.970817][ T7594] nvme_fabrics: missing parameter 'transport=%s' [ 249.085443][ T7594] nvme_fabrics: missing parameter 'nqn=%s' [ 249.197546][ T7590] netlink: 338 bytes leftover after parsing attributes in process `syz.8.319'. [ 249.888052][ T7582] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 251.935406][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.329'. [ 252.305858][ T7640] openvswitch: HfR: Dropping previously announced user features [ 253.143651][ T7658] UHID_CREATE from different security context by process 79 (syz.8.330), this is not allowed. [ 255.515023][ T7685] __vm_enough_memory: pid: 7685, comm: syz.7.335, bytes: 4398046457856 not enough memory for the allocation [ 255.667020][ T31] audit: type=1800 audit(4294967391.819:16): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.335" name="members" dev="configfs" ino=22096 res=0 errno=0 [ 256.924688][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 257.167984][ T7704] vlan1: left allmulticast mode [ 257.200501][ T7704] veth0_vlan: left allmulticast mode [ 257.279349][ T7704] vlan1: left promiscuous mode [ 257.352609][ T7704] bridge0: port 3(vlan1) entered disabled state [ 257.369400][ T50] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 257.369468][ T50] Bluetooth: hci5: unexpected subevent 0x06 length: 725 > 10 [ 257.482483][ T7704] bridge_slave_1: left allmulticast mode [ 257.494629][ T7704] bridge_slave_1: left promiscuous mode [ 257.502757][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.550724][ T7704] bridge_slave_0: left allmulticast mode [ 257.558709][ T7704] bridge_slave_0: left promiscuous mode [ 257.566911][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.618848][ T50] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 257.618899][ T50] Bluetooth: hci5: unexpected subevent 0x06 length: 725 > 10 [ 258.279006][ T7685] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 259.251000][ T7734] FAULT_INJECTION: forcing a failure. [ 259.251000][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 259.364777][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.7.344 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.364833][ T7734] Tainted: [L]=SOFTLOCKUP [ 259.364845][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 259.364865][ T7734] Call Trace: [ 259.364876][ T7734] [ 259.364889][ T7734] dump_stack_lvl+0x100/0x190 [ 259.364935][ T7734] should_fail_ex.cold+0x5/0xa [ 259.364976][ T7734] should_failslab+0xc2/0x120 [ 259.365023][ T7734] kmem_cache_alloc_noprof+0x91/0x6a0 [ 259.365066][ T7734] ? __pfx_acct_collect+0x10/0x10 [ 259.365108][ T7734] ? taskstats_exit+0x6d3/0xca0 [ 259.365163][ T7734] taskstats_exit+0x6d3/0xca0 [ 259.365210][ T7734] ? __pfx_acct_update_integrals+0x10/0x10 [ 259.365263][ T7734] ? __pfx_taskstats_exit+0x10/0x10 [ 259.365313][ T7734] ? rcu_read_lock_any_held+0x6a/0xa0 [ 259.365365][ T7734] do_exit+0x65c/0x2ae0 [ 259.365423][ T7734] ? __pfx_do_exit+0x10/0x10 [ 259.365478][ T7734] ? do_raw_spin_lock+0x128/0x260 [ 259.365514][ T7734] ? find_held_lock+0x2b/0x80 [ 259.365553][ T7734] ? get_signal+0x7e0/0x21e0 [ 259.365594][ T7734] do_group_exit+0xd5/0x2a0 [ 259.365644][ T7734] get_signal+0x1ec7/0x21e0 [ 259.365697][ T7734] ? __pfx_get_signal+0x10/0x10 [ 259.365734][ T7734] ? do_futex+0x190/0x440 [ 259.365773][ T7734] arch_do_signal_or_restart+0x91/0x7a0 [ 259.365831][ T7734] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 259.365875][ T7734] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.365933][ T7734] exit_to_user_mode_loop+0x139/0x6f0 [ 259.365977][ T7734] ? rcu_is_watching+0x12/0xc0 [ 259.366036][ T7734] do_syscall_64+0x652/0x840 [ 259.366075][ T7734] ? clear_bhb_loop+0x40/0x90 [ 259.366113][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.366140][ T7734] RIP: 0033:0x7ffb7539de99 [ 259.366163][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.366188][ T7734] RSP: 002b:00007ffb7632b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.366212][ T7734] RAX: fffffffffffffe00 RBX: 00007ffb75625fa8 RCX: 00007ffb7539de99 [ 259.366229][ T7734] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb75625fa8 [ 259.366245][ T7734] RBP: 00007ffb75625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 259.366260][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.366276][ T7734] R13: 00007ffb75626038 R14: 00007fffa4a096e0 R15: 00007fffa4a097c8 [ 259.366308][ T7734] [ 259.658696][ T50] Bluetooth: hci5: command tx timeout [ 259.908243][ T7730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.091080][ T7730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.114926][ T7730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.122405][ T7730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.132586][ T7730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.181052][ T7730] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 260.278544][ T7730] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 260.502596][ T7730] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 260.538128][ T7730] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 260.701686][ T7730] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 260.904019][ T7730] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 260.934910][ T7730] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 261.021581][ T7730] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 261.122310][ T7730] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 261.134798][ T7730] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 261.198086][ T7730] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 261.297928][ T7730] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 261.319864][ T7730] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 261.399836][ T7730] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 261.827849][ T7772] FAULT_INJECTION: forcing a failure. [ 261.827849][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 261.851686][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.5.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.851755][ T7772] Tainted: [L]=SOFTLOCKUP [ 261.851768][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 261.851789][ T7772] Call Trace: [ 261.851801][ T7772] [ 261.851815][ T7772] dump_stack_lvl+0x100/0x190 [ 261.851865][ T7772] should_fail_ex.cold+0x5/0xa [ 261.851907][ T7772] should_failslab+0xc2/0x120 [ 261.851958][ T7772] __kmalloc_cache_noprof+0x91/0x6c0 [ 261.852025][ T7772] ? alloc_pipe_info+0x10e/0x590 [ 261.852069][ T7772] alloc_pipe_info+0x10e/0x590 [ 261.852108][ T7772] splice_direct_to_actor+0x78f/0xa30 [ 261.852150][ T7772] ? __pfx_direct_splice_actor+0x10/0x10 [ 261.852216][ T7772] ? __pfx_aa_file_perm+0x10/0x10 [ 261.852271][ T7772] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 261.852345][ T7772] do_splice_direct+0x174/0x240 [ 261.852383][ T7772] ? __pfx_do_splice_direct+0x10/0x10 [ 261.852420][ T7772] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 261.852482][ T7772] ? bpf_lsm_file_permission+0x9/0x10 [ 261.852556][ T7772] ? security_file_permission+0x76/0x210 [ 261.852607][ T7772] ? rw_verify_area+0xce/0x6d0 [ 261.852661][ T7772] do_sendfile+0xadc/0xe20 [ 261.852724][ T7772] ? __pfx_do_sendfile+0x10/0x10 [ 261.852792][ T7772] ? __x64_sys_futex+0x34f/0x4d0 [ 261.852830][ T7772] ? __x64_sys_futex+0x358/0x4d0 [ 261.852873][ T7772] __x64_sys_sendfile64+0x1d8/0x220 [ 261.852913][ T7772] ? ksys_write+0x1ac/0x250 [ 261.852969][ T7772] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 261.853024][ T7772] do_syscall_64+0x115/0x840 [ 261.853087][ T7772] ? clear_bhb_loop+0x40/0x90 [ 261.853137][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.853177][ T7772] RIP: 0033:0x7f6df459de99 [ 261.853210][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.853246][ T7772] RSP: 002b:00007f6df54e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.853302][ T7772] RAX: ffffffffffffffda RBX: 00007f6df4825fa0 RCX: 00007f6df459de99 [ 261.853327][ T7772] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 261.853349][ T7772] RBP: 00007f6df4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 261.853371][ T7772] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 261.853393][ T7772] R13: 00007f6df4826038 R14: 00007f6df4825fa0 R15: 00007fff78f24c58 [ 261.853441][ T7772] [ 261.869472][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.110313][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.118116][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.164619][ T5642] Bluetooth: hci3: command 0x2016 tx timeout [ 262.164668][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.170931][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.176962][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 262.575297][ T4944] Bluetooth: hci5: command 0x0c1a tx timeout [ 262.965753][ T4944] Bluetooth: hci6: command 0x0c1a tx timeout [ 263.125353][ T4944] Bluetooth: hci7: command 0x0c1a tx timeout [ 263.246201][ T7785] [U] 0="/ [ 263.249966][ T7785] [U] [ 263.252798][ T7785] [U] EeQ@ [ 263.360339][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 263.374380][ T4944] Bluetooth: hci8: command 0x0c1a tx timeout [ 264.007536][ T7782] [U]  [ 264.246646][ T4944] Bluetooth: hci4: command 0x0c1a tx timeout [ 264.446261][ T7783] kexec: Could not allocate control_code_buffer [ 264.647247][ T4944] Bluetooth: hci5: command 0x0c1a tx timeout [ 265.055181][ T4944] Bluetooth: hci6: command 0x0c1a tx timeout [ 265.204919][ T4944] Bluetooth: hci7: command 0x0c1a tx timeout [ 265.444380][ T4944] Bluetooth: hci8: command 0x0c1a tx timeout [ 266.334998][ T4944] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.724712][ T4944] Bluetooth: hci5: command 0x0c1a tx timeout [ 267.134718][ T4944] Bluetooth: hci6: command 0x0c1a tx timeout [ 267.288501][ T4944] Bluetooth: hci7: command 0x0c1a tx timeout [ 267.531697][ T4944] Bluetooth: hci8: command 0x0c1a tx timeout [ 268.968294][ T7849] Line length is too long: Should be less than 4094 [ 269.074229][ T7853] udc dummy_udc.0: soft-connect without a gadget driver [ 269.225951][ T7860] netlink: 'syz.8.360': attribute type 2 has an invalid length. [ 270.088381][ T31] audit: type=1800 audit(4294967406.240:17): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.360" name="lu_gp_id" dev="configfs" ino=24624 res=0 errno=0 [ 270.598833][ T7871] random: crng reseeded on system resumption [ 270.767843][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 270.859083][ T7876] openvswitch: HfR: Dropping previously announced user features [ 273.127493][ T31] audit: type=1804 audit(4294967409.250:18): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.367" name="/newroot/116/file0" dev="tmpfs" ino=624 res=1 errno=0 [ 273.166481][ T31] audit: type=1804 audit(4294967409.300:19): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.367" name="/newroot/116/file0" dev="tmpfs" ino=624 res=1 errno=0 [ 274.113072][ T7899] zswap: compressor not available [ 274.243997][ T7899] kvm: kvm [7898]: vcpu5, guest rIP: 0xfff0 Unhandled RDMSR(0x40000029) [ 276.619506][ T7936] ubi31: attaching mtd0 [ 276.685235][ T7936] ubi31: scanning is finished [ 276.686968][ T7936] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 277.578275][ T7936] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 278.039551][ T4944] Bluetooth: hci2: Malformed LE Event: 0x0b [ 280.587313][ T7977] FAULT_INJECTION: forcing a failure. [ 280.587313][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 280.624648][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.1.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.624707][ T7977] Tainted: [L]=SOFTLOCKUP [ 280.624719][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 280.624740][ T7977] Call Trace: [ 280.624752][ T7977] [ 280.624765][ T7977] dump_stack_lvl+0x100/0x190 [ 280.624812][ T7977] should_fail_ex.cold+0x5/0xa [ 280.624853][ T7977] should_failslab+0xc2/0x120 [ 280.624899][ T7977] __kmalloc_cache_noprof+0x91/0x6c0 [ 280.624958][ T7977] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 280.625023][ T7977] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 280.625090][ T7977] ? rcu_is_watching+0x12/0xc0 [ 280.625129][ T7977] ? trace_contention_end+0x126/0x160 [ 280.625189][ T7977] ? snd_pcm_oss_sync+0x243/0x840 [ 280.625241][ T7977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.625298][ T7977] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 280.625359][ T7977] ? task_work_add+0x201/0x3b0 [ 280.625409][ T7977] ? __pfx___mutex_lock+0x10/0x10 [ 280.625446][ T7977] ? __pfx_task_work_add+0x10/0x10 [ 280.625500][ T7977] ? __fsnotify_parent+0x2b4/0xd00 [ 280.625550][ T7977] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 280.625609][ T7977] snd_pcm_oss_sync+0x265/0x840 [ 280.625671][ T7977] snd_pcm_oss_release+0x238/0x300 [ 280.625728][ T7977] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 280.625784][ T7977] __fput+0x3ff/0xb50 [ 280.625832][ T7977] task_work_run+0x150/0x240 [ 280.625883][ T7977] ? __pfx_task_work_run+0x10/0x10 [ 280.625943][ T7977] exit_to_user_mode_loop+0x1d8/0x6f0 [ 280.626000][ T7977] ? rcu_is_watching+0x12/0xc0 [ 280.626047][ T7977] do_syscall_64+0x652/0x840 [ 280.626082][ T7977] ? clear_bhb_loop+0x40/0x90 [ 280.626125][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.626161][ T7977] RIP: 0033:0x7fb74519de99 [ 280.626190][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.626225][ T7977] RSP: 002b:00007fb74600c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 280.626266][ T7977] RAX: 0000000000000000 RBX: 00007fb745425fa0 RCX: 00007fb74519de99 [ 280.626289][ T7977] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 280.626309][ T7977] RBP: 00007fb745233eaf R08: 0000000000000000 R09: 0000000000000000 [ 280.626330][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.626351][ T7977] R13: 00007fb745426038 R14: 00007fb745425fa0 R15: 00007ffc01582808 [ 280.626397][ T7977] [ 284.387900][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 284.433107][ T8007] openvswitch: HfR: Dropping previously announced user features [ 284.561196][ T7999] Process accounting resumed [ 290.706485][ T8080] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 291.052744][ T8084] netlink: 64 bytes leftover after parsing attributes in process `syz.7.410'. [ 291.144480][ T8081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 291.197804][ T8088] __vm_enough_memory: pid: 8088, comm: syz.1.412, bytes: 4398046457856 not enough memory for the allocation [ 291.216154][ T8081] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 291.242977][ T8081] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 291.311107][ T8081] page_type: f5(slab) [ 291.326025][ T31] audit: type=1800 audit(4294967427.480:20): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.412" name="members" dev="configfs" ino=24291 res=0 errno=0 [ 291.349398][ T8081] raw: 00fff00000000040 ffff88813fe24140 dead000000000100 dead000000000122 [ 291.413110][ T8081] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 291.440348][ T8081] head: 00fff00000000040 ffff88813fe24140 dead000000000100 dead000000000122 [ 291.700445][ T8081] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 291.771461][ T8081] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 291.782388][ T8081] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 291.797907][ T8081] page dumped because: unmovable page [ 291.815810][ T8081] page_owner tracks the page as allocated [ 291.824511][ T8081] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6452, tgid 6450 (syz.3.129), ts 156604192634, free_ts 156491602779 [ 291.861329][ T8081] post_alloc_hook+0xfd/0x120 [ 291.866741][ T8081] get_page_from_freelist+0xf48/0x3530 [ 291.873442][ T8081] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 291.944557][ T8081] new_slab+0xa2/0x650 [ 291.959910][ T8081] refill_objects+0xe3/0x410 [ 291.975328][ T8081] __pcs_replace_empty_main+0x376/0x680 [ 292.016982][ T8081] __kmalloc_cache_noprof+0x479/0x6c0 [ 292.043526][ T8081] ovs_ct_init+0x178/0x4b0 [ 292.051308][ T8081] ovs_init_net+0x2ff/0x5a0 [ 292.058497][ T8081] ops_init+0x1e2/0x5f0 [ 292.063620][ T8081] setup_net+0x118/0x3a0 [ 292.069010][ T8081] copy_net_ns+0x46f/0x7c0 [ 292.079824][ T8081] create_new_namespaces+0x3ea/0xac0 [ 292.092059][ T8081] unshare_nsproxy_namespaces+0xf2/0x220 [ 292.106339][ T8081] ksys_unshare+0x438/0xab0 [ 292.112153][ T8081] __x64_sys_unshare+0x31/0x40 [ 292.119599][ T8081] page last free pid 5615 tgid 5615 stack trace: [ 292.130904][ T8081] __free_frozen_pages+0x79f/0x1090 [ 292.141298][ T8081] __folio_put+0x3b4/0x5f0 [ 292.152716][ T8081] skb_release_data+0x649/0x8e0 [ 292.160455][ T8081] napi_consume_skb+0x2c0/0x320 [ 292.169961][ T8081] skb_defer_free_flush+0x1f1/0x290 [ 292.230198][ T8081] net_rx_action+0x3ca/0xf20 [ 292.273934][ T8081] handle_softirqs+0x1ea/0x9b0 [ 292.282470][ T8081] __irq_exit_rcu+0x162/0x210 [ 292.294339][ T8081] irq_exit_rcu+0x9/0x30 [ 292.300586][ T8081] common_interrupt+0xbe/0xe0 [ 292.317436][ T8081] asm_common_interrupt+0x26/0x40 [ 292.677651][ T4944] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 293.869472][ T8090] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 294.739795][ T5642] Bluetooth: hci8: command 0x0c1a tx timeout [ 295.030704][ T8111] zswap: compressor not available [ 295.372893][ T8118] binder: 8113:8118 unknown command 0 [ 295.432719][ T8118] binder: 8113:8118 ioctl c0306201 0 returned -22 [ 295.615541][ T8126] [U] 0="/ [ 295.643234][ T8126] [U] [ 295.656354][ T8126] [U] EeQ@ [ 295.684193][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.417'. [ 296.144669][ T8124] [U]  [ 297.994171][ T5903] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.055523][ T4944] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 298.074998][ T4944] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 298.088115][ T4944] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 298.096781][ T4944] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 298.124720][ T4944] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 298.603801][ T5903] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.058903][ T5903] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.428149][ T5903] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.120337][ T8166] futex_wake_op: syz.1.425 tries to shift op by -2048; fix this program [ 300.174613][ T4944] Bluetooth: hci8: command tx timeout [ 300.257323][ T8166] futex_wake_op: syz.1.425 tries to shift op by -2048; fix this program [ 300.314189][ T8166] futex_wake_op: syz.1.425 tries to shift op by -2048; fix this program [ 300.683349][ T8166] futex_wake_op: syz.1.425 tries to shift op by -2048; fix this program [ 300.764658][ T8166] futex_wake_op: syz.1.425 tries to shift op by -2048; fix this program [ 300.951231][ T8166] futex_wake_op: syz.1.425 tries to shift op by -2048; fix this program [ 301.537181][ T5903] bridge_slave_1: left allmulticast mode [ 301.568410][ T5903] bridge_slave_1: left promiscuous mode [ 301.585580][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.671004][ T5903] bridge_slave_0: left allmulticast mode [ 301.691431][ T5903] bridge_slave_0: left promiscuous mode [ 301.714212][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.247098][ T4944] Bluetooth: hci8: command tx timeout [ 302.673173][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.742948][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.776668][ T5903] bond0 (unregistering): Released all slaves [ 302.917962][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 302.983029][ T5903] HfR: left promiscuous mode [ 303.720975][ T8220] random: crng reseeded on system resumption [ 304.324622][ T4944] Bluetooth: hci8: command tx timeout [ 304.778269][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.797706][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.815832][ T8142] bridge_slave_0: entered allmulticast mode [ 304.836751][ T8142] bridge_slave_0: entered promiscuous mode [ 304.990408][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.013114][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.031519][ T8142] bridge_slave_1: entered allmulticast mode [ 305.055330][ T8142] bridge_slave_1: entered promiscuous mode [ 305.145154][ T5903] hsr_slave_0: left promiscuous mode [ 305.162846][ T5903] hsr_slave_1: left promiscuous mode [ 305.176715][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.188353][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.212694][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.223906][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.287866][ T5903] veth1_macvtap: left promiscuous mode [ 305.304846][ T5903] veth0_macvtap: left promiscuous mode [ 305.779256][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 305.803248][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 306.177237][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 306.282740][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.414416][ T4944] Bluetooth: hci8: command tx timeout [ 306.439647][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.673554][ T8142] team0: Port device team_slave_0 added [ 306.796237][ T8142] team0: Port device team_slave_1 added [ 307.288782][ T32] INFO: task syz-executor:5633 blocked for more than 143 seconds. [ 307.317327][ T32] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.344571][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.372031][ T32] task:syz-executor state:D stack:22024 pid:5633 tgid:5633 ppid:1 task_flags:0x400140 flags:0x00080002 [ 307.392516][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.397582][ T32] Call Trace: [ 307.407305][ T32] [ 307.412849][ T32] __schedule+0x125c/0x6730 [ 307.422443][ T32] ? do_raw_spin_lock+0x128/0x260 [ 307.437358][ T32] ? __pfx___schedule+0x10/0x10 [ 307.455726][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.494348][ T32] ? find_held_lock+0x2b/0x80 [ 307.500016][ T32] ? schedule+0x225/0x2c0 [ 307.517569][ T32] schedule+0xdd/0x2c0 [ 307.521798][ T32] schedule_preempt_disabled+0x13/0x30 [ 307.544572][ T32] __mutex_lock+0xccc/0x1bd0 [ 307.554729][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.568909][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 307.587263][ T32] ? __lock_acquire+0x49f/0x1a40 [ 307.595057][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 307.614341][ T32] ? net_generic+0xea/0x2a0 [ 307.636238][ T32] ? net_generic+0xea/0x2a0 [ 307.666911][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 307.687768][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 307.706797][ T32] nfsd_umount+0x3b/0x60 [ 307.718225][ T32] deactivate_locked_super+0xc1/0x1b0 [ 307.737232][ T32] deactivate_super+0xe7/0x110 [ 307.754338][ T32] cleanup_mnt+0x21f/0x450 [ 307.762034][ T32] task_work_run+0x150/0x240 [ 307.783965][ T32] ? __pfx_task_work_run+0x10/0x10 [ 307.799903][ T32] exit_to_user_mode_loop+0x1d8/0x6f0 [ 307.820812][ T32] ? rcu_is_watching+0x12/0xc0 [ 307.835685][ T32] do_syscall_64+0x652/0x840 [ 307.855849][ T32] ? clear_bhb_loop+0x40/0x90 [ 307.878395][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.901720][ T32] RIP: 0033:0x7f8ee479f0d7 [ 307.921897][ T32] RSP: 002b:00007fff5d33e478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 307.981429][ T32] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8ee479f0d7 [ 308.012982][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5d33e530 [ 308.062456][ T32] RBP: 00007fff5d33e530 R08: 00007fff5d33f530 R09: 00000000ffffffff [ 308.097583][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5d33f5c0 [ 308.132270][ T32] R13: 00007f8ee483330a R14: 0000000000026926 R15: 00007fff5d33f600 [ 308.177668][ T32] [ 308.196772][ T32] [ 308.196772][ T32] Showing all locks held in the system: [ 308.223290][ T32] 2 locks held by rcu_exp_gp_kthr/19: [ 308.256253][ T32] #0: ffff8880b843b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 308.291156][ T32] #1: ffff88802b4f8008 (&____s->seqcount#15){.---}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 308.329843][ T32] 1 lock held by khungtaskd/32: [ 308.336534][ T32] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 308.355075][ T32] 3 locks held by kworker/1:2/4958: [ 308.366104][ T32] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 308.397894][ T32] #1: ffffc90002e9fd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 308.426990][ T32] #2: ffffffff8ebf18f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 308.442327][ T32] 2 locks held by getty/5383: [ 308.450277][ T32] #0: ffff888036f980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 308.475975][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 308.488429][ T32] 2 locks held by syz-executor/5633: [ 308.493849][ T32] #0: ffff8880528e80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 308.510535][ T32] #1: ffffffff8f06f360 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 308.525176][ T32] 2 locks held by syz-executor/5640: [ 308.530623][ T32] #0: ffff888058dd00d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 308.541634][ T32] #1: ffffffff8f06f360 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 308.552943][ T32] 4 locks held by kworker/u8:21/5903: [ 308.564624][ T32] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 308.585209][ T32] #1: ffffc90004c9fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 308.606133][ T32] #2: ffffffff90a86408 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 308.626190][ T32] #3: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 308.648158][ T32] 3 locks held by kworker/u8:27/5909: [ 308.664363][ T32] #0: ffff8880315fb140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 308.676131][ T32] #1: ffffc90004cffd08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 308.699214][ T32] #2: ffffffff90a9f000 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 308.709538][ T32] 2 locks held by syz.2.131/6459: [ 308.717593][ T32] #0: ffffffff90b4dc08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.732115][ T32] #1: ffffffff8f06f360 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 308.742992][ T32] 2 locks held by syz-executor/6589: [ 308.749021][ T32] #0: ffff88802afe00d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 308.760105][ T32] #1: ffffffff8f06f360 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 308.770623][ T32] 2 locks held by syz-executor/6729: [ 308.776435][ T32] #0: ffff888079a9a0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 308.787462][ T32] #1: ffffffff8f06f360 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 308.803537][ T32] 2 locks held by kworker/u8:29/6809: [ 308.812445][ T32] #0: ffff88801f32b940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 308.827501][ T32] #1: ffffc9000343fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 308.843310][ T32] 1 lock held by syz-executor/7091: [ 308.854008][ T32] #0: ffff88807a680ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 308.866444][ T32] 1 lock held by syz-executor/8142: [ 308.872040][ T32] #0: ffffffff90a9f000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 308.881968][ T32] 3 locks held by syz.5.434/8246: [ 308.888301][ T32] #0: ffffffff90a86408 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 308.904015][ T32] #1: ffffffff90a9f000 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 308.916626][ T32] #2: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 308.928805][ T32] 2 locks held by syz.7.435/8255: [ 308.939552][ T32] #0: ffffffff90a86408 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 308.952774][ T32] #1: ffffffff90a9f000 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 308.968941][ T32] 2 locks held by syz.1.436/8258: [ 308.976720][ T32] #0: ffffffff90a86408 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 308.987097][ T32] #1: ffffffff90a9f000 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 309.005181][ T32] 3 locks held by rm/8273: [ 309.010060][ T32] [ 309.074018][ T32] ============================================= [ 309.074018][ T32] [ 309.084195][ T32] NMI backtrace for cpu 1 [ 309.084233][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 309.084283][ T32] Tainted: [L]=SOFTLOCKUP [ 309.084295][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 309.084316][ T32] Call Trace: [ 309.084327][ T32] [ 309.084340][ T32] dump_stack_lvl+0x100/0x190 [ 309.084386][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 309.084432][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.084474][ T32] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 309.084541][ T32] sys_info+0x141/0x190 [ 309.084585][ T32] watchdog+0xcb1/0x1030 [ 309.084678][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 309.084748][ T32] ? __pfx_watchdog+0x10/0x10 [ 309.084797][ T32] ? __kthread_parkme+0x18c/0x230 [ 309.084839][ T32] ? kthread+0x13a/0x450 [ 309.084880][ T32] ? __pfx_watchdog+0x10/0x10 [ 309.084930][ T32] kthread+0x370/0x450 [ 309.084973][ T32] ? __pfx_kthread+0x10/0x10 [ 309.085020][ T32] ret_from_fork+0x72b/0xd50 [ 309.085060][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 309.085117][ T32] ? __switch_to+0x800/0x10f0 [ 309.085178][ T32] ? __switch_to_asm+0x39/0x70 [ 309.085238][ T32] ? __pfx_kthread+0x10/0x10 [ 309.085285][ T32] ret_from_fork_asm+0x1a/0x30 [ 309.085357][ T32] [ 309.222216][ T32] Sending NMI from CPU 1 to CPUs 0: [ 309.228526][ C0] NMI backtrace for cpu 0 [ 309.228552][ C0] CPU: 0 UID: 0 PID: 4977 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT(full) [ 309.228592][ C0] Tainted: [L]=SOFTLOCKUP [ 309.228601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 309.228616][ C0] RIP: 0010:__bfs+0x1c7/0x2a0 [ 309.228653][ C0] Code: 81 e3 ff 0f 00 00 39 1d 67 6b 85 14 48 89 04 f5 80 ee 24 97 73 11 89 1d 57 6b 85 14 eb 09 0f 1f 44 00 00 4c 89 78 30 48 8b 00 <4c> 39 c0 75 f4 e9 22 ff ff ff b8 01 00 00 00 48 83 c4 30 5b 5d 41 [ 309.228677][ C0] RSP: 0018:ffffc900026ef3f8 EFLAGS: 00000006 [ 309.228697][ C0] RAX: ffffffff967332b8 RBX: 0000000000000225 RCX: 0000000000000226 [ 309.228714][ C0] RDX: 0000000000000000 RSI: 0000000000000226 RDI: ffffffff980acbd8 [ 309.228730][ C0] RBP: 0000000000000030 R08: ffffffff967332b8 R09: 0000000000000002 [ 309.228746][ C0] R10: ffffc900026ef588 R11: 0000000000000000 R12: ffffffff81e465a0 [ 309.228762][ C0] R13: ffffc900026ef4a0 R14: ffffffff81e473b0 R15: ffffffff980acbd8 [ 309.228779][ C0] FS: 00007f16e2efec80(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000 [ 309.228805][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.228821][ C0] CR2: 00007face5d95e9c CR3: 000000007ed40000 CR4: 00000000003526f0 [ 309.228847][ C0] Call Trace: [ 309.228854][ C0] [ 309.228864][ C0] ? ktime_get+0x9f/0x320 [ 309.228901][ C0] ? ktime_get+0x1a4/0x320 [ 309.228940][ C0] check_irq_usage+0xe5/0x810 [ 309.228977][ C0] ? __bfs+0x150/0x2a0 [ 309.229012][ C0] ? check_noncircular+0x97/0x160 [ 309.229050][ C0] ? check_prev_add+0xfe/0xe60 [ 309.229085][ C0] check_prev_add+0xfe/0xe60 [ 309.229123][ C0] __lock_acquire+0x136c/0x1a40 [ 309.229167][ C0] lock_acquire+0x1b9/0x370 [ 309.229203][ C0] ? trace_ignore_this_task+0xbc/0x100 [ 309.229252][ C0] trace_pid_list_is_set+0xfb/0x390 [ 309.229284][ C0] ? trace_ignore_this_task+0xbc/0x100 [ 309.229316][ C0] ? enqueue_task+0x1dc/0x4f0 [ 309.229348][ C0] trace_ignore_this_task+0xbc/0x100 [ 309.229380][ C0] event_filter_pid_sched_wakeup_probe_post+0x11f/0x270 [ 309.229420][ C0] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 309.229461][ C0] __traceiter_sched_wakeup+0x55/0x90 [ 309.229500][ C0] trace_sched_wakeup+0xec/0x160 [ 309.229526][ C0] ttwu_do_activate+0x219/0x800 [ 309.229559][ C0] try_to_wake_up+0xce0/0x1c90 [ 309.229585][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 309.229610][ C0] ? __lock_acquire+0x49f/0x1a40 [ 309.229649][ C0] ? mark_held_locks+0x40/0x70 [ 309.229685][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 309.229734][ C0] autoremove_wake_function+0x16/0x150 [ 309.229770][ C0] __wake_up_common+0x135/0x1f0 [ 309.229808][ C0] __wake_up_sync_key+0x36/0x50 [ 309.229842][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 309.229876][ C0] ? find_held_lock+0x2b/0x80 [ 309.229922][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 309.229952][ C0] ? aa_file_perm+0x7e4/0x14d0 [ 309.229991][ C0] ? aa_file_perm+0x7f3/0x14d0 [ 309.230027][ C0] ? __pfx___might_resched+0x10/0x10 [ 309.230069][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 309.230098][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 309.230128][ C0] sock_recvmsg+0x1d5/0x220 [ 309.230167][ C0] sock_read_iter+0x2b0/0x3a0 [ 309.230206][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 309.230254][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 309.230294][ C0] ? security_file_permission+0x76/0x210 [ 309.230328][ C0] ? rw_verify_area+0xce/0x6d0 [ 309.230363][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 309.230401][ C0] vfs_read+0x960/0xb40 [ 309.230440][ C0] ? __pfx_vfs_read+0x10/0x10 [ 309.230476][ C0] ? ktime_get+0x9f/0x320 [ 309.230513][ C0] ? lapic_next_event+0x10/0x20 [ 309.230542][ C0] ? clockevents_program_event+0x1ef/0x820 [ 309.230576][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 309.230607][ C0] ksys_read+0x1f8/0x250 [ 309.230645][ C0] ? __pfx_ksys_read+0x10/0x10 [ 309.230687][ C0] do_syscall_64+0x115/0x840 [ 309.230714][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.230744][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.230770][ C0] RIP: 0033:0x7f16e304e407 [ 309.230789][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 309.230814][ C0] RSP: 002b:00007ffcacfd15a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 309.230837][ C0] RAX: ffffffffffffffda RBX: 00007f16e2efec80 RCX: 00007f16e304e407 [ 309.230854][ C0] RDX: 00000000000000ff RSI: 0000561f9d776950 RDI: 0000000000000000 [ 309.230870][ C0] RBP: 0000561f9d776910 R08: 0000000000000000 R09: 0000000000000000 [ 309.230886][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561f9d7769d9 [ 309.230902][ C0] R13: 0000000000000000 R14: 0000561f9d776950 R15: 0000561f6606ad98 [ 309.230927][ C0] [ 309.765397][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 309.774702][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 309.785556][ T32] Tainted: [L]=SOFTLOCKUP [ 309.789933][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 309.800060][ T32] Call Trace: [ 309.803453][ T32] [ 309.806438][ T32] dump_stack_lvl+0x100/0x190 [ 309.811220][ T32] vpanic+0x552/0x970 [ 309.815277][ T32] ? __pfx_vpanic+0x10/0x10 [ 309.819855][ T32] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 309.826102][ T32] panic+0xd1/0xe0 [ 309.829891][ T32] ? __pfx_panic+0x10/0x10 [ 309.834458][ T32] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 309.840683][ T32] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 309.846923][ T32] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 309.853168][ T32] ? watchdog.cold+0x1ec/0x234 [ 309.857997][ T32] ? watchdog+0xcc1/0x1030 [ 309.862521][ T32] watchdog.cold+0x1fd/0x234 [ 309.867291][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 309.873202][ T32] ? __pfx_watchdog+0x10/0x10 [ 309.877968][ T32] ? __kthread_parkme+0x18c/0x230 [ 309.883065][ T32] ? kthread+0x13a/0x450 [ 309.887471][ T32] ? __pfx_watchdog+0x10/0x10 [ 309.892224][ T32] kthread+0x370/0x450 [ 309.896483][ T32] ? __pfx_kthread+0x10/0x10 [ 309.901181][ T32] ret_from_fork+0x72b/0xd50 [ 309.905872][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 309.911065][ T32] ? __switch_to+0x800/0x10f0 [ 309.915828][ T32] ? __switch_to_asm+0x39/0x70 [ 309.921238][ T32] ? __pfx_kthread+0x10/0x10 [ 309.926123][ T32] ret_from_fork_asm+0x1a/0x30 [ 309.931715][ T32] [ 309.935266][ T32] Kernel Offset: disabled [ 309.940047][ T32] Rebooting in 86400 seconds..