last executing test programs: 18m2.86395655s ago: executing program 2 (id=412): socket(0x11, 0x80003, 0x300) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/sctp/rto_alpha_exp_divisor\x00', 0x900, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5e7}, 0x1, 0x0, 0x1, 0x3}, 0x6}, 0x5, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7) 18m1.868295262s ago: executing program 2 (id=414): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto(0xffffffffffffffff, 0x200, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8000000000000002, 0x4000000000df, 0x11, 0xffffffffffffffff, 0x64b3) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x3) r3 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)=@iter_create={r1, 0x100}, 0x2) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x4}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c044}, 0x24040000) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r5, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) ioctl$auto_TIOCCONS2(r0, 0x541d, 0x0) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x40001, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000040)="676b691f60") 18m1.510401361s ago: executing program 2 (id=415): r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x100) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000040)={0x1f, @inferred=r0, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) write$auto(r0, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0xe53bfb702331ec09, 0x70bd27, 0x25dfdbff, {}, "5827a4a15eff8af5176dcdcdac62b95bf549f835d68361d647dec9e9c913d920608994e93659cc88bce7b0ad0e36dc26222318302c9eb47fb1325c798d01d53588223d0631c89eaf847056a021"}, 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x8010) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x7ff, 0x100d, 0xeb9, 0x1, 0x10, 0x8001, r0, [0xfffffffe, 0x401, 0x9], {0x8, 0x0, 0x1, 0x86, 0x0, 0x5, 0x6d, 0x2800000, 0x8001}, {0x7e, 0x5, 0x7, 0x400, 0xc, 0xea1a, 0x1, 0xb28d, 0x7b}}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20440, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x100000000) madvise$auto(0x0, 0x2003f2, 0x15) fcntl$auto_F_SETLK(r0, 0x6, 0x6) madvise$auto(0x0, 0x200007, 0x19) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r2, 0x7, &(0x7f0000000240)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', &(0x7f0000000280)="2c9fa6ce7336f3e733c51166673e0d5cdf49c17fb412ec08272a8359e0a648d3a560088a58411b0aad5ccc7089c215588b127181340425920c6d9fb71f80b7a4f044fb20e8f4f85b738dc0ae6965ca50e0d42327f90e83ce3dbc593539156ea82a1b610869b7ad83691c7cbaab13514593b61fa30ee3f8a5e170db505c9eae0cc9fef40182b0c7f22bdfc7efe4a4eeadee3b3005ade6c2beb21d0fce2cbeca46b2c6200be3df4221956cca92b2ed5e9630273531b4911ef1a75fedb639ba28a081f17ac0c20f5ad17c16a04303ccbccb63", 0x80) 17m59.920053298s ago: executing program 2 (id=421): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) setsockopt$auto(0x3, 0x82, 0x1e, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/41, 0x29) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x808, 0x1, 0x1}) mmap$auto(0x7, 0x2020009, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x8000) r2 = socket(0x11, 0x80003, 0xffff20a8) setsockopt$auto(r2, 0x107, 0x2, 0x0, 0x28) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a", 0x18) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x61a280, 0x0) r5 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) read$auto_rfcomm_sock_debugfs_fops_(r5, &(0x7f0000000080)=""/17, 0x11) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x2, 0x7, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) pwritev2$auto(r6, &(0x7f0000001040)={&(0x7f00000002c0)="8cab3546bf8189f4e0a7df229e896509910560e0b11056acc4eda89ca87fb56b3d06a775f9691ea0af3d3f47fb578da8de5a2c50227ec98f33cf32071fc0fa16a13bbfb0384f205c29ff170821acd9a786e5a8dad040cfaf55a5e0aef8a0c1c8aaf7aeef5212b0d73df97c030be4ac71d9a7b1ef2a01e737ed79e25e4832e83d1ebaa202198be369d67c835a41136f7ffd8bc4f4c9ede22a446bc24351f1b75beb8f360ec9a1451b6468bd206d4bfd9d4ffc328f3f281b638a2f1d664d6d27ba99ce881d4a30654c773db6ac", 0x1}, 0x8000000000000001, 0x100020001, 0x7, 0x4) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) 17m58.584442293s ago: executing program 2 (id=424): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000000000000000000000001", 0xf) pwrite64$auto(0xc8, 0x0, 0xe, 0x4) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ptyce/power/runtime_suspended_time\x00', 0x2400, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x5e, 0x81, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000000eb1, 0x401, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x22100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r2, 0x54a0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3, 0x7, 0x19) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) unshare$auto(0x40000080) 17m56.149370627s ago: executing program 2 (id=431): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x100006, 0x0) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x101200, 0x0) lseek$auto(r0, 0x7fffffffffffffff, 0x1) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x28, 0x0, 0xc) write$auto_console_fops_tty_io(r1, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0xfeffffff, 0x0, 0x6f3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x1d79, 0x3, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x80108906, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) connect$auto(r2, &(0x7f00000001c0)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x1ff) 17m40.982198979s ago: executing program 32 (id=431): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x100006, 0x0) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x101200, 0x0) lseek$auto(r0, 0x7fffffffffffffff, 0x1) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x28, 0x0, 0xc) write$auto_console_fops_tty_io(r1, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0xfeffffff, 0x0, 0x6f3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x1d79, 0x3, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x80108906, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) connect$auto(r2, &(0x7f00000001c0)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x1ff) 3m34.507284315s ago: executing program 3 (id=3055): add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e22, @remote}, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) (async) landlock_create_ruleset$auto(&(0x7f00000000c0)={0xd1d, 0x3, 0x7}, 0x9, 0x0) (async, rerun: 32) landlock_restrict_self$auto(r1, 0x0) (async, rerun: 32) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x7e, 0x4) (async, rerun: 32) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) (async, rerun: 32) timer_create$auto(0x2, 0x0, 0x0) (async) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) memfd_create$auto(0x0, 0xe) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async, rerun: 32) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async) setregid$auto(0xffffffffffffffff, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x8, 0xd) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0) read$auto(r2, 0x0, 0x8000) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) (async, rerun: 32) mmap$auto(0x9d77, 0x2, 0x5, 0xb79, r3, 0x7c2a60cc) (rerun: 32) 3m33.273296629s ago: executing program 3 (id=3058): socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0xfffffffffffffffc, 0x400008, 0x800ab55, 0x9b7f, r0, 0xfffffffffffffffa) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) (async) socket(0xa, 0x1, 0x6) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) getitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000000)={{0x3ff, 0x1}, {0x100, 0xa7}}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r4 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r4, 0x29, 0x1e, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4db}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) socket$nl_generic(0x10, 0x3, 0x10) 3m32.997597225s ago: executing program 3 (id=3059): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2511feff0004000980"], 0x18}, 0x1, 0x0, 0x0, 0x4004014}, 0xc050) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x3f, 0x67f, 0xffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x3, 0x9, 0x400006, 0x6, 0x81, 0x4, 0x1cda, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x4, 0x957, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0xb, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone3(0x0, 0xfec2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) poll$auto(0x0, 0x0, 0x0) futex_requeue$auto(0x0, 0x0, 0xfffffffe, 0x0) write$auto(r4, 0x0, 0xfdec) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) 3m32.170115315s ago: executing program 3 (id=3063): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) ioctl$auto_MEMERASE64(r4, 0x40104d14, &(0x7f0000000000)={0x20000}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0xa, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r6, 0x84, 0x6d, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr14/addr_len\x00', 0x0, 0x0) write$auto(r7, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\xfd\xffE\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) read$auto(r5, &(0x7f0000000b40)='^+\x00', 0x4) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d509b", 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x464002, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf3, 0xb0, @raw=0x10000}}) close_range$auto(0x0, 0x5, 0x0) 3m31.051139433s ago: executing program 3 (id=3067): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv6/conf/ip6gre0/router_probe_interval\x00', 0x741a42, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001a80), 0x101840, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000001ac0)={{0x33b3, 0x209, 0x1, 0x1, 0x80}, 0x4, 0xfffffffffffffffc, "853166de856904a0212d0d2266642998e4aebfd527dc41daaa221b73f80a2dd8"}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0xcc, 0x2, 0xffffffffffffffff, 0x7fffffff, 0x2) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x40000118, 0x2, 0x6}]}) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xff7ffffffffffffc, 0x5}, 0x6}, 0x1, 0x1) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) socket(0xb, 0x5, 0x0) r3 = socket(0xa, 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x5, 0x2, 0xffffffffffffffff, 0x3, 0x8) r4 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) fcntl$auto_F_RDLCK(r3, 0x6, 0x0) setsockopt$auto_SO_BROADCAST(r3, 0x10001, 0x6, &(0x7f0000000100)='\xe7\x00', 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x7fff, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x1000, 0x3, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x401, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 3m30.065508864s ago: executing program 3 (id=3070): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) (async) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x523e01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = open$auto(&(0x7f00000000c0)='./file0\x00', 0x5, 0xc) read$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000100)=""/248, 0xf8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) read$auto(r0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) sendmsg$auto_NL80211_CMD_EPCS_CFG(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="83c68af0", @ANYRES16=r5, @ANYBLOB="000225bd7000fddbdf259d00000020001b800500010006000000040003000400020005000100070000000400030016001800b81543c2ff6c36dc7a02216f08bba43ab5160000"], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x851) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) (async) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) 3m14.281749736s ago: executing program 33 (id=3070): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) (async) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x523e01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = open$auto(&(0x7f00000000c0)='./file0\x00', 0x5, 0xc) read$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000100)=""/248, 0xf8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) read$auto(r0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) sendmsg$auto_NL80211_CMD_EPCS_CFG(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="83c68af0", @ANYRES16=r5, @ANYBLOB="000225bd7000fddbdf259d00000020001b800500010006000000040003000400020005000100070000000400030016001800b81543c2ff6c36dc7a02216f08bba43ab5160000"], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x851) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) (async) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) 2m41.27509583s ago: executing program 1 (id=3162): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r0, 0x5608, r0) madvise$auto(0x0, 0xffffffffffff0001, 0x4015) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, 0x8}, 0x6f4) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x4, 0x2000000080000001, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b32, r0, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x442582, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0xfffffffffffffffe, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x40003, 0x2}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x12a00, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/scsi/sg/def_reserved_size\x00', 0x121100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/65, 0x41) mbind$auto(0x7fffffffffffffff, 0x2, 0x9, 0x0, 0x100000001, 0x7fff) pread64$auto(r1, 0x0, 0x2, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) 2m39.351926223s ago: executing program 1 (id=3167): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x2, 0x1, 0x0) semctl$auto(0x201, 0xfffffffd, 0x3, 0x4) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x100008) listen$auto(0x3, 0x81) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) write$auto(r0, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x1, 0x400000) socket(0x2c, 0x3, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@can, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x1000) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)={0x13, 0x80, 0x8ffff, 0x5, &(0x7f0000000040), 0xc695, 0x3, 0x4, @number_of_packets=0xdae, 0xfffffe01, 0xc, 0x0, [{0xbbd, 0x6a0, 0x6}, {0x9, 0x2}]}) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x16, 0xfffffffffffffffa, 0x2000001) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xb, 0xffffffffffffffff, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/pcm0c/info\x00', 0xe8f9b164a54cd8c0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec9\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x80000000, 0x7fff) 2m37.916826836s ago: executing program 1 (id=3170): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, "577908080000569be7c30b00"}, 0x13) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), r1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram2\x00', 0x200000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0x82}, 0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r2 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) flock$auto(r2, 0x8) 2m37.356436927s ago: executing program 1 (id=3172): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xfffffffffffffffd) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) ioctl$auto(r1, 0xab03, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) write$auto(r4, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'[\':]%\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '\xf8/\x00'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) 2m34.544180638s ago: executing program 1 (id=3176): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x47, 0x0) r0 = fsopen$auto(0x0, 0x1) clock_settime$auto(0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0xfffffffffffffcd0) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x6f29, 0x0) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount$auto(0x4, 0x0, 0x11) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r7, @ANYBLOB="280109800c00"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r11, r10, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x194, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x439}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffff7f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40003}, 0x240400d0) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, 0x0) 2m32.206209169s ago: executing program 1 (id=3180): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800) r2 = open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50f5ff00a461a21936611ac57ecf92d268cf68790a88ee6e8b21fb22290b379295fb279cc80973049c6c9ec546443a45d9d06b7e1d6dde1a859bc8ee05bd7fcd1386bbe4a33a5d460a654e5389ee8428cb824c4e8858b45207d856d08e92ccf1bd94c9a381f7195997dd51dcdbd83bd5cfd32e7234820ef827d170210f02bfe15bb1f8ef097f91c518ed928c65b872ec21c233f690291a5bcca4f7071ba8be847e3167a359b7a4ac508f7ac2c8393a357aace30226c38e09513da354bda061140712f9661971", @ANYRES16=0x0, @ANYBLOB="14022dbd7000fcdbdf252700000008002a000c000000050008000800000005001200d10000000500070001000000050024008100000008000b00000000000c0017000a00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004000) mkdir$auto(&(0x7f00000000c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r5, 0x0, 0x9a28) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) getsockopt$auto_SO_NOFCS(r4, 0x68c, 0x2b, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty16\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r7 = waitid$auto_P_ALL(0x0, 0x9, &(0x7f00000000c0)={@siginfo_0_0={0x7, 0x92b2, 0x5, @_timer={0xffffffffffffffff, 0x9, @sival_ptr=&(0x7f0000000040)="99361c3c1536c6f91231c159c1973700bac9b0d2d41d680d38464ebea6a523777f672497dbc08045e77e2a87ceacf3f859f389f9da2a1ba85eab8387fb6ac48da867c4b3de71fa5aaa76de087b44c7de9723e87c228363466f194a2bdcfbeba006b2dca254402b4a05e680bf235186e0b50f3e8d899a5aeb93b5", 0x7}}}, 0x4, &(0x7f0000000140)={{0x7}, {0x83, 0x3}, 0x3, 0x8, 0xa, 0x4, 0x2, 0x9, 0x5, 0x56, 0x1, 0x80000000, 0x4, 0x30, 0x100, 0x9}) timer_create$auto(0x8000, &(0x7f0000000200)={@sival_ptr=&(0x7f0000000000)="dcd26910ac716b78e220d0dcae047f282576ca22b9f7b28ed3fb45e531c55325c3f62cf063", @inferred=r2, 0x0, @_tid=r7}, &(0x7f0000000240)=0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m29.804329399s ago: executing program 0 (id=3183): r0 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/printk_formats\x00', 0x0, 0x0) getpeername$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, &(0x7f00000001c0)=0x7fffffff) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x800007, 0x4, @raw=0x3, @integer64={0x7, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) r2 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$auto_sc_seq_fops_netdebug(r2, &(0x7f0000000100)=""/190, 0xbe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x9du\xbc\xe8\xd3j\x06\xc25x\xde\x84\xad\x17(\x0f\xc0\x14<6\x1eyY`\xd4g\xc3\xdeIJr\f\xbb \x0ew4\xa3\xde{\xa6\x93\x8fC\xe4@\xce\xbf\r.\x98\x8c\x0f\x90\n\xfa\"\xaa&?\xfdW\xdd\xd8<\n\x81\x9bU\xa3+wN\xd64O2\n\xa1\x937J`\xa1\xfd\x90S\x90\x93\xd7YL}\xd2\xcfL\x89', 0x98c7) 2m29.393193339s ago: executing program 0 (id=3184): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x2c2203, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="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", 0x119) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) 2m29.059489642s ago: executing program 0 (id=3185): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) select$auto(0x5, 0x0, 0x0, &(0x7f00000011c0)={[0x0, 0x401, 0xdd36, 0x8fd3, 0x948b, 0xd, 0xf, 0x3, 0x2, 0x5dc5, 0x878c, 0x3, 0x1, 0x9, 0x1]}, 0x0) r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0xfd1ab101a01c344a, 0x0) readv$auto(r0, &(0x7f0000001180)={&(0x7f0000000000), 0x2}, 0x6) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) userfaultfd$auto(0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) epoll_create$auto(0x4) socket(0x2, 0x1, 0x106) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/58, 0x3a) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r5, 0x541b, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x9, 0xd3e, 0x3, 0x949b, 0x2, 0x95f4da0a, 0x7f3, 0x79, 0x8000000000000001, 0x2a61, 0x14, 0x8, 0x1209, 0xe09, 0x4]}, 0x0) write$auto(r4, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) 2m25.575897736s ago: executing program 0 (id=3191): ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000000)="062e5ead1dfe79e9b7a654a8fba87cdcb6c486b47decf93b1b0bd8ab79e2a9a5514ef8aaf46d47b0e5f5b69df6f0ae6b0182", 0x40, &(0x7f00000002c0)="fdc492b8d5bd794a75a558798da19ac15ccc7a280658b6070878c34e31e462772c84ac6912c21692802ccca494d4933fed7efa3e45448a71082e07793c656adf4e8a50c31e9b503062dcff59d78db2498ea042d173a6c177f792a46c7fb1e3dc28bef82fb8d1d63e1ad974ce18f0f0ea06c8c16cf17d25bdb46a40cf6a45300f54318cd8faef04637add108b896355fbd7d9ff92f863bb2541df47e52bbf114cfd4f707f7be420006fe603ab6c0271de9a430523e594c92e9d4c4d4ba7eda96e54001390397ce1705e1e40bf4ebe5f4034381147bb3ae568c58b56bb2375e29bafb0322e4bb2a2f7f8a37456cc60d37d7c", 0x9, &(0x7f0000000400)="87492868b1d9c3821849ab1d389f6ed8dfa142d7bd5c3a5495c2c7c3ae635458a65f23715875f8997447b6b70373d2e1693b8a6127cc4c7942c5827722f0395d7974e9974f472c55d1a75641bed45ca3dfa21156aab13893b1b02d65834eb38f562fe4b7106e4c005c528b40553b09b840c5dc", &(0x7f0000000500)=0x16a}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="f3070000e84298a4f2d8de20becde1ff747e2578b864a6b624064341494b363102bf62d8126650a7303909dd98307cf71c5e92ee9566ba885f9ac2b1667a2e3c32da4bd93eaf7e3ae5db02e513363a14e4af8dc8a3605af2a2c95a4b6ff2e376e1cb6b6de59350d402f7a4c100"/124, @ANYRES16=r2, @ANYBLOB="01032cbd7000ffdbdf250a0000000b0002006e65746465760000"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) mmap$auto(0x7fffffffffffffff, 0x2020009, 0x100000001, 0x100000000000ebe, r0, 0x2000a000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) io_uring_setup$auto(0xfffffffe, 0x0) io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb71", 0x2c) socket(0x28, 0x5, 0x10) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102880, 0x71) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000003c0), 0x202, 0x0) socket(0x10, 0x2, 0x0) 2m24.078064652s ago: executing program 0 (id=3193): mprotect$auto(0x200000000000, 0x806121, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') open(&(0x7f0000000280)='./file0\x00', 0x143242, 0x164) io_uring_register$auto(r0, 0x2, &(0x7f0000000040), 0x86) 2m23.830534867s ago: executing program 0 (id=3195): socket(0x18, 0x4, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/238, 0xee) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r1, 0x50009405, &(0x7f0000000040)={@raw=0x9, "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"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) userfaultfd$auto(0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88302, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4800) 2m16.831957255s ago: executing program 34 (id=3180): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800) r2 = open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50f5ff00a461a21936611ac57ecf92d268cf68790a88ee6e8b21fb22290b379295fb279cc80973049c6c9ec546443a45d9d06b7e1d6dde1a859bc8ee05bd7fcd1386bbe4a33a5d460a654e5389ee8428cb824c4e8858b45207d856d08e92ccf1bd94c9a381f7195997dd51dcdbd83bd5cfd32e7234820ef827d170210f02bfe15bb1f8ef097f91c518ed928c65b872ec21c233f690291a5bcca4f7071ba8be847e3167a359b7a4ac508f7ac2c8393a357aace30226c38e09513da354bda061140712f9661971", @ANYRES16=0x0, @ANYBLOB="14022dbd7000fcdbdf252700000008002a000c000000050008000800000005001200d10000000500070001000000050024008100000008000b00000000000c0017000a00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004000) mkdir$auto(&(0x7f00000000c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r5, 0x0, 0x9a28) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) getsockopt$auto_SO_NOFCS(r4, 0x68c, 0x2b, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty16\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r7 = waitid$auto_P_ALL(0x0, 0x9, &(0x7f00000000c0)={@siginfo_0_0={0x7, 0x92b2, 0x5, @_timer={0xffffffffffffffff, 0x9, @sival_ptr=&(0x7f0000000040)="99361c3c1536c6f91231c159c1973700bac9b0d2d41d680d38464ebea6a523777f672497dbc08045e77e2a87ceacf3f859f389f9da2a1ba85eab8387fb6ac48da867c4b3de71fa5aaa76de087b44c7de9723e87c228363466f194a2bdcfbeba006b2dca254402b4a05e680bf235186e0b50f3e8d899a5aeb93b5", 0x7}}}, 0x4, &(0x7f0000000140)={{0x7}, {0x83, 0x3}, 0x3, 0x8, 0xa, 0x4, 0x2, 0x9, 0x5, 0x56, 0x1, 0x80000000, 0x4, 0x30, 0x100, 0x9}) timer_create$auto(0x8000, &(0x7f0000000200)={@sival_ptr=&(0x7f0000000000)="dcd26910ac716b78e220d0dcae047f282576ca22b9f7b28ed3fb45e531c55325c3f62cf063", @inferred=r2, 0x0, @_tid=r7}, &(0x7f0000000240)=0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m8.613460364s ago: executing program 35 (id=3195): socket(0x18, 0x4, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/238, 0xee) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r1, 0x50009405, &(0x7f0000000040)={@raw=0x9, "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"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) userfaultfd$auto(0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88302, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4800) 48.092020784s ago: executing program 5 (id=3418): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x23, 0x1, 0x90b) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) ioctl$auto_FS_IOC_GETFSUUID(r0, 0x80111500, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) 47.722903131s ago: executing program 5 (id=3420): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) socket(0x15, 0x5, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0xbe9) (async, rerun: 32) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) (rerun: 32) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, 0x0, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x8000, 0x3, 0x100000000, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 64) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 64) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1002}, 0xffffffff, 0x4, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f0000000100)={0x0, 0xc4}, 0xfff7ffffffffffff, 0x0, 0xfffffffffffffffd, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) madvise$auto(0x0, 0x2000040080000004, 0xe) 46.642999652s ago: executing program 5 (id=3424): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) ioctl$auto_MEMERASE64(r4, 0x40104d14, &(0x7f0000000000)={0x20000}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0xa, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r6, 0x84, 0x6d, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr14/addr_len\x00', 0x0, 0x0) write$auto(r7, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\xfd\xffE\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) read$auto(r5, &(0x7f0000000b40)='^+\x00', 0x4) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x464002, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf3, 0xb0, @raw=0x10000}}) close_range$auto(0x0, 0x5, 0x0) 45.666343805s ago: executing program 5 (id=3426): socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x2000048}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) acct$auto(&(0x7f0000000080)='/dev/video3\x00') r3 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000001c0)={@_si_pad}, 0xa, &(0x7f0000000240)={{0xf, 0xe}, {0x73a, 0x9}, 0xffffffff, 0x7, 0x2, 0x1, 0x1, 0x7, 0x1, 0x0, 0x4, 0xdd, 0x8, 0x2, 0x7fff, 0x4}) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000940)={&(0x7f0000000100), 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x1b0, 0x0, 0x204, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_COORDINATOR={0x138, 0x1e, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @u32}, @nested={0x12c, 0x98, 0x0, 0x1, [@typed={0xc7, 0x7c, 0x0, 0x0, @binary="e44b7d5c4c25e9726eed52a775dd0f82c106ed6850baecd1403c6f384a55ca65c8191281781fd04a1d23335d7dc85970e493a411515e761c56fcca6bcd009c7009bb43dcc877b5742d04366fa002eafe51ec1e8ff6ecd6f0bd7039707410820fb3b993f557253e1781fc97b90c1d8db2a4c52fada0b3076a9647a82ce2bdad05b612da48e68213fd3c81604ef3903188701bec568a8d0071bf0b09e954ead36aef703427c471f755a8904b9f863fb45cf3466a1cf2f37926f0a7b3c4006c1938cbb161"}, @typed={0x5b, 0x142, 0x0, 0x0, @binary="0d1350f9ae614034c517d7c6b1c76de1607ce01703843e001543a92ddedf3308e37f1752733783d98b2feabe2485bd0b87f362a8027ad0f595eea4ac93b02fd70a5f18fd048f4de6f0f5d50c1c7fdd8e25202a0f7ee419"}, @nested={0x4, 0x54}]}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x81}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}, @NL802154_ATTR_PEER={0x44, 0x28, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @pid=r3}, @generic="72cd06885f37b384a9f60ed1a4d016a695182e8b22cbfec6c3dbe61ee55079420a5e9fd9d8a7806fed9c252916c2e97c", @typed={0x8, 0x10a, 0x0, 0x0, @u32=0x8}]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffb}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000010) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4081) select$auto(0x9, 0x0, 0x0, &(0x7f0000000640)={[0x1ff, 0x7, 0x0, 0x1ff, 0x9, 0x1d, 0x15f4da07, 0x6, 0x2, 0x4, 0xa, 0x1000, 0xb, 0x6, 0x100000001, 0x3a0]}, 0x0) 44.032930794s ago: executing program 5 (id=3428): getrandom$auto(&(0x7f0000000000)='\\{[%-}\x00', 0xeef3, 0x8) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000280)=0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00982a", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24040080) (async) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffff) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71) (async, rerun: 32) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0) (rerun: 32) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/192, 0xc0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x1) (async) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x280, 0x0) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x5, &(0x7f0000000380)={&(0x7f00000003c0)="5d4846965d0b30daa3e6601c064002004ef4e3449da9de6d8e81b8ef5ba7539963c8a299f8bf8f816d2fd597aff09165fb11db610530b5ff686981cc7cb546f1a6192dc51d47abb1d077af445519b9844596b7f246681246ac9d2c851ac3803d504a303643768bea050522be34f77c5e0127fe6b3aeb745f71b0d241ed3a8abec0e46b13b787c00958c3d840b59099cb02f74d9cce7e86f05e60a70ef0a00d046c010000000000000000"}, 0x6, 0x0) (async, rerun: 64) r5 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) r6 = prctl$auto(0x3e, 0x3, 0x0, 0x1, 0x0) (async, rerun: 64) listen$auto(r0, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r6) (async, rerun: 32) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) (async, rerun: 32) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) (async) r8 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r8, &(0x7f0000000000)={&(0x7f0000000000), 0x101}, 0x2) pread64$auto(r7, 0x0, 0x6000000000, 0x100000004) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 43.621485823s ago: executing program 5 (id=3429): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xffffffffffffffa3}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x84) (async) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@raw_tracepoint={0x6, 0xffffffffffffffff, 0x0, 0x81}, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) madvise$auto(0x0, 0x2003f2, 0x15) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) (async) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) syslog$auto(0x3, 0x0, 0x5) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x11, 0x2, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xa, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) 38.711145832s ago: executing program 7 (id=3441): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, "00000000000000007f0700"}, 0x13) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000004, 0x0, 0x1, 0x0, 0x10000080000000, 0x2}, 0x895}, 0x3, 0x200000) r2 = getpid() sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='z'], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4080) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram2\x00', 0x200000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0x82}, 0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) flock$auto(r3, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2e340, 0x0) 37.875786972s ago: executing program 7 (id=3443): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0xf, 0x3, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xa4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) mmap$auto(0x9, 0x400004, 0x100, 0x1ff, 0xffffffffffffffff, 0x40000000000318) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r2, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000002c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x8}, 0x1) 36.396610943s ago: executing program 7 (id=3446): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x4) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x2, 0x1, 0x0) semctl$auto(0x201, 0xfffffffd, 0x3, 0x400000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x540b, 0x1) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x100008) listen$auto(0x3, 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0x8ffff, 0x5, &(0x7f0000000140)="08f06b820000000000000000000000000000070000", 0xc694, 0x3, 0x80005, @stream_id=0x2, 0x20047, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r0, 0x4004550c, &(0x7f0000000300)=0x10003fe) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self/net/dev_snmp6/veth1\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) 35.097806616s ago: executing program 7 (id=3448): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x8, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0xa, 0x2, 0x1db, r0, 0x0) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf251b000000750021006d6e84a9905f0dffdcf2b0944b698e79da0eba57e5eaf234844de46646d0a3655acf6e14765da0f81c6887c83ceac2288173187445cee40f4face5dddfd46c50c9fd75ecc91def5016b074000cee3903492cd3a2d436a3c9f4313c92c14837a4408a2e292d8dc193758ecbbc5fb6f1c319e62873bc5d0000000800c4000101000008000d000400000004000b0008000d000700000005009200040000"], 0xf0}, 0x1, 0x0, 0x0, 0xc84}, 0x40040d4) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r3, &(0x7f0000008d40)='($}-)#@\x00', 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r4, 0x0, 0x7, 0x4cbd5d) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3b, 0xd, 0x4, 0x4, 0x1000000007) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3c, 0x2, 0x0, 0x5, 0x26) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x1, 0x106) 33.839916377s ago: executing program 7 (id=3451): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r0 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r2, 0x8000) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) 33.725517103s ago: executing program 7 (id=3452): mkdir$auto(&(0x7f0000000180)='./file0\x00', 0x84) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x15, 0xfffffffffffffffa, 0x8002) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyy8\x00', 0x40, 0x0) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) connect$auto(0x3, &(0x7f00000001c0)=@generic={0x21, "017ee9a7a0300c00"}, 0x58) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(r0, 0x8, 0x3) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x4) unshare$auto(0x40000080) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001180), 0xe40, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d638828712, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) madvise$auto(0x100000000000000, 0x2003f2, 0x15) mprotect$auto(0x80000000, 0x9, 0x6) 28.519268279s ago: executing program 36 (id=3429): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xffffffffffffffa3}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x84) (async) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@raw_tracepoint={0x6, 0xffffffffffffffff, 0x0, 0x81}, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) madvise$auto(0x0, 0x2003f2, 0x15) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) (async) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) syslog$auto(0x3, 0x0, 0x5) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x11, 0x2, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xa, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) 18.691843826s ago: executing program 37 (id=3452): mkdir$auto(&(0x7f0000000180)='./file0\x00', 0x84) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x15, 0xfffffffffffffffa, 0x8002) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyy8\x00', 0x40, 0x0) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) connect$auto(0x3, &(0x7f00000001c0)=@generic={0x21, "017ee9a7a0300c00"}, 0x58) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(r0, 0x8, 0x3) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x4) unshare$auto(0x40000080) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001180), 0xe40, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d638828712, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) madvise$auto(0x100000000000000, 0x2003f2, 0x15) mprotect$auto(0x80000000, 0x9, 0x6) 9.546646859s ago: executing program 4 (id=3498): socket(0x11, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x300, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2200c0, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x1ca}, 0x2, 0x7) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x20882, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x301e00, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000d, 0x400, 0x9b72, 0xffffffffffffffff, 0x8004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) madvise$auto(0x110d230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000002c0)={r3, 0x7, 0x7c3}, 0xffffffff, &(0x7f0000000380)={0x8000000000000001, 0x7}, &(0x7f00000003c0)={0x8}, 0x8) sendfile$auto(r5, r4, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) 9.063739036s ago: executing program 4 (id=3499): mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x408282, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67c1, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) 8.841954801s ago: executing program 4 (id=3501): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r1, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0xa) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x7fffffff) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r2, 0x0, 0x2d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) r3 = socket(0x6, 0x1, 0x73) getsockopt$auto(r3, 0x0, 0x2, 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 7.924843733s ago: executing program 8 (id=3503): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) ioctl$auto_MEMERASE64(r4, 0x40104d14, &(0x7f0000000000)={0x20000}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0xa, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r6, 0x84, 0x6d, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr14/addr_len\x00', 0x0, 0x0) write$auto(r7, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\xfd\xffE\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) read$auto(r5, &(0x7f0000000b40)='^+\x00', 0x4) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d50", 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x464002, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf3, 0xb0, @raw=0x10000}}) close_range$auto(0x0, 0x5, 0x0) 7.723753168s ago: executing program 6 (id=3504): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0xf, 0x3, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xa4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) mmap$auto(0x9, 0x400004, 0x100, 0x1ff, 0xffffffffffffffff, 0x40000000000318) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r2, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000002c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x8}, 0x1) 7.523003897s ago: executing program 4 (id=3505): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) r1 = getpid() syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)) fchdir$auto(r2) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x7f) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000040)="713aa6185ac801fb61dd46a6683a08cb0142bc8db012bd0efd3f1d3a0e425091f23ace6d9b069efd7496d3abf7f03f05e2e796a1f7864693d17aab92b2bf3a75f505bc8218533e636f2c1c90b9a56f1e65b204d293d6c98fbca52bcfe1e8be11626621ddec19a5195ec426d350dc4738f2710815ddab6729", 0x78) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 7.090039145s ago: executing program 4 (id=3506): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) ioctl$auto_MEMERASE64(r4, 0x40104d14, &(0x7f0000000000)={0x20000}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0xa, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r6, 0x84, 0x6d, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr14/addr_len\x00', 0x0, 0x0) write$auto(r7, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\xfd\xffE\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) read$auto(r5, &(0x7f0000000b40)='^+\x00', 0x4) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d50", 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x464002, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf3, 0xb0, @raw=0x10000}}) close_range$auto(0x0, 0x5, 0x0) 6.830141275s ago: executing program 8 (id=3507): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/net/afs/sysname\x00', 0x81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="3ca6", 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x40, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@nested={0x5, 0x9, 0x0, 0x1, [@generic="01"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) 6.784954857s ago: executing program 6 (id=3508): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x60980, 0x0) ioctl$auto(r0, 0x64cf, 0x1df) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) symlink$auto(0x0, &(0x7f0000000000)='./file0\x00') r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYBLOB="5de1"], 0x1ac}}, 0x4048801) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0xa, 0x9) r4 = io_uring_setup$auto(0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r6 = io_uring_setup$auto(0x59, &(0x7f0000000000)={0x85, 0x1000, 0x6, 0x1, 0xffffffff, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x0, 0x8998d60, 0x80000fd, 0x7fff, 0x8000101, 0x0, 0x8d6}, {0xbfc7, 0x1, 0x52, 0x1008, 0x47304, 0x3d, 0x8, 0x7, 0x8001}}) read$auto(r5, 0x0, 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000340), r6) ioctl$auto_CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000000100)={0x7, 0x700, 0x4, @lost_msgs={0x6}}) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r6, 0x0, 0x4e8c1) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) 6.194188427s ago: executing program 4 (id=3509): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/213, 0xd5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3000, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x1c7683, 0x0) socket(0xa, 0x1, 0x84) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r3, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r4, 0x4000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 6.026268077s ago: executing program 8 (id=3510): socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x2000048}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) acct$auto(&(0x7f0000000080)='/dev/video3\x00') r3 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000001c0)={@_si_pad}, 0xa, &(0x7f0000000240)={{0xf, 0xe}, {0x73a, 0x9}, 0xffffffff, 0x7, 0x2, 0x1, 0x1, 0x7, 0x1, 0x0, 0x4, 0xdd, 0x8, 0x2, 0x7fff, 0x4}) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000940)={&(0x7f0000000100), 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x1c4, 0x0, 0x204, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_COORDINATOR={0x14c, 0x1e, 0x0, 0x1, [@nested={0x148, 0x98, 0x0, 0x1, [@typed={0xe2, 0x7c, 0x0, 0x0, @binary="e44b7d5c4c25e9726eed52a775dd0f82c106ed6850baecd1403c6f384a55ca65c8191281781fd04a1d23335d7dc85970e493a411515e761c56fcca6bcd009c7009bb43dcc877b5742d04366fa002eafe51ec1e8ff6ecd6f0bd7039707410820fb3b993f557253e1781fc97b90c1d8db2a4c52fada0b3076a9647a82ce2bdad05b612da48e68213fd3c81604ef3903188701bec568a8d0071bf0b09e954ead36aef703427c471f755a8904b9f863fb45cf3466a1cf2f37926f0a7b3c4006c1938cbb161d3b3a0adbc4f5528aa93a6f868100edfc29a2f55100f6f307c6f53"}, @typed={0x5b, 0x142, 0x0, 0x0, @binary="0d1350f9ae614034c517d7c6b1c76de1607ce01703843e001543a92ddedf3308e37f1752733783d98b2feabe2485bd0b87f362a8027ad0f595eea4ac93b02fd70a5f18fd048f4de6f0f5d50c1c7fdd8e25202a0f7ee419"}, @nested={0x4, 0x54}]}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x81}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}, @NL802154_ATTR_PEER={0x44, 0x28, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @pid=r3}, @generic="72cd06885f37b384a9f60ed1a4d016a695182e8b22cbfec6c3dbe61ee55079420a5e9fd9d8a7806fed9c252916c2e97c", @typed={0x8, 0x10a, 0x0, 0x0, @u32=0x8}]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffb}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000010) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4081) select$auto(0x9, 0x0, 0x0, &(0x7f0000000640)={[0x1ff, 0x7, 0x0, 0x1ff, 0x9, 0x1d, 0x15f4da07, 0x6, 0x2, 0x4, 0xa, 0x1000, 0xb, 0x6, 0x100000001, 0x3a0]}, 0x0) 5.619473451s ago: executing program 6 (id=3511): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000300), r2) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000480), r2) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x50) bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, "577908080000569be7c30b00"}, 0x13) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram2\x00', 0x200000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0x82}, 0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) flock$auto(r4, 0x8) 4.632789276s ago: executing program 6 (id=3512): mmap$auto(0x0, 0x20009, 0x4, 0xfffffffffffff672, 0x401, 0x8000) io_uring_setup$auto(0x2009, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r0, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a6ebee3") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x400000001, 0x2091d3, 0x7, 0x0, 0x9, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x800000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) mmap$auto(0x0, 0x3, 0x3, 0x200000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x6, 0x0) 4.329554022s ago: executing program 8 (id=3513): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x2, 0x400044, 0xdf, 0x9b7e, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x9, &(0x7f0000000040)=0x100, 0x3, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2b44c1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) socket(0x80000000000000a, 0x2, 0x0) 3.15609494s ago: executing program 6 (id=3514): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r0, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x80002, 0x73) getsockopt$auto(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000000)={0x1f, 0x0, 0x202, 0x9, 0x1}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) r6 = socket(0xa, 0x2, 0x73) sendto$auto(r6, 0x0, 0x4, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) write$auto(0xffffffffffffffff, &(0x7f0000000040)='#[-#\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) r7 = pidfd_open$auto(0x1, 0x0) signalfd4$auto(r3, &(0x7f00000002c0)={0xfffb}, 0x10001, 0xfffeffff) setns(r7, 0x4000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r4) sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000001980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x44000) close_range$auto(0x2, 0x8, 0x0) 1.343311202s ago: executing program 8 (id=3515): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0xf, 0x3, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xa4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) mmap$auto(0x9, 0x400004, 0x100, 0x1ff, 0xffffffffffffffff, 0x40000000000318) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r1, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000002c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x8}, 0x1) 1.168085075s ago: executing program 9 (id=3480): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x60000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0_to_bond/disable_policy\x00', 0x28000, 0x0) r2 = fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = memfd_create$auto(0x0, 0xe) fallocate$auto(r3, 0x3, 0x2, 0x4) pipe2$auto(0x0, 0x80) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048009}, 0x20000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) read$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000000c0)=""/106, 0x6a) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x20000804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x40, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r5) sendmsg$auto_SMC_PNETID_ADD(r5, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0xb, 0x2, 'dummy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r7) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x190, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x162, 0x30, 0x0, 0x1, [@nested={0x99, 0x43, 0x0, 0x1, [@nested={0x4, 0x142}, @generic="4fbafe7709f8c2db11b765ccb3aeac0b3a42ea1964c7914e8e53e28c76edff1b6d69498c896689a1f06a8e2ec03a2f27a373fd1bf5e63bab2d540e36a97b24d5d92221cfdd1a20e529d3957692787e9c892a0ec247b1b966279fb7b72ef526533fe6943f542e17323df2e2dffa9344f1476ed1666facdf4434346966dcca826b96f54b13d3c3bca5ae7a46f41cafcc973b"]}, @typed={0x28, 0xcc, 0x0, 0x0, @binary="fcdf25f33e03f831508f943412c7cb74d2dd6bb6995bc5490a04de63fffe276dc4188af5"}, @generic="c4b14b531276b1deef389bc4e9aa557ee3fad6b5d8739bfcb0f565cd3062b59bcd10b5c64d0a2a627e59e6e27241d7efac09f52277a34d4a2490c83f255a451e4d41bea11517081b955f1151683e8b9a6d75e2986120a7a9168eed2a7e46cde8a52a584ad3417a45cf1d3ac9737da89c4fa889acf77b1cc44b334bc7f177f5a72967", @nested={0x10, 0x11e, 0x0, 0x1, [@typed={0xb, 0x36, 0x0, 0x0, @str='dummy0\x00'}]}, @typed={0x8, 0x9e, 0x0, 0x0, @pid}]}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@nested={0xc, 0xee, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0x7b}]}, @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x190}}, 0x8050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00'}) 454.650537ms ago: executing program 6 (id=3516): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_tracers\x00', 0x8300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd31, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x20000050) io_uring_setup$auto(0xc, 0x0) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x262c0, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x80000000, 0x4d, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) gettid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) ioctl$auto(r3, 0x5319, r3) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000000)=0x3) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r6, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 283.989275ms ago: executing program 8 (id=3517): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r1, @new_prog_fd, 0x403, @old_map_fd=r1}, 0x9) close_range$auto(r2, r0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) socket(0x2, 0x3, 0x4) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) 0s ago: executing program 9 (id=3518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) r2 = gettid() close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = getpid() r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) msgctl$auto_MSG_STAT(0x1, 0xb, 0x0) rt_tgsigqueueinfo$auto(r3, r2, 0x21, &(0x7f0000000340)={@siginfo_0_0={0x3, 0x1, 0x20cce3, @_rt={r3, 0x0, @sival_int=0xf}}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0) kernel console output (not intermixed with test programs): k_trace_save+0x8e/0xc0 [ 1099.668768][T21369] ? __pfx_stack_trace_save+0x10/0x10 [ 1099.668806][T21369] do_file_open+0x20e/0x430 [ 1099.668840][T21369] ? __pfx_do_file_open+0x10/0x10 [ 1099.668871][T21369] ? kasan_save_track+0x14/0x30 [ 1099.668894][T21369] ? __kasan_slab_alloc+0x89/0x90 [ 1099.668921][T21369] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1099.668995][T21369] do_open_execat+0xd1/0x360 [ 1099.669020][T21369] ? __pfx_do_open_execat+0x10/0x10 [ 1099.669047][T21369] ? __might_fault+0xc5/0x140 [ 1099.669086][T21369] ? __might_fault+0xc5/0x140 [ 1099.669130][T21369] alloc_bprm+0x2d/0x710 [ 1099.669158][T21369] do_execveat_common.isra.0+0x19c/0x580 [ 1099.669187][T21369] ? do_getname+0x191/0x390 [ 1099.669227][T21369] __x64_sys_execve+0x93/0xd0 [ 1099.669256][T21369] do_syscall_64+0x115/0x840 [ 1099.669292][T21369] ? clear_bhb_loop+0x40/0x90 [ 1099.669322][T21369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.669347][T21369] RIP: 0033:0x7f80a619ce59 [ 1099.669367][T21369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.669392][T21369] RSP: 002b:00007f80a43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1099.669415][T21369] RAX: ffffffffffffffda RBX: 00007f80a6415fa0 RCX: 00007f80a619ce59 [ 1099.669431][T21369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1099.669446][T21369] RBP: 00007f80a6232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1099.669461][T21369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.669477][T21369] R13: 00007f80a6416038 R14: 00007f80a6415fa0 R15: 00007ffe9802c278 [ 1099.669508][T21369] [ 1101.134252][T21405] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1101.236821][T21414] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1104.478006][T21460] zswap: compressor not available [ 1105.572553][T21493] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1107.275016][T21527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3067'. [ 1109.143228][T21560] FAULT_INJECTION: forcing a failure. [ 1109.143228][T21560] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.325297][T21560] CPU: 0 UID: 0 PID: 21560 Comm: syz.4.3071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.325337][T21560] Tainted: [L]=SOFTLOCKUP [ 1109.325346][T21560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1109.325362][T21560] Call Trace: [ 1109.325369][T21560] [ 1109.325378][T21560] dump_stack_lvl+0x100/0x190 [ 1109.325427][T21560] should_fail_ex.cold+0x5/0xa [ 1109.325458][T21560] ? tomoyo_encode2+0xfb/0x3c0 [ 1109.325492][T21560] should_failslab+0xc2/0x120 [ 1109.325523][T21560] __kmalloc_noprof+0xe0/0x850 [ 1109.325564][T21560] ? rcu_is_watching+0x12/0xc0 [ 1109.325598][T21560] tomoyo_encode2+0xfb/0x3c0 [ 1109.325638][T21560] tomoyo_encode+0x29/0x50 [ 1109.325672][T21560] tomoyo_realpath_from_path+0x18c/0x690 [ 1109.325717][T21560] tomoyo_check_open_permission+0x2af/0x3c0 [ 1109.325751][T21560] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1109.325793][T21560] ? hook_file_open+0x24e/0x7a0 [ 1109.325845][T21560] ? path_get+0x61/0x80 [ 1109.325883][T21560] tomoyo_file_open+0x6b/0x90 [ 1109.325907][T21560] security_file_open+0xb5/0x1e0 [ 1109.325942][T21560] do_dentry_open+0x588/0x14d0 [ 1109.325981][T21560] vfs_open+0x82/0x3f0 [ 1109.326022][T21560] path_openat+0x208c/0x31a0 [ 1109.326073][T21560] ? __pfx_path_openat+0x10/0x10 [ 1109.326116][T21560] do_file_open+0x20e/0x430 [ 1109.326151][T21560] ? __pfx_do_file_open+0x10/0x10 [ 1109.326205][T21560] ? alloc_fd+0x476/0x790 [ 1109.326238][T21560] ? do_getname+0x191/0x390 [ 1109.326278][T21560] do_sys_openat2+0x10d/0x1e0 [ 1109.326317][T21560] ? __pfx_do_sys_openat2+0x10/0x10 [ 1109.326358][T21560] ? do_raw_spin_lock+0x128/0x260 [ 1109.326392][T21560] __x64_sys_openat+0x12d/0x210 [ 1109.326435][T21560] ? __pfx___x64_sys_openat+0x10/0x10 [ 1109.326481][T21560] ? rcu_is_watching+0x12/0xc0 [ 1109.326513][T21560] do_syscall_64+0x115/0x840 [ 1109.326550][T21560] ? clear_bhb_loop+0x40/0x90 [ 1109.326580][T21560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.326605][T21560] RIP: 0033:0x7fa41639ce59 [ 1109.326625][T21560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.326650][T21560] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1109.326674][T21560] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1109.326690][T21560] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1109.326705][T21560] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1109.326720][T21560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.326735][T21560] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1109.326767][T21560] [ 1109.604912][T21560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1112.251948][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.261222][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.390621][T21590] ubi0: attaching mtd0 [ 1112.530650][T21590] ubi0: scanning is finished [ 1112.640935][T21590] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1113.178200][T21590] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1113.969721][T21605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1113.983711][T21605] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1114.077501][T21605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1114.108429][T21605] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1114.141806][T21605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1114.185440][T21605] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1114.245614][T21605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1114.267296][T21605] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1115.988284][T10381] Bluetooth: hci0: command 0x0406 tx timeout [ 1116.067981][T10381] Bluetooth: hci1: command 0x0406 tx timeout [ 1116.147952][T10381] Bluetooth: hci2: command 0x2016 tx timeout [ 1116.306698][T10381] Bluetooth: hci3: command 0x0406 tx timeout [ 1118.057711][T10381] Bluetooth: hci0: command 0x0406 tx timeout [ 1118.137198][T10381] Bluetooth: hci1: command 0x0406 tx timeout [ 1118.218664][T10381] Bluetooth: hci2: command 0x2016 tx timeout [ 1118.376003][T10381] Bluetooth: hci3: command 0x0406 tx timeout [ 1118.852999][ T30] audit: type=1800 audit(2147483771.170:44): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3089" name="dbroot" dev="configfs" ino=92106 res=0 errno=0 [ 1119.281478][T21670] syz.1.3090 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1120.469924][T21662] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1121.566075][T21685] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1123.177881][T21700] openvswitch: netlink: Key 25 has unexpected len 8 expected 16 [ 1123.842816][T21707] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1124.227938][ T6038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1124.241411][ T6038] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1124.253148][ T6038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1124.270269][ T6038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1124.282055][ T6038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.336576][T21716] kexec: Could not allocate control_code_buffer [ 1126.320318][T21736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1126.348129][ T6038] Bluetooth: hci4: command tx timeout [ 1128.409745][ T6038] Bluetooth: hci4: command tx timeout [ 1129.230952][T21762] Process accounting resumed [ 1130.147278][T21715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.197627][T21715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.239738][T21715] bridge_slave_0: entered allmulticast mode [ 1130.285240][T21715] bridge_slave_0: entered promiscuous mode [ 1130.330639][T21790] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1130.380722][T21790] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1130.407107][T21715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.450055][T21715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.473501][ T6038] Bluetooth: hci4: command tx timeout [ 1130.500083][T21715] bridge_slave_1: entered allmulticast mode [ 1130.566517][T21715] bridge_slave_1: entered promiscuous mode [ 1130.887590][T21715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.975783][T21715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.280645][T21715] team0: Port device team_slave_0 added [ 1131.315479][T21715] team0: Port device team_slave_1 added [ 1131.494958][T21715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.538676][T21715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.705982][T21715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.771880][T21771] FAULT_INJECTION: forcing a failure. [ 1131.771880][T21771] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.804382][T21715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.837190][T21771] CPU: 0 UID: 0 PID: 21771 Comm: syz.4.3108 Tainted: G L syzkaller #0 PREEMPT(full) [ 1131.837229][T21771] Tainted: [L]=SOFTLOCKUP [ 1131.837238][T21771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.837253][T21771] Call Trace: [ 1131.837261][T21771] [ 1131.837269][T21771] dump_stack_lvl+0x100/0x190 [ 1131.837316][T21771] should_fail_ex.cold+0x5/0xa [ 1131.837346][T21771] ? sd_pr_read_keys+0xc6/0x300 [ 1131.837404][T21771] should_failslab+0xc2/0x120 [ 1131.837434][T21771] __kmalloc_noprof+0xe0/0x850 [ 1131.837479][T21771] sd_pr_read_keys+0xc6/0x300 [ 1131.837537][T21771] blkdev_common_ioctl+0x1bc8/0x2b80 [ 1131.837669][T21771] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1131.837720][T21771] ? do_vfs_ioctl+0x226/0x13e0 [ 1131.837746][T21771] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1131.837779][T21771] ? find_held_lock+0x2b/0x80 [ 1131.837810][T21771] ? __fget_files+0x215/0x3d0 [ 1131.837843][T21771] blkdev_ioctl+0x43b/0x6f0 [ 1131.837882][T21771] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1131.837926][T21771] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1131.837967][T21771] __x64_sys_ioctl+0x18e/0x210 [ 1131.837993][T21771] do_syscall_64+0x115/0x840 [ 1131.838029][T21771] ? clear_bhb_loop+0x40/0x90 [ 1131.838061][T21771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.838087][T21771] RIP: 0033:0x7fa41639ce59 [ 1131.838107][T21771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.838133][T21771] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1131.838156][T21771] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1131.838173][T21771] RDX: 0000000000000000 RSI: 00000000c01070ce RDI: 0000000000000008 [ 1131.838188][T21771] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1131.838203][T21771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.838218][T21771] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1131.838250][T21771] [ 1131.843299][T21715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.637084][ T6038] Bluetooth: hci4: command tx timeout [ 1132.955745][T21814] random: crng reseeded on system resumption [ 1133.055602][T21715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.551466][T21817] FAULT_INJECTION: forcing a failure. [ 1133.551466][T21817] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.645308][T21715] hsr_slave_0: entered promiscuous mode [ 1133.695156][T21715] hsr_slave_1: entered promiscuous mode [ 1133.808508][T21817] CPU: 0 UID: 0 PID: 21817 Comm: syz.4.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.808548][T21817] Tainted: [L]=SOFTLOCKUP [ 1133.808556][T21817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1133.808572][T21817] Call Trace: [ 1133.808579][T21817] [ 1133.808589][T21817] dump_stack_lvl+0x100/0x190 [ 1133.808637][T21817] should_fail_ex.cold+0x5/0xa [ 1133.808670][T21817] should_failslab+0xc2/0x120 [ 1133.808700][T21817] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1133.808741][T21817] ? __proc_create+0x2cb/0x8c0 [ 1133.808779][T21817] __proc_create+0x2cb/0x8c0 [ 1133.808812][T21817] ? __pfx___proc_create+0x10/0x10 [ 1133.808844][T21817] ? __lock_acquire+0x4a5/0x2630 [ 1133.808884][T21817] ? proc_register+0x559/0x8a0 [ 1133.808924][T21817] proc_create_reg+0x75/0x170 [ 1133.808961][T21817] proc_create_data+0x86/0x110 [ 1133.808995][T21817] ? __pfx_proc_create_data+0x10/0x10 [ 1133.809029][T21817] ? net_generic+0xea/0x2a0 [ 1133.809071][T21817] gss_svc_init_net+0x233/0x640 [ 1133.809106][T21817] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1133.809148][T21817] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1133.809187][T21817] ops_init+0x1e2/0x5f0 [ 1133.809219][T21817] setup_net+0x118/0x3a0 [ 1133.809246][T21817] ? __pfx_setup_net+0x10/0x10 [ 1133.809273][T21817] ? mutex_init_lockdep+0xf1/0x120 [ 1133.809302][T21817] copy_net_ns+0x46f/0x7c0 [ 1133.809342][T21817] create_new_namespaces+0x3ea/0xac0 [ 1133.809380][T21817] unshare_nsproxy_namespaces+0xf2/0x220 [ 1133.809415][T21817] ksys_unshare+0x438/0xab0 [ 1133.809453][T21817] ? __pfx_ksys_unshare+0x10/0x10 [ 1133.809488][T21817] ? xfd_validate_state+0x129/0x190 [ 1133.809522][T21817] __x64_sys_unshare+0x31/0x40 [ 1133.809558][T21817] do_syscall_64+0x115/0x840 [ 1133.809594][T21817] ? clear_bhb_loop+0x40/0x90 [ 1133.809624][T21817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.809650][T21817] RIP: 0033:0x7fa41639ce59 [ 1133.809669][T21817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.809694][T21817] RSP: 002b:00007fa417185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1133.809718][T21817] RAX: ffffffffffffffda RBX: 00007fa416615fa0 RCX: 00007fa41639ce59 [ 1133.809735][T21817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1133.809750][T21817] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1133.809765][T21817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.809780][T21817] R13: 00007fa416616038 R14: 00007fa416615fa0 R15: 00007ffde35b56a8 [ 1133.809811][T21817] [ 1136.535947][T21715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1136.575902][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1136.695763][T21715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1136.745007][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1136.800894][T21715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1136.882834][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.034128][T21715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1137.098935][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.534341][T21715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.946253][T21715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.001596][T21873] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1140.042290][T20750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.049505][T20750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.140201][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.147463][T20750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.505882][T21715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.925449][T21715] veth0_vlan: entered promiscuous mode [ 1145.070258][T21715] veth1_vlan: entered promiscuous mode [ 1145.242207][T21715] veth0_macvtap: entered promiscuous mode [ 1145.346034][T21715] veth1_macvtap: entered promiscuous mode [ 1145.603859][T21715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.816356][T21715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.942219][T20754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.997629][T20754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.236227][T20754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.305689][T20754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.739622][T19840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.794937][T19840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.009462][T10291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.074574][T10291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.021347][T21952] FAULT_INJECTION: forcing a failure. [ 1148.021347][T21952] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.214066][T21952] CPU: 0 UID: 0 PID: 21952 Comm: syz.5.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.214105][T21952] Tainted: [L]=SOFTLOCKUP [ 1148.214113][T21952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1148.214128][T21952] Call Trace: [ 1148.214136][T21952] [ 1148.214145][T21952] dump_stack_lvl+0x100/0x190 [ 1148.214191][T21952] should_fail_ex.cold+0x5/0xa [ 1148.214221][T21952] should_failslab+0xc2/0x120 [ 1148.214250][T21952] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1148.214286][T21952] ? crtc_crc_open+0x3ba/0x7e0 [ 1148.214323][T21952] crtc_crc_open+0x3ba/0x7e0 [ 1148.214353][T21952] ? __debugfs_file_get+0x1fc/0x860 [ 1148.214400][T21952] ? __pfx_crtc_crc_open+0x10/0x10 [ 1148.214432][T21952] ? __pfx_apparmor_file_open+0x10/0x10 [ 1148.214458][T21952] ? path_get+0x61/0x80 [ 1148.214495][T21952] ? __pfx_crtc_crc_open+0x10/0x10 [ 1148.214524][T21952] full_proxy_open_regular+0x1b6/0x370 [ 1148.214564][T21952] do_dentry_open+0x6ab/0x14d0 [ 1148.214593][T21952] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1148.214644][T21952] vfs_open+0x82/0x3f0 [ 1148.214702][T21952] path_openat+0x208c/0x31a0 [ 1148.214743][T21952] ? __pfx_path_openat+0x10/0x10 [ 1148.214785][T21952] do_file_open+0x20e/0x430 [ 1148.214819][T21952] ? __pfx_do_file_open+0x10/0x10 [ 1148.214872][T21952] ? alloc_fd+0x476/0x790 [ 1148.214905][T21952] ? do_getname+0x191/0x390 [ 1148.214945][T21952] do_sys_openat2+0x10d/0x1e0 [ 1148.214984][T21952] ? __pfx_do_sys_openat2+0x10/0x10 [ 1148.215025][T21952] ? do_raw_spin_lock+0x128/0x260 [ 1148.215059][T21952] __x64_sys_openat+0x12d/0x210 [ 1148.215099][T21952] ? __pfx___x64_sys_openat+0x10/0x10 [ 1148.215145][T21952] ? rcu_is_watching+0x12/0xc0 [ 1148.215177][T21952] do_syscall_64+0x115/0x840 [ 1148.215212][T21952] ? clear_bhb_loop+0x40/0x90 [ 1148.215242][T21952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.215268][T21952] RIP: 0033:0x7f106259ce59 [ 1148.215288][T21952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.215314][T21952] RSP: 002b:00007f10634e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1148.215338][T21952] RAX: ffffffffffffffda RBX: 00007f1062816090 RCX: 00007f106259ce59 [ 1148.215360][T21952] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1148.215377][T21952] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1148.215392][T21952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.215407][T21952] R13: 00007f1062816128 R14: 00007f1062816090 R15: 00007ffc6ac43bf8 [ 1148.215439][T21952] [ 1151.457055][T21975] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1153.167398][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1153.311699][T22011] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1153.377703][T22010] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1156.723971][T22031] Process accounting resumed [ 1160.006040][T22097] Process accounting paused [ 1161.267146][T22120] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1161.655528][T22119] FAULT_INJECTION: forcing a failure. [ 1161.655528][T22119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.919207][T22119] CPU: 0 UID: 0 PID: 22119 Comm: syz.5.3173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.919247][T22119] Tainted: [L]=SOFTLOCKUP [ 1161.919256][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1161.919272][T22119] Call Trace: [ 1161.919281][T22119] [ 1161.919290][T22119] dump_stack_lvl+0x100/0x190 [ 1161.919344][T22119] should_fail_ex.cold+0x5/0xa [ 1161.919382][T22119] _copy_to_iter+0x1f3/0x1720 [ 1161.919422][T22119] ? do_raw_spin_lock+0x128/0x260 [ 1161.919452][T22119] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1161.919480][T22119] ? __pfx__copy_to_iter+0x10/0x10 [ 1161.919512][T22119] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1161.919551][T22119] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1161.919586][T22119] ? find_held_lock+0x2b/0x80 [ 1161.919619][T22119] ? mark_held_locks+0x40/0x70 [ 1161.919658][T22119] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1161.919695][T22119] simple_copy_to_iter+0x46/0x90 [ 1161.919733][T22119] __skb_datagram_iter+0x5c8/0x900 [ 1161.919768][T22119] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1161.919814][T22119] skb_copy_datagram_iter+0xa5/0x270 [ 1161.919854][T22119] tcp_recvmsg_locked+0x1b74/0x2a20 [ 1161.919972][T22119] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1161.920005][T22119] ? __local_bh_enable_ip+0x9e/0x120 [ 1161.920041][T22119] tcp_recvmsg+0x141/0x630 [ 1161.920069][T22119] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1161.920098][T22119] ? __fget_files+0x215/0x3d0 [ 1161.920129][T22119] ? __fget_files+0x215/0x3d0 [ 1161.920163][T22119] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1161.920189][T22119] inet_recvmsg+0xd5/0x4c0 [ 1161.920266][T22119] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1161.920305][T22119] ? __pfx_inet_recvmsg+0x10/0x10 [ 1161.920347][T22119] sock_recvmsg+0x187/0x1f0 [ 1161.920389][T22119] __sys_recvfrom+0x200/0x300 [ 1161.920430][T22119] ? 0xffffffff81000000 [ 1161.920449][T22119] ? __pfx___sys_recvfrom+0x10/0x10 [ 1161.920489][T22119] ? __pfx_get_signal+0x10/0x10 [ 1161.920529][T22119] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 1161.920567][T22119] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 1161.920664][T22119] ? xfd_validate_state+0x129/0x190 [ 1161.920688][T22119] ? exit_to_user_mode_loop+0xf3/0x670 [ 1161.920737][T22119] __x64_sys_recvfrom+0xe0/0x1c0 [ 1161.920759][T22119] ? do_syscall_64+0x90/0x840 [ 1161.920795][T22119] ? lockdep_hardirqs_on+0x78/0x100 [ 1161.920831][T22119] do_syscall_64+0x115/0x840 [ 1161.920866][T22119] ? clear_bhb_loop+0x40/0x90 [ 1161.920896][T22119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.920922][T22119] RIP: 0033:0x7f106259ce59 [ 1161.920942][T22119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.920968][T22119] RSP: 002b:00007f106350a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1161.920993][T22119] RAX: ffffffffffffffda RBX: 00007f1062815fa0 RCX: 00007f106259ce59 [ 1161.921010][T22119] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 1161.921026][T22119] RBP: 00007f1062632d6f R08: 0000000000000000 R09: ffffffff81000000 [ 1161.921042][T22119] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1161.921057][T22119] R13: 00007f1062816038 R14: 00007f1062815fa0 R15: 00007ffc6ac43bf8 [ 1161.921080][T22119] ? 0xffffffff81000000 [ 1161.921106][T22119] [ 1164.385131][T22134] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1164.500659][T22134] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1164.677444][T22143] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1164.793663][T22134] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1164.930492][T22143] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1165.990883][T22159] FAULT_INJECTION: forcing a failure. [ 1165.990883][T22159] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.217463][T22159] CPU: 0 UID: 0 PID: 22159 Comm: syz.5.3179 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.217504][T22159] Tainted: [L]=SOFTLOCKUP [ 1166.217513][T22159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.217528][T22159] Call Trace: [ 1166.217535][T22159] [ 1166.217544][T22159] dump_stack_lvl+0x100/0x190 [ 1166.217591][T22159] should_fail_ex.cold+0x5/0xa [ 1166.217624][T22159] should_failslab+0xc2/0x120 [ 1166.217655][T22159] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1166.217692][T22159] ? crtc_crc_open+0x3ba/0x7e0 [ 1166.217731][T22159] crtc_crc_open+0x3ba/0x7e0 [ 1166.217762][T22159] ? __debugfs_file_get+0x1fc/0x860 [ 1166.217799][T22159] ? __pfx_crtc_crc_open+0x10/0x10 [ 1166.217832][T22159] ? __pfx_apparmor_file_open+0x10/0x10 [ 1166.217860][T22159] ? path_get+0x61/0x80 [ 1166.217897][T22159] ? __pfx_crtc_crc_open+0x10/0x10 [ 1166.217927][T22159] full_proxy_open_regular+0x1b6/0x370 [ 1166.217972][T22159] do_dentry_open+0x6ab/0x14d0 [ 1166.218002][T22159] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1166.218057][T22159] vfs_open+0x82/0x3f0 [ 1166.218098][T22159] path_openat+0x208c/0x31a0 [ 1166.218140][T22159] ? __pfx_path_openat+0x10/0x10 [ 1166.218182][T22159] do_file_open+0x20e/0x430 [ 1166.218216][T22159] ? __pfx_do_file_open+0x10/0x10 [ 1166.218268][T22159] ? alloc_fd+0x476/0x790 [ 1166.218301][T22159] ? do_getname+0x191/0x390 [ 1166.218341][T22159] do_sys_openat2+0x10d/0x1e0 [ 1166.218380][T22159] ? __pfx_do_sys_openat2+0x10/0x10 [ 1166.218421][T22159] ? do_raw_spin_lock+0x128/0x260 [ 1166.218455][T22159] __x64_sys_openat+0x12d/0x210 [ 1166.218496][T22159] ? __pfx___x64_sys_openat+0x10/0x10 [ 1166.218542][T22159] ? rcu_is_watching+0x12/0xc0 [ 1166.218574][T22159] do_syscall_64+0x115/0x840 [ 1166.218610][T22159] ? clear_bhb_loop+0x40/0x90 [ 1166.218640][T22159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.218666][T22159] RIP: 0033:0x7f106259ce59 [ 1166.218687][T22159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.218724][T22159] RSP: 002b:00007f10634e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1166.218747][T22159] RAX: ffffffffffffffda RBX: 00007f1062816090 RCX: 00007f106259ce59 [ 1166.218763][T22159] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1166.218779][T22159] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1166.218793][T22159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.218807][T22159] R13: 00007f1062816128 R14: 00007f1062816090 R15: 00007ffc6ac43bf8 [ 1166.218837][T22159] [ 1166.874073][T22161] FAULT_INJECTION: forcing a failure. [ 1166.874073][T22161] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.874139][T22161] CPU: 0 UID: 0 PID: 22161 Comm: syz.1.3180 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.874175][T22161] Tainted: [L]=SOFTLOCKUP [ 1166.874183][T22161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.874198][T22161] Call Trace: [ 1166.874205][T22161] [ 1166.874214][T22161] dump_stack_lvl+0x100/0x190 [ 1166.874263][T22161] should_fail_ex.cold+0x5/0xa [ 1166.874294][T22161] should_failslab+0xc2/0x120 [ 1166.874324][T22161] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1166.874362][T22161] ? vc_allocate+0x1a6/0x880 [ 1166.874461][T22161] vc_allocate+0x1a6/0x880 [ 1166.874493][T22161] ? __pfx_vc_allocate+0x10/0x10 [ 1166.874533][T22161] con_install+0xa1/0x620 [ 1166.874567][T22161] ? __pfx_con_install+0x10/0x10 [ 1166.874604][T22161] ? __pfx_con_install+0x10/0x10 [ 1166.874637][T22161] tty_init_dev.part.0+0x9e/0x470 [ 1166.874703][T22161] tty_open+0xa63/0xfa0 [ 1166.874743][T22161] ? __pfx_tty_open+0x10/0x10 [ 1166.874776][T22161] ? chrdev_open+0x589/0x6a0 [ 1166.874807][T22161] ? chrdev_open+0x589/0x6a0 [ 1166.874843][T22161] ? __pfx_tty_open+0x10/0x10 [ 1166.874876][T22161] chrdev_open+0x234/0x6a0 [ 1166.874909][T22161] ? __pfx_chrdev_open+0x10/0x10 [ 1166.874942][T22161] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1166.874984][T22161] do_dentry_open+0x6ab/0x14d0 [ 1166.875014][T22161] ? __pfx_chrdev_open+0x10/0x10 [ 1166.875052][T22161] vfs_open+0x82/0x3f0 [ 1166.875093][T22161] path_openat+0x208c/0x31a0 [ 1166.875142][T22161] ? __pfx_path_openat+0x10/0x10 [ 1166.875185][T22161] do_file_open+0x20e/0x430 [ 1166.875219][T22161] ? __pfx_do_file_open+0x10/0x10 [ 1166.875273][T22161] ? alloc_fd+0x476/0x790 [ 1166.875308][T22161] ? do_getname+0x191/0x390 [ 1166.875352][T22161] do_sys_openat2+0x10d/0x1e0 [ 1166.875391][T22161] ? __pfx_do_sys_openat2+0x10/0x10 [ 1166.875433][T22161] ? __fget_files+0x21f/0x3d0 [ 1166.875469][T22161] __x64_sys_openat+0x12d/0x210 [ 1166.875510][T22161] ? __pfx___x64_sys_openat+0x10/0x10 [ 1166.875578][T22161] ? rcu_is_watching+0x12/0xc0 [ 1166.875611][T22161] do_syscall_64+0x115/0x840 [ 1166.875647][T22161] ? clear_bhb_loop+0x40/0x90 [ 1166.875678][T22161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.875717][T22161] RIP: 0033:0x7f72be59ce59 [ 1166.875737][T22161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.875764][T22161] RSP: 002b:00007f72bf3c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1166.875791][T22161] RAX: ffffffffffffffda RBX: 00007f72be815fa0 RCX: 00007f72be59ce59 [ 1166.875808][T22161] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1166.875824][T22161] RBP: 00007f72be632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1166.875839][T22161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.875853][T22161] R13: 00007f72be816038 R14: 00007f72be815fa0 R15: 00007fff7abbd238 [ 1166.875884][T22161] [ 1171.346601][T20754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.932705][T20754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.189053][T20754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.489680][T20754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.866060][T22223] FAULT_INJECTION: forcing a failure. [ 1172.866060][T22223] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.937285][T22223] CPU: 0 UID: 0 PID: 22223 Comm: syz.0.3191 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.937323][T22223] Tainted: [L]=SOFTLOCKUP [ 1172.937332][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1172.937347][T22223] Call Trace: [ 1172.937355][T22223] [ 1172.937364][T22223] dump_stack_lvl+0x100/0x190 [ 1172.937412][T22223] should_fail_ex.cold+0x5/0xa [ 1172.937443][T22223] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1172.937480][T22223] should_failslab+0xc2/0x120 [ 1172.937511][T22223] __kmalloc_noprof+0xe0/0x850 [ 1172.937551][T22223] ? kfree+0x1dd/0x6c0 [ 1172.937590][T22223] tomoyo_realpath_from_path+0xb6/0x690 [ 1172.937645][T22223] tomoyo_check_open_permission+0x2af/0x3c0 [ 1172.937678][T22223] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1172.937721][T22223] ? hook_file_open+0x24e/0x7a0 [ 1172.937776][T22223] ? path_get+0x61/0x80 [ 1172.937814][T22223] tomoyo_file_open+0x6b/0x90 [ 1172.937838][T22223] security_file_open+0xb5/0x1e0 [ 1172.937873][T22223] do_dentry_open+0x588/0x14d0 [ 1172.937912][T22223] vfs_open+0x82/0x3f0 [ 1172.937953][T22223] path_openat+0x208c/0x31a0 [ 1172.937994][T22223] ? __pfx_path_openat+0x10/0x10 [ 1172.938038][T22223] do_file_open+0x20e/0x430 [ 1172.938072][T22223] ? __pfx_do_file_open+0x10/0x10 [ 1172.938125][T22223] ? alloc_fd+0x476/0x790 [ 1172.938159][T22223] ? do_getname+0x191/0x390 [ 1172.938199][T22223] do_sys_openat2+0x10d/0x1e0 [ 1172.938238][T22223] ? __pfx_do_sys_openat2+0x10/0x10 [ 1172.938289][T22223] __x64_sys_openat+0x12d/0x210 [ 1172.938329][T22223] ? __pfx___x64_sys_openat+0x10/0x10 [ 1172.938368][T22223] ? ksys_write+0x1ac/0x250 [ 1172.938401][T22223] ? rcu_is_watching+0x12/0xc0 [ 1172.938434][T22223] do_syscall_64+0x115/0x840 [ 1172.938470][T22223] ? clear_bhb_loop+0x40/0x90 [ 1172.938501][T22223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.938526][T22223] RIP: 0033:0x7f80a619ce59 [ 1172.938546][T22223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.938571][T22223] RSP: 002b:00007f80a43d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1172.938594][T22223] RAX: ffffffffffffffda RBX: 00007f80a6416090 RCX: 00007f80a619ce59 [ 1172.938611][T22223] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1172.938632][T22223] RBP: 00007f80a6232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1172.938647][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.938662][T22223] R13: 00007f80a6416128 R14: 00007f80a6416090 R15: 00007ffe9802c278 [ 1172.938693][T22223] [ 1173.454739][T22223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.500585][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.513415][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1173.988400][T20754] bridge_slave_1: left allmulticast mode [ 1174.022454][T20754] bridge_slave_1: left promiscuous mode [ 1174.069509][T20754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.188322][T20754] bridge_slave_0: left allmulticast mode [ 1174.218410][T20754] bridge_slave_0: left promiscuous mode [ 1174.253397][T20754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.660578][T22237] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1175.200776][T20754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.306293][T20754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.355054][T20754] bond0 (unregistering): Released all slaves [ 1176.217395][T20754] hsr_slave_0: left promiscuous mode [ 1176.227126][T20754] hsr_slave_1: left promiscuous mode [ 1176.242188][T20754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.261001][T20754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.279493][T20754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.295801][T20754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.326737][T20754] veth1_macvtap: left promiscuous mode [ 1176.339183][T20754] veth0_macvtap: left promiscuous mode [ 1176.349745][T20754] veth1_vlan: left promiscuous mode [ 1176.357864][T20754] veth0_vlan: left promiscuous mode [ 1176.759397][T20754] team0 (unregistering): Port device team_slave_1 removed [ 1176.809384][T20754] team0 (unregistering): Port device team_slave_0 removed [ 1177.068091][T20754] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 1177.133680][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1177.938957][T22287] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1179.215061][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1179.422536][T22309] FAULT_INJECTION: forcing a failure. [ 1179.422536][T22309] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.557164][T22309] CPU: 0 UID: 0 PID: 22309 Comm: syz.4.3202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.557213][T22309] Tainted: [L]=SOFTLOCKUP [ 1179.557222][T22309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1179.557237][T22309] Call Trace: [ 1179.557244][T22309] [ 1179.557253][T22309] dump_stack_lvl+0x100/0x190 [ 1179.557302][T22309] should_fail_ex.cold+0x5/0xa [ 1179.557333][T22309] should_failslab+0xc2/0x120 [ 1179.557364][T22309] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1179.557401][T22309] ? crtc_crc_open+0x3ba/0x7e0 [ 1179.557438][T22309] crtc_crc_open+0x3ba/0x7e0 [ 1179.557470][T22309] ? __debugfs_file_get+0x1fc/0x860 [ 1179.557505][T22309] ? __pfx_crtc_crc_open+0x10/0x10 [ 1179.557538][T22309] ? __pfx_apparmor_file_open+0x10/0x10 [ 1179.557564][T22309] ? path_get+0x61/0x80 [ 1179.557604][T22309] ? __pfx_crtc_crc_open+0x10/0x10 [ 1179.557634][T22309] full_proxy_open_regular+0x1b6/0x370 [ 1179.557676][T22309] do_dentry_open+0x6ab/0x14d0 [ 1179.557706][T22309] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1179.557752][T22309] vfs_open+0x82/0x3f0 [ 1179.557792][T22309] path_openat+0x208c/0x31a0 [ 1179.557833][T22309] ? __pfx_path_openat+0x10/0x10 [ 1179.557876][T22309] do_file_open+0x20e/0x430 [ 1179.557911][T22309] ? __pfx_do_file_open+0x10/0x10 [ 1179.557963][T22309] ? alloc_fd+0x476/0x790 [ 1179.557996][T22309] ? do_getname+0x191/0x390 [ 1179.558036][T22309] do_sys_openat2+0x10d/0x1e0 [ 1179.558075][T22309] ? __pfx_do_sys_openat2+0x10/0x10 [ 1179.558116][T22309] ? do_raw_spin_lock+0x128/0x260 [ 1179.558150][T22309] __x64_sys_openat+0x12d/0x210 [ 1179.558196][T22309] ? __pfx___x64_sys_openat+0x10/0x10 [ 1179.558242][T22309] ? rcu_is_watching+0x12/0xc0 [ 1179.558275][T22309] do_syscall_64+0x115/0x840 [ 1179.558310][T22309] ? clear_bhb_loop+0x40/0x90 [ 1179.558341][T22309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.558366][T22309] RIP: 0033:0x7fa41639ce59 [ 1179.558385][T22309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.558409][T22309] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1179.558433][T22309] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1179.558449][T22309] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1179.558465][T22309] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1179.558481][T22309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.558496][T22309] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1179.558527][T22309] [ 1180.688580][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1181.750270][T10381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1181.769899][T10381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1181.778924][T10381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1181.792790][T10381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1181.801857][T10381] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1182.818147][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1183.244673][T22375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1183.281889][T22375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1183.876539][T10381] Bluetooth: hci0: command tx timeout [ 1184.265631][T22391] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1184.564429][T22350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.591992][T22350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.615401][T22350] bridge_slave_0: entered allmulticast mode [ 1184.646543][T22350] bridge_slave_0: entered promiscuous mode [ 1184.670530][T22350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.702162][T22350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.724014][T22350] bridge_slave_1: entered allmulticast mode [ 1184.752253][T22350] bridge_slave_1: entered promiscuous mode [ 1184.865292][T22350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.926318][T22350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.104890][T22350] team0: Port device team_slave_0 added [ 1185.130135][T22401] vivid-007: ================= START STATUS ================= [ 1185.143599][T22350] team0: Port device team_slave_1 added [ 1185.213176][T22401] vivid-007: Generate PTS: true [ 1185.250320][T22401] vivid-007: Generate SCR: true [ 1185.264956][T22350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.286323][T22401] tpg source WxH: 320x240 (Y'CbCr) [ 1185.294888][T22350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.327813][T22401] tpg field: 1 [ 1185.334333][T22401] tpg crop: (0,0)/320x240 [ 1185.346010][T22401] tpg compose: (0,0)/320x240 [ 1185.363022][T22401] tpg colorspace: 8 [ 1185.377209][T22401] tpg transfer function: 0/0 [ 1185.397729][T22350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.432079][T22401] tpg Y'CbCr encoding: 0/0 [ 1185.454681][T22404] input: f as /devices/virtual/input/input38 [ 1185.461277][T22350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.469934][T22401] tpg quantization: 0/0 [ 1185.483827][T22350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.511846][T22401] tpg RGB range: 0/2 [ 1185.543756][T22401] vivid-007: ================== END STATUS ================== [ 1185.595263][T22350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.819764][T22350] hsr_slave_0: entered promiscuous mode [ 1185.842446][T22350] hsr_slave_1: entered promiscuous mode [ 1185.871055][T22350] debugfs: 'hsr0' already exists in 'hsr' [ 1185.888206][T22350] Cannot create hsr debugfs directory [ 1185.945084][T10381] Bluetooth: hci0: command tx timeout [ 1187.353187][T22350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1187.408891][T22350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1187.440847][T22350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1187.492788][T22350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1187.529600][T22350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1187.561613][T22418] Process accounting paused [ 1187.579993][T22350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1187.615280][T22350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1187.663549][T22350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.014448][T10381] Bluetooth: hci0: command tx timeout [ 1188.046029][T22350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.111705][T22350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.325236][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.332449][T10291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.536713][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.543930][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.633785][T22458] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[21715] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[22458] [ 1189.803056][T22458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1189.869650][T22458] veth0_macvtap: left promiscuous mode [ 1189.910336][T22458] macvtap0: entered promiscuous mode [ 1189.939157][T22458] macvtap0: entered allmulticast mode [ 1190.083641][T10381] Bluetooth: hci0: command tx timeout [ 1190.189954][ T6038] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1190.209029][ T6038] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1190.220198][ T6038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1190.230997][ T6038] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1190.246913][ T6038] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1191.255783][T22350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.311710][ T6038] Bluetooth: hci5: command tx timeout [ 1192.465916][T22350] veth0_vlan: entered promiscuous mode [ 1192.558061][T22350] veth1_vlan: entered promiscuous mode [ 1192.741689][T22350] veth0_macvtap: entered promiscuous mode [ 1192.859068][T22350] veth1_macvtap: entered promiscuous mode [ 1193.223078][T22461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.250650][T22461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.275860][T22461] bridge_slave_0: entered allmulticast mode [ 1193.303223][T22461] bridge_slave_0: entered promiscuous mode [ 1193.355558][T22461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.385104][T22461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.420393][T22461] bridge_slave_1: entered allmulticast mode [ 1193.467189][T22461] bridge_slave_1: entered promiscuous mode [ 1193.541449][ T30] audit: type=1804 audit(2147483846.258:45): pid=22522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3228" name="/newroot/35/file0" dev="tmpfs" ino=198 res=1 errno=0 [ 1193.637917][T22350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.737455][T22461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.796478][T22461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.833172][T22350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.986238][T10291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.005219][T10291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.034583][T22461] team0: Port device team_slave_0 added [ 1194.064541][T10291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.097752][T10291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.125995][T22461] team0: Port device team_slave_1 added [ 1194.256807][T22461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.278413][T22461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.329499][T22461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.382305][ T6038] Bluetooth: hci5: command tx timeout [ 1194.523009][T22461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.547692][T22461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.599013][T22461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.917493][T22461] hsr_slave_0: entered promiscuous mode [ 1194.952669][T22461] hsr_slave_1: entered promiscuous mode [ 1194.984010][T22461] debugfs: 'hsr0' already exists in 'hsr' [ 1195.020863][T22461] Cannot create hsr debugfs directory [ 1195.185870][T22547] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3231'. [ 1195.314990][T10291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.359902][T10291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.378502][ T6038] Bluetooth: hci3: unexpected event 0x18 length: 726 > 23 [ 1196.039740][ T6037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.077564][ T6037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.450092][ T6038] Bluetooth: hci5: command tx timeout [ 1196.682662][T22566] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1197.097742][T22461] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1197.185052][T22461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1197.252861][T22461] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1197.305974][T22461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.316745][T22575] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1197.353186][T22461] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1197.422422][T22461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1197.467302][T22461] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1197.538261][T22461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1198.372883][T22461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.519171][ T6038] Bluetooth: hci5: command tx timeout [ 1198.573849][T22461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.651730][T20754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.658959][T20754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.751152][T20754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.758335][T20754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.160445][T22550] kexec: Could not allocate control_code_buffer [ 1199.430333][T22607] futex_wake_op: syz.5.3237 tries to shift op by -2048; fix this program [ 1199.521408][T22607] 0x000000000001-0x000000020000 : "" [ 1199.620103][T22607] ftl_cs: FTL header corrupt! [ 1200.843087][T22641] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[21715] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[22641] [ 1201.083413][T22461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.110145][T22664] FAULT_INJECTION: forcing a failure. [ 1202.110145][T22664] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.215495][T22664] CPU: 0 UID: 0 PID: 22664 Comm: syz.5.3243 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.215535][T22664] Tainted: [L]=SOFTLOCKUP [ 1202.215543][T22664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1202.215559][T22664] Call Trace: [ 1202.215566][T22664] [ 1202.215575][T22664] dump_stack_lvl+0x100/0x190 [ 1202.215625][T22664] should_fail_ex.cold+0x5/0xa [ 1202.215655][T22664] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1202.215699][T22664] should_failslab+0xc2/0x120 [ 1202.215730][T22664] __kmalloc_noprof+0xe0/0x850 [ 1202.215771][T22664] ? kfree+0x1dd/0x6c0 [ 1202.215811][T22664] tomoyo_realpath_from_path+0xb6/0x690 [ 1202.215855][T22664] tomoyo_check_open_permission+0x2af/0x3c0 [ 1202.215889][T22664] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1202.215932][T22664] ? hook_file_open+0x24e/0x7a0 [ 1202.215984][T22664] ? path_get+0x61/0x80 [ 1202.216022][T22664] tomoyo_file_open+0x6b/0x90 [ 1202.216046][T22664] security_file_open+0xb5/0x1e0 [ 1202.216081][T22664] do_dentry_open+0x588/0x14d0 [ 1202.216120][T22664] vfs_open+0x82/0x3f0 [ 1202.216161][T22664] path_openat+0x208c/0x31a0 [ 1202.216215][T22664] ? __pfx_path_openat+0x10/0x10 [ 1202.216258][T22664] do_file_open+0x20e/0x430 [ 1202.216292][T22664] ? __pfx_do_file_open+0x10/0x10 [ 1202.216346][T22664] ? alloc_fd+0x476/0x790 [ 1202.216379][T22664] ? do_getname+0x191/0x390 [ 1202.216419][T22664] do_sys_openat2+0x10d/0x1e0 [ 1202.216459][T22664] ? __pfx_do_sys_openat2+0x10/0x10 [ 1202.216509][T22664] __x64_sys_openat+0x12d/0x210 [ 1202.216550][T22664] ? __pfx___x64_sys_openat+0x10/0x10 [ 1202.216589][T22664] ? ksys_write+0x1ac/0x250 [ 1202.216651][T22664] ? rcu_is_watching+0x12/0xc0 [ 1202.216690][T22664] do_syscall_64+0x115/0x840 [ 1202.216728][T22664] ? clear_bhb_loop+0x40/0x90 [ 1202.216759][T22664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.216784][T22664] RIP: 0033:0x7f106259ce59 [ 1202.216804][T22664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.216829][T22664] RSP: 002b:00007f10634e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1202.216852][T22664] RAX: ffffffffffffffda RBX: 00007f1062816090 RCX: 00007f106259ce59 [ 1202.216869][T22664] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1202.216901][T22664] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1202.216916][T22664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.216930][T22664] R13: 00007f1062816128 R14: 00007f1062816090 R15: 00007ffc6ac43bf8 [ 1202.216962][T22664] [ 1202.481071][T22664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1203.399766][T22461] veth0_vlan: entered promiscuous mode [ 1203.472634][T22461] veth1_vlan: entered promiscuous mode [ 1203.499796][T22679] bond0: option lp_interval: invalid value () [ 1203.530050][T22679] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1203.623965][T22461] veth0_macvtap: entered promiscuous mode [ 1203.699958][T22461] veth1_macvtap: entered promiscuous mode [ 1203.927544][T22461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.049055][T22461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.139478][T19840] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.188911][T19840] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.393284][T19840] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.611978][T19840] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.664558][T22703] futex_wake_op: syz.5.3248 tries to shift op by -2048; fix this program [ 1204.705501][T22698] 0x000000000001-0x000000020000 : "" [ 1204.774696][T22703] blktrace: Concurrent blktraces are not allowed on loop2 [ 1204.844528][T22698] ftl_cs: FTL header corrupt! [ 1205.412472][T19832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.448415][T19832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.532461][T22709] FAULT_INJECTION: forcing a failure. [ 1205.532461][T22709] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.567208][T22709] CPU: 0 UID: 0 PID: 22709 Comm: syz.5.3250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1205.567246][T22709] Tainted: [L]=SOFTLOCKUP [ 1205.567255][T22709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.567270][T22709] Call Trace: [ 1205.567278][T22709] [ 1205.567287][T22709] dump_stack_lvl+0x100/0x190 [ 1205.567336][T22709] should_fail_ex.cold+0x5/0xa [ 1205.567372][T22709] should_failslab+0xc2/0x120 [ 1205.567402][T22709] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1205.567443][T22709] ? ptlock_alloc+0x1f/0x70 [ 1205.567480][T22709] ? do_raw_spin_lock+0x128/0x260 [ 1205.567511][T22709] ptlock_alloc+0x1f/0x70 [ 1205.567548][T22709] pte_alloc_one+0x82/0x3d0 [ 1205.567583][T22709] do_fault+0x86c/0x1750 [ 1205.567614][T22709] ? __pmd_alloc+0x3fb/0x950 [ 1205.567649][T22709] __handle_mm_fault+0x187d/0x2a00 [ 1205.567692][T22709] ? mt_find+0x45e/0x8e0 [ 1205.567733][T22709] ? __pfx___handle_mm_fault+0x10/0x10 [ 1205.567769][T22709] ? __pfx_mt_find+0x10/0x10 [ 1205.567828][T22709] ? find_vma+0xbf/0x140 [ 1205.567855][T22709] ? __pfx_find_vma+0x10/0x10 [ 1205.567886][T22709] handle_mm_fault+0x37b/0xa30 [ 1205.567937][T22709] do_user_addr_fault+0x74c/0x12f0 [ 1205.567970][T22709] ? trace_page_fault_kernel+0x7a/0x200 [ 1205.568002][T22709] exc_page_fault+0x6f/0xd0 [ 1205.568038][T22709] asm_exc_page_fault+0x26/0x30 [ 1205.568063][T22709] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1205.568091][T22709] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1205.568115][T22709] RSP: 0018:ffffc90003e8fa98 EFLAGS: 00050212 [ 1205.568135][T22709] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024 [ 1205.568150][T22709] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003e8fb28 [ 1205.568165][T22709] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff520007d1f69 [ 1205.568181][T22709] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1205.568195][T22709] R13: ffffc90003e8fb28 R14: 0000000000000000 R15: 000000000000b6bd [ 1205.568226][T22709] _copy_from_user+0x98/0xd0 [ 1205.568262][T22709] sg_write+0x2af/0xdb0 [ 1205.568303][T22709] ? __pfx_sg_write+0x10/0x10 [ 1205.568366][T22709] ? apparmor_file_permission+0x13f/0x1c0 [ 1205.568399][T22709] ? bpf_lsm_file_permission+0x9/0x10 [ 1205.568421][T22709] ? security_file_permission+0x76/0x210 [ 1205.568456][T22709] ? rw_verify_area+0xce/0x6d0 [ 1205.568484][T22709] vfs_write+0x2aa/0x1070 [ 1205.568512][T22709] ? __pfx_sg_write+0x10/0x10 [ 1205.568550][T22709] ? __pfx_vfs_write+0x10/0x10 [ 1205.568577][T22709] ? find_held_lock+0x2b/0x80 [ 1205.568607][T22709] ? __fget_files+0x215/0x3d0 [ 1205.568635][T22709] ? __fget_files+0x215/0x3d0 [ 1205.568669][T22709] ? __fget_files+0x21f/0x3d0 [ 1205.568706][T22709] ksys_write+0x12a/0x250 [ 1205.568734][T22709] ? __pfx_ksys_write+0x10/0x10 [ 1205.568766][T22709] ? rcu_is_watching+0x12/0xc0 [ 1205.568798][T22709] do_syscall_64+0x115/0x840 [ 1205.568833][T22709] ? clear_bhb_loop+0x40/0x90 [ 1205.568863][T22709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.568888][T22709] RIP: 0033:0x7f106259ce59 [ 1205.568913][T22709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.568938][T22709] RSP: 002b:00007f106350a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1205.568960][T22709] RAX: ffffffffffffffda RBX: 00007f1062815fa0 RCX: 00007f106259ce59 [ 1205.568977][T22709] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 1205.568993][T22709] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1205.569008][T22709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.569023][T22709] R13: 00007f1062816038 R14: 00007f1062815fa0 R15: 00007ffc6ac43bf8 [ 1205.569055][T22709] [ 1206.315439][T19834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.323441][T19834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.806095][T22726] Invalid ELF header magic: != ELF [ 1206.913611][T22726] FAULT_INJECTION: forcing a failure. [ 1206.913611][T22726] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.943203][T22729] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1207.004268][T22726] CPU: 0 UID: 0 PID: 22726 Comm: syz.5.3252 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.004307][T22726] Tainted: [L]=SOFTLOCKUP [ 1207.004315][T22726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1207.004339][T22726] Call Trace: [ 1207.004347][T22726] [ 1207.004356][T22726] dump_stack_lvl+0x100/0x190 [ 1207.004404][T22726] should_fail_ex.cold+0x5/0xa [ 1207.004436][T22726] should_failslab+0xc2/0x120 [ 1207.004467][T22726] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1207.004503][T22726] ? trace_pid_list_alloc+0x2fe/0x480 [ 1207.004571][T22726] trace_pid_list_alloc+0x2fe/0x480 [ 1207.004609][T22726] trace_pid_write+0x110/0x460 [ 1207.004645][T22726] ? __pfx_trace_pid_write+0x10/0x10 [ 1207.004699][T22726] event_pid_write.isra.0+0x1e4/0x7d0 [ 1207.004737][T22726] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1207.004786][T22726] vfs_write+0x2aa/0x1070 [ 1207.004816][T22726] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1207.004857][T22726] ? __pfx_vfs_write+0x10/0x10 [ 1207.004885][T22726] ? __fget_files+0x215/0x3d0 [ 1207.004920][T22726] ? __fget_files+0x21f/0x3d0 [ 1207.004958][T22726] ksys_write+0x12a/0x250 [ 1207.004986][T22726] ? __pfx_ksys_write+0x10/0x10 [ 1207.005018][T22726] ? rcu_is_watching+0x12/0xc0 [ 1207.005050][T22726] do_syscall_64+0x115/0x840 [ 1207.005087][T22726] ? clear_bhb_loop+0x40/0x90 [ 1207.005117][T22726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.005143][T22726] RIP: 0033:0x7f106259ce59 [ 1207.005163][T22726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.005189][T22726] RSP: 002b:00007f106350a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1207.005213][T22726] RAX: ffffffffffffffda RBX: 00007f1062815fa0 RCX: 00007f106259ce59 [ 1207.005230][T22726] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1207.005246][T22726] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1207.005261][T22726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.005276][T22726] R13: 00007f1062816038 R14: 00007f1062815fa0 R15: 00007ffc6ac43bf8 [ 1207.005308][T22726] [ 1207.829811][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3253'. [ 1207.887787][T22736] netlink: 330 bytes leftover after parsing attributes in process `syz.7.3253'. [ 1208.480430][T22746] random: crng reseeded on system resumption [ 1210.140726][T22768] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1210.861559][T22777] futex_wake_op: syz.7.3258 tries to shift op by -2048; fix this program [ 1210.957761][T22772] 0x000000000001-0x000000020000 : "" [ 1211.017179][T22772] ftl_cs: FTL header corrupt! [ 1211.067788][T22777] blktrace: Concurrent blktraces are not allowed on loop2 [ 1213.138956][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3266'. [ 1213.220205][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3266'. [ 1217.758036][T22855] Process accounting resumed [ 1218.520177][ T30] audit: type=1800 audit(2147483872.363:46): pid=22896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3278" name="lu_gp_id" dev="configfs" ino=100099 res=0 errno=0 [ 1219.250022][T22904] Invalid ELF header magic: != ELF [ 1219.556218][T22907] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1219.594151][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1219.731652][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1220.622331][T22929] FAULT_INJECTION: forcing a failure. [ 1220.622331][T22929] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.680821][T22929] CPU: 0 UID: 0 PID: 22929 Comm: syz.6.3285 Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.680861][T22929] Tainted: [L]=SOFTLOCKUP [ 1220.680869][T22929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1220.680885][T22929] Call Trace: [ 1220.680892][T22929] [ 1220.680902][T22929] dump_stack_lvl+0x100/0x190 [ 1220.680950][T22929] should_fail_ex.cold+0x5/0xa [ 1220.680982][T22929] should_failslab+0xc2/0x120 [ 1220.681012][T22929] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1220.681049][T22929] ? crtc_crc_open+0x3ba/0x7e0 [ 1220.681087][T22929] crtc_crc_open+0x3ba/0x7e0 [ 1220.681118][T22929] ? __debugfs_file_get+0x1fc/0x860 [ 1220.681154][T22929] ? __pfx_crtc_crc_open+0x10/0x10 [ 1220.681186][T22929] ? __pfx_apparmor_file_open+0x10/0x10 [ 1220.681214][T22929] ? path_get+0x61/0x80 [ 1220.681251][T22929] ? __pfx_crtc_crc_open+0x10/0x10 [ 1220.681281][T22929] full_proxy_open_regular+0x1b6/0x370 [ 1220.681323][T22929] do_dentry_open+0x6ab/0x14d0 [ 1220.681353][T22929] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1220.681408][T22929] vfs_open+0x82/0x3f0 [ 1220.681450][T22929] path_openat+0x208c/0x31a0 [ 1220.681491][T22929] ? __pfx_path_openat+0x10/0x10 [ 1220.681534][T22929] do_file_open+0x20e/0x430 [ 1220.681569][T22929] ? __pfx_do_file_open+0x10/0x10 [ 1220.681621][T22929] ? alloc_fd+0x476/0x790 [ 1220.681654][T22929] ? do_getname+0x191/0x390 [ 1220.681697][T22929] do_sys_openat2+0x10d/0x1e0 [ 1220.681736][T22929] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.681777][T22929] ? do_raw_spin_lock+0x128/0x260 [ 1220.681811][T22929] __x64_sys_openat+0x12d/0x210 [ 1220.681852][T22929] ? __pfx___x64_sys_openat+0x10/0x10 [ 1220.681897][T22929] ? rcu_is_watching+0x12/0xc0 [ 1220.681929][T22929] do_syscall_64+0x115/0x840 [ 1220.681965][T22929] ? clear_bhb_loop+0x40/0x90 [ 1220.681995][T22929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.682021][T22929] RIP: 0033:0x7f91de59ce59 [ 1220.682042][T22929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.682066][T22929] RSP: 002b:00007f91df3b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1220.682089][T22929] RAX: ffffffffffffffda RBX: 00007f91de816090 RCX: 00007f91de59ce59 [ 1220.682106][T22929] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1220.682122][T22929] RBP: 00007f91de632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1220.682137][T22929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.682153][T22929] R13: 00007f91de816128 R14: 00007f91de816090 R15: 00007fff54e185d8 [ 1220.682185][T22929] [ 1222.097086][T22918] FAULT_INJECTION: forcing a failure. [ 1222.097086][T22918] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.255057][T22918] CPU: 0 UID: 0 PID: 22918 Comm: syz.5.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.255102][T22918] Tainted: [L]=SOFTLOCKUP [ 1222.255110][T22918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1222.255126][T22918] Call Trace: [ 1222.255133][T22918] [ 1222.255142][T22918] dump_stack_lvl+0x100/0x190 [ 1222.255232][T22918] should_fail_ex.cold+0x5/0xa [ 1222.255264][T22918] should_failslab+0xc2/0x120 [ 1222.255294][T22918] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1222.255334][T22918] ? locks_get_lock_context+0x94/0x620 [ 1222.255368][T22918] locks_get_lock_context+0x94/0x620 [ 1222.255399][T22918] posix_lock_inode+0xcc/0x2420 [ 1222.255444][T22918] ? __pfx_posix_lock_inode+0x10/0x10 [ 1222.255486][T22918] vfs_lock_file+0xfb/0x150 [ 1222.255520][T22918] fcntl_setlk+0x768/0xe20 [ 1222.255558][T22918] ? __pfx_fcntl_setlk+0x10/0x10 [ 1222.255598][T22918] ? __might_fault+0xc5/0x140 [ 1222.255636][T22918] ? __might_fault+0xc5/0x140 [ 1222.255686][T22918] do_fcntl+0xf39/0x1670 [ 1222.255725][T22918] ? __pfx_do_fcntl+0x10/0x10 [ 1222.255762][T22918] ? __fget_files+0x215/0x3d0 [ 1222.255800][T22918] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1222.255828][T22918] __x64_sys_fcntl+0x163/0x200 [ 1222.255870][T22918] do_syscall_64+0x115/0x840 [ 1222.255907][T22918] ? clear_bhb_loop+0x40/0x90 [ 1222.255937][T22918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.255964][T22918] RIP: 0033:0x7f106259ce59 [ 1222.255984][T22918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.256008][T22918] RSP: 002b:00007f10634e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1222.256032][T22918] RAX: ffffffffffffffda RBX: 00007f1062816090 RCX: 00007f106259ce59 [ 1222.256049][T22918] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000008 [ 1222.256063][T22918] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1222.256078][T22918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.256093][T22918] R13: 00007f1062816128 R14: 00007f1062816090 R15: 00007ffc6ac43bf8 [ 1222.256124][T22918] [ 1227.257343][T23012] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3302'. [ 1227.371594][T23014] device-mapper: ioctl: Invalid ioctl structure: name d, dev 3000000000 [ 1228.495221][T22983] kexec: Could not allocate control_code_buffer [ 1228.768567][T23028] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1229.350729][T23042] FAULT_INJECTION: forcing a failure. [ 1229.350729][T23042] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.490571][T23042] CPU: 0 UID: 0 PID: 23042 Comm: syz.5.3307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1229.490611][T23042] Tainted: [L]=SOFTLOCKUP [ 1229.490620][T23042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1229.490635][T23042] Call Trace: [ 1229.490643][T23042] [ 1229.490652][T23042] dump_stack_lvl+0x100/0x190 [ 1229.490700][T23042] should_fail_ex.cold+0x5/0xa [ 1229.490732][T23042] should_failslab+0xc2/0x120 [ 1229.490770][T23042] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1229.490808][T23042] ? percpu_ref_init+0xec/0x3f0 [ 1229.490839][T23042] ? __pfx_css_release+0x10/0x10 [ 1229.490868][T23042] percpu_ref_init+0xec/0x3f0 [ 1229.490894][T23042] ? init_and_link_css+0x3cd/0xb70 [ 1229.490937][T23042] cgroup_apply_control_enable+0x65d/0xdd0 [ 1229.490974][T23042] ? css_populate_dir+0x233/0x590 [ 1229.491018][T23042] cgroup_mkdir+0x59c/0x1310 [ 1229.491058][T23042] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1229.491094][T23042] kernfs_iop_mkdir+0x111/0x190 [ 1229.491125][T23042] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1229.491164][T23042] vfs_mkdir+0x361/0x850 [ 1229.491209][T23042] filename_mkdirat+0x48b/0x5e0 [ 1229.491248][T23042] ? __pfx_filename_mkdirat+0x10/0x10 [ 1229.491283][T23042] ? strncpy_from_user+0x19d/0x2d0 [ 1229.491323][T23042] ? do_getname+0x191/0x390 [ 1229.491364][T23042] __x64_sys_mkdir+0x6b/0x90 [ 1229.491400][T23042] do_syscall_64+0x115/0x840 [ 1229.491437][T23042] ? clear_bhb_loop+0x40/0x90 [ 1229.491467][T23042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.491493][T23042] RIP: 0033:0x7f106259ce59 [ 1229.491513][T23042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.491537][T23042] RSP: 002b:00007f106350a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1229.491562][T23042] RAX: ffffffffffffffda RBX: 00007f1062815fa0 RCX: 00007f106259ce59 [ 1229.491578][T23042] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1229.491594][T23042] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1229.491609][T23042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.491624][T23042] R13: 00007f1062816038 R14: 00007f1062815fa0 R15: 00007ffc6ac43bf8 [ 1229.491655][T23042] [ 1234.499605][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.506375][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.095078][T23181] futex_wake_op: syz.6.3334 tries to shift op by -2048; fix this program [ 1238.225319][T23184] futex_wake_op: syz.4.3336 tries to shift op by -2048; fix this program [ 1238.260792][T23184] futex_wake_op: syz.4.3336 tries to shift op by -2048; fix this program [ 1238.287225][T23178] 0x000000000001-0x000000020000 : "" [ 1238.330942][T23178] ftl_cs: FTL header corrupt! [ 1238.364016][T23181] blktrace: Concurrent blktraces are not allowed on loop2 [ 1239.534328][T23208] futex_wake_op: syz.7.3341 tries to shift op by -2048; fix this program [ 1239.632184][T23205] 0x000000000001-0x000000020000 : "" [ 1239.681236][T23205] ftl_cs: FTL header corrupt! [ 1241.740322][T23235] futex_wake_op: syz.6.3345 tries to shift op by -2048; fix this program [ 1241.796617][T23235] 0x000000000001-0x000000020000 : "" [ 1241.891481][T23235] ftl_cs: FTL header corrupt! [ 1246.239222][T23298] futex_wake_op: syz.7.3358 tries to shift op by -2048; fix this program [ 1246.306629][T23298] 0x000000000001-0x000000020000 : "" [ 1246.422514][T23298] ftl_cs: FTL header corrupt! [ 1246.475013][T23307] futex_wake_op: syz.4.3359 tries to shift op by -2048; fix this program [ 1246.754430][ T6038] Bluetooth: hci4: command 0x0406 tx timeout [ 1249.163203][T23334] Process accounting paused [ 1249.847219][T23350] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1250.771138][T23366] FAULT_INJECTION: forcing a failure. [ 1250.771138][T23366] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.859539][T23366] CPU: 0 UID: 0 PID: 23366 Comm: syz.4.3368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1250.859582][T23366] Tainted: [L]=SOFTLOCKUP [ 1250.859591][T23366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1250.859606][T23366] Call Trace: [ 1250.859614][T23366] [ 1250.859623][T23366] dump_stack_lvl+0x100/0x190 [ 1250.859673][T23366] should_fail_ex.cold+0x5/0xa [ 1250.859704][T23366] should_failslab+0xc2/0x120 [ 1250.859735][T23366] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1250.859776][T23366] ? __d_alloc+0x34/0xa40 [ 1250.859816][T23366] __d_alloc+0x34/0xa40 [ 1250.859854][T23366] d_alloc+0x4a/0x1e0 [ 1250.859889][T23366] lookup_one_qstr_excl+0x171/0x250 [ 1250.859932][T23366] start_dirop+0x59/0xb0 [ 1250.859961][T23366] simple_start_creating+0xf9/0x110 [ 1250.859992][T23366] ? __pfx_simple_start_creating+0x10/0x10 [ 1250.860023][T23366] ? mntput+0x70/0xa0 [ 1250.860049][T23366] ? simple_pin_fs+0xa3/0x190 [ 1250.860076][T23366] debugfs_start_creating.part.0+0x82/0x170 [ 1250.860130][T23366] __debugfs_create_file+0xb3/0x4f0 [ 1250.860160][T23366] debugfs_create_file_full+0x41/0x60 [ 1250.860206][T23366] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1250.860232][T23366] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1250.860256][T23366] ? ida_alloc_range+0x70d/0x830 [ 1250.860369][T23366] ? lockdep_init_map_type+0x5c/0x250 [ 1250.860417][T23366] preinit_net.part.0+0x252/0x920 [ 1250.860449][T23366] copy_net_ns+0x339/0x7c0 [ 1250.860482][T23366] create_new_namespaces+0x3ea/0xac0 [ 1250.860520][T23366] unshare_nsproxy_namespaces+0xf2/0x220 [ 1250.860554][T23366] ksys_unshare+0x438/0xab0 [ 1250.860592][T23366] ? __pfx_ksys_unshare+0x10/0x10 [ 1250.860627][T23366] ? xfd_validate_state+0x129/0x190 [ 1250.860650][T23366] ? ksys_write+0x1ac/0x250 [ 1250.860687][T23366] __x64_sys_unshare+0x31/0x40 [ 1250.860723][T23366] do_syscall_64+0x115/0x840 [ 1250.860758][T23366] ? clear_bhb_loop+0x40/0x90 [ 1250.860789][T23366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.860815][T23366] RIP: 0033:0x7fa41639ce59 [ 1250.860835][T23366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.860860][T23366] RSP: 002b:00007fa417185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1250.860884][T23366] RAX: ffffffffffffffda RBX: 00007fa416615fa0 RCX: 00007fa41639ce59 [ 1250.860901][T23366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1250.860916][T23366] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1250.860932][T23366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.860946][T23366] R13: 00007fa416616038 R14: 00007fa416615fa0 R15: 00007ffde35b56a8 [ 1250.860977][T23366] [ 1253.627830][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 1253.693840][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 1255.680845][T23424] QAT: Device 0 not found [ 1256.078958][T23429] FAULT_INJECTION: forcing a failure. [ 1256.078958][T23429] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.272426][T23429] CPU: 0 UID: 0 PID: 23429 Comm: syz.6.3380 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.272467][T23429] Tainted: [L]=SOFTLOCKUP [ 1256.272476][T23429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1256.272491][T23429] Call Trace: [ 1256.272499][T23429] [ 1256.272508][T23429] dump_stack_lvl+0x100/0x190 [ 1256.272557][T23429] should_fail_ex.cold+0x5/0xa [ 1256.272589][T23429] should_failslab+0xc2/0x120 [ 1256.272619][T23429] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1256.272661][T23429] ? __d_alloc+0x34/0xa40 [ 1256.272701][T23429] __d_alloc+0x34/0xa40 [ 1256.272738][T23429] d_alloc+0x4a/0x1e0 [ 1256.272773][T23429] lookup_one_qstr_excl+0x171/0x250 [ 1256.272815][T23429] start_dirop+0x59/0xb0 [ 1256.272856][T23429] simple_start_creating+0xf9/0x110 [ 1256.272886][T23429] ? __pfx_simple_start_creating+0x10/0x10 [ 1256.272916][T23429] ? mntput+0x70/0xa0 [ 1256.272941][T23429] ? simple_pin_fs+0xa3/0x190 [ 1256.272974][T23429] debugfs_start_creating.part.0+0x82/0x170 [ 1256.273001][T23429] __debugfs_create_file+0xb3/0x4f0 [ 1256.273031][T23429] debugfs_create_file_full+0x41/0x60 [ 1256.273059][T23429] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1256.273084][T23429] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1256.273107][T23429] ? ida_alloc_range+0x70d/0x830 [ 1256.273167][T23429] ? lockdep_init_map_type+0x5c/0x250 [ 1256.273212][T23429] preinit_net.part.0+0x252/0x920 [ 1256.273241][T23429] copy_net_ns+0x339/0x7c0 [ 1256.273272][T23429] create_new_namespaces+0x3ea/0xac0 [ 1256.273309][T23429] unshare_nsproxy_namespaces+0xf2/0x220 [ 1256.273343][T23429] ksys_unshare+0x438/0xab0 [ 1256.273380][T23429] ? __pfx_ksys_unshare+0x10/0x10 [ 1256.273414][T23429] ? xfd_validate_state+0x129/0x190 [ 1256.273437][T23429] ? ksys_write+0x1ac/0x250 [ 1256.273473][T23429] __x64_sys_unshare+0x31/0x40 [ 1256.273508][T23429] do_syscall_64+0x115/0x840 [ 1256.273542][T23429] ? clear_bhb_loop+0x40/0x90 [ 1256.273571][T23429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.273596][T23429] RIP: 0033:0x7f91de59ce59 [ 1256.273615][T23429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.273658][T23429] RSP: 002b:00007f91df3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1256.273681][T23429] RAX: ffffffffffffffda RBX: 00007f91de815fa0 RCX: 00007f91de59ce59 [ 1256.273698][T23429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1256.273713][T23429] RBP: 00007f91de632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1256.273728][T23429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.273743][T23429] R13: 00007f91de816038 R14: 00007f91de815fa0 R15: 00007fff54e185d8 [ 1256.273778][T23429] [ 1258.112459][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1258.190987][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1259.306034][T23469] FAULT_INJECTION: forcing a failure. [ 1259.306034][T23469] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.430653][T23469] CPU: 0 UID: 0 PID: 23469 Comm: syz.4.3386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.430695][T23469] Tainted: [L]=SOFTLOCKUP [ 1259.430704][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1259.430718][T23469] Call Trace: [ 1259.430726][T23469] [ 1259.430734][T23469] dump_stack_lvl+0x100/0x190 [ 1259.430780][T23469] should_fail_ex.cold+0x5/0xa [ 1259.430810][T23469] should_failslab+0xc2/0x120 [ 1259.430839][T23469] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1259.430880][T23469] ? __alloc_skb+0x140/0x710 [ 1259.430907][T23469] __alloc_skb+0x140/0x710 [ 1259.430927][T23469] ? __alloc_skb+0x5b7/0x710 [ 1259.430947][T23469] ? __pfx___alloc_skb+0x10/0x10 [ 1259.430977][T23469] netlink_dump+0x194/0xd00 [ 1259.431087][T23469] ? rcu_is_watching+0x12/0xc0 [ 1259.431117][T23469] ? __pfx_netlink_dump+0x10/0x10 [ 1259.431144][T23469] ? kasan_quarantine_put+0x104/0x240 [ 1259.431180][T23469] ? kfree_skbmem+0x19f/0x210 [ 1259.431215][T23469] netlink_recvmsg+0x7dc/0xa90 [ 1259.431246][T23469] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1259.431275][T23469] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1259.431313][T23469] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1259.431339][T23469] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1259.431370][T23469] sock_recvmsg+0x1a4/0x1f0 [ 1259.431402][T23469] ____sys_recvmsg+0x218/0x640 [ 1259.431437][T23469] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1259.431479][T23469] ? __lock_acquire+0x4a5/0x2630 [ 1259.431521][T23469] ___sys_recvmsg+0x16a/0x1a0 [ 1259.431554][T23469] ? __pfx____sys_recvmsg+0x10/0x10 [ 1259.431590][T23469] ? find_held_lock+0x2b/0x80 [ 1259.431637][T23469] do_recvmmsg+0x301/0x760 [ 1259.431674][T23469] ? __pfx_do_recvmmsg+0x10/0x10 [ 1259.431710][T23469] ? ksys_write+0x190/0x250 [ 1259.431742][T23469] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1259.431778][T23469] ? __pfx_vfs_write+0x3/0x10 [ 1259.431812][T23469] ? __fget_files+0x21f/0x3d0 [ 1259.431848][T23469] __x64_sys_recvmmsg+0x22a/0x280 [ 1259.431876][T23469] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1259.431905][T23469] ? rcu_is_watching+0x12/0xc0 [ 1259.431935][T23469] do_syscall_64+0x115/0x840 [ 1259.431967][T23469] ? clear_bhb_loop+0x40/0x90 [ 1259.431996][T23469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.432020][T23469] RIP: 0033:0x7fa41639ce59 [ 1259.432039][T23469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.432061][T23469] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1259.432084][T23469] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1259.432099][T23469] RDX: 00000000fffffff9 RSI: 0000200000000040 RDI: 0000000000000005 [ 1259.432114][T23469] RBP: 00007fa4145f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.432127][T23469] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1259.432141][T23469] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1259.432171][T23469] [ 1261.369948][T23484] FAULT_INJECTION: forcing a failure. [ 1261.369948][T23484] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.483183][T23484] CPU: 0 UID: 0 PID: 23484 Comm: syz.5.3391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.483223][T23484] Tainted: [L]=SOFTLOCKUP [ 1261.483231][T23484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1261.483246][T23484] Call Trace: [ 1261.483253][T23484] [ 1261.483263][T23484] dump_stack_lvl+0x100/0x190 [ 1261.483312][T23484] should_fail_ex.cold+0x5/0xa [ 1261.483344][T23484] should_failslab+0xc2/0x120 [ 1261.483375][T23484] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1261.483416][T23484] ? mempool_init_node+0x2f7/0x6e0 [ 1261.483445][T23484] ? lockdep_set_lock_cmp_fn+0xc1/0xe0 [ 1261.483489][T23484] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1261.483523][T23484] mempool_init_node+0x2f7/0x6e0 [ 1261.483558][T23484] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1261.483594][T23484] ? __pfx_mempool_free_slab+0x10/0x10 [ 1261.483623][T23484] mempool_init_noprof+0x3a/0x50 [ 1261.483655][T23484] bioset_init+0x37e/0x8a0 [ 1261.483761][T23484] ? __pfx_bioset_init+0x10/0x10 [ 1261.483804][T23484] __alloc_disk_node+0x83/0x6b0 [ 1261.483839][T23484] __blk_alloc_disk+0xd2/0x170 [ 1261.483869][T23484] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1261.483916][T23484] ? __pfx_idr_alloc+0x10/0x10 [ 1261.483951][T23484] ? lockdep_init_map_type+0x5c/0x250 [ 1261.483994][T23484] ? __raw_spin_lock_init+0x3a/0x110 [ 1261.484025][T23484] ? __pfx_hot_add_show+0x10/0x10 [ 1261.484086][T23484] zram_add+0x1bf/0x5d0 [ 1261.484119][T23484] ? __pfx_zram_add+0x10/0x10 [ 1261.484191][T23484] ? find_held_lock+0x2b/0x80 [ 1261.484222][T23484] ? sysfs_file_kobj+0xe4/0x290 [ 1261.484267][T23484] ? __pfx_hot_add_show+0x10/0x10 [ 1261.484300][T23484] hot_add_show+0x21/0x80 [ 1261.484333][T23484] class_attr_show+0x72/0xa0 [ 1261.484385][T23484] ? __pfx_class_attr_show+0x10/0x10 [ 1261.484410][T23484] sysfs_kf_seq_show+0x217/0x3a0 [ 1261.484440][T23484] seq_read_iter+0x32f/0x1270 [ 1261.484466][T23484] ? lock_acquire+0x1b1/0x370 [ 1261.484518][T23484] kernfs_fop_read_iter+0x46c/0x610 [ 1261.484556][T23484] ? rw_verify_area+0xce/0x6d0 [ 1261.484587][T23484] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1261.484628][T23484] vfs_read+0x825/0xb30 [ 1261.484660][T23484] ? __pfx_vfs_read+0x10/0x10 [ 1261.484712][T23484] ksys_read+0x12a/0x250 [ 1261.484740][T23484] ? __pfx_ksys_read+0x10/0x10 [ 1261.484771][T23484] ? rcu_is_watching+0x12/0xc0 [ 1261.484804][T23484] do_syscall_64+0x115/0x840 [ 1261.484840][T23484] ? clear_bhb_loop+0x40/0x90 [ 1261.484871][T23484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.484896][T23484] RIP: 0033:0x7f106259ce59 [ 1261.484916][T23484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.484941][T23484] RSP: 002b:00007f106350a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1261.484966][T23484] RAX: ffffffffffffffda RBX: 00007f1062815fa0 RCX: 00007f106259ce59 [ 1261.484982][T23484] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 1261.484998][T23484] RBP: 00007f1062632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1261.485013][T23484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.485028][T23484] R13: 00007f1062816038 R14: 00007f1062815fa0 R15: 00007ffc6ac43bf8 [ 1261.485061][T23484] [ 1262.089173][T23492] futex_wake_op: syz.7.3392 tries to shift op by -2048; fix this program [ 1262.098659][T23492] 0x000000000001-0x000000020000 : "" [ 1262.239014][T23492] ftl_cs: FTL header corrupt! [ 1262.911468][T23484] zram: Error allocating disk structure for device 1 [ 1263.218806][T23508] FAULT_INJECTION: forcing a failure. [ 1263.218806][T23508] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.292918][T23508] CPU: 0 UID: 0 PID: 23508 Comm: syz.4.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.292957][T23508] Tainted: [L]=SOFTLOCKUP [ 1263.292965][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.292980][T23508] Call Trace: [ 1263.292988][T23508] [ 1263.292997][T23508] dump_stack_lvl+0x100/0x190 [ 1263.293047][T23508] should_fail_ex.cold+0x5/0xa [ 1263.293078][T23508] should_failslab+0xc2/0x120 [ 1263.293108][T23508] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1263.293149][T23508] ? __d_alloc+0x34/0xa40 [ 1263.293187][T23508] __d_alloc+0x34/0xa40 [ 1263.293223][T23508] d_alloc+0x4a/0x1e0 [ 1263.293257][T23508] lookup_one_qstr_excl+0x171/0x250 [ 1263.293298][T23508] start_dirop+0x59/0xb0 [ 1263.293327][T23508] simple_start_creating+0xf9/0x110 [ 1263.293356][T23508] ? __pfx_simple_start_creating+0x10/0x10 [ 1263.293393][T23508] ? mntput+0x70/0xa0 [ 1263.293419][T23508] ? simple_pin_fs+0xa3/0x190 [ 1263.293446][T23508] debugfs_start_creating.part.0+0x82/0x170 [ 1263.293473][T23508] __debugfs_create_file+0xb3/0x4f0 [ 1263.293501][T23508] debugfs_create_file_full+0x41/0x60 [ 1263.293548][T23508] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1263.293574][T23508] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1263.293597][T23508] ? ida_alloc_range+0x70d/0x830 [ 1263.293660][T23508] ? lockdep_init_map_type+0x5c/0x250 [ 1263.293706][T23508] preinit_net.part.0+0x252/0x920 [ 1263.293736][T23508] copy_net_ns+0x339/0x7c0 [ 1263.293769][T23508] create_new_namespaces+0x3ea/0xac0 [ 1263.293808][T23508] unshare_nsproxy_namespaces+0xf2/0x220 [ 1263.293842][T23508] ksys_unshare+0x438/0xab0 [ 1263.293880][T23508] ? __pfx_ksys_unshare+0x10/0x10 [ 1263.293940][T23508] ? xfd_validate_state+0x129/0x190 [ 1263.293964][T23508] ? ksys_write+0x1ac/0x250 [ 1263.294001][T23508] __x64_sys_unshare+0x31/0x40 [ 1263.294038][T23508] do_syscall_64+0x115/0x840 [ 1263.294073][T23508] ? clear_bhb_loop+0x40/0x90 [ 1263.294104][T23508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.294130][T23508] RIP: 0033:0x7fa41639ce59 [ 1263.294150][T23508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.294175][T23508] RSP: 002b:00007fa417185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1263.294200][T23508] RAX: ffffffffffffffda RBX: 00007fa416615fa0 RCX: 00007fa41639ce59 [ 1263.294216][T23508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1263.294231][T23508] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1263.294246][T23508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.294261][T23508] R13: 00007fa416616038 R14: 00007fa416615fa0 R15: 00007ffde35b56a8 [ 1263.294292][T23508] [ 1263.811138][T23509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3396'. [ 1264.036929][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3397'. [ 1266.200159][T23568] usbip-vudc usbip-vudc.0: gadget not bound [ 1266.553218][T23573] FAULT_INJECTION: forcing a failure. [ 1266.553218][T23573] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.787270][T23573] CPU: 0 UID: 0 PID: 23573 Comm: syz.6.3408 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.787310][T23573] Tainted: [L]=SOFTLOCKUP [ 1266.787318][T23573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1266.787333][T23573] Call Trace: [ 1266.787340][T23573] [ 1266.787350][T23573] dump_stack_lvl+0x100/0x190 [ 1266.787398][T23573] should_fail_ex.cold+0x5/0xa [ 1266.787428][T23573] should_failslab+0xc2/0x120 [ 1266.787459][T23573] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1266.787495][T23573] ? crtc_crc_open+0x3ba/0x7e0 [ 1266.787533][T23573] crtc_crc_open+0x3ba/0x7e0 [ 1266.787564][T23573] ? __debugfs_file_get+0x1fc/0x860 [ 1266.787600][T23573] ? __pfx_crtc_crc_open+0x10/0x10 [ 1266.787632][T23573] ? __pfx_apparmor_file_open+0x10/0x10 [ 1266.787659][T23573] ? path_get+0x61/0x80 [ 1266.787697][T23573] ? __pfx_crtc_crc_open+0x10/0x10 [ 1266.787727][T23573] full_proxy_open_regular+0x1b6/0x370 [ 1266.787768][T23573] do_dentry_open+0x6ab/0x14d0 [ 1266.787798][T23573] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1266.787843][T23573] vfs_open+0x82/0x3f0 [ 1266.787884][T23573] path_openat+0x208c/0x31a0 [ 1266.787925][T23573] ? __pfx_path_openat+0x10/0x10 [ 1266.787967][T23573] do_file_open+0x20e/0x430 [ 1266.788001][T23573] ? __pfx_do_file_open+0x10/0x10 [ 1266.788053][T23573] ? alloc_fd+0x476/0x790 [ 1266.788086][T23573] ? do_getname+0x191/0x390 [ 1266.788133][T23573] do_sys_openat2+0x10d/0x1e0 [ 1266.788173][T23573] ? __pfx_do_sys_openat2+0x10/0x10 [ 1266.788214][T23573] ? do_raw_spin_lock+0x128/0x260 [ 1266.788249][T23573] __x64_sys_openat+0x12d/0x210 [ 1266.788292][T23573] ? __pfx___x64_sys_openat+0x10/0x10 [ 1266.788338][T23573] ? rcu_is_watching+0x12/0xc0 [ 1266.788370][T23573] do_syscall_64+0x115/0x840 [ 1266.788406][T23573] ? clear_bhb_loop+0x40/0x90 [ 1266.788437][T23573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.788463][T23573] RIP: 0033:0x7f91de59ce59 [ 1266.788483][T23573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.788508][T23573] RSP: 002b:00007f91df3b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1266.788531][T23573] RAX: ffffffffffffffda RBX: 00007f91de816090 RCX: 00007f91de59ce59 [ 1266.788548][T23573] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1266.788565][T23573] RBP: 00007f91de632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1266.788580][T23573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.788595][T23573] R13: 00007f91de816128 R14: 00007f91de816090 R15: 00007fff54e185d8 [ 1266.788627][T23573] [ 1267.139687][T23583] FAULT_INJECTION: forcing a failure. [ 1267.139687][T23583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.153153][T23583] CPU: 0 UID: 0 PID: 23583 Comm: syz.4.3410 Tainted: G L syzkaller #0 PREEMPT(full) [ 1267.153187][T23583] Tainted: [L]=SOFTLOCKUP [ 1267.153196][T23583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1267.153209][T23583] Call Trace: [ 1267.153217][T23583] [ 1267.153225][T23583] dump_stack_lvl+0x100/0x190 [ 1267.153270][T23583] should_fail_ex.cold+0x5/0xa [ 1267.153301][T23583] _copy_from_user+0x2e/0xd0 [ 1267.153334][T23583] copy_msghdr_from_user+0x9f/0x4f0 [ 1267.153371][T23583] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1267.153408][T23583] ? rcu_is_watching+0x12/0xc0 [ 1267.153435][T23583] ? ___sys_recvmsg+0x177/0x1a0 [ 1267.153465][T23583] ? kfree+0x1dd/0x6c0 [ 1267.153504][T23583] ___sys_recvmsg+0xdd/0x1a0 [ 1267.153537][T23583] ? __pfx____sys_recvmsg+0x10/0x10 [ 1267.153584][T23583] ? __pfx___might_resched+0x10/0x10 [ 1267.153616][T23583] do_recvmmsg+0x301/0x760 [ 1267.153652][T23583] ? __pfx_do_recvmmsg+0x10/0x10 [ 1267.153683][T23583] ? ksys_write+0x190/0x250 [ 1267.153714][T23583] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1267.153749][T23583] ? __pfx_vfs_write+0x3/0x10 [ 1267.153783][T23583] ? __fget_files+0x21f/0x3d0 [ 1267.153817][T23583] __x64_sys_recvmmsg+0x22a/0x280 [ 1267.153844][T23583] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1267.153872][T23583] ? rcu_is_watching+0x12/0xc0 [ 1267.153902][T23583] do_syscall_64+0x115/0x840 [ 1267.153934][T23583] ? clear_bhb_loop+0x40/0x90 [ 1267.153962][T23583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.153986][T23583] RIP: 0033:0x7fa41639ce59 [ 1267.154024][T23583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.154046][T23583] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1267.154068][T23583] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1267.154103][T23583] RDX: 00000000fffffff9 RSI: 0000200000000040 RDI: 0000000000000005 [ 1267.154128][T23583] RBP: 00007fa4145f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.154142][T23583] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1267.154155][T23583] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1267.154184][T23583] [ 1268.508479][T23592] futex_wake_op: syz.6.3415 tries to shift op by -2048; fix this program [ 1268.571840][T23592] 0x000000000001-0x000000020000 : "" [ 1268.621413][T23592] ftl_cs: FTL header corrupt! [ 1269.011455][T10381] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1269.268058][T23588] block nbd0: shutting down sockets [ 1269.820213][T20750] bridge_slave_1: left allmulticast mode [ 1269.867037][T20750] bridge_slave_1: left promiscuous mode [ 1269.894845][T20750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.934882][T23595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1269.960309][T20750] bridge_slave_0: left allmulticast mode [ 1269.981488][T20750] bridge_slave_0: left promiscuous mode [ 1270.014611][T20750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.511981][T20750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.526089][T20750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.537475][T20750] bond0 (unregistering): Released all slaves [ 1271.023049][ T6038] Bluetooth: hci5: command 0x2016 tx timeout [ 1271.528467][T23643] [ 1272.369861][T23661] FAULT_INJECTION: forcing a failure. [ 1272.369861][T23661] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.557105][T20750] hsr_slave_0: left promiscuous mode [ 1272.611953][T20750] hsr_slave_1: left promiscuous mode [ 1272.657035][T20750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.692402][T23661] CPU: 0 UID: 0 PID: 23661 Comm: syz.7.3425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.692440][T23661] Tainted: [L]=SOFTLOCKUP [ 1272.692449][T23661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1272.692465][T23661] Call Trace: [ 1272.692473][T23661] [ 1272.692482][T23661] dump_stack_lvl+0x100/0x190 [ 1272.692532][T23661] should_fail_ex.cold+0x5/0xa [ 1272.692565][T23661] ? do_sys_poll+0x273/0xe90 [ 1272.692594][T23661] should_failslab+0xc2/0x120 [ 1272.692625][T23661] __kmalloc_noprof+0xe0/0x850 [ 1272.692672][T23661] do_sys_poll+0x273/0xe90 [ 1272.692698][T23661] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1272.692741][T23661] ? rcu_is_watching+0x12/0xc0 [ 1272.692770][T23661] ? trace_sched_exit_tp+0x11c/0x160 [ 1272.692823][T23661] ? __pfx_do_sys_poll+0x10/0x10 [ 1272.692850][T23661] ? __lock_acquire+0x4a5/0x2630 [ 1272.692932][T23661] ? futex_unqueue+0x13d/0x2c0 [ 1272.693007][T23661] ? find_held_lock+0x2b/0x80 [ 1272.693037][T23661] ? timespec64_add_safe+0x192/0x220 [ 1272.693075][T23661] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1272.693116][T23661] ? set_user_sigmask+0x1e1/0x270 [ 1272.693144][T23661] ? __pfx_set_user_sigmask+0x10/0x10 [ 1272.693173][T23661] ? ktime_get_ts64+0x318/0x420 [ 1272.693211][T23661] ? ktime_get_ts64+0x257/0x420 [ 1272.693253][T23661] __x64_sys_ppoll+0x2b5/0x350 [ 1272.693287][T23661] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1272.693323][T23661] ? rcu_is_watching+0x12/0xc0 [ 1272.693355][T23661] do_syscall_64+0x115/0x840 [ 1272.693394][T23661] ? clear_bhb_loop+0x40/0x90 [ 1272.693425][T23661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.693452][T23661] RIP: 0033:0x7fab9c99ce59 [ 1272.693473][T23661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.693498][T23661] RSP: 002b:00007fab9a7f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1272.693522][T23661] RAX: ffffffffffffffda RBX: 00007fab9cc16270 RCX: 00007fab9c99ce59 [ 1272.693540][T23661] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 1272.693556][T23661] RBP: 00007fab9ca32d6f R08: 0000000000000008 R09: 0000000000000000 [ 1272.693572][T23661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.693587][T23661] R13: 00007fab9cc16308 R14: 00007fab9cc16270 R15: 00007fff05f041f8 [ 1272.693619][T23661] [ 1273.132290][T20750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.142023][ T6038] Bluetooth: hci5: command 0x2016 tx timeout [ 1273.258293][T20750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.270778][T20750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.352253][T20750] veth1_macvtap: left promiscuous mode [ 1273.381808][T20750] veth0_macvtap: left promiscuous mode [ 1273.408329][T20750] veth1_vlan: left promiscuous mode [ 1273.433730][T20750] veth0_vlan: left promiscuous mode [ 1274.267821][T20750] team0 (unregistering): Port device team_slave_1 removed [ 1274.297474][T20750] team0 (unregistering): Port device team_slave_0 removed [ 1274.418897][T20750] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 1276.156916][T23691] FAULT_INJECTION: forcing a failure. [ 1276.156916][T23691] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.186804][T23691] CPU: 0 UID: 0 PID: 23691 Comm: syz.4.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1276.186845][T23691] Tainted: [L]=SOFTLOCKUP [ 1276.186854][T23691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1276.186871][T23691] Call Trace: [ 1276.186879][T23691] [ 1276.186889][T23691] dump_stack_lvl+0x100/0x190 [ 1276.186938][T23691] should_fail_ex.cold+0x5/0xa [ 1276.186970][T23691] should_failslab+0xc2/0x120 [ 1276.187001][T23691] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1276.187038][T23691] ? crtc_crc_open+0x3ba/0x7e0 [ 1276.187078][T23691] crtc_crc_open+0x3ba/0x7e0 [ 1276.187110][T23691] ? __debugfs_file_get+0x1fc/0x860 [ 1276.187151][T23691] ? __pfx_crtc_crc_open+0x10/0x10 [ 1276.187184][T23691] ? __pfx_apparmor_file_open+0x10/0x10 [ 1276.187213][T23691] ? path_get+0x61/0x80 [ 1276.187251][T23691] ? __pfx_crtc_crc_open+0x10/0x10 [ 1276.187283][T23691] full_proxy_open_regular+0x1b6/0x370 [ 1276.187325][T23691] do_dentry_open+0x6ab/0x14d0 [ 1276.187356][T23691] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1276.187402][T23691] vfs_open+0x82/0x3f0 [ 1276.187444][T23691] path_openat+0x208c/0x31a0 [ 1276.187495][T23691] ? __pfx_path_openat+0x10/0x10 [ 1276.187539][T23691] do_file_open+0x20e/0x430 [ 1276.187575][T23691] ? __pfx_do_file_open+0x10/0x10 [ 1276.187628][T23691] ? alloc_fd+0x476/0x790 [ 1276.187662][T23691] ? do_getname+0x191/0x390 [ 1276.187703][T23691] do_sys_openat2+0x10d/0x1e0 [ 1276.187743][T23691] ? __pfx_do_sys_openat2+0x10/0x10 [ 1276.187787][T23691] ? do_raw_spin_lock+0x128/0x260 [ 1276.187823][T23691] __x64_sys_openat+0x12d/0x210 [ 1276.187864][T23691] ? __pfx___x64_sys_openat+0x10/0x10 [ 1276.187911][T23691] ? rcu_is_watching+0x12/0xc0 [ 1276.187944][T23691] do_syscall_64+0x115/0x840 [ 1276.187981][T23691] ? clear_bhb_loop+0x40/0x90 [ 1276.188012][T23691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.188038][T23691] RIP: 0033:0x7fa41639ce59 [ 1276.188059][T23691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.188087][T23691] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1276.188111][T23691] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1276.188128][T23691] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1276.188145][T23691] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1276.188162][T23691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.188177][T23691] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1276.188208][T23691] [ 1276.494929][T23692] nfs: Unknown parameter 'm?LH>「^eko}* ' [ 1280.827575][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1281.103416][T23755] FAULT_INJECTION: forcing a failure. [ 1281.103416][T23755] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.238550][T23755] CPU: 0 UID: 0 PID: 23755 Comm: syz.4.3444 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.238594][T23755] Tainted: [L]=SOFTLOCKUP [ 1281.238604][T23755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1281.238630][T23755] Call Trace: [ 1281.238638][T23755] [ 1281.238649][T23755] dump_stack_lvl+0x100/0x190 [ 1281.238697][T23755] should_fail_ex.cold+0x5/0xa [ 1281.238729][T23755] should_failslab+0xc2/0x120 [ 1281.238761][T23755] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1281.238798][T23755] ? crtc_crc_open+0x3ba/0x7e0 [ 1281.238836][T23755] crtc_crc_open+0x3ba/0x7e0 [ 1281.238868][T23755] ? __debugfs_file_get+0x1fc/0x860 [ 1281.238904][T23755] ? __pfx_crtc_crc_open+0x10/0x10 [ 1281.238938][T23755] ? __pfx_apparmor_file_open+0x10/0x10 [ 1281.238966][T23755] ? path_get+0x61/0x80 [ 1281.239004][T23755] ? __pfx_crtc_crc_open+0x10/0x10 [ 1281.239034][T23755] full_proxy_open_regular+0x1b6/0x370 [ 1281.239076][T23755] do_dentry_open+0x6ab/0x14d0 [ 1281.239107][T23755] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1281.239154][T23755] vfs_open+0x82/0x3f0 [ 1281.239196][T23755] path_openat+0x208c/0x31a0 [ 1281.239238][T23755] ? __pfx_path_openat+0x10/0x10 [ 1281.239286][T23755] do_file_open+0x20e/0x430 [ 1281.239321][T23755] ? __pfx_do_file_open+0x10/0x10 [ 1281.239374][T23755] ? alloc_fd+0x476/0x790 [ 1281.239408][T23755] ? do_getname+0x191/0x390 [ 1281.239449][T23755] do_sys_openat2+0x10d/0x1e0 [ 1281.239489][T23755] ? __pfx_do_sys_openat2+0x10/0x10 [ 1281.239530][T23755] ? do_raw_spin_lock+0x128/0x260 [ 1281.239573][T23755] __x64_sys_openat+0x12d/0x210 [ 1281.239616][T23755] ? __pfx___x64_sys_openat+0x10/0x10 [ 1281.239662][T23755] ? rcu_is_watching+0x12/0xc0 [ 1281.239696][T23755] do_syscall_64+0x115/0x840 [ 1281.239733][T23755] ? clear_bhb_loop+0x40/0x90 [ 1281.239764][T23755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.239791][T23755] RIP: 0033:0x7fa41639ce59 [ 1281.239812][T23755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.239838][T23755] RSP: 002b:00007fa4145d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1281.239863][T23755] RAX: ffffffffffffffda RBX: 00007fa416616180 RCX: 00007fa41639ce59 [ 1281.239881][T23755] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1281.239898][T23755] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1281.239914][T23755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.239931][T23755] R13: 00007fa416616218 R14: 00007fa416616180 R15: 00007ffde35b56a8 [ 1281.239964][T23755] [ 1281.644349][T23763] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3445'. [ 1281.843830][T23765] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1283.162966][T23775] FAULT_INJECTION: forcing a failure. [ 1283.162966][T23775] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.231804][T23775] CPU: 0 UID: 0 PID: 23775 Comm: syz.4.3449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.231841][T23775] Tainted: [L]=SOFTLOCKUP [ 1283.231850][T23775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1283.231864][T23775] Call Trace: [ 1283.231872][T23775] [ 1283.231881][T23775] dump_stack_lvl+0x100/0x190 [ 1283.231925][T23775] should_fail_ex.cold+0x5/0xa [ 1283.231955][T23775] should_failslab+0xc2/0x120 [ 1283.232002][T23775] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1283.232040][T23775] ? skb_clone+0x190/0x400 [ 1283.232071][T23775] skb_clone+0x190/0x400 [ 1283.232096][T23775] netlink_deliver_tap+0xaed/0xcc0 [ 1283.232129][T23775] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1283.232236][T23775] netlink_dump+0x631/0xd00 [ 1283.232268][T23775] ? __pfx_netlink_dump+0x10/0x10 [ 1283.232295][T23775] ? kasan_quarantine_put+0x104/0x240 [ 1283.232332][T23775] ? kfree_skbmem+0x19f/0x210 [ 1283.232367][T23775] netlink_recvmsg+0x7dc/0xa90 [ 1283.232399][T23775] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1283.232443][T23775] ____sys_recvmsg+0x5b3/0x640 [ 1283.232476][T23775] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1283.232509][T23775] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1283.232549][T23775] ? rcu_is_watching+0x12/0xc0 [ 1283.232582][T23775] ? ___sys_recvmsg+0x177/0x1a0 [ 1283.232614][T23775] ? kfree+0x1dd/0x6c0 [ 1283.232652][T23775] ___sys_recvmsg+0x16a/0x1a0 [ 1283.232686][T23775] ? __pfx____sys_recvmsg+0x10/0x10 [ 1283.232735][T23775] ? __pfx___might_resched+0x10/0x10 [ 1283.232779][T23775] do_recvmmsg+0x301/0x760 [ 1283.232816][T23775] ? __pfx_do_recvmmsg+0x10/0x10 [ 1283.232847][T23775] ? ksys_write+0x190/0x250 [ 1283.232878][T23775] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1283.232915][T23775] ? __pfx_vfs_write+0x3/0x10 [ 1283.232949][T23775] ? __fget_files+0x21f/0x3d0 [ 1283.232984][T23775] __x64_sys_recvmmsg+0x22a/0x280 [ 1283.233012][T23775] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1283.233040][T23775] ? rcu_is_watching+0x12/0xc0 [ 1283.233070][T23775] do_syscall_64+0x115/0x840 [ 1283.233102][T23775] ? clear_bhb_loop+0x40/0x90 [ 1283.233130][T23775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.233154][T23775] RIP: 0033:0x7fa41639ce59 [ 1283.233172][T23775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.233194][T23775] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1283.233218][T23775] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1283.233234][T23775] RDX: 00000000fffffff9 RSI: 0000200000000040 RDI: 0000000000000005 [ 1283.233248][T23775] RBP: 00007fa4145f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.233262][T23775] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1283.233277][T23775] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1283.233306][T23775] [ 1287.090390][T23809] FAULT_INJECTION: forcing a failure. [ 1287.090390][T23809] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.173579][T23809] CPU: 0 UID: 0 PID: 23809 Comm: syz.4.3457 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.173621][T23809] Tainted: [L]=SOFTLOCKUP [ 1287.173631][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1287.173648][T23809] Call Trace: [ 1287.173656][T23809] [ 1287.173666][T23809] dump_stack_lvl+0x100/0x190 [ 1287.173715][T23809] should_fail_ex.cold+0x5/0xa [ 1287.173796][T23809] should_failslab+0xc2/0x120 [ 1287.173827][T23809] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1287.173866][T23809] ? crtc_crc_open+0x3ba/0x7e0 [ 1287.173904][T23809] crtc_crc_open+0x3ba/0x7e0 [ 1287.173936][T23809] ? __debugfs_file_get+0x1fc/0x860 [ 1287.173972][T23809] ? __pfx_crtc_crc_open+0x10/0x10 [ 1287.174005][T23809] ? __pfx_apparmor_file_open+0x10/0x10 [ 1287.174034][T23809] ? path_get+0x61/0x80 [ 1287.174073][T23809] ? __pfx_crtc_crc_open+0x10/0x10 [ 1287.174104][T23809] full_proxy_open_regular+0x1b6/0x370 [ 1287.174147][T23809] do_dentry_open+0x6ab/0x14d0 [ 1287.174177][T23809] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1287.174223][T23809] vfs_open+0x82/0x3f0 [ 1287.174267][T23809] path_openat+0x208c/0x31a0 [ 1287.174309][T23809] ? __pfx_path_openat+0x10/0x10 [ 1287.174352][T23809] do_file_open+0x20e/0x430 [ 1287.174387][T23809] ? __pfx_do_file_open+0x10/0x10 [ 1287.174440][T23809] ? alloc_fd+0x476/0x790 [ 1287.174473][T23809] ? do_getname+0x191/0x390 [ 1287.174514][T23809] do_sys_openat2+0x10d/0x1e0 [ 1287.174554][T23809] ? __pfx_do_sys_openat2+0x10/0x10 [ 1287.174595][T23809] ? do_raw_spin_lock+0x128/0x260 [ 1287.174630][T23809] __x64_sys_openat+0x12d/0x210 [ 1287.174671][T23809] ? __pfx___x64_sys_openat+0x10/0x10 [ 1287.174728][T23809] ? rcu_is_watching+0x12/0xc0 [ 1287.174767][T23809] do_syscall_64+0x115/0x840 [ 1287.174803][T23809] ? clear_bhb_loop+0x40/0x90 [ 1287.174835][T23809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.174861][T23809] RIP: 0033:0x7fa41639ce59 [ 1287.174882][T23809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.174907][T23809] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1287.174931][T23809] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1287.174949][T23809] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1287.174966][T23809] RBP: 00007fa416432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1287.174983][T23809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.174999][T23809] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1287.175031][T23809] [ 1288.424494][T23833] FAULT_INJECTION: forcing a failure. [ 1288.424494][T23833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.467515][T23833] CPU: 0 UID: 0 PID: 23833 Comm: syz.4.3461 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.467555][T23833] Tainted: [L]=SOFTLOCKUP [ 1288.467563][T23833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1288.467578][T23833] Call Trace: [ 1288.467587][T23833] [ 1288.467596][T23833] dump_stack_lvl+0x100/0x190 [ 1288.467647][T23833] should_fail_ex.cold+0x5/0xa [ 1288.467679][T23833] _copy_from_user+0x2e/0xd0 [ 1288.467717][T23833] copy_msghdr_from_user+0x9f/0x4f0 [ 1288.467753][T23833] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1288.467791][T23833] ? rcu_is_watching+0x12/0xc0 [ 1288.467819][T23833] ? ___sys_recvmsg+0x177/0x1a0 [ 1288.467849][T23833] ? kfree+0x1dd/0x6c0 [ 1288.467889][T23833] ___sys_recvmsg+0xdd/0x1a0 [ 1288.467922][T23833] ? __pfx____sys_recvmsg+0x10/0x10 [ 1288.467970][T23833] ? __pfx___might_resched+0x10/0x10 [ 1288.468002][T23833] do_recvmmsg+0x301/0x760 [ 1288.468038][T23833] ? __pfx_do_recvmmsg+0x10/0x10 [ 1288.468070][T23833] ? ksys_write+0x190/0x250 [ 1288.468103][T23833] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1288.468140][T23833] ? __pfx_vfs_write+0x3/0x10 [ 1288.468175][T23833] ? __fget_files+0x21f/0x3d0 [ 1288.468209][T23833] __x64_sys_recvmmsg+0x22a/0x280 [ 1288.468238][T23833] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1288.468267][T23833] ? rcu_is_watching+0x12/0xc0 [ 1288.468298][T23833] do_syscall_64+0x115/0x840 [ 1288.468331][T23833] ? clear_bhb_loop+0x40/0x90 [ 1288.468360][T23833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.468385][T23833] RIP: 0033:0x7fa41639ce59 [ 1288.468404][T23833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.468428][T23833] RSP: 002b:00007fa4145f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1288.468450][T23833] RAX: ffffffffffffffda RBX: 00007fa416616090 RCX: 00007fa41639ce59 [ 1288.468466][T23833] RDX: 00000000fffffff9 RSI: 0000200000000040 RDI: 0000000000000005 [ 1288.468481][T23833] RBP: 00007fa4145f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.468496][T23833] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1288.468510][T23833] R13: 00007fa416616128 R14: 00007fa416616090 R15: 00007ffde35b56a8 [ 1288.468541][T23833] [ 1289.476639][T23835] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1289.545286][T23835] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1289.593541][T23835] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1289.889312][ T30] audit: type=1804 audit(2147483944.105:47): pid=23842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3462" name="/newroot/200/file0" dev="tmpfs" ino=1061 res=1 errno=0 [ 1289.983519][ T30] audit: type=1804 audit(2147483944.105:48): pid=23836 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3462" name="/newroot/200/file0" dev="tmpfs" ino=1061 res=1 errno=0 [ 1290.100962][ T6038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1290.116924][ T6038] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1290.133807][ T6038] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1290.147130][ T6038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1290.155058][ T6038] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1291.996327][T23844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.020813][T23844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.045824][T23844] bridge_slave_0: entered allmulticast mode [ 1292.069966][ T30] audit: type=1800 audit(2147483946.296:49): pid=23872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3466" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1292.091911][T23844] bridge_slave_0: entered promiscuous mode [ 1292.126630][T23844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.144258][T23844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.176446][T23844] bridge_slave_1: entered allmulticast mode [ 1292.194554][T10381] Bluetooth: hci6: command tx timeout [ 1292.236728][T23844] bridge_slave_1: entered promiscuous mode [ 1292.461879][T23844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.601931][T23844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.832941][T23844] team0: Port device team_slave_0 added [ 1292.988958][T23844] team0: Port device team_slave_1 added [ 1293.143631][T23844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.175063][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3469'. [ 1293.191629][T23844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.251690][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3469'. [ 1293.314190][T23844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.371441][T23844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.418778][T23844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.529146][T23844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.793217][T23844] hsr_slave_0: entered promiscuous mode [ 1293.802257][T23896] random: crng reseeded on system resumption [ 1293.818014][T23844] hsr_slave_1: entered promiscuous mode [ 1293.838901][T23844] debugfs: 'hsr0' already exists in 'hsr' [ 1293.857889][T23844] Cannot create hsr debugfs directory [ 1294.261730][T10381] Bluetooth: hci6: command tx timeout [ 1295.230470][T23844] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1295.273255][T23844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1295.506606][T23844] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1295.548794][T23844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1295.599667][T23844] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1295.619415][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.628787][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.665212][T23844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1295.706919][T23844] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1295.731308][T23844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1296.175415][T23844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.330784][T10381] Bluetooth: hci6: command tx timeout [ 1296.465170][T23844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.543882][T20750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.551115][T20750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.612806][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.620014][T20750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.074937][T23844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.400048][T10381] Bluetooth: hci6: command tx timeout [ 1298.929827][T23844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.046535][ T6038] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1300.065666][ T6038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1300.075771][ T6038] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1300.096784][ T6038] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1300.108368][ T6038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1300.363057][ T6038] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1300.363089][ T6038] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 1300.379705][ T6038] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1300.514830][T23844] veth0_vlan: entered promiscuous mode [ 1300.587703][T23844] veth1_vlan: entered promiscuous mode [ 1300.721412][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1300.731614][T23844] veth0_macvtap: entered promiscuous mode [ 1300.780685][T23844] veth1_macvtap: entered promiscuous mode [ 1300.815069][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1300.903933][T23844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.978850][T23844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.067469][T19832] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.143711][T19832] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.183340][T19832] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.241680][T19832] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.922619][T20750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.976663][T20750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.141217][ T6038] Bluetooth: hci7: command tx timeout [ 1302.205398][T19840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.232449][T19840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.209614][ T6038] Bluetooth: hci7: command tx timeout [ 1304.294675][T23967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.323873][T23967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.349121][T23967] bridge_slave_0: entered allmulticast mode [ 1304.372289][T23967] bridge_slave_0: entered promiscuous mode [ 1304.432635][T23967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.453227][T23967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.468315][T23967] bridge_slave_1: entered allmulticast mode [ 1304.495907][T23967] bridge_slave_1: entered promiscuous mode [ 1304.724609][T23967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.802226][T23967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.127770][T23967] team0: Port device team_slave_0 added [ 1305.149578][T23967] team0: Port device team_slave_1 added [ 1305.277689][T23967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.329661][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.444324][T23967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.492906][T23967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.520988][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.610133][T23967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.970359][T23967] hsr_slave_0: entered promiscuous mode [ 1305.997911][T23967] hsr_slave_1: entered promiscuous mode [ 1306.022681][T23967] debugfs: 'hsr0' already exists in 'hsr' [ 1306.052931][T23967] Cannot create hsr debugfs directory [ 1306.279500][ T6038] Bluetooth: hci7: command tx timeout [ 1306.971034][T24054] random: crng reseeded on system resumption [ 1307.879201][ T6038] Bluetooth: hci0: command 0x0406 tx timeout [ 1308.046279][T23967] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1308.062694][T23967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1308.137903][T23967] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1308.184124][T23967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.227155][T23967] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1308.263727][T23967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1308.351106][T10381] Bluetooth: hci7: command tx timeout [ 1308.484538][T23967] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1308.547034][T23967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.208349][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3500'. [ 1309.276428][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3500'. [ 1309.928120][T24091] netlink: 266 bytes leftover after parsing attributes in process `syz.8.3502'. [ 1309.928170][T24091] IPv6: NLM_F_CREATE should be specified when creating new route [ 1310.175889][T23967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.354448][T23967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.563040][T19840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.571896][T19840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.713333][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.720573][T20750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.597554][ T6038] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1312.974569][ T6038] Bluetooth: hci5: command 0x2016 tx timeout [ 1313.459094][T23967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.600674][T20228] Bluetooth: hci0: command 0x0406 tx timeout [ 1313.950208][T24151] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1314.145837][T24151] PCI: Can't parse resource_alignment parameter: eC/OVGDf8=ֶ2|:ht3 [ 1314.825894][T23967] veth0_vlan: entered promiscuous mode [ 1314.891015][T23967] veth1_vlan: entered promiscuous mode [ 1315.032003][T23967] veth0_macvtap: entered promiscuous mode [ 1315.092267][T23967] veth1_macvtap: entered promiscuous mode [ 1315.165615][T23967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.166623][T24163] ubi31: attaching mtd0 [ 1315.178048][T24163] ubi31: scanning is finished [ 1315.178096][T24163] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1315.215059][T23967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.249477][T20750] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.249566][T20750] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.249607][T20750] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.249647][T20750] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.584371][T24163] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1315.677483][T10381] Bluetooth: hci0: command 0x0406 tx timeout [ 1316.407891][T20754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.407947][T20754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.541626][T20750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.541650][T20750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.386700][T24173] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1317.905585][ T31] INFO: task syz.0.3195:22240 blocked for more than 143 seconds. [ 1317.913785][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1317.962575][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1318.030139][ T31] task:syz.0.3195 state:D stack:27528 pid:22240 tgid:22239 ppid:18441 task_flags:0x400140 flags:0x00080002 [ 1318.123630][ T31] Call Trace: [ 1318.153940][ T31] [ 1318.175002][ T31] __schedule+0x1295/0x67a0 [ 1318.205464][ T31] ? __pfx___schedule+0x10/0x10 [ 1318.242086][ T31] ? find_held_lock+0x2b/0x80 [ 1318.268756][ T31] ? schedule+0x2bf/0x390 [ 1318.299723][T24184] FAULT_INJECTION: forcing a failure. [ 1318.299723][T24184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.314982][ T31] schedule+0xdd/0x390 [ 1318.345871][ T31] schedule_preempt_disabled+0x13/0x30 [ 1318.371622][ T31] __mutex_lock+0xced/0x1b10 [ 1318.395014][T24184] CPU: 0 UID: 0 PID: 24184 Comm: syz.9.3518 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.395054][T24184] Tainted: [L]=SOFTLOCKUP [ 1318.395064][T24184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.395079][T24184] Call Trace: [ 1318.395088][T24184] [ 1318.395098][T24184] dump_stack_lvl+0x100/0x190 [ 1318.395148][T24184] should_fail_ex.cold+0x5/0xa [ 1318.395180][T24184] copy_fpstate_to_sigframe+0x842/0xb00 [ 1318.395225][T24184] ? kmem_cache_free+0x127/0x6c0 [ 1318.395264][T24184] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1318.395311][T24184] ? collect_signal+0x271/0x550 [ 1318.395349][T24184] ? x86_task_fpu+0x5f/0x90 [ 1318.395384][T24184] get_sigframe+0x3fb/0x940 [ 1318.395426][T24184] ? __pfx_get_sigframe+0x10/0x10 [ 1318.395465][T24184] ? siginfo_layout+0x1b1/0x290 [ 1318.395525][T24184] x64_setup_rt_frame+0x12f/0xce0 [ 1318.395573][T24184] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1318.395611][T24184] ? do_send_specific+0x15c/0x360 [ 1318.395646][T24184] ? __pfx_do_send_specific+0x10/0x10 [ 1318.395684][T24184] arch_do_signal_or_restart+0x6b6/0x7a0 [ 1318.395724][T24184] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1318.395769][T24184] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 1318.395811][T24184] ? rcu_is_watching+0x12/0xc0 [ 1318.395844][T24184] exit_to_user_mode_loop+0x98/0x670 [ 1318.395886][T24184] ? rcu_is_watching+0x12/0xc0 [ 1318.395918][T24184] do_syscall_64+0x652/0x840 [ 1318.395954][T24184] ? clear_bhb_loop+0x40/0x90 [ 1318.395985][T24184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.396011][T24184] RIP: 0033:0x7fd30399ce59 [ 1318.396031][T24184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.396057][T24184] RSP: 002b:00007fd30485e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 1318.396082][T24184] RAX: 0000000000000000 RBX: 00007fd303c16090 RCX: 00007fd30399ce59 [ 1318.396098][T24184] RDX: 0000000000000021 RSI: 0000000000000008 RDI: 0000000000000006 [ 1318.396114][T24184] RBP: 00007fd303a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1318.396130][T24184] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 1318.396146][T24184] R13: 00007fd303c16128 R14: 00007fd303c16090 R15: 00007fffbd903188 [ 1318.396177][T24184] [ 1318.631814][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1318.637886][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 1318.643921][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1318.649868][ T31] ? net_generic+0xea/0x2a0 [ 1318.654463][ T31] ? net_generic+0xea/0x2a0 [ 1318.659007][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1318.664885][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1318.670582][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1318.676209][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1318.682376][ T31] ? genl_get_cmd+0x3e7/0x760 [ 1318.687159][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1318.691860][ T31] ? security_capable+0x80/0x260 [ 1318.696960][ T31] genl_rcv_msg+0x560/0x800 [ 1318.701500][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1318.706599][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1318.712715][ T31] netlink_rcv_skb+0x159/0x420 [ 1318.717548][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1318.722799][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1318.728189][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1318.733541][ T31] genl_rcv+0x28/0x40 [ 1318.737587][ T31] netlink_unicast+0x585/0x850 [ 1318.742381][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1318.749046][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1318.753898][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1318.759209][ T31] ? __import_iovec+0x1d2/0x640 [ 1318.764138][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1318.769796][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 1318.775117][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1318.780459][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1318.785807][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1318.791216][ T31] ? try_to_wake_up+0x5f6/0x1900 [ 1318.796245][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1318.800960][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.806235][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 1318.811883][ T31] __sys_sendmsg+0x170/0x220 [ 1318.816553][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1318.821687][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1318.826989][ T31] ? rcu_is_watching+0x12/0xc0 [ 1318.831780][ T31] do_syscall_64+0x115/0x840 [ 1318.836443][ T31] ? clear_bhb_loop+0x40/0x90 [ 1318.841147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.847939][ T31] RIP: 0033:0x7f80a619ce59 [ 1318.852928][ T31] RSP: 002b:00007f80a43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.883113][ T31] RAX: ffffffffffffffda RBX: 00007f80a6415fa0 RCX: 00007f80a619ce59 [ 1318.912955][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1318.934718][ T31] RBP: 00007f80a6232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1318.963339][T24177] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1318.971754][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.002290][ T31] R13: 00007f80a6416038 R14: 00007f80a6415fa0 R15: 00007ffe9802c278 [ 1319.036099][ T31] [ 1319.049779][ T31] [ 1319.049779][ T31] Showing all locks held in the system: [ 1319.104858][ T31] 1 lock held by pool_workqueue_/3: [ 1319.188861][ T31] #0: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1319.309363][ T31] 1 lock held by khungtaskd/31: [ 1319.333015][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1319.374613][ T31] 2 locks held by getty/5393: [ 1319.403439][ T31] #0: ffff8880377170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1319.444945][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1319.473710][ T31] 3 locks held by kworker/u10:0/6037: [ 1319.496828][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1319.531243][ T31] #1: ffffc900038c7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1319.571536][ T31] #2: ffffffff905edf48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1319.599502][ T31] 2 locks held by syz-executor/21715: [ 1319.612903][ T31] #0: ffff88805f5220d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1319.639186][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1319.660549][ T31] 2 locks held by syz.1.3180/22171: [ 1319.672789][ T31] #0: ffffffff906b51a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1319.699901][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1319.718819][ T31] 2 locks held by syz.0.3195/22240: [ 1319.725562][ T31] #0: ffffffff906b51a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1319.748908][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1319.778526][ T31] 2 locks held by syz-executor/22461: [ 1319.790474][ T31] #0: ffff8880620d00d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1319.820608][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1319.853394][ T31] 2 locks held by syz-executor/23967: [ 1319.872891][ T31] 1 lock held by syz.4.3509/24130: [ 1319.891080][ T31] 1 lock held by syz.6.3516/24183: [ 1319.925499][ T31] #0: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1319.951795][ T31] 2 locks held by syz.9.3518/24180: [ 1319.977696][ T31] 2 locks held by syz.9.3518/24184: [ 1320.028228][ T31] [ 1320.114960][ T31] ============================================= [ 1320.114960][ T31] [ 1320.176025][ T31] NMI backtrace for cpu 0 [ 1320.176048][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.176081][ T31] Tainted: [L]=SOFTLOCKUP [ 1320.176090][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1320.176104][ T31] Call Trace: [ 1320.176112][ T31] [ 1320.176121][ T31] dump_stack_lvl+0x100/0x190 [ 1320.176168][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1320.176197][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1320.176222][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1320.176255][ T31] sys_info+0x141/0x190 [ 1320.176343][ T31] watchdog+0xcb1/0x1030 [ 1320.176389][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1320.176423][ T31] ? __pfx_watchdog+0x10/0x10 [ 1320.176457][ T31] ? __kthread_parkme+0x18c/0x230 [ 1320.176491][ T31] ? kthread+0x13a/0x450 [ 1320.176524][ T31] ? __pfx_watchdog+0x10/0x10 [ 1320.176556][ T31] kthread+0x370/0x450 [ 1320.176591][ T31] ? __pfx_kthread+0x10/0x10 [ 1320.176629][ T31] ret_from_fork+0x72b/0xd50 [ 1320.176655][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1320.176681][ T31] ? __switch_to+0x800/0x1100 [ 1320.176714][ T31] ? __switch_to_asm+0x39/0x70 [ 1320.176745][ T31] ? __pfx_kthread+0x10/0x10 [ 1320.176782][ T31] ret_from_fork_asm+0x1a/0x30 [ 1320.176826][ T31] [ 1321.129844][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1321.136749][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.147449][ T31] Tainted: [L]=SOFTLOCKUP [ 1321.151804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1321.161873][ T31] Call Trace: [ 1321.165164][ T31] [ 1321.168109][ T31] dump_stack_lvl+0x100/0x190 [ 1321.172832][ T31] vpanic+0x552/0x970 [ 1321.176866][ T31] ? __pfx_vpanic+0x10/0x10 [ 1321.181399][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1321.187585][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1321.193793][ T31] panic+0xd1/0xe0 [ 1321.197537][ T31] ? __pfx_panic+0x10/0x10 [ 1321.201977][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1321.208150][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1321.214347][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1321.220534][ T31] ? watchdog.cold+0x1ec/0x234 [ 1321.225333][ T31] ? watchdog+0xcc1/0x1030 [ 1321.229789][ T31] watchdog.cold+0x1fd/0x234 [ 1321.234432][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1321.240267][ T31] ? __pfx_watchdog+0x10/0x10 [ 1321.244992][ T31] ? __kthread_parkme+0x18c/0x230 [ 1321.250047][ T31] ? kthread+0x13a/0x450 [ 1321.254321][ T31] ? __pfx_watchdog+0x10/0x10 [ 1321.259125][ T31] kthread+0x370/0x450 [ 1321.263237][ T31] ? __pfx_kthread+0x10/0x10 [ 1321.267892][ T31] ret_from_fork+0x72b/0xd50 [ 1321.272507][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1321.277642][ T31] ? __switch_to+0x800/0x1100 [ 1321.282355][ T31] ? __switch_to_asm+0x39/0x70 [ 1321.287153][ T31] ? __pfx_kthread+0x10/0x10 [ 1321.291790][ T31] ret_from_fork_asm+0x1a/0x30 [ 1321.296593][ T31] [ 1321.299702][ T31] Kernel Offset: disabled [ 1321.304039][ T31] Rebooting in 86400 seconds..